Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
22-05-2024 20:31
General
-
Target
6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118.exe
-
Size
669KB
-
MD5
6887b8e4d74369989c3bf5f896d1ffb3
-
SHA1
e0a0469ca3485eb8b31d4f91afddecd4edf71755
-
SHA256
90f3da2fbd5181c152f8c55b8b364dd006a674e5d3f954256a29c5bb199073d2
-
SHA512
eedf1f2f6e61dd5bc98d3e3f2ffadd01e94d3510c48b2de46f813cbc86049e04bd365fbb4484563b5f588deba1c03f556225f4b15dd106017ba9da4f0b5b515d
-
SSDEEP
12288:MQj0OuyoKkHNa7yeCsRR9U8RpKPZBW32XJ4Mj+fMgE7ISW5hyXionDP2iN:JUeMvwo2CELC1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\6887b8e4d74369989c3bf5f896d1ffb3_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 5802⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
696KB
-
Filesize
104KB
-
Filesize
6.9MB
-
Filesize
6.9MB