Analysis
-
max time kernel
147s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-04-2024 11:54
General
-
Target
eb027d233cd923c4c4344b5b9c794da3_JaffaCakes118.exe
-
Size
275KB
-
MD5
eb027d233cd923c4c4344b5b9c794da3
-
SHA1
9204b04a0c6d8453558b2f572e8bce1523e81fa0
-
SHA256
9f7f3598fd33ea327ce6b442272ad990e14d355acaf7ee16853e1ea53b54410c
-
SHA512
5e4e29aa95a86bb9be61e2901b5f44ae0eccc91a12833a4eca16bd5767077ccd77a36ffc37e4c53084746857a7de918dd3fd15d0e912883285c3d65f07ae2fd8
-
SSDEEP
3072:uCeb43AEbuvFBr434xdZoPuvRoNG4e4XEXDhWmox+vMt5xjQ/pzT3WkJB0HBj/1E:R5IF23EyuviA4UXD9Rwj6pzj9eBx
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb027d233cd923c4c4344b5b9c794da3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\eb027d233cd923c4c4344b5b9c794da3_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
188KB
-
Filesize
1024KB
-
Filesize
29.4MB
-
Filesize
29.4MB
-
Filesize
1024KB
-
Filesize
188KB