Analysis
-
max time kernel
141s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11-04-2024 11:08
General
-
Target
ed47c5f388f563faacd84f0b0cf1e4dd_JaffaCakes118.exe
-
Size
268KB
-
MD5
ed47c5f388f563faacd84f0b0cf1e4dd
-
SHA1
2cb750313a8bdc6c191ae22b3abbd7b8a8eed928
-
SHA256
356f35a3ef07bd1c5764759fa7406e598d22c70fd758354a21a1366afa6e3e95
-
SHA512
a7a8f6fff6ac29729825e65824e408052f13aa46ff35fddf1904e7c4a0f9a0fc27393f217523e7e1bb08ac22f189925934c6ed884bbddc8fcc8e412e90958465
-
SSDEEP
3072:qxdUNZQM801ejOMaFguLKKw/NUK6fQ7nYKvdkHcwBHSXrmI7HuzyYuB5NRcUsI5G:5ZX1ejOTtO/NNic8HOju2bhsI5/
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
194.145.227.161
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
Vidar
Vidar is an infostealer based on Arkei stealer.
-
OnlyLogger payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed47c5f388f563faacd84f0b0cf1e4dd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ed47c5f388f563faacd84f0b0cf1e4dd_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
292KB
-
Filesize
25.6MB
-
Filesize
292KB
-
Filesize
1024KB