Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
02/06/2024, 00:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8c60faeb3e28b17f0228144ac80b51af_JaffaCakes118.exe
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
8c60faeb3e28b17f0228144ac80b51af_JaffaCakes118.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
befacghgbc_P.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
befacghgbc_P.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
- Target befacghgbc_P.exe
- Size 674KB
- Sample240602-a82gesdf65
- SHA256 54f132d1bc338089c3ffbe65944c3c375917a860c2d146db98ad7fdca413bcaa
- MD5 874fbb12caacbf56e2e02b37634218ca
- SHA1 721b1d3923c7eb3dcbcae0b7b839918aaa0340c1
- SHA512 03f397ed707117422a7dfebce47b4a87ac494827d42854e34c547255b02169d14ae6eeb3ff2b34ae9e59bacfe452daef49a14a4f9eda8ece672679255d46c4c6
- SSDEEP 12288:qD0n2e/Ze8I5Y679YNdetEW/Stl7Rmz8qmmb271HdV0C:q4n2kEY6uPetEW/StlQIqDcdV0C
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4956 4084 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\befacghgbc_P.exe"C:\Users\Admin\AppData\Local\Temp\befacghgbc_P.exe"1⤵PID:4084
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4084 -s 2282⤵
- Program crash
PID:4956
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4084 -ip 40841⤵PID:4196