7c34104b83a55b283e03b784dbeade4a4dec80df05f26b7c6626921811d3f37a

Analysis

max time kernel
140s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
30/04/2024, 09:48

Target

098b1376c59ad19e81ed39f87a438224_JaffaCakes118.exe
Size

16KB
MD5

098b1376c59ad19e81ed39f87a438224
SHA1

dc06736cfb6c63c8b50336c91996751dec10ffd6
SHA256

7c34104b83a55b283e03b784dbeade4a4dec80df05f26b7c6626921811d3f37a
SHA512

628a5d6fdc7ab37f589818a7d48d77a408f3ecfb82827e8a32e0325bea0dbbc1f91951b690c481b5cd25f544993a32749410c09c557c33f1a257175f4c8a4611
SSDEEP

384:xbbPSoQXZl14N7+eL2YLpJIl+oGKMWbzWd:xXKoqlJYLp2HGnWb6d

Score

6^/10

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

flow	ioc
5	raw.githubusercontent.com
6	raw.githubusercontent.com

C:\Users\Admin\AppData\Local\Temp\098b1376c59ad19e81ed39f87a438224_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\098b1376c59ad19e81ed39f87a438224_JaffaCakes118.exe"
1⤵
PID:1700

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact