Overview

overview

10

Static

static

10

e5acd00d97...18.exe

windows7-x64

10

e5acd00d97...18.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    141s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12-12-2024 09:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e5acd00d977d3d159ea6b99b61ea1f2c_JaffaCakes118.exe

  • Size

    296KB

  • MD5

    e5acd00d977d3d159ea6b99b61ea1f2c

  • SHA1

    71e2757ef0bbef9fd0f1ce2a0007ca90b38436f1

  • SHA256

    02f7717116a8e82239469c27daddd3af89efbafbedf1ee7b715ba8091b304f99

  • SHA512

    40aa93dec6fb0968d8c9b23dbcbe8e68df9a06190b8b779fc29b0f68a4fd058ddad344d147ae31c62f29bbdb4985c84c21a6af781d69075410a47c40cda8df0c

  • SSDEEP

    6144:MOps1/lqFhdBCkWYxuukP1pjSKSNVkq/MVJb9:Mws1gTBd47GLRMTb9

Score
10/10
cybergatestealertrojan

Malware Config

Signatures

  • CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate
  • Cybergate family
    cybergate

Processes

  • C:\Users\Admin\AppData\Local\Temp\e5acd00d977d3d159ea6b99b61ea1f2c_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e5acd00d977d3d159ea6b99b61ea1f2c_JaffaCakes118.exe"
    1⤵
      PID:1940

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1940-0-0x0000000000400000-0x0000000000451000-memory.dmp

      Filesize

      324KB

      Download