Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-12-2024 20:59
General
-
Target
JaffaCakes118_184fecb312eaf2126f45867b2a6975769ab0b0af44abea6d2fa91fb48607072f.exe
-
Size
699.0MB
-
MD5
85053ea117b5f3e6b195abf8073d7f62
-
SHA1
e4289435a70f4f8f75e2f5ebd6a9d012cbac8c88
-
SHA256
184fecb312eaf2126f45867b2a6975769ab0b0af44abea6d2fa91fb48607072f
-
SHA512
6615cf2e3dbe265a0d1c3afdb56354145a987b93a051c68a83caea9eaf8e2364bf03b3fb768f35d0953d07f1cabfc06e674610a0b0e149c6e9beccf772c5ec83
-
SSDEEP
98304:nxh4vGomjs9hJ+dvvGwWyO+P5IdFfzO0lCV37+tjBqc0DND8hawxmbxdej:wsjs0dvNdO+xoFf/43ytgDNwh9xoej
Score
10/10
Malware Config
Signatures
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Privateloader family
-
Drops file in System32 directory 4 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_184fecb312eaf2126f45867b2a6975769ab0b0af44abea6d2fa91fb48607072f.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_184fecb312eaf2126f45867b2a6975769ab0b0af44abea6d2fa91fb48607072f.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s fhsvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -s WPDBusEnum1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
12.4MB
-
Filesize
32KB
-
Filesize
156KB
-
Filesize
3.2MB