Analysis
-
max time kernel
104s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
15/03/2025, 17:50
General
-
Target
JaffaCakes118_7763420b8136df6323e64d8afb2158e7.exe
-
Size
21KB
-
MD5
7763420b8136df6323e64d8afb2158e7
-
SHA1
ddb8d4fad3040fa4cfd21d1a43353e8390d050cf
-
SHA256
32d47b1803c57d6d1b4c5cb9f725794798976acefac32691693289df830b01c8
-
SHA512
595d7cc73b3b39b6ba846002ed5ee5e546aa8aad92542b44c8f7ae62488e1d2ea354c16f83ec1344f0ee67e55e9ae37a285452ad93c7766042f50914637080d5
-
SSDEEP
384:faXFpvGovJunP5laPT2XbQ3gKDWsvu9KDwzhEPKDl+:G+GJuPjaPSLQMVzhE0+
Score
10/10
Malware Config
Signatures
-
Bazaloader family
-
Detects BazaLoader malware 2 IoCs
BazaLoader is a trojan that transmits logs to the Command and Control (C2) server, encoding them in BASE64 format through GET requests - JaffaCakes118.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7763420b8136df6323e64d8afb2158e7.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7763420b8136df6323e64d8afb2158e7.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
56KB