Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01-07-2024 19:09
Static task
static1
Behavioral task
behavioral1
Sample
1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe
-
Size
3.1MB
-
MD5
1c2b17a2e6615c1798e0082882432905
-
SHA1
506168f5d220ab29811b1c439e933be01624541d
-
SHA256
d63863a9110205b94821943c6cfad8e233a393903e0e0b375269e8a4c7bde994
-
SHA512
de5c334cd43d63b21ad836554435996deac850cd6d4f6a7515f309c05a31745524bf145fd9faff6c29f3e22cf33e08515803c3c8c6fd233e495de08fc93365eb
-
SSDEEP
49152:TYhwXCrOM5b7vo8r6iN5jPgLbAfARFW99xmOYQKR6KV8K1lfkqQW6pt:M+w3rrNhcAfARw2QK8g3Ct
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2552 youdown.exe -
Loads dropped DLL 1 IoCs
pid Process 1276 1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\1c2b17a2e6615c1798e0082882432905_JaffaCakes118.exe"1⤵
- Loads dropped DLL
PID:1276 -
C:\Users\Admin\AppData\Roaming\Thinstall\YouTube Download Studio 2.5.1.0\40000013200002i\youdown.exe"C:\Users\Admin\AppData\Roaming\Thinstall\YouTube Download Studio 2.5.1.0\40000013200002i\youdown.exe"2⤵
- Executes dropped EXE
PID:2552
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7KB
MD518699d0c237170867365d0150cefaa8c
SHA1db390e8beae5a7397ef53c68bafcc833f94f9935
SHA256aa75de7de991e8f5e38c3789e2510340b2bafea6f9ea8dd00ef10ecb46f48994
SHA51237417fc38c4f80dac6406e3652bde4ef02454151d9499fcfbacb738f941285f37c5ce209008612806a04ddebd74c01e5b419190bc725edbbc9bc7d19da4e7270