Analysis
-
max time kernel
130s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
26-05-2024 04:41
General
-
Target
745a68bbd455ca5aa54649705a688aaa_JaffaCakes118.exe
-
Size
448KB
-
MD5
745a68bbd455ca5aa54649705a688aaa
-
SHA1
2df0bb66e25646f197d339ec2ae4e0d014d1dfde
-
SHA256
57d07113f4b6e79c342c49ed28d0bb444cf97f3c3610a6165759e3cbeb87017e
-
SHA512
10d4d8cdbccdfac58b432aa0060e7ec6a440a35c62be68f77235cdcae7b4d2aaf29d70ef131d329b0c35b374f701b89de471c36c013b6845156c609a3f3a385d
-
SSDEEP
12288:QboBb/W9ANGBAFb5i0P6HfewKQLYg0yCxB:4xBAiAHwfzW
Score
10/10
Malware Config
Signatures
-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Dave packer 2 IoCs
Detects executable using a packer named 'Dave' by the community, based on a string at the end.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\745a68bbd455ca5aa54649705a688aaa_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\745a68bbd455ca5aa54649705a688aaa_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
200KB
-
Filesize
188KB
-
Filesize
188KB
-
Filesize
184KB
-
Filesize
192KB