Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 16:47 UTC

General

  • Target

    4c140ed1309473582fe4b29a6645d09a_JaffaCakes118.exe

  • Size

    863KB

  • MD5

    4c140ed1309473582fe4b29a6645d09a

  • SHA1

    1338586d22d9a92f9e70506c57f13cb8a541c109

  • SHA256

    29916231c0c6e31a35af582d126baf776a61bac05fd96e6bc3fffa17c5cde47f

  • SHA512

    b8ed84ac7a7f576be6cbee3c7b4130c1f634767831ad1d6dcfe5dc2d12a51b3c2c49743513bd585d8a57a64b42e9c3117ada2c384312b447d363d0f0643a119f

  • SSDEEP

    24576:czazWXy4y5cMpXF4D6Sfue+BM8QB+KfOa9H4taUgST2:cz4cMpiDbfueBMKxjWT2

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\4c140ed1309473582fe4b29a6645d09a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\4c140ed1309473582fe4b29a6645d09a_JaffaCakes118.exe"
    1⤵
      PID:2176

    Network

    • flag-us
      DNS
      make.campzephyr.host
      4c140ed1309473582fe4b29a6645d09a_JaffaCakes118.exe
      Remote address:
      8.8.8.8:53
      Request
      make.campzephyr.host
      IN A
      Response
    • flag-us
      DNS
      create.guitarchange.site
      4c140ed1309473582fe4b29a6645d09a_JaffaCakes118.exe
      Remote address:
      8.8.8.8:53
      Request
      create.guitarchange.site
      IN A
      Response
    No results found
    • 8.8.8.8:53
      make.campzephyr.host
      dns
      4c140ed1309473582fe4b29a6645d09a_JaffaCakes118.exe
      66 B
      131 B
      1
      1

      DNS Request

      make.campzephyr.host

    • 8.8.8.8:53
      create.guitarchange.site
      dns
      4c140ed1309473582fe4b29a6645d09a_JaffaCakes118.exe
      70 B
      135 B
      1
      1

      DNS Request

      create.guitarchange.site

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2176-0-0x00000000002B8000-0x00000000002BA000-memory.dmp

      Filesize

      8KB

    • memory/2176-1-0x0000000001E70000-0x0000000001F3A000-memory.dmp

      Filesize

      808KB

    • memory/2176-2-0x00000000001F0000-0x00000000002CD000-memory.dmp

      Filesize

      884KB

    • memory/2176-4-0x00000000001F0000-0x00000000002CD000-memory.dmp

      Filesize

      884KB

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.