Overview

overview

10

Static

static

3

67292a6532...18.exe

windows7-x64

10

67292a6532...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-05-2024 11:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67292a6532e465291d4e836c196826cb_JaffaCakes118.exe

  • Size

    448KB

  • MD5

    67292a6532e465291d4e836c196826cb

  • SHA1

    3824fcd0254ad28d55ae11e033d1dd0b48730c90

  • SHA256

    c672bb25915c0125b932a3a356e03fab4d82b1f0f0d49c920d2513c2ad52d7b4

  • SHA512

    1e82007834fa23eeb0d6f71bc26f4e4250ffdf0edffa3e912517bba4128bb2d580ea6e4ae57861ca470f722fdd43b5e09fa60fde0da917e05b715ca010f45e02

  • SSDEEP

    12288:QboBb/W9ANGBAFb5i0P6HfewKQLYg0yCx:4xBAiAHwfz

Score
10/10
trickbotbankerdavetrojan

Malware Config

Signatures

  • Trickbot

    Developed in 2016, TrickBot is one of the more recent banking Trojans.

    trojanbankertrickbot
  • Dave packer 2 IoCs

    Detects executable using a packer named 'Dave' by the community, based on a string at the end.

    dave
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\67292a6532e465291d4e836c196826cb_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\67292a6532e465291d4e836c196826cb_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1216-3-0x0000000000630000-0x0000000000662000-memory.dmp
    Filesize

    200KB

    Download
  • memory/1216-9-0x0000000002120000-0x000000000214E000-memory.dmp
    Filesize

    184KB

    Download
  • memory/1216-11-0x0000000002150000-0x000000000217F000-memory.dmp
    Filesize

    188KB

    Download
  • memory/1216-8-0x0000000000600000-0x0000000000630000-memory.dmp
    Filesize

    192KB

    Download
  • memory/1216-7-0x0000000002150000-0x000000000217F000-memory.dmp
    Filesize

    188KB

    Download
  • memory/1216-97-0x0000000002150000-0x000000000217F000-memory.dmp
    Filesize

    188KB

    Download