Analysis
-
max time kernel
95s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
04-06-2024 18:09
General
-
Target
95cba4805f980e8c1df180b660e2abb4_JaffaCakes118.exe
-
Size
125KB
-
MD5
95cba4805f980e8c1df180b660e2abb4
-
SHA1
acf0dcf5981f383dd2558663e917907c058566ed
-
SHA256
75c62fd62a7a71ab357c578ed8af5a9e8b6fbcd6706242192f6012b83758993a
-
SHA512
33744769ca5da6fcbf7c3ade9ab75ef98118335387e2960c697efc46c00d99da2f5838b358122ad5ae617330e8acf01a0d0b07f5d1b900234521c10d6c6e1e68
-
SSDEEP
3072:YY5Bybw0rjiUvRpjiUvR63ULQwM9EsngL+0f1Z+SyDffoF:YY6nPzPzQ/9rOfOSy
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\95cba4805f980e8c1df180b660e2abb4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\95cba4805f980e8c1df180b660e2abb4_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB