Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05-01-2025 23:45

General

  • Target

    JaffaCakes118_021ea7b7bf8861bd0dedfd6c93f36870.exe

  • Size

    546KB

  • MD5

    021ea7b7bf8861bd0dedfd6c93f36870

  • SHA1

    3065009a77336459b6ee33c85911d39bbec5cca1

  • SHA256

    610f2955234ded50bd35c426f36b4dea3c2f1d45999c93753c6b73c94e77919b

  • SHA512

    4419f60f41a33b64f7b4914e5d0199f35bf3338c4446095460b1a15959636941ba508e8851ec53172f7363874f4522580ecbc8546d4d8f446219de93f1b5ae71

  • SSDEEP

    12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxTV5TQdIJWjI0g0A8pQqr4d:aWUWrnIrw7I1VGCXZbiikQdAWngR8q

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

  • Phoenixstealer family

Processes

  • C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_021ea7b7bf8861bd0dedfd6c93f36870.exe
    "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_021ea7b7bf8861bd0dedfd6c93f36870.exe"
    1⤵
      PID:2900

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads