Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    18-08-2024 07:39

General

  • Target

    a5eedb55a05ec10c0be575560a0782f7_JaffaCakes118.exe

  • Size

    291KB

  • MD5

    a5eedb55a05ec10c0be575560a0782f7

  • SHA1

    c6b577a94cc7fe29963e8d9e71f83c31ca14f557

  • SHA256

    ab4877cc1ad675a827afa8f30660c48136207d0efc03ae91e296de373765549f

  • SHA512

    bd5b6bf799283811fc755a4ac9968e5213317dd5fa1c2e648ec7f3eed94f66b84c2e5722bfd6ec016c11d3b9353d0aa60eebb4bc1ab8f4d7b6ec5f64fe07c722

  • SSDEEP

    6144:xhkcIyT1sRKJnTQIJilk9f+cPI1NZuSYG5RG:01RKpTQIJiC7I1oG+

Score
10/10

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

boombangers00666999.sc/gate2233.php

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\a5eedb55a05ec10c0be575560a0782f7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\a5eedb55a05ec10c0be575560a0782f7_JaffaCakes118.exe"
    1⤵
      PID:1864

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1864-1-0x0000000000270000-0x0000000000370000-memory.dmp

      Filesize

      1024KB

    • memory/1864-3-0x0000000000400000-0x0000000000455000-memory.dmp

      Filesize

      340KB

    • memory/1864-2-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB

    • memory/1864-4-0x0000000000400000-0x0000000000455000-memory.dmp

      Filesize

      340KB

    • memory/1864-5-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB