Analysis
-
max time kernel
141s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
01-04-2024 03:02
General
-
Target
65d83adb8b8cb3a42034cecb9c8725b6_JaffaCakes118.exe
-
Size
881KB
-
MD5
65d83adb8b8cb3a42034cecb9c8725b6
-
SHA1
d435fb62337dd566572d3b94be0c4831b3e80d16
-
SHA256
0d9d7074738a5834395b2e64c5336839c1affa0ea4ecc18c6d1c8a96e531c8f1
-
SHA512
0da6f24fbd40310a4da757b4ffff8c0b14d1b25180c789f98ea70883e448c892e460776b36acf36a588f3ac71cabc156670ee7c4803532f67e70650835745680
-
SSDEEP
12288:DTEYAsROAsrt/uxduo1jB0Y96qja0wk2Rqrk5M8PXAUOVXOwVPcgnWfLpF8fGi1P:DwT7rC6qJF8vZOVfSjLX/TGmAOe
Score
10/10
Malware Config
Signatures
-
Detects Eternity stealer 1 IoCs
-
Eternity
Eternity Project is a malware kit offering an info stealer, clipper, worm, coin miner, ransomware, and DDoS bot.
-
Drops startup file 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65d83adb8b8cb3a42034cecb9c8725b6_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\65d83adb8b8cb3a42034cecb9c8725b6_JaffaCakes118.exe"1⤵
- Drops startup file
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4192 --field-trial-handle=2276,i,5697607538120380977,9987005253899555344,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
912KB
-
Filesize
10.8MB
-
Filesize
320KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB