Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 16:35

General

  • Target

    2708eb7481f25e5d8c88f11a2ab36e43_JaffaCakes118.exe

  • Size

    546KB

  • MD5

    2708eb7481f25e5d8c88f11a2ab36e43

  • SHA1

    114bd2e3c16641c22728363c1a35ddda7b1a5b59

  • SHA256

    2a5e241e9ee1fee630b63dfe04b15fe247df4bbafa7442287cc2c51d20a3cad8

  • SHA512

    101ea2b5710db4772a4cf4551295ca52908c7324da113ebe148548d2c70025999c72ef560e784d3624271f4ec153f8cdd957157b827e2b9ddd7d47d206e45282

  • SSDEEP

    12288:aWWzIRlRn2/rw7INjVGCXZq0iiIxT75TQdIJWjI0g0A8+Rqr4d:aWUWrnIrw7I1VGCXZbiiOQdAWngR82

Score
10/10

Malware Config

Signatures

  • PhoenixStealer

    PhoenixStealer is an information stealer written in the C++, it sends the stolen information to cybercriminals.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2708eb7481f25e5d8c88f11a2ab36e43_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2708eb7481f25e5d8c88f11a2ab36e43_JaffaCakes118.exe"
    1⤵
      PID:2252

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads