Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/04/2024, 16:30

General

  • Target

    bd18c0780d85d246afd0e99cb0c80f31_JaffaCakes118.exe

  • Size

    9KB

  • MD5

    bd18c0780d85d246afd0e99cb0c80f31

  • SHA1

    9c0a3dbbdc8fa8716ad45afba46c11b1f507cc26

  • SHA256

    9ea96053017659d9a5d58522e534f42d434cafa99a84507ef61f1cdde42a6dae

  • SHA512

    9b0e241e5f9e5ce74ad71daaf9a2e50b8c83b7800ca3c10c8300beca8d797b79f19238650d570c1cda174339ca6001db6c28101f0dce4c732d8734d4367ec6df

  • SSDEEP

    192:XBksurrN3y+vieMZZ3593VnjdwCzQU3Q/Hoep:MZlieMzFnhwCcU0oe

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\bd18c0780d85d246afd0e99cb0c80f31_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\bd18c0780d85d246afd0e99cb0c80f31_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2168-0-0x0000000000C00000-0x0000000000C08000-memory.dmp

          Filesize

          32KB

        • memory/2168-1-0x00000000012C0000-0x00000000012D2000-memory.dmp

          Filesize

          72KB

        • memory/2168-2-0x00007FFD2DB20000-0x00007FFD2E5E1000-memory.dmp

          Filesize

          10.8MB

        • memory/2168-3-0x0000000001540000-0x000000000157C000-memory.dmp

          Filesize

          240KB

        • memory/2168-4-0x000000001BC10000-0x000000001BC20000-memory.dmp

          Filesize

          64KB

        • memory/2168-5-0x00007FFD2DB20000-0x00007FFD2E5E1000-memory.dmp

          Filesize

          10.8MB

        • memory/2168-6-0x00007FFD2DB20000-0x00007FFD2E5E1000-memory.dmp

          Filesize

          10.8MB