610d827efae395c36665083180b68d5f3d628bc44fd2c712bda51a2c91a3da99

Analysis

max time kernel
143s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
21/04/2024, 05:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe
Size

148KB
MD5

fe8b6c2cf33bff45a18e8ca01b9c11a7
SHA1

1c7abd5e382668883efdfc740c986c5bb3f63d28
SHA256

610d827efae395c36665083180b68d5f3d628bc44fd2c712bda51a2c91a3da99
SHA512

eee6b7ca47e1d7950cab8e6208749b23941a17f8bfc9b676c9fb29771015ed4766c0fe762e5b8bb1c7ae44e3bb8b16f3e2edc1ee02360207c645d00cd9c905e7
SSDEEP

1536:4KRPlTbpMEt7LprwsK0N9foFSRa/EHtjX8EzPozGQuzS5d8g0j+Lq2:4CPlTbpMmpY0NxZLVAzGQaSjy

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4160	fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\bassmod.dll	fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3912	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3912	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fe8b6c2cf33bff45a18e8ca01b9c11a7_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
- Drops file in System32 directory
PID:4160

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x510 0x304
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4104 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:8
1⤵
PID:4396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Windows\SysWOW64\bassmod.dll

Filesize
35KB

MD5
e3a6587ba5a4ee4514ecaa4265dd9b2c

SHA1
b44bb9b5fc3478fa6ea5140603857ee0c2d4c4fd

SHA256
566934a049ae41fe36e2e122825875e5c02d4db083e744a7a3c94f456cec2f94

SHA512
90f4e5ceac00a0815452ef951feb3aa29e6ef408d8d4cda023c3fdd49ba0238e06589cee9cc0be842eddd1b02bd1d448d9ab8bdaed70651b38d6074c9f99d22f

Download Submit
memory/4160-15-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-19-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-6-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/4160-7-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-9-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-11-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-13-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-0-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/4160-4-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-21-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-17-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-23-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-25-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-27-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-29-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-31-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download
memory/4160-33-0x0000000010000000-0x000000001002F000-memory.dmp

Filesize
188KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads