Analysis

  • max time kernel
    93s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-04-2024 02:58

General

  • Target

    f287dc583114d10662f6d502ec373c63_JaffaCakes118.exe

  • Size

    8.9MB

  • MD5

    f287dc583114d10662f6d502ec373c63

  • SHA1

    f53b7d7c59f7f1c47ab8f16c1ec3441b73a0c620

  • SHA256

    b4a65383de01e677ce9064996550aeb7b9afc3c4da2644a6b56e5b82eb5401fc

  • SHA512

    25ee86cfed1ce10e8023c4045887411998680b8bbe0653002741164859fa83f7c151e95759c0c87ea32baaa93a17113ad47984b89bf4677fc401aa31b0e7643e

  • SSDEEP

    196608:NHY1htnsh+zKsb2V4Py5Ez+NwH6Rv0LGFI/ipUjO9A3qBM7W1YvSZkTe9NKwQn:C5sh+zKsb2V4Py5Ez+NwH6Rv0LGFI/iC

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f287dc583114d10662f6d502ec373c63_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\f287dc583114d10662f6d502ec373c63_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:3528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3528-1-0x0000000000BA0000-0x0000000001482000-memory.dmp

    Filesize

    8.9MB

  • memory/3528-0-0x0000000074410000-0x0000000074BC0000-memory.dmp

    Filesize

    7.7MB

  • memory/3528-3-0x0000000005EA0000-0x0000000005F32000-memory.dmp

    Filesize

    584KB

  • memory/3528-2-0x0000000006450000-0x00000000069F4000-memory.dmp

    Filesize

    5.6MB

  • memory/3528-6-0x0000000005DE0000-0x0000000005DFE000-memory.dmp

    Filesize

    120KB

  • memory/3528-13-0x0000000005F90000-0x0000000006016000-memory.dmp

    Filesize

    536KB

  • memory/3528-12-0x0000000005F80000-0x0000000005F92000-memory.dmp

    Filesize

    72KB

  • memory/3528-11-0x0000000005E80000-0x0000000005E94000-memory.dmp

    Filesize

    80KB

  • memory/3528-10-0x0000000005E70000-0x0000000005E80000-memory.dmp

    Filesize

    64KB

  • memory/3528-9-0x0000000005F40000-0x0000000005F84000-memory.dmp

    Filesize

    272KB

  • memory/3528-8-0x0000000005E20000-0x0000000005E50000-memory.dmp

    Filesize

    192KB

  • memory/3528-7-0x0000000005E00000-0x0000000005E1E000-memory.dmp

    Filesize

    120KB

  • memory/3528-5-0x0000000005DD0000-0x0000000005DDC000-memory.dmp

    Filesize

    48KB

  • memory/3528-4-0x0000000005DC0000-0x0000000005DCC000-memory.dmp

    Filesize

    48KB

  • memory/3528-14-0x0000000005D60000-0x0000000005D70000-memory.dmp

    Filesize

    64KB

  • memory/3528-15-0x00000000061D0000-0x00000000061DA000-memory.dmp

    Filesize

    40KB

  • memory/3528-16-0x0000000006BB0000-0x0000000006D56000-memory.dmp

    Filesize

    1.6MB

  • memory/3528-17-0x0000000007BE0000-0x0000000007C7C000-memory.dmp

    Filesize

    624KB

  • memory/3528-18-0x0000000005D60000-0x0000000005D70000-memory.dmp

    Filesize

    64KB

  • memory/3528-19-0x0000000005D60000-0x0000000005D70000-memory.dmp

    Filesize

    64KB

  • memory/3528-20-0x0000000005D60000-0x0000000005D70000-memory.dmp

    Filesize

    64KB

  • memory/3528-22-0x0000000074410000-0x0000000074BC0000-memory.dmp

    Filesize

    7.7MB

  • memory/3528-23-0x0000000005D60000-0x0000000005D70000-memory.dmp

    Filesize

    64KB

  • memory/3528-24-0x0000000005D60000-0x0000000005D70000-memory.dmp

    Filesize

    64KB

  • memory/3528-25-0x0000000074410000-0x0000000074BC0000-memory.dmp

    Filesize

    7.7MB