Analysis
-
max time kernel
141s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
08/09/2024, 05:28
General
-
Target
d3a60a1d0cac3375562fe266a04d698f_JaffaCakes118.exe
-
Size
17KB
-
MD5
d3a60a1d0cac3375562fe266a04d698f
-
SHA1
bf56d4c5bc8ed8ce753c49e5ad2b8e506304b90f
-
SHA256
06e80eb59c7abda63ec37ee4cf8bae9e89794b7e46d788f36cd6af555284b946
-
SHA512
f7eae325acf304b198d23761ed5fad77cddf2d1871b53ea32bc669ce7500b5585b5671e9653e364025086a94f0a17ea11a657ae51086b6c955756655c52d0bb9
-
SSDEEP
192:aSA0TJAPyjLHY219R8C6wtQbYu2KmbxQ2C04kvWgepEt2VtmaowuJ+ij6EUbOD6K:TA0TJASPp6p/D43FvWgepiao9B6IAY
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://207.246.95.196:8008/zGd8
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)
Signatures
-
Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3a60a1d0cac3375562fe266a04d698f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d3a60a1d0cac3375562fe266a04d698f_JaffaCakes118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
48KB