Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
01/07/2024, 07:59
Behavioral task
behavioral1
Sample
1a85b940952753460297a2a34cdd4891_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1a85b940952753460297a2a34cdd4891_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1a85b940952753460297a2a34cdd4891_JaffaCakes118.exe
-
Size
46KB
-
MD5
1a85b940952753460297a2a34cdd4891
-
SHA1
6f556f53417ffe81992aa14689befdf295c7b679
-
SHA256
c90538cf91ab258e544c7f5f8545da75d54b0fc1e2a7ba8fc1f9762e2d6677f7
-
SHA512
cbf88bf9bd93f22e76c8c69446f7bf39a99e97e6ee67286be718c99d8e1b8208786931c8dad8dc3f773db0b3d0129cf5cd051f64b6ba8da1e7e5cec9c891713a
-
SSDEEP
768:LTe4aI2dFbQbQl8RbYeUF36PWGGi4QaNs6gaE0eQ1c0QH9RlYI6grTVZ:LpalZQbdbYeUFmGMGpgaE0evZ4gfb
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/924-0-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-1-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-2-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-3-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-4-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-5-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-6-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-8-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-9-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-10-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-11-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-12-0x0000000000400000-0x000000000069D000-memory.dmp upx behavioral2/memory/924-13-0x0000000000400000-0x000000000069D000-memory.dmp upx -
Unexpected DNS network traffic destination 10 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 85.37.17.10 Destination IP 202.14.67.14 Destination IP 64.187.29.134 Destination IP 86.64.145.141 Destination IP 216.211.191.3 Destination IP 66.234.185.2 Destination IP 216.254.141.2 Destination IP 24.102.55.4 Destination IP 142.47.133.81 Destination IP 202.14.67.14