Analysis
-
max time kernel
141s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
21/04/2024, 06:02
General
-
Target
fe9b40858e089a6b2405f19ce6d8e2ff_JaffaCakes118.exe
-
Size
743KB
-
MD5
fe9b40858e089a6b2405f19ce6d8e2ff
-
SHA1
dcf9349812b8179d21b86ee14c1cd194f5fae414
-
SHA256
e36133726aedb2ff71bcd7d6da557aac132be01c2b6a731eeb01f249fcafd3f1
-
SHA512
1033e25bb36c8e7efee8f2df0ea185897b5b8593db4f3f665997b067df759fa0e00d2c5556274fc4fb581eff04c0af54a0c8d32ad807b63ec068818c65e5f352
-
SSDEEP
12288:VRn8S++U4u/n/80dW5A0zyo6JwQ5oAlK+GPHvZPIkv/QQ52LYRg08yPwDRfQ:f8MU4ufxdW5A2mJr/kNHvlIkvT3Y
Score
7/10
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Windows directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe9b40858e089a6b2405f19ce6d8e2ff_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\fe9b40858e089a6b2405f19ce6d8e2ff_JaffaCakes118.exe"1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system.exeC:\Windows\system.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
743KB
MD5fe9b40858e089a6b2405f19ce6d8e2ff
SHA1dcf9349812b8179d21b86ee14c1cd194f5fae414
SHA256e36133726aedb2ff71bcd7d6da557aac132be01c2b6a731eeb01f249fcafd3f1
SHA5121033e25bb36c8e7efee8f2df0ea185897b5b8593db4f3f665997b067df759fa0e00d2c5556274fc4fb581eff04c0af54a0c8d32ad807b63ec068818c65e5f352
-
Filesize
4KB
-
Filesize
776KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
776KB