Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
15-04-2024 15:59
Static task
static1
1 signatures
General
-
Target
f1713cf3fa008ef8fbff6237f1338e9d_JaffaCakes118.exe
-
Size
420KB
-
MD5
f1713cf3fa008ef8fbff6237f1338e9d
-
SHA1
bc50e9d821b72d8abd7d4b8ec0385abd02b2638c
-
SHA256
185ff8acc096e41c8e637e609092dbb731dac1d39562e556e90608c502e5c76a
-
SHA512
f0e1964e724f1be9db6785fdcb55a28bf9fb644c1c5b4f5d1fc748a802f4218aaa920861a78ebcdae68a7e823ac5992a1a5fd0d691441096c710d4d96e0786df
-
SSDEEP
12288:we7FFM5S80tsqc52WegC3OhafiYrcnUcM8:wkFFME80ti524AVzrE/M
Malware Config
Signatures
-
Expiro payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/4272-0-0x0000000000120000-0x0000000000220000-memory.dmp family_expiro1 behavioral1/memory/4272-1-0x0000000000120000-0x0000000000220000-memory.dmp family_expiro1