Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
24/06/2024, 17:34
General
-
Target
09e02901ebaf0c3ad0b8154f4a07d86e_JaffaCakes118.exe
-
Size
344KB
-
MD5
09e02901ebaf0c3ad0b8154f4a07d86e
-
SHA1
926e0a8d32d7413eafc1f2d70c318a9ab468509d
-
SHA256
ca1a1323346af06e9b688a2909cdded207e809ac1b8fa6b6a3b4b70af24b43f2
-
SHA512
ac8d1be3f1ca209022b8d086a34b9af761d52b6b82e797625b8a2bb78e38753edeb0457b3eafb338e429b39854fbc2f36c22780ed34a036a0f3e949412a9d14f
-
SSDEEP
6144:A/T3zd9AVAixibDqwbKhqjX9kjeKHYFqoECLrLnZF7tGUP+BgkTbXD/3/:A/XM4DShe9EcHPLrLZ5AICgkTP3/
Score
7/10
Malware Config
Signatures
-
Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
-
Reads local data of messenger clients 2 TTPs
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\09e02901ebaf0c3ad0b8154f4a07d86e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\09e02901ebaf0c3ad0b8154f4a07d86e_JaffaCakes118.exe"1⤵