Analysis
- max time kernel
147s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
13/06/2024, 14:23
General
- Target a5fff9c80418b40d7bcee235f116c0fa_JaffaCakes118.exe
- Size 227KB
- Sample240613-rp86lasemf
- SHA256 6ca30c47c2036c392806e26ff355d4afc71271cd69c4c635fb8380e795c19703
Malware Config
Signatures
- Loads dropped DLL 2 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5fff9c80418b40d7bcee235f116c0fa_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\a5fff9c80418b40d7bcee235f116c0fa_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
dfs5D52.tmp
memory/3320-11-0x0000000005770000-0x0000000005802000-memory.dmp
memory/3320-14-0x0000000074660000-0x0000000074E10000-memory.dmp
memory/3320-1-0x0000000000ED0000-0x0000000000ED3000-memory.dmp
memory/3320-7-0x00000000051B0000-0x000000000520C000-memory.dmp
memory/3320-8-0x0000000002DB0000-0x0000000002DBA000-memory.dmp
memory/3320-9-0x0000000005D20000-0x00000000062C4000-memory.dmp
memory/3320-10-0x0000000074660000-0x0000000074E10000-memory.dmp
memory/3320-0-0x0000000000940000-0x00000000009CB000-memory.dmp
memory/3320-3-0x000000007466E000-0x000000007466F000-memory.dmp
memory/3320-12-0x0000000005720000-0x000000000572A000-memory.dmp
memory/3320-13-0x0000000074660000-0x0000000074E10000-memory.dmp
memory/3320-15-0x0000000008B30000-0x0000000008B96000-memory.dmp
memory/3320-16-0x0000000074660000-0x0000000074E10000-memory.dmp
memory/3320-18-0x0000000000940000-0x00000000009CB000-memory.dmp
memory/3320-19-0x0000000000ED0000-0x0000000000ED3000-memory.dmp
memory/3320-27-0x000000000AE90000-0x000000000B636000-memory.dmp
memory/3320-28-0x000000007466E000-0x000000007466F000-memory.dmp
memory/3320-29-0x0000000074660000-0x0000000074E10000-memory.dmp