Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15-10-2024 17:19

General

  • Target

    490f448cdc7d37fc3612a1bb5cf9d085_JaffaCakes118.exe

  • Size

    202KB

  • MD5

    490f448cdc7d37fc3612a1bb5cf9d085

  • SHA1

    65aca2fa65ee6a2644d2572d7b829335e1240ca9

  • SHA256

    77dffca001c85556b1f18d671d7a3f4224ffaefffa4da44c43a7cb0a437c60be

  • SHA512

    d7977fd61ad2efdcd274a7221f72ce1a9610834ba5c6d3f48f77939ed4567d892c06a8bf20cd40e3624d46475702f1f1857db74dec72e5efb587b824c31a78e0

  • SSDEEP

    3072:7ATirOFBAqqvdeAAET7QpI5/drcPI1Ze58EuSzgzq:7AOrGBAqi9LG+cPI1EuSzyq

Score
10/10

Malware Config

Extracted

Family

arkei

Botnet

Default

C2

boombangers00666999.sc/gate2233.php

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\490f448cdc7d37fc3612a1bb5cf9d085_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\490f448cdc7d37fc3612a1bb5cf9d085_JaffaCakes118.exe"
    1⤵
      PID:964

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/964-1-0x00000000004E0000-0x00000000005E0000-memory.dmp

      Filesize

      1024KB

    • memory/964-2-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB

    • memory/964-3-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

    • memory/964-4-0x0000000000400000-0x000000000043F000-memory.dmp

      Filesize

      252KB

    • memory/964-5-0x0000000000400000-0x000000000041B000-memory.dmp

      Filesize

      108KB