Overview

overview

10

Static

static

10

JaffaCakes...fd.exe

windows7-x64

1

JaffaCakes...fd.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-12-2024 11:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JaffaCakes118_24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd.exe

  • Size

    504KB

  • MD5

    11acbdc0c6b7322c8103fbe98ff89071

  • SHA1

    34517cc4a8de1d314aa6bc50d30a76d26e8ae935

  • SHA256

    24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd

  • SHA512

    8803e1cc6d549101df4b11059919b6abc5fbafad278509310f5f651421b1f5e852511eeb5a72ace98665b25c6b06b1b9cd4a8de179dc3d48e7e5a34014a1a14f

  • SSDEEP

    12288:GsrjeS3UVprYfELtx6uz6s3Q4KsfZVMtS6d:bHeaUVxYVuzB3hZS0a

Score
10/10
remcosrat

Malware Config

Signatures

  • Remcos

    Remcos is a closed-source remote control and surveillance software.

    ratremcos
  • Remcos family
    remcos

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_24e996f935d22120a530fed5fc8f058af9416868edc4a756030c00a88b66f2fd.exe"
    1⤵
      PID:2364

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2364-0-0x0000000000580000-0x00000000005FE000-memory.dmp

      Filesize

      504KB

      Download