Resubmissions
06-04-2024 10:32
240406-mk6gpagc4y 1006-04-2024 10:23
240406-me8pvsgg43 1006-04-2024 10:20
240406-mdjz4sgf86 10Analysis
-
max time kernel
16s -
max time network
21s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06-04-2024 10:32
General
-
Target
e251129e83d32c1744bce1cbc8018c03_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
e251129e83d32c1744bce1cbc8018c03
-
SHA1
75f3bff3c62f3a1c3b68bf0e88b9d441a03b999d
-
SHA256
f544d908dca93097fdf1f99a4f697783f6aedd5f575df7408669f489771708b5
-
SHA512
806cc52f2f2fcd7618f6ca12251ef7c3d3b708820b01d96d69c7c953541c3622e633278f5215669bb0c3b10b623cdf8321893f1b6c8e20089bd307a44f5c6a65
-
SSDEEP
24576:NvU/JLZY+IROxI5+5TsiPutQSmV11hfUSbZmyc9VCKTwaRhP8IGaHQrs8t:C/JXT5TsioQSmV11hcSFmyOVCKTwaRud
Score
10/10
Malware Config
Signatures
-
Detects Echelon Stealer payload 1 IoCs
-
Echelon
Echelon is a .NET stealer that targets passwords from browsers, email and cryptocurrency clients.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e251129e83d32c1744bce1cbc8018c03_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e251129e83d32c1744bce1cbc8018c03_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
1.6MB