Overview

overview

3

Static

static

3

6bd68f7dd9...18.exe

windows7-x64

1

6bd68f7dd9...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 18:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6bd68f7dd9f3fba3e942df061023bd96_JaffaCakes118.exe

  • Size

    769KB

  • MD5

    6bd68f7dd9f3fba3e942df061023bd96

  • SHA1

    1ddacb989112d06cfabfc031d7f2bf92d245f592

  • SHA256

    6c1fd249a35d3413451f94d10c5a5fd3883d41cf62bddbf3ac96436c23259944

  • SHA512

    bd1a5a8fc6a40cafb08c0816a3cbfbf33bd367fa6230ba615d1e50c5123c51072ffe1d96aed05be514a473e2f7b7868506ef1d29aa7460052657ba803f032c72

  • SSDEEP

    12288:UYjqMhiWqiWSZ2kS1ZKsvfR/reI7l6M5DqIxgDGNiDHbCk9gpTIJ2:UahiWqiW6S1ffTB6MAIuaMDmk9fE

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6bd68f7dd9f3fba3e942df061023bd96_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\6bd68f7dd9f3fba3e942df061023bd96_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1192-0-0x000000007465E000-0x000000007465F000-memory.dmp
    Filesize

    4KB

    Download
  • memory/1192-1-0x0000000000E30000-0x0000000000EF6000-memory.dmp
    Filesize

    792KB

    Download
  • memory/1192-2-0x0000000005910000-0x00000000059AC000-memory.dmp
    Filesize

    624KB

    Download
  • memory/1192-3-0x0000000005F60000-0x0000000006504000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/1192-4-0x00000000059B0000-0x0000000005A42000-memory.dmp
    Filesize

    584KB

    Download
  • memory/1192-5-0x00000000058B0000-0x00000000058BA000-memory.dmp
    Filesize

    40KB

    Download
  • memory/1192-6-0x0000000005BC0000-0x0000000005C16000-memory.dmp
    Filesize

    344KB

    Download
  • memory/1192-7-0x0000000074650000-0x0000000074E00000-memory.dmp
    Filesize

    7.7MB

    Download
  • memory/1192-8-0x0000000074650000-0x0000000074E00000-memory.dmp
    Filesize

    7.7MB

    Download
  • memory/1192-9-0x0000000074650000-0x0000000074E00000-memory.dmp
    Filesize

    7.7MB

    Download
  • memory/1192-10-0x0000000074650000-0x0000000074E00000-memory.dmp
    Filesize

    7.7MB

    Download