Analysis
- max time kernel
124s - max time network
163s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system - submitted
18/04/2024, 12:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f80419c9008ead95944c5e17a534977b_JaffaCakes118.exe
Resource
win7-20240221-en
3 signatures
150 seconds
General
- Target f80419c9008ead95944c5e17a534977b_JaffaCakes118.exe
- Size 61KB
- Sample240418-px4vqsde34
- SHA256 f99dc01c4e02f86beaed49e6ade2703a3bf7c05facfa0a34729202a2ffde6079
- MD5 f80419c9008ead95944c5e17a534977b
- SHA1 c5c0b82bfd9666343b4c8aef9e178bec82df09d3
- SHA512 4a64e2ad30ee3bddb25cd7afdc1eb06ffe2106bb895fede83bd7443be25388fe2ba290b5d146bf1b1df6920df82e47b95aacd74bc01ca946033144480a4fd70b
- SSDEEP 1536:Ag9ZqVQPN4UmshsQYXMWTNC1C4TBUgFe47yAVx:APccklYXMWTN6Xzegyox
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
flow ioc 14 https://jira.ops.aol.com/secure/attachment/688199/failwhale.html - Drops file in System32 directory 1 IoCs
description ioc Process File created \??\c:\windows\SysWOW64\xpux32.exe f80419c9008ead95944c5e17a534977b_JaffaCakes118.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\SysWOW64\xpux32.exe
- Size 471KB
- SHA256 1f049eb252f0b8f719f5b8f131119609e21834530a040db2a5fa5ef71e9da20c
- MD5 8e4141a181d47216b72d480f4f2d0de1
- SHA1 496204bf0f33ff9b46634088a97d5bbc5a3380cb
- SHA512 c518920adbedc8c49a441e25b751c8d6262b181a85125d9c78754aee3555d9680f63f0e6a4883bf1ad9edf992fb35c7bb8d071edf5f5d680c62e7090857573ac
- SSDEEP 12288:OcbugRL8gdXsuXQY5u/vtMSSauVmPP/YFn:HL8gdXsuXQYw/vtMSVuVmP3YFn
- MD5 SHA1 SHA512 SSDEEP