Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
12/06/2024, 15:28
General
- Target a1284e25fbe1397aaf4eeefc842c90be_JaffaCakes118.exe
- Size 387KB
- Sample240612-swvgfsteqq
- SHA256 a0a869c75e55dc3662e730eaf39fef5824d6a89f1b9cf6918402d389eeed1a9d
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a1284e25fbe1397aaf4eeefc842c90be_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a1284e25fbe1397aaf4eeefc842c90be_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
gfd3ECE.tmp
memory/3044-7-0x0000000004D10000-0x0000000004D1A000-memory.dmp
memory/3044-3-0x0000000004A80000-0x0000000004AC6000-memory.dmp
memory/3044-4-0x0000000075250000-0x0000000075A00000-memory.dmp
memory/3044-5-0x0000000005250000-0x00000000057F4000-memory.dmp
memory/3044-6-0x0000000004D40000-0x0000000004DD2000-memory.dmp
memory/3044-0-0x000000007525E000-0x000000007525F000-memory.dmp
memory/3044-8-0x0000000075250000-0x0000000075A00000-memory.dmp
memory/3044-9-0x0000000075250000-0x0000000075A00000-memory.dmp
memory/3044-10-0x0000000007FF0000-0x0000000008056000-memory.dmp
memory/3044-11-0x0000000075250000-0x0000000075A00000-memory.dmp
memory/3044-20-0x000000000A2F0000-0x000000000AA96000-memory.dmp
memory/3044-21-0x000000007525E000-0x000000007525F000-memory.dmp
memory/3044-22-0x0000000075250000-0x0000000075A00000-memory.dmp