Analysis
-
max time kernel
141s -
max time network
112s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/04/2024, 01:13
General
-
Target
ec602c95cbb633c38d09ba7e124952e9_JaffaCakes118.exe
-
Size
83KB
-
MD5
ec602c95cbb633c38d09ba7e124952e9
-
SHA1
8651e49a791e243950da640ade9bb772f0c3a8b4
-
SHA256
e491bfeabf682fb69bf9be6a78394f129a0273f94025b097d743414821b0580e
-
SHA512
326f3d3b7ad877807a514299335bd515ddbc14acfd1123ac9bdd9ce9337eb48de8379887b319ccf443a32b5b25e252a5c5c734159ffb62e45216bcc279d8d0c1
-
SSDEEP
1536:Ye7EY56M0CRvenSdolIw+doZpook/ih18Vm/fXPmkPj4hcJSPFfX:Y8Eq6M0ConSdolIVdUh1XQhuSJ
Score
7/10
Malware Config
Signatures
-
UPX packed file 16 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec602c95cbb633c38d09ba7e124952e9_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\ec602c95cbb633c38d09ba7e124952e9_JaffaCakes118.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x468 0x31c1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB