Analysis
-
max time kernel
141s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
07-05-2024 21:14
General
-
Target
21c024d1cc5dcac2804b22809ad28a34_JaffaCakes118.exe
-
Size
244KB
-
MD5
21c024d1cc5dcac2804b22809ad28a34
-
SHA1
2b10e5ceff496e7a45d270927ce38a621d269b24
-
SHA256
edd63c2e25e59ceb308a2ddc556b2287a831e6aa6703586fbf9b503687048c6b
-
SHA512
bc6096cbd39407fb71a72d8797e50503169ed0e7df914fc22b8e8d1d164b259331a2efe5044ac3516feea87268170c83b98f20a741bfea6a2bbaca590ee64d93
-
SSDEEP
3072:foQ24WalUNg+AMEi6Ib8G1RA1N9w/1Ma+6bhSqkIuAnJi5e9jJ5Yg/YOJ5lI+SQR:fo4J+AXfaXjVuA9j8QIXq
Malware Config
Signatures
-
SystemBC
SystemBC is a proxy and remote administration tool first seen in 2019.
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\21c024d1cc5dcac2804b22809ad28a34_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\21c024d1cc5dcac2804b22809ad28a34_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
-
C:\ProgramData\cfvbk\txpec.exeC:\ProgramData\cfvbk\txpec.exe start21⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
MD521c024d1cc5dcac2804b22809ad28a34
SHA12b10e5ceff496e7a45d270927ce38a621d269b24
SHA256edd63c2e25e59ceb308a2ddc556b2287a831e6aa6703586fbf9b503687048c6b
SHA512bc6096cbd39407fb71a72d8797e50503169ed0e7df914fc22b8e8d1d164b259331a2efe5044ac3516feea87268170c83b98f20a741bfea6a2bbaca590ee64d93
-
Filesize
376KB
-
Filesize
376KB
-
Filesize
20KB
-
Filesize
1024KB
-
Filesize
376KB
-
Filesize
1024KB
-
Filesize
376KB