Analysis Overview
SHA256
65d5e3d6f233a393e6c4d11fa947f733f3109e005cc1f957abe2ab8d78dc6002
Threat Level: Known bad
The file 05b9df650785b352737765de10929567_JaffaCakes118 was found to be: Known bad.
Malicious Activity Summary
MetaSploit
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2024-06-23 08:37
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-23 08:37
Reported
2024-06-23 08:40
Platform
win7-20240508-en
Max time kernel
118s
Max time network
118s
Command Line
Signatures
MetaSploit
Processes
C:\Users\Admin\AppData\Local\Temp\05b9df650785b352737765de10929567_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\05b9df650785b352737765de10929567_JaffaCakes118.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | gloomix.com | udp |
| US | 192.187.111.219:443 | gloomix.com | tcp |
| US | 192.187.111.219:443 | gloomix.com | tcp |
| US | 192.187.111.219:443 | gloomix.com | tcp |
| US | 192.187.111.219:443 | gloomix.com | tcp |
Files
memory/2928-0-0x000000000043D000-0x0000000000441000-memory.dmp
memory/2928-1-0x0000000000400000-0x0000000000556000-memory.dmp
memory/2928-2-0x0000000000240000-0x0000000000241000-memory.dmp
memory/2928-3-0x0000000000400000-0x0000000000556000-memory.dmp
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-23 08:37
Reported
2024-06-23 08:40
Platform
win10v2004-20240508-en
Max time kernel
51s
Max time network
51s
Command Line
Signatures
MetaSploit
Processes
C:\Users\Admin\AppData\Local\Temp\05b9df650785b352737765de10929567_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\05b9df650785b352737765de10929567_JaffaCakes118.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | gloomix.com | udp |
Files
memory/1036-1-0x0000000000400000-0x0000000000556000-memory.dmp
memory/1036-0-0x000000000043D000-0x0000000000441000-memory.dmp
memory/1036-2-0x00000000005B0000-0x00000000005B1000-memory.dmp
memory/1036-4-0x0000000000400000-0x0000000000556000-memory.dmp