Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20250207-en -
resource tags
-
submitted
08/02/2025, 01:34
General
-
Target
JaffaCakes118_bd99def53618df93188777d49820cc41.exe
-
Size
11KB
-
MD5
bd99def53618df93188777d49820cc41
-
SHA1
5a902a89e122c79e0f0ac71eeda8c5cfe034d22d
-
SHA256
db6136d5d22a1387613cd2f30f23c9058da28ef3013fdba4d97625402c6a722d
-
SHA512
9d8aa453d7bce15c42c0305cca7084aa5d4433a010cbfca5e89424d8e1859ace93398c9c62b417459190ef0e220d0373110879f14921e69fcfcb30d29755219c
-
SSDEEP
192:nfiA202ogpUhsCVg/czx9UXJO4E9V8wSlndj1C2y6:6AsoUUhsYvzDUXJlE8wOhCO
Score
10/10
Malware Config
Signatures
-
Bazaloader family
-
Detects BazaLoader malware 2 IoCs
BazaLoader is a trojan that transmits logs to the Command and Control (C2) server, encoding them in BASE64 format through GET requests - JaffaCakes118.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_bd99def53618df93188777d49820cc41.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_bd99def53618df93188777d49820cc41.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
-
Filesize
48KB