Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
31-08-2024 19:17
Static task
static1
1 signatures
General
-
Target
cd6f0d024cb33803b0c1b25bfc600917_JaffaCakes118.exe
-
Size
416KB
-
MD5
cd6f0d024cb33803b0c1b25bfc600917
-
SHA1
2ea47a10ec7589fd620757e3cb6401f06e584775
-
SHA256
2ea7c79a6d72d7ecf577a1267ea78ef6847534a313bb31cd9f6d3bf1ce47220a
-
SHA512
b81fc4b982af874d391df8bab69b351a634b240a2d4bd07940b299410feaddb3b3f94c2eda5b89ae005ee4aec11d4bbfedbc133c171f340fadcc7b933ef10701
-
SSDEEP
6144:fNB5mFytJPrXj1dj8PYISDc/h7J/XUdAtYyKWFuXja3pfGyGvOCItjQ:fNB2yT5I9/XEAGvWF8j+m
Malware Config
Signatures
-
Expiro payload 4 IoCs
Processes:
resource yara_rule behavioral1/memory/2276-0-0x000000000046C000-0x00000000004FF000-memory.dmp family_expiro1 behavioral1/memory/2276-1-0x0000000000400000-0x00000000004FF000-memory.dmp family_expiro1 behavioral1/memory/2276-3-0x0000000000400000-0x00000000004FF000-memory.dmp family_expiro1 behavioral1/memory/2276-2-0x000000000046C000-0x00000000004FF000-memory.dmp family_expiro1