Analysis
-
max time kernel
134s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29/05/2024, 10:05
General
-
Target
805bce9c886e6f0cd4f997adf67d085c_JaffaCakes118.exe
-
Size
372KB
-
MD5
805bce9c886e6f0cd4f997adf67d085c
-
SHA1
afce28f50a7ceb3ad3339bf25be6c9242002d84c
-
SHA256
427f420e0b58c468a3055b4342e3384d26c519933b72e7e75b6e672547b3f62b
-
SHA512
9740ece9dd0e25ede2521fe2fe32f4808bf010c6e1e0d2f1e7f6eed33f2e20102f259050b391350c9af7b9262816e3f1c36772b138804ba3f23650755150127e
-
SSDEEP
6144:ATLrvuVz6P7h0k1xDl5Usoqi31UaHbfQYd:ATHvuIPuk175Usov1N
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\805bce9c886e6f0cd4f997adf67d085c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\805bce9c886e6f0cd4f997adf67d085c_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
272KB
MD5189f6bcce743edefe2eda0373b93229b
SHA196c0b9522f7dc70a77ee6af640bba056f1990877
SHA25622bdd92dce6c99c06d5bc56f0e51ea9a1df39424eb3a4628eb76211b890f8529
SHA512272c51f0c9501f2be2a277b881ad8d9c5e8dee333fc42748bdd31319acbd46ba2e206220eaf1067e2992a9f9895da1d606b10524dc0e7933b0fc45bde4fb2f66
-
Filesize
40KB
-
Filesize
288KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
7.7MB
-
Filesize
408KB
-
Filesize
7.7MB
-
Filesize
7.6MB
-
Filesize
4KB
-
Filesize
7.7MB