Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
03/06/2024, 08:11
General
- Target 91121375a3349d0a056752f1cc071d70_JaffaCakes118.exe
- Size 205KB
- Sample240603-j3kfdsaa93
- SHA256 b8deb90eff91ca31c01407b90f01452ef660b0be431182ab43026284da955ce7
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\91121375a3349d0a056752f1cc071d70_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\91121375a3349d0a056752f1cc071d70_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1916-0-0x000000007512E000-0x000000007512F000-memory.dmp
memory/1916-1-0x0000000000F00000-0x0000000000F3A000-memory.dmp
memory/1916-2-0x0000000005E40000-0x00000000063E4000-memory.dmp
memory/1916-3-0x0000000005930000-0x00000000059C2000-memory.dmp
memory/1916-4-0x0000000005900000-0x000000000590A000-memory.dmp
memory/1916-5-0x0000000075120000-0x00000000758D0000-memory.dmp
memory/1916-6-0x000000007512E000-0x000000007512F000-memory.dmp
memory/1916-7-0x0000000075120000-0x00000000758D0000-memory.dmp