Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
04/06/2024, 03:06 UTC
Static task
static1
Behavioral task
behavioral1
Sample
9374fdf30b219e545152d93fc7eef80a_JaffaCakes118.js
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9374fdf30b219e545152d93fc7eef80a_JaffaCakes118.js
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
-
Target
9374fdf30b219e545152d93fc7eef80a_JaffaCakes118.js
-
Size
88KB
-
MD5
9374fdf30b219e545152d93fc7eef80a
-
SHA1
662f0179033e8e686d6f77e0032dc63d04cf88a0
-
SHA256
67505d4a34001b200b70c4e731328004d8bc3c239978ab1cfdc8fe36b85d15bc
-
SHA512
3cbbd13d5766c23b4dad78add61eba768b4cdffe0081194ebef88386c5775f07d57d9897419871835063916ed02c93779701f5763e34e1980c64e3011dd78646
-
SSDEEP
384:pb5/W6ANwBMSBMt9Rel3w6hWcHhp2iryikfaxfEl9VXxoV7K4PM9f/MYZgRGT5jh:pbRCSCWAMxrFfE3oV7K4PMl/MYZRh
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
Network
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Request196.249.167.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request71.159.190.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request172.210.232.199.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request183.59.114.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request88.210.23.2.in-addr.arpaIN PTRResponse88.210.23.2.in-addr.arpaIN PTRa2-23-210-88deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request29.243.111.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request82.90.14.23.in-addr.arpaIN PTRResponse82.90.14.23.in-addr.arpaIN PTRa23-14-90-82deploystaticakamaitechnologiescom
No results found
-
66 B 90 B 1 1
DNS Request
8.8.8.8.in-addr.arpa
-
73 B 147 B 1 1
DNS Request
196.249.167.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
71.159.190.20.in-addr.arpa
-
74 B 128 B 1 1
DNS Request
172.210.232.199.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
183.59.114.20.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
88.210.23.2.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
29.243.111.52.in-addr.arpa
-
70 B 133 B 1 1
DNS Request
82.90.14.23.in-addr.arpa