Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20-04-2024 00:52
General
-
Target
fb8db0b22e60abad69d97b1c122d038f_JaffaCakes118.exe
-
Size
185KB
-
MD5
fb8db0b22e60abad69d97b1c122d038f
-
SHA1
df9664e78c906908a1f3aae7afcc33bb8555d788
-
SHA256
941af6d2f21642cecb7f99e5b2c9a7520e944ffef2ba1850d1a9a9b6c27e97d1
-
SHA512
4809048d7e704f8848ebe027bb33daf954b5c0c07bba593d82db509ae0e8376af321e24602ecc2ab960f8e31ca6d0c3bc0031309cb377339026728dbcb352a34
-
SSDEEP
3072:KcaxZbcuI/easnfffIsJsx/oaCqk3NFl924GaqFjXzVQ6+Wxa3sBSUfNmYodZA5X:Kc0Zba/easnfffIdQ/qk9Fr8zVJxaWmq
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb8db0b22e60abad69d97b1c122d038f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fb8db0b22e60abad69d97b1c122d038f_JaffaCakes118.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\fb8db0b22e60abad69d97b1c122d038f_JaffaCakes118.exeC:\Users\Admin\AppData\Local\Temp\fb8db0b22e60abad69d97b1c122d038f_JaffaCakes118.exe2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
88KB
-
Filesize
88KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
256KB
-
Filesize
5.7MB