Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    05-06-2024 10:41

General

  • Target

    97e6cbd5bdb1b954d0fa5d59603fe806_JaffaCakes118.exe

  • Size

    935KB

  • MD5

    97e6cbd5bdb1b954d0fa5d59603fe806

  • SHA1

    c0835c7b1216cf64c3722f6cddc828b8a2db8b12

  • SHA256

    5821d9233c73a9ed0237c3bba7306d06373805e807d05a42a86414ff5b16d9c7

  • SHA512

    e3c5ef0de5b0ace8d997c8908b9a3c00b7608e499b4f638e68252e233d90c1180b8ffc25fa9f910f13370d5df7640eec2eae4c5c9f5dc4998f34bf9c5e19a063

  • SSDEEP

    12288:jh1Lk70TnvjcBaoedoDEIZtXSCTWfJW8xc9Rt840IOLSxaLpANnL7PQuJm:/k70TrcBaPdst/XSCUJ+Rt0CdHq

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\97e6cbd5bdb1b954d0fa5d59603fe806_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\97e6cbd5bdb1b954d0fa5d59603fe806_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1088-0-0x000000007440E000-0x000000007440F000-memory.dmp

    Filesize

    4KB

  • memory/1088-1-0x0000000004C20000-0x0000000004E12000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-2-0x0000000074400000-0x0000000074AEE000-memory.dmp

    Filesize

    6.9MB

  • memory/1088-3-0x0000000074400000-0x0000000074AEE000-memory.dmp

    Filesize

    6.9MB

  • memory/1088-4-0x0000000004A30000-0x0000000004C20000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-5-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-6-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-30-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-36-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-44-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-8-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-10-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-22-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-34-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-68-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-66-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-64-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-62-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-60-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-58-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-56-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-54-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-52-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-50-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-48-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-46-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-42-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-40-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-38-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-32-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-28-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-26-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-24-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-20-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-18-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-16-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-14-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-12-0x0000000004A30000-0x0000000004C1B000-memory.dmp

    Filesize

    1.9MB

  • memory/1088-479-0x0000000074400000-0x0000000074AEE000-memory.dmp

    Filesize

    6.9MB

  • memory/1088-480-0x0000000074400000-0x0000000074AEE000-memory.dmp

    Filesize

    6.9MB