Analysis

  • max time kernel
    93s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 15:11

General

  • Target

    8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe

  • Size

    312KB

  • MD5

    8129cc5108ffb4d41a878b423762f381

  • SHA1

    2234dfb09f477146e05860a1704464a87d4e78c7

  • SHA256

    7ca83defae07088ed1f31669bf457decbd899db46463739f0eb8826d19fbfbf2

  • SHA512

    64e51a914c9d35ce2cfa798c96c2f0e7b5986b0b640b12d186f0467a238f896c4cb344f063ba973eee1ff8dc3295f69e897eea864535242235953c4c06df97cf

  • SSDEEP

    6144:Lweks+CRnAGLyo8MdROCZVtSH7zsKeEM9NBJZY5:UeknClASyo8MdRO2tSH7zs2

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8129cc5108ffb4d41a878b423762f381_JaffaCakes118.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:4468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\bhs2F4D.tmp

          Filesize

          242KB

          MD5

          c4a0d2165a51256cc6eac8f5070d4094

          SHA1

          07ed3c4d0d4e168b05784a8204e1727a9db0eb74

          SHA256

          54efdef3fbaa88bc58b7a4062d742be6a745bd73d50d80a3e3556e79578bd378

          SHA512

          c03bd2c24c2754c6ccb8ee18fac486438f984374bac3654356905cb4a8c5e823ba250ea0245b2347e43f459567d3281a6ca09c4d81d014f3263456a211012a4f

        • memory/4468-7-0x0000000005AC0000-0x0000000005ACA000-memory.dmp

          Filesize

          40KB

        • memory/4468-3-0x0000000005830000-0x0000000005872000-memory.dmp

          Filesize

          264KB

        • memory/4468-4-0x0000000006010000-0x00000000065B4000-memory.dmp

          Filesize

          5.6MB

        • memory/4468-5-0x00000000745A0000-0x0000000074D50000-memory.dmp

          Filesize

          7.7MB

        • memory/4468-6-0x0000000005B00000-0x0000000005B92000-memory.dmp

          Filesize

          584KB

        • memory/4468-0-0x00000000745AE000-0x00000000745AF000-memory.dmp

          Filesize

          4KB

        • memory/4468-8-0x00000000745A0000-0x0000000074D50000-memory.dmp

          Filesize

          7.7MB

        • memory/4468-9-0x00000000745A0000-0x0000000074D50000-memory.dmp

          Filesize

          7.7MB

        • memory/4468-10-0x0000000009290000-0x00000000092F6000-memory.dmp

          Filesize

          408KB

        • memory/4468-11-0x00000000745A0000-0x0000000074D50000-memory.dmp

          Filesize

          7.7MB

        • memory/4468-20-0x000000000B730000-0x000000000BED6000-memory.dmp

          Filesize

          7.6MB

        • memory/4468-21-0x00000000745AE000-0x00000000745AF000-memory.dmp

          Filesize

          4KB

        • memory/4468-22-0x00000000745A0000-0x0000000074D50000-memory.dmp

          Filesize

          7.7MB