Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    15-10-2024 13:01

General

  • Target

    47f56794746bdd64c01547f9007008d7_JaffaCakes118.exe

  • Size

    203KB

  • MD5

    47f56794746bdd64c01547f9007008d7

  • SHA1

    d55483a2cc41045194a2e5edbdd364138b7075c8

  • SHA256

    322ea471529bf5b20693ff429851235820b6493d6ed206cfb2eecca788cd5ff8

  • SHA512

    d87e5ad3ec60194db6c4db00b124e1c594437e1f716de21789f5d7c39fc48c749d462e0b0d64868aa8753c0661bc3ddc10917356b5088a4449330f11989125ea

  • SSDEEP

    3072:nLFggJ2pEjjgES7od67ELu/AIiN4q/lSlBkBrcPI1ZezoiPAG8EuSzQzL:nLFg8aPEdtWlx0lLcPI18PA+uSzCL

Score
10/10

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

boombangers00666999.sc/gate2233.php

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\47f56794746bdd64c01547f9007008d7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\47f56794746bdd64c01547f9007008d7_JaffaCakes118.exe"
    1⤵
      PID:2052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2052-2-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB

    • memory/2052-1-0x0000000000510000-0x0000000000610000-memory.dmp

      Filesize

      1024KB

    • memory/2052-3-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

    • memory/2052-4-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

    • memory/2052-5-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB