Analysis
-
max time kernel
98s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
03-12-2024 08:52
General
-
Target
bca11b7e7f05b428e5d096fced90b03b_JaffaCakes118.exe
-
Size
18.7MB
-
MD5
bca11b7e7f05b428e5d096fced90b03b
-
SHA1
b869f828b7d521864de715cb56744ad164babe76
-
SHA256
f53aceec2dd2323f9ef02ba077f140f2c968762bde3e6c19be892ad09697f3cc
-
SHA512
e04b0b0d654f872ac507e49a4b2de8e499b779d1f96d5987ddcd303a135a96a6299c27a2bfafb58d53320138bda3cc07501621e7f60249a0c253764c399cb5d2
-
SSDEEP
393216:ivjySZ/p1nut7F1/huzwzvWFR97axO4HTEQkfF+qMPW08eN1Pki:ivGW1nuJF1ZOqOFR9gOwTUE1PW08ezki
Malware Config
Signatures
-
Panda Stealer payload 21 IoCs
-
PandaStealer
Panda Stealer is a fork of CollectorProject Stealer written in C++.
-
Pandastealer family
-
Loads dropped DLL 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bca11b7e7f05b428e5d096fced90b03b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\bca11b7e7f05b428e5d096fced90b03b_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
MD52adaa6733c5cf480d52824b977772dbe
SHA188b4dd86e812c0327e9cc8ea6344af0b91cf6a74
SHA256498aef2e80850094b09578cc54ce0a4a79d8881229c28ba5ab4c888eacb71c71
SHA5120e27bf90bb9f467e94dd8eb76131ae29049de9df8f3070446053d2164d1d7f2b9b41474b27349489e126365e9c34850d9a42c4fad0f63b23ad46f075a8d6d579
-
Filesize
3KB
MD500ce10a19fdfa5b5cfba4f5d8e371683
SHA1f23998163617df6f42a0c3ea730cbbb869cfc410
SHA256046b66aed0f0673433cf4ac68003488245eac2748b402f1f4b062fabc2d34af5
SHA512cfb914f7dc56ba4d8eab964b975211bf8eb7d6a640d28885e7f90438a5cd70a3dc6a2616187c0bdea59a580ff5680dec36239e620a1f0acc4d3ba296267deae1
-
Filesize
8KB
-
Filesize
40.9MB
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
40.9MB
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
176KB
-
Filesize
488KB
-
Filesize
488KB
-
Filesize
176KB
-
Filesize
148KB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
148KB
-
Filesize
176KB
-
Filesize
488KB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
1.8MB
-
Filesize
488KB
-
Filesize
1.8MB
-
Filesize
40.9MB
-
Filesize
488KB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
148KB
-
Filesize
40.9MB
-
Filesize
488KB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
700KB
-
Filesize
40.9MB
-
Filesize
40.9MB
-
Filesize
5.7MB
-
Filesize
1.8MB
-
Filesize
488KB
-
Filesize
176KB
-
Filesize
908KB
-
Filesize
700KB
-
Filesize
2.1MB
-
Filesize
5.7MB
-
Filesize
40.9MB
-
Filesize
1.8MB
-
Filesize
700KB
-
Filesize
1.8MB
-
Filesize
40.9MB
-
Filesize
464KB
-
Filesize
700KB
-
Filesize
464KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
5.7MB
-
Filesize
40.9MB
-
Filesize
488KB
-
Filesize
464KB
-
Filesize
176KB
-
Filesize
908KB
-
Filesize
2.1MB
-
Filesize
880KB
-
Filesize
8KB
-
Filesize
40.9MB