Analysis
-
max time kernel
93s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
02/06/2024, 22:47 UTC
Static task
static1
Behavioral task
behavioral1
Sample
8fb44fae0c8aa1390d8a70dfc73a6427_JaffaCakes118.js
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
8fb44fae0c8aa1390d8a70dfc73a6427_JaffaCakes118.js
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
8fb44fae0c8aa1390d8a70dfc73a6427_JaffaCakes118.js
-
Size
61KB
-
MD5
8fb44fae0c8aa1390d8a70dfc73a6427
-
SHA1
e78f78b1c72513b96ac2221677c1cd638259f18e
-
SHA256
cd79db0b94943c7200ad605f65b3174d2ccc700303853de91bdbe17f8809fc8c
-
SHA512
8989dad21df7d2c692d829ef130a02702df5086b67e67be8ec31ad1d6dccd1eddb5b7152a39367984452628db386cb14802c072f2888df8e3fceef93fa81517b
-
SSDEEP
1536:qr8dIz8WMXbJYaUUU7XpXZv66wmKNKflX1abYnp4RFiCE8MJHfEG:qXAbYnMYzR
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request183.142.211.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request0.205.248.87.in-addr.arpaIN PTRResponse0.205.248.87.in-addr.arpaIN PTRhttps-87-248-205-0lgwllnwnet
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request64.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request154.239.44.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request26.165.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request206.23.85.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request14.227.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
No results found
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
73 B 159 B 1 1
DNS Request
183.142.211.20.in-addr.arpa
-
71 B 116 B 1 1
DNS Request
0.205.248.87.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
64.159.190.20.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
154.239.44.20.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
26.165.165.52.in-addr.arpa
-
71 B 145 B 1 1
DNS Request
206.23.85.13.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
240.221.184.93.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
14.227.111.52.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa