Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19-04-2024 19:53
Static task
static1
Behavioral task
behavioral1
Sample
fb0cedd17622c47554bc9fada82b2135838059aae5fa17ead92ab3fd222cfab5_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
fb0cedd17622c47554bc9fada82b2135838059aae5fa17ead92ab3fd222cfab5_JaffaCakes118.exe
-
Size
464KB
-
MD5
9ce2ce853faebf582eb9059d1517a861
-
SHA1
a0ecd9cb66dbb0894ac6f5c7f24129311a27a2da
-
SHA256
fb0cedd17622c47554bc9fada82b2135838059aae5fa17ead92ab3fd222cfab5
-
SHA512
5e0741250bea258162e7eea22575a3935bb794d52100fd4a55cbbdfc32b9b7bb09aa34cb49a96e3b8f58feb9253b3af92b12def0f6b9d25da96af8781a0a3514
-
SSDEEP
12288:ILi2FcpKLRjSMEMX/SdoWKrZbs/aJmzpxd9h:ILi2FcpKxkoGp
Malware Config
Extracted
asyncrat
| Edit 3LOSH RAT
8
xfreddy2751.duckdns.org:6606
xfreddy2751.duckdns.org:7707
xfreddy2751.duckdns.org:8808
AsyncMutex_6SI8OkPnk
-
delay
3
-
install
false
-
install_file
License.exe
-
install_folder
%AppData%
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3008-0-0x0000000000840000-0x00000000008BA000-memory.dmpFilesize
488KB
-
memory/3008-1-0x000007FEF5810000-0x000007FEF61FC000-memory.dmpFilesize
9.9MB
-
memory/3008-2-0x00000000001D0000-0x00000000001E6000-memory.dmpFilesize
88KB
-
memory/3008-3-0x000000001B280000-0x000000001B300000-memory.dmpFilesize
512KB
-
memory/3008-4-0x000007FEF5810000-0x000007FEF61FC000-memory.dmpFilesize
9.9MB