Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
12-06-2024 11:13
General
-
Target
a074c13bc69c6d79fca83c10f20eabd3_JaffaCakes118.exe
-
Size
1.2MB
-
MD5
a074c13bc69c6d79fca83c10f20eabd3
-
SHA1
2626e19558a3b560a4746667cb48b0d6ad87ad73
-
SHA256
56da1870b002e2d683f2020c2761081d87a346937ca8dc35d8005e0f11a6fc9e
-
SHA512
cd2b89cf959c642ba05745020c6a199deb57000fc47e4da7461f850d0025ac3d5593542ed927504cf6694e03dd9824f2afb9ef3b838131136be2918d2a603f70
-
SSDEEP
12288:juPntZ9NF2FVKX8RcgdhXVFTnEJrShvfFUtEAGZCwKa20R9ppL7TH1cQDwNim4uh:jKtZ6XvVkcnJ6PX
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a074c13bc69c6d79fca83c10f20eabd3_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a074c13bc69c6d79fca83c10f20eabd3_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx