Analysis
-
max time kernel
143s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
01-08-2024 05:35
General
-
Target
7f57d066c41310f2620a180d52dab454_JaffaCakes118.exe
-
Size
47KB
-
MD5
7f57d066c41310f2620a180d52dab454
-
SHA1
4f60234d479fa57828bed548f4e44f28e5e1edad
-
SHA256
81e96984130042d0ee70ae09a7bc9375974d513938e80877720d251330e4b37e
-
SHA512
68c79b944418eb14ec29c48643b5efbb8f76343def6070b497430105b10829cf4e046c140f4746e1b20f789d9512443b58973890e97f5194468aad4b883ca853
-
SSDEEP
768:eu/JRToSkobbWUnWCimo2qBQ9DJcyQPIzr3jg4T0b28EWAdYSiRsve40PCoLotBH:eu/JRT3T82bVzrzg9b28EF9imvOPCosb
Score
10/10
Malware Config
Extracted
Family
asyncrat
Version
0.5.7B
Botnet
Default
C2
fsft.p-e.kr:1
Mutex
AsyncMutex_6SI8OkPnk
Attributes
-
delay
3
-
install
false
-
install_folder
%AppData%
aes.plain
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f57d066c41310f2620a180d52dab454_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\7f57d066c41310f2620a180d52dab454_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
72KB
-
Filesize
6.9MB
-
Filesize
6.9MB