119dea15c17a1b7bd2adace23bb1c6901a9e487cba757278512ea4026698b8dd

Analysis

max time kernel
133s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 05:07

Target

860dd63bcf7af757c037abe92752693f_JaffaCakes118.exe
Size

345KB
MD5

860dd63bcf7af757c037abe92752693f
SHA1

cb88f50faa88479abcf5e2cb73b58d3d402d53fe
SHA256

119dea15c17a1b7bd2adace23bb1c6901a9e487cba757278512ea4026698b8dd
SHA512

126d247576c2b9f96b74968b798aad59ad44f0b538539479c6c22370714f65e2856ba9cd46d60cf080dc245a871e124635e1a5caedef06574d707b56ade816da
SSDEEP

6144:CujgdRI/91IkY5G68DYo1HI4Sdj696ToC9tVDVWQ7YeTBZO0RQ3dN:CBdRIFAGlDY2SkKr7YeTzBM

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3228	860dd63bcf7af757c037abe92752693f_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\860dd63bcf7af757c037abe92752693f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\860dd63bcf7af757c037abe92752693f_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3228