Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
10-04-2024 10:38
General
-
Target
eadf40f6affc1586b558750a87c7ca36_JaffaCakes118.exe
-
Size
703KB
-
MD5
eadf40f6affc1586b558750a87c7ca36
-
SHA1
8d98f7b4044521d4d80052fa9b2f1f12b65d0532
-
SHA256
d5c7914cf07ef1cc26b03f87a2569ebd2dd34167a6fc90e382e71564a420d2da
-
SHA512
a4c4d73c713d4b3b17a5aef78161559f93f6b14fe7b89d56dd1757e17ff12537a6a74e42ea7b20a6fe7c71ff896d0bee52f7fb280c87847fc0d85cdedb34e204
-
SSDEEP
12288:mSQhaZi/0bLyZL/cZbmH0gJbwEoMXzuvcDLIq47p8yav9ouRhcJ:md660bLmH0kboMXXv747dnScJ
Score
10/10
Malware Config
Signatures
-
BluStealer
A Modular information stealer written in Visual Basic.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eadf40f6affc1586b558750a87c7ca36_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eadf40f6affc1586b558750a87c7ca36_JaffaCakes118.exe"1⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2528 -s 5282⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2528 -ip 25281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
476KB
-
Filesize
47.3MB
-
Filesize
47.3MB
-
Filesize
476KB