Analysis
- max time kernel
134s - max time network
105s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
30/05/2024, 14:19
General
- Target 847226e2e2e32ea259db05af00a1f503_JaffaCakes118.exe
- Size 325KB
- Sample240530-rmv6ysbd41
- SHA256 605612bd629130c0b19a25bbd228ad7ffad8c75c9f2e6df322dedde0268b350a
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\847226e2e2e32ea259db05af00a1f503_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\847226e2e2e32ea259db05af00a1f503_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
bhs4045.tmp
memory/3568-7-0x0000000005BB0000-0x0000000005BBA000-memory.dmp
memory/3568-3-0x0000000005770000-0x00000000057B2000-memory.dmp
memory/3568-4-0x0000000005FC0000-0x0000000006564000-memory.dmp
memory/3568-6-0x0000000005A10000-0x0000000005AA2000-memory.dmp
memory/3568-5-0x0000000074B30000-0x00000000752E0000-memory.dmp
memory/3568-0-0x0000000074B3E000-0x0000000074B3F000-memory.dmp
memory/3568-8-0x0000000074B30000-0x00000000752E0000-memory.dmp
memory/3568-9-0x0000000074B30000-0x00000000752E0000-memory.dmp
memory/3568-10-0x00000000091E0000-0x0000000009246000-memory.dmp
memory/3568-11-0x0000000074B30000-0x00000000752E0000-memory.dmp
memory/3568-20-0x0000000074B3E000-0x0000000074B3F000-memory.dmp
memory/3568-21-0x0000000074B30000-0x00000000752E0000-memory.dmp