Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    18-12-2024 19:55

General

  • Target

    fce7591a4edab9b6536e377cb6140486_JaffaCakes118.exe

  • Size

    177KB

  • MD5

    fce7591a4edab9b6536e377cb6140486

  • SHA1

    bb4ad63d6501a4729b2a74a745e660497066a6c3

  • SHA256

    5f0caccb3ca599a30b5f298f9bb414fe721121c83b7bedc7c59ffe4128c96b61

  • SHA512

    59c9c2da699c08d370ac2bcb47d15f25c4a7c37c9d40c02049607a5bfd816c09991f7e1dd10fae84722395b85ce63cadb09893e14c703259098f60163a5988b2

  • SSDEEP

    3072:cLCmnhxMQvngrd6ioAHsBLfmC0cSRKe8a4RO0oEZ84CZA9:cLrs6i5HsBaCzeORO0NCi

Malware Config

Extracted

Family

smokeloader

Botnet

pub1

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\fce7591a4edab9b6536e377cb6140486_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fce7591a4edab9b6536e377cb6140486_JaffaCakes118.exe"
    1⤵
      PID:2580

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2580-2-0x0000000000220000-0x0000000000229000-memory.dmp

      Filesize

      36KB

    • memory/2580-1-0x0000000002E30000-0x0000000002F30000-memory.dmp

      Filesize

      1024KB

    • memory/2580-3-0x0000000000400000-0x0000000000409000-memory.dmp

      Filesize

      36KB

    • memory/2580-5-0x0000000000220000-0x0000000000229000-memory.dmp

      Filesize

      36KB

    • memory/2580-4-0x0000000000400000-0x0000000002C62000-memory.dmp

      Filesize

      40.4MB