Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
09/07/2024, 15:43 UTC
General
-
Target
30f9a7f5ad79432f6b31b9098e49e26a_JaffaCakes118.exe
-
Size
488KB
-
MD5
30f9a7f5ad79432f6b31b9098e49e26a
-
SHA1
1a8d4c1b331c3bd75e1547c83e5add34fe3dbc01
-
SHA256
13cdc0fa0530ad7439a810510995d90d9bb0bb42946601f06f60e8743e9b1ca1
-
SHA512
c48490083ee70fd1384e4fdc9d7fa30e5bafe89e8e1c4d8807a12382c261ee0c513984c76eb5884d0a3bb696cf284af965860f4ac1dd578714acf08491497733
-
SSDEEP
12288:WLOZVQQxfnr+TK7r79/loLWeFcPRLEljM5aLD:W4VQQxfnr+TK7r79/loBF2R+jM5aLD
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\30f9a7f5ad79432f6b31b9098e49e26a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\30f9a7f5ad79432f6b31b9098e49e26a_JaffaCakes118.exe"1⤵
- Adds Run key to start application
Network
-
DNScck48.meibu.comRemote address:8.8.8.8:53Requestcck48.meibu.comIN AResponsecck48.meibu.comIN A20.210.205.20
-
20.210.205.20:8786cck48.meibu.com
-
8.8.8.8:53cck48.meibu.comdns
DNS Request
cck48.meibu.com
DNS Response
20.210.205.20