557890aa4632ea29e35e2ca9eb41bd1136913c167c9e4f3d17483f1431563b14 | Triage

Submit
Reports

Overview

overview

Static

static

3

a81ffcb94c...18.exe

windows7-x64

a81ffcb94c...18.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

43144697095160.js

windows7-x64

3

43144697095160.js

windows10-2004-x64

3

Analysis

max time kernel
93s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2024 13:46

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a81ffcb94c5726d6ffe4deb5fe4e3710_JaffaCakes118.exe

Resource

win7-20240903-en

cerber defense_evasion discovery evasion execution impact ransomware spyware stealer trojan

windows7-x64

24 signatures

150 seconds

Behavioral task

behavioral2

Sample

a81ffcb94c5726d6ffe4deb5fe4e3710_JaffaCakes118.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win7-20240903-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

43144697095160.js

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

43144697095160.js

Resource

win10v2004-20241007-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

43144697095160.js
Size

13KB
MD5

6438d2b359dabeeb5fa9b94633c90522
SHA1

21b6fb2e80834796f390d38fbbb8912b8ea1c3ec
SHA256

b28589d3bfdda902cf25a7acd9074f1bc394acc0d2845c1f6e2480eb4f413676
SHA512

5cbfbd0b1acb5591ca74cf7d30ae8b2573e770e07db5243f290068701f743ca80a4e435c0d1d23e22e8c984f3c14eed5a1de4996cb19564e8fe37503d8167192
SSDEEP

192:zU2yoMwGJWeBDGonL3GUjRWuQl/IofEhlOoFtRDuYxiEiPt:42T1GJWUGonbGYRWuQVOlOoFtRDDBiPt

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\43144697095160.js
1⤵
PID:3896

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy