Analysis
- max time kernel
93s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
13/06/2024, 07:38
General
- Target a4769d62ca0a6e20f786648d7fbac60a_JaffaCakes118.exe
- Size 313KB
- Sample240613-jgxhtstdlr
- SHA256 953f88c966faf3a247eb0ca79aecc69575783e06588cd65e7b3ca4efa95d3029
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4769d62ca0a6e20f786648d7fbac60a_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a4769d62ca0a6e20f786648d7fbac60a_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
bhs3856.tmp
memory/4700-7-0x0000000005550000-0x000000000555A000-memory.dmp
memory/4700-3-0x00000000052A0000-0x00000000052E2000-memory.dmp
memory/4700-4-0x0000000005BD0000-0x0000000006174000-memory.dmp
memory/4700-5-0x0000000074EA0000-0x0000000075650000-memory.dmp
memory/4700-6-0x0000000005570000-0x0000000005602000-memory.dmp
memory/4700-0-0x0000000074EAE000-0x0000000074EAF000-memory.dmp
memory/4700-8-0x0000000074EA0000-0x0000000075650000-memory.dmp
memory/4700-9-0x0000000074EA0000-0x0000000075650000-memory.dmp
memory/4700-10-0x0000000008D40000-0x0000000008DA6000-memory.dmp
memory/4700-11-0x0000000074EA0000-0x0000000075650000-memory.dmp
memory/4700-20-0x0000000074EAE000-0x0000000074EAF000-memory.dmp
memory/4700-21-0x0000000074EA0000-0x0000000075650000-memory.dmp