Analysis
-
max time kernel
1s -
max time network
1s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
08-04-2024 16:23
General
-
Target
e7e489a313cf6f85441e789af5bd6795_JaffaCakes118.exe
-
Size
784KB
-
MD5
e7e489a313cf6f85441e789af5bd6795
-
SHA1
1b6f26faaaa14bc26594d251655fdd159ab42b4c
-
SHA256
e61a7c609fb77e3001bdde0a14cc7db904c51456b646d6e662b02c474737edfb
-
SHA512
92797a05d0461395479b0437ae28dae55e067eeee64ec9db447cd4c052ee4ce9dc13101bad81fc4ba70708e18bf6ada8280d168330bfe0244b452078e2742d06
-
SSDEEP
24576:S5BoF1ppGWWLPVlIktvUFJt6BS42xDKpUBQ:6BoTTaql6wxDKpyQ
Malware Config
Signatures
-
Sets DLL path for service in the registry 2 TTPs 1 IoCs
-
Loads dropped DLL 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7e489a313cf6f85441e789af5bd6795_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\e7e489a313cf6f85441e789af5bd6795_JaffaCakes118.exe"1⤵
- Sets DLL path for service in the registry
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\svchost.exeC:\Windows\SysWOW64\svchost.exe -k ".Net CLR"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
513KB
MD54cec0f865ffc98161d1e01a14e286546
SHA1dec6c9239c9a2d26956e822a4945660de3487220
SHA256e46a8832958cfd75ed5199978cec334b4b61ea6320d9c4791d1649a54c18df06
SHA512d84c7df3a2c5bf553fbeaeee52e60f4c1ac2807db75372ce9795ec8b466eca998831ce7b1806dfb210f89ed571e37b2d6aa731e8319ceefb7a8746c306db0473
-
Filesize
248KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
1.4MB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
12KB
-
Filesize
4KB
-
Filesize
248KB
-
Filesize
1.6MB
-
Filesize
1.4MB
-
Filesize
248KB
-
Filesize
8KB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
24KB
-
Filesize
1.4MB
-
Filesize
8KB
-
Filesize
1.6MB