Analysis
-
max time kernel
132s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16/04/2024, 00:31
General
-
Target
f246ceb3ededbb1a8d2100940a69696c_JaffaCakes118.exe
-
Size
477KB
-
MD5
f246ceb3ededbb1a8d2100940a69696c
-
SHA1
0d954cb87143906a4735b392c42605fb141af53b
-
SHA256
008adfd70de846c8dca9c2f1940c769e78cfcb07cc0992d3477aca6476e1735e
-
SHA512
4c506dd07e95ddf328fad1893092ccc60e381470a700d8eb7798758fe8ee3f51b714b3f098201a6a55e035e3c404e0de5e5f9026b7e30e6a207bc78b6aeae097
-
SSDEEP
6144:VzBKg/UfKcbYc66+ph5+o7emu+8ABC+ybzOOzj:VP/c8Lp647ANO0j
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
-
ZGRat
ZGRat is remote access trojan written in C#.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f246ceb3ededbb1a8d2100940a69696c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f246ceb3ededbb1a8d2100940a69696c_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
496KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB