Analysis
-
max time kernel
141s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20-04-2024 11:55
General
-
Target
fcb755961054f48694eb13170b93a195_JaffaCakes118.exe
-
Size
431KB
-
MD5
fcb755961054f48694eb13170b93a195
-
SHA1
42c2269f390a22b283ca72158a0481416a139107
-
SHA256
c864ec31f34d9628ff59965b1a43eb4ec2fa511a30d36fd45a862ff5efd7ad8e
-
SHA512
c367d4318525ec3cd45b69e55c32c814f48f881368ffaf90be78b830cd74c0eec4859615d201229a50e6d12c4f228361e182b800ade82378c4632282cc873f7c
-
SSDEEP
12288:6H2Bc9c+G8OVZqkPQItMi4IUbEbmEJyNVlmWweMMM:6HOkQPqkPQIB4IjJyNVNMMM
Score
10/10
Malware Config
Extracted
Family
gcleaner
C2
ppp-gl.biz
45.9.20.13
Signatures
-
GCleaner
GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.
-
OnlyLogger
A tiny loader that uses IPLogger to get its payload.
-
OnlyLogger payload 5 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fcb755961054f48694eb13170b93a195_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fcb755961054f48694eb13170b93a195_JaffaCakes118.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
292KB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
1024KB
-
Filesize
3.6MB
-
Filesize
3.6MB