Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240730-en -
resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system -
submitted
31-07-2024 23:57
Behavioral task
behavioral1
Sample
7e721fe973a2b9c980b0cc7b16f8fe08_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
1 signatures
150 seconds
General
-
Target
7e721fe973a2b9c980b0cc7b16f8fe08_JaffaCakes118.exe
-
Size
1.4MB
-
MD5
7e721fe973a2b9c980b0cc7b16f8fe08
-
SHA1
9597a69c12427d1c89e682a404de578a9ac65d04
-
SHA256
0f64235359fcbf61dd6616fa4c22d3366ac26f5f67908ea3df601fb17b3f86fb
-
SHA512
165c5e5254787834125ab4f732915d914d901f13f8f430075f2a639266cfa95ee10d853040e3f414a6640fd8851f84dbd0b9af85cbebd78bd8247de919a638bf
-
SSDEEP
24576:vcaQqeFKcBZYT8VTGsndqiQ1igFa0uKhffV5xpqh:vmxscjY4VTGsRQMg+Khz2h
Malware Config
Signatures
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 ip-api.com