Analysis
-
max time kernel
94s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
29-11-2024 14:43
General
-
Target
b1eb5d4cf77b6c0809b23946030eac58_JaffaCakes118.exe
-
Size
7.3MB
-
MD5
b1eb5d4cf77b6c0809b23946030eac58
-
SHA1
cf882b46c46ff42eb6eca6889ed6486f36096356
-
SHA256
2b011ffe49624f0ea4c5640fb0c0c1173d03c10254df6d84191541182998dc75
-
SHA512
eebf78fb035dac2393d093d1d0bb7c0f6e4b07c5548d68389ad04f6123f537c2be2d2d507c36452568c251dac3a0fa93ed3f4aabf0723853e848bc8e04afdabe
-
SSDEEP
98304:q/n/Gyjrbwvn4Gdaklr3tNQMQno0z7ymgfKgfFNxY0QjKu3eTrKe4ibbM3DZ7fyH:Cn/GyPmdaWX5QoDmd0Qj7eTrpUc
Malware Config
Signatures
-
Panda Stealer payload 2 IoCs
-
PandaStealer
Panda Stealer is a fork of CollectorProject Stealer written in C++.
-
Pandastealer family
-
Loads dropped DLL 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b1eb5d4cf77b6c0809b23946030eac58_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b1eb5d4cf77b6c0809b23946030eac58_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
486KB
MD56c81f596bfda0b754e3514a46ee48119
SHA1bc7f447ca8b41beabf26f9556c58292cf8774d7d
SHA256fc91fbb7d3e77ebc949873d514679be783c100b352d6737c25d1ef47550145bb
SHA512b8c9789cb3062a5d670b199e586f6bb126c14da450e2bf874d0f1f36b043db61db77542aca411d5bea4a593564405d81520160043e7fbbea3d0d5b63f991dd15
-
Filesize
7.4MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
960KB
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
176KB
-
Filesize
564KB
-
Filesize
488KB
-
Filesize
880KB
-
Filesize
5.7MB
-
Filesize
488KB
-
Filesize
564KB
-
Filesize
5.7MB
-
Filesize
488KB
-
Filesize
908KB
-
Filesize
176KB
-
Filesize
564KB
-
Filesize
700KB
-
Filesize
464KB
-
Filesize
176KB
-
Filesize
5.7MB
-
Filesize
564KB
-
Filesize
700KB
-
Filesize
464KB
-
Filesize
5.7MB
-
Filesize
700KB
-
Filesize
464KB
-
Filesize
148KB
-
Filesize
5.7MB
-
Filesize
464KB
-
Filesize
488KB
-
Filesize
908KB
-
Filesize
176KB
-
Filesize
488KB
-
Filesize
908KB
-
Filesize
176KB
-
Filesize
564KB
-
Filesize
700KB
-
Filesize
5.7MB
-
Filesize
488KB
-
Filesize
564KB
-
Filesize
5.7MB
-
Filesize
880KB
-
Filesize
488KB
-
Filesize
564KB
-
Filesize
564KB
-
Filesize
700KB
-
Filesize
564KB
-
Filesize
700KB
-
Filesize
464KB
-
Filesize
5.7MB
-
Filesize
148KB
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
564KB
-
Filesize
148KB
-
Filesize
488KB
-
Filesize
176KB
-
Filesize
148KB
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
176KB
-
Filesize
564KB
-
Filesize
564KB
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
7.4MB
-
Filesize
960KB
-
Filesize
960KB