11246a4b3ffb1c36d69cdf3911010aa850971f507d81cbdf82779fda3d003724

Analysis

max time kernel
142s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 15:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe
Size

372KB
MD5

25846fe2188fe60df510f25ea1cca165
SHA1

f571ab7b1f6d8f67f049170e1c6a9f85ac7899a0
SHA256

11246a4b3ffb1c36d69cdf3911010aa850971f507d81cbdf82779fda3d003724
SHA512

93a0cf0d004b6a7db97db3886b716fcbcf6a2b024abe29014abc4bf08efb0cbd21e7c3ad33cc900bb78990fc8590ba5ebb73717bdabdb3c0a827121062d7ff24
SSDEEP

6144:ATLrvuVz6P7h0k1xDl5Usoqi31UaHbfQYy:ATHvuIPuk175Usov1i

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
4876	25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe
4876	25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4876	25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4876	25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe
4876	25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\25846fe2188fe60df510f25ea1cca165_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4876

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4136 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
1⤵
PID:552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\jki1400.tmp

Filesize
272KB

MD5
189f6bcce743edefe2eda0373b93229b

SHA1
96c0b9522f7dc70a77ee6af640bba056f1990877

SHA256
22bdd92dce6c99c06d5bc56f0e51ea9a1df39424eb3a4628eb76211b890f8529

SHA512
272c51f0c9501f2be2a277b881ad8d9c5e8dee333fc42748bdd31319acbd46ba2e206220eaf1067e2992a9f9895da1d606b10524dc0e7933b0fc45bde4fb2f66

Download Submit
memory/4876-11-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download
memory/4876-14-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download
memory/4876-6-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download
memory/4876-7-0x0000000008140000-0x00000000086E4000-memory.dmp

Filesize
5.6MB

Download
memory/4876-8-0x0000000007B90000-0x0000000007C22000-memory.dmp

Filesize
584KB

Download
memory/4876-9-0x0000000074EDE000-0x0000000074EDF000-memory.dmp

Filesize
4KB

Download
memory/4876-5-0x0000000005870000-0x00000000058B8000-memory.dmp

Filesize
288KB

Download
memory/4876-12-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download
memory/4876-10-0x0000000007DA0000-0x0000000007DAA000-memory.dmp

Filesize
40KB

Download
memory/4876-13-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download
memory/4876-1-0x0000000074EDE000-0x0000000074EDF000-memory.dmp

Filesize
4KB

Download
memory/4876-15-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download
memory/4876-16-0x000000000AE50000-0x000000000AEB6000-memory.dmp

Filesize
408KB

Download
memory/4876-18-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download
memory/4876-20-0x0000000074ED0000-0x0000000075680000-memory.dmp

Filesize
7.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads