d788b085cc98c274abd24c4ac8d00f870297dc4f5b68684af8a5c328cc50beb4

Analysis

max time kernel
146s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240319-en
resource tags

arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
submitted
02-04-2024 01:55

Target

807f55cee679ba76724aee80756a0c4f_JaffaCakes118.exe
Size

1.4MB
MD5

807f55cee679ba76724aee80756a0c4f
SHA1

7014d9c67d8a44a8eff67551786b74f74dfa47e3
SHA256

d788b085cc98c274abd24c4ac8d00f870297dc4f5b68684af8a5c328cc50beb4
SHA512

e16b5b5bf2d79a0a3aa6a75ca57b57c43f2ba939ede57e7dba43933f29980b8417cb1b431fa37abc1ad73f7e100ecdfae2e10a8926186716d720d6866ae8e546
SSDEEP

24576:ur0Y0b3wTBY0zc3OHmIOss9/DQTBlFadP6WNltPSQv:ub6gT20iOHmIPWDQll86Ytfv

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
3	ip-api.com

C:\Users\Admin\AppData\Local\Temp\807f55cee679ba76724aee80756a0c4f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\807f55cee679ba76724aee80756a0c4f_JaffaCakes118.exe"
1⤵
PID:4280

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4056 --field-trial-handle=2276,i,5672504106535478802,17394903851940863593,262144 --variations-seed-version /prefetch:8
1⤵
PID:1052