Analysis
- max time kernel
141s - max time network
114s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
13/06/2024, 01:59
General
- Target a37761b09d2bc08fbca07b1356f485a8_JaffaCakes118.exe
- Size 227KB
- Sample240613-celj8azgrg
- SHA256 c8405e45fd46f490651673cfe4b4297b21542d90fd61a26c9ff3c5978881cbec
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a37761b09d2bc08fbca07b1356f485a8_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a37761b09d2bc08fbca07b1356f485a8_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
dfs3306.tmp
memory/3496-11-0x0000000005A50000-0x0000000005AE2000-memory.dmp
memory/3496-13-0x0000000074460000-0x0000000074C10000-memory.dmp
memory/3496-2-0x0000000000EE0000-0x0000000000EE3000-memory.dmp
memory/3496-7-0x0000000005420000-0x000000000547C000-memory.dmp
memory/3496-8-0x0000000003020000-0x000000000302A000-memory.dmp
memory/3496-9-0x0000000074460000-0x0000000074C10000-memory.dmp
memory/3496-10-0x0000000005F60000-0x0000000006504000-memory.dmp
memory/3496-0-0x0000000000EF0000-0x0000000000F7B000-memory.dmp
memory/3496-3-0x000000007446E000-0x000000007446F000-memory.dmp
memory/3496-14-0x0000000074460000-0x0000000074C10000-memory.dmp
memory/3496-12-0x0000000005990000-0x000000000599A000-memory.dmp
memory/3496-15-0x0000000008DA0000-0x0000000008E06000-memory.dmp
memory/3496-16-0x0000000074460000-0x0000000074C10000-memory.dmp
memory/3496-25-0x0000000000EF0000-0x0000000000F7B000-memory.dmp
memory/3496-26-0x0000000000EE0000-0x0000000000EE3000-memory.dmp
memory/3496-27-0x000000007446E000-0x000000007446F000-memory.dmp
memory/3496-28-0x0000000074460000-0x0000000074C10000-memory.dmp