Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 15:52 UTC
Static task
static1
Behavioral task
behavioral1
Sample
ea5a6708075900f20542322ead2bf17c_JaffaCakes118.lnk
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ea5a6708075900f20542322ead2bf17c_JaffaCakes118.lnk
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
ea5a6708075900f20542322ead2bf17c_JaffaCakes118.lnk
-
Size
821B
-
MD5
ea5a6708075900f20542322ead2bf17c
-
SHA1
97ee8ca597705307a8b76242d0a4db9ccd66abcf
-
SHA256
566058c6477f771b8e3af6320e8399b155a627bc968bb52fdc487413fd62aa4d
-
SHA512
ee68162ebe4ac4ad66c73af2f7129174f2f12edcf0908134b43ea47fa5dae55013f2295e63ffbb1ca1e0398d4a2324856c34908ff099f7af08b57cd8b3bf3ba3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
-
Remote address:8.8.8.8:53Request241.150.49.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.197.17.2.in-addr.arpaIN PTRResponse240.197.17.2.in-addr.arpaIN PTRa2-17-197-240deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request14.160.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request104.219.191.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request86.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request198.187.3.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request28.143.109.104.in-addr.arpaIN PTRResponse28.143.109.104.in-addr.arpaIN PTRa104-109-143-28deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request241.197.17.2.in-addr.arpaIN PTRResponse241.197.17.2.in-addr.arpaIN PTRa2-17-197-241deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request29.243.111.52.in-addr.arpaIN PTRResponse
No results found
-
72 B 158 B 1 1
DNS Request
241.150.49.20.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
240.197.17.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.160.190.20.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
104.219.191.52.in-addr.arpa
-
70 B 144 B 1 1
DNS Request
86.23.85.13.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
198.187.3.20.in-addr.arpa
-
73 B 139 B 1 1
DNS Request
28.143.109.104.in-addr.arpa
-
71 B 135 B 1 1
DNS Request
241.197.17.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
29.243.111.52.in-addr.arpa