Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
-
submitted
18-04-2024 22:11
General
-
Target
f8db76628f58ae7d66a95d134c04895f_JaffaCakes118.exe
-
Size
379KB
-
MD5
f8db76628f58ae7d66a95d134c04895f
-
SHA1
484b08726669838820e166d7621559e1bec8c3a1
-
SHA256
4272379ced0fed89dfc74a080cd17269b34bef293cbfe4bd424abd500bf367fa
-
SHA512
77cca8a8565d7e84a2dbc88814eec3f52b2fcce88fcd56f791c25b2fe7bd0e213b7ce0f8cf987fb69306924831b02aa87076656b1845870dfb53c89f2254ffca
-
SSDEEP
6144:MmgDbiuBekKbKkNas2pevng1KuizqZhaNyG0Sbz:CauBekVkNas2Pgui+hu
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
gc-prtnrs.top
gcc-prtnrs.top
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f8db76628f58ae7d66a95d134c04895f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\f8db76628f58ae7d66a95d134c04895f_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
184KB
-
Filesize
46.4MB
-
Filesize
46.4MB
-
Filesize
1024KB