Analysis
-
max time kernel
136s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
03/06/2024, 00:59
General
-
Target
9008eb1a7791d947711ca7464423381a_JaffaCakes118.exe
-
Size
1.1MB
-
MD5
9008eb1a7791d947711ca7464423381a
-
SHA1
06a053e43b04c0e8b17c1c6e1d0f7d9cc87780e1
-
SHA256
3c927923d4255b033d77b40f6eedc1948c13122c67bf81ba93d3b44dbfe8fd40
-
SHA512
7574628f8e72b309b5a65d48aaf40ddbbf4c9975eb5821b010643c48e097caa86532777fefabd95d631c4ded33adf9d3a3e0b6b37b804e8847344883dd140540
-
SSDEEP
12288:qAzI7NUabyGS+gJpB+3iwPEhBq68FRUQDht+o/Rqz7TOr43o4NUyGJAyX:daer+qB+3iwPIqFFtjkego+u
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9008eb1a7791d947711ca7464423381a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\9008eb1a7791d947711ca7464423381a_JaffaCakes118.exe"1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
664KB
-
Filesize
4.8MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
624KB
-
Filesize
32KB
-
Filesize
304KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
3.1MB
-
Filesize
9.6MB
-
Filesize
4.7MB
-
Filesize
9.6MB