Analysis

  • max time kernel
    140s
  • max time network
    136s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/05/2024, 13:53

General

  • Target

    75b0e301cc386f5cefcfe9c68e01551a_JaffaCakes118.exe

  • Size

    312KB

  • MD5

    75b0e301cc386f5cefcfe9c68e01551a

  • SHA1

    5ee74e8842e0482480acedb3e14626784778a065

  • SHA256

    08eeef7edfc654a89f12200bc8fbd615f674c979973ab7d8f75edc1b8e369000

  • SHA512

    24b55269b28a385a8f16ea9cd922444a1478add67f920342119fdeece6d8aef1dce03b13983f45966825a12c7a380189c1d3312e0207a106f5c802d75481556e

  • SSDEEP

    6144:3V24jwRTGLyog2fsAu6i6xgB1A/W1Z0fu96euxYk:3V2mwRTyyog2fsz6xgBum4

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\75b0e301cc386f5cefcfe9c68e01551a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\75b0e301cc386f5cefcfe9c68e01551a_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\bhs4EFB.tmp

          Filesize

          242KB

          MD5

          f6cb534a58dcc29446b518fd294e82ad

          SHA1

          797935cd7ab355a55efa733fe8d7aadd09167d4b

          SHA256

          e7060cc8801db67b198e276e6f92355137ea3afd39797bf6b973b0bc822828df

          SHA512

          30738a097c8c9eecd0fc27b3d02796e5c9400bf7214710e57d932348bfe4752ce80dd6bd0d24c254b3032226bd017b7201a920d8a5b02e37d61a38c171bf28cb

        • memory/4436-7-0x00000000054E0000-0x00000000054EA000-memory.dmp

          Filesize

          40KB

        • memory/4436-3-0x00000000052A0000-0x00000000052E2000-memory.dmp

          Filesize

          264KB

        • memory/4436-5-0x0000000074AE0000-0x0000000075290000-memory.dmp

          Filesize

          7.7MB

        • memory/4436-4-0x0000000005C50000-0x00000000061F4000-memory.dmp

          Filesize

          5.6MB

        • memory/4436-6-0x0000000005540000-0x00000000055D2000-memory.dmp

          Filesize

          584KB

        • memory/4436-0-0x0000000074AEE000-0x0000000074AEF000-memory.dmp

          Filesize

          4KB

        • memory/4436-8-0x0000000074AE0000-0x0000000075290000-memory.dmp

          Filesize

          7.7MB

        • memory/4436-9-0x0000000074AE0000-0x0000000075290000-memory.dmp

          Filesize

          7.7MB

        • memory/4436-10-0x0000000008CD0000-0x0000000008D36000-memory.dmp

          Filesize

          408KB

        • memory/4436-11-0x0000000074AE0000-0x0000000075290000-memory.dmp

          Filesize

          7.7MB

        • memory/4436-20-0x000000000ADE0000-0x000000000B586000-memory.dmp

          Filesize

          7.6MB

        • memory/4436-21-0x0000000074AEE000-0x0000000074AEF000-memory.dmp

          Filesize

          4KB

        • memory/4436-22-0x0000000074AE0000-0x0000000075290000-memory.dmp

          Filesize

          7.7MB