Analysis

  • max time kernel
    150s
  • max time network
    50s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-05-2024 12:36

General

  • Target

    0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe

  • Size

    265KB

  • MD5

    0bcf5ee01354f27428c28929f23b929e

  • SHA1

    fbf989ccc070839b1a20103e7618250787ea78f7

  • SHA256

    8d6c881b2986808706764e5f1e55bc198b9400eda93d6d451712e707bb1e267c

  • SHA512

    80b94688f035a9afd3e6b971a6ba0801c1ad68aa6495df2334ffa4e887f3ef7a0cfaca1629cbebb6b06102a29327459b8f3d5ddb248eb10162231236b3ee3afa

  • SSDEEP

    6144:/l76KGda+JjEZYkkOcV6NewXk5WCixcJLcApl:/hOtBVOcV6wwXk5Dixq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\0bcf5ee01354f27428c28929f23b929e_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4396-0-0x0000000000630000-0x0000000000678000-memory.dmp

    Filesize

    288KB

  • memory/4396-1-0x00000000056E0000-0x0000000005C84000-memory.dmp

    Filesize

    5.6MB

  • memory/4396-2-0x0000000074800000-0x0000000074FB0000-memory.dmp

    Filesize

    7.7MB

  • memory/4396-3-0x0000000005020000-0x00000000050B2000-memory.dmp

    Filesize

    584KB

  • memory/4396-4-0x0000000005320000-0x0000000005674000-memory.dmp

    Filesize

    3.3MB

  • memory/4396-6-0x00000000052D0000-0x00000000052DA000-memory.dmp

    Filesize

    40KB

  • memory/4396-8-0x0000000005DA0000-0x0000000005E3C000-memory.dmp

    Filesize

    624KB

  • memory/4396-7-0x00000000052E0000-0x0000000005304000-memory.dmp

    Filesize

    144KB

  • memory/4396-5-0x0000000005310000-0x0000000005320000-memory.dmp

    Filesize

    64KB

  • memory/4396-9-0x0000000074800000-0x0000000074FB0000-memory.dmp

    Filesize

    7.7MB

  • memory/4396-10-0x0000000005310000-0x0000000005320000-memory.dmp

    Filesize

    64KB

  • memory/4396-11-0x00000000056D0000-0x00000000056E6000-memory.dmp

    Filesize

    88KB

  • memory/4396-12-0x00000000061C0000-0x0000000006226000-memory.dmp

    Filesize

    408KB