Analysis

  • max time kernel
    136s
  • max time network
    114s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/04/2024, 17:43

General

  • Target

    fad644d46dc1dec717187c49130d8bef_JaffaCakes118.exe

  • Size

    1.3MB

  • MD5

    fad644d46dc1dec717187c49130d8bef

  • SHA1

    510da1f4d2cbe0671ac269f25f5b25a3bee120d5

  • SHA256

    d46e6fc2b1893e5dc34ec93c3552193d2cd1630452ffaf58f62d9112218e8fb8

  • SHA512

    377ca62dd0aa0b627e9dbc4f1cfd05deab8b379e69aef38526503971a186f91f445b1e41ce451d6f6f33cabac60e17ab7362679518c7317902a6b9c946a56232

  • SSDEEP

    24576:96loSSCN7i6/HZcPwOqeozNTf6IuYL4JizhsvUmUSSyp:96iSSt6PZu/ozl6I77Fss1G

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\fad644d46dc1dec717187c49130d8bef_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\fad644d46dc1dec717187c49130d8bef_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:3980

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3980-0-0x0000000000CD0000-0x0000000000E2A000-memory.dmp

          Filesize

          1.4MB

        • memory/3980-1-0x0000000074A80000-0x0000000075230000-memory.dmp

          Filesize

          7.7MB

        • memory/3980-2-0x0000000005800000-0x000000000589C000-memory.dmp

          Filesize

          624KB

        • memory/3980-3-0x00000000057F0000-0x0000000005800000-memory.dmp

          Filesize

          64KB

        • memory/3980-4-0x00000000032B0000-0x00000000032B1000-memory.dmp

          Filesize

          4KB

        • memory/3980-5-0x0000000005E90000-0x0000000006434000-memory.dmp

          Filesize

          5.6MB

        • memory/3980-6-0x0000000005A80000-0x0000000005B12000-memory.dmp

          Filesize

          584KB

        • memory/3980-7-0x0000000005A30000-0x0000000005A3A000-memory.dmp

          Filesize

          40KB

        • memory/3980-8-0x0000000005C70000-0x0000000005CC6000-memory.dmp

          Filesize

          344KB

        • memory/3980-9-0x0000000005D60000-0x0000000005DC6000-memory.dmp

          Filesize

          408KB

        • memory/3980-10-0x0000000006F40000-0x0000000007010000-memory.dmp

          Filesize

          832KB

        • memory/3980-11-0x0000000008410000-0x0000000008764000-memory.dmp

          Filesize

          3.3MB

        • memory/3980-13-0x0000000074A80000-0x0000000075230000-memory.dmp

          Filesize

          7.7MB