5d540280b009f40883584d3d6f71f28b647d30d967ccb3a86d10906df4d678f7

Analysis

max time kernel
143s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
17-06-2024 06:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe
Size

226KB
MD5

b717c50ac1ed0639306a29c12d052302
SHA1

d79fb2adfaa7425ffc67643aa094a189dae0ab02
SHA256

5d540280b009f40883584d3d6f71f28b647d30d967ccb3a86d10906df4d678f7
SHA512

a3cbff39092de4d766396e2552d572ee6fd8b9eba25b51844b4412a28b5ea2f48026000a6bd4b8057a30538ae378099b1935a4cfa165889f938c37723d5b1743
SSDEEP

6144:J4lwZ40243s0gJvyTZaPYZeHF/tIzi+Tk98i9goc8VRt1Y2:yn0d8PJvyQYZelVIziveo/Rtf

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
1912	b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe
1912	b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1912	b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1912	b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe
1912	b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b717c50ac1ed0639306a29c12d052302_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1912

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3756,i,9746875443948590908,1444894342962555245,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:8
1⤵
PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\dfs114.tmp

Filesize
344KB

MD5
5cfb0f8e32d3b9197bbb972bd374c381

SHA1
4c22e0d3b705cc55658af2cde5a62a899f513f90

SHA256
72ae74bf4b315a5ff9e1e7ac9a000b9b76df6492a9b1e830686c903b4b0c168a

SHA512
5c6c2a526dfc4ccea67a4db844c79e37d1012afa33bb9330d9c1f826ed1335c8c7f2b7bf98cd60a5625433f26a2a6cd48d279e3e32788fd1bf67ec972c9cee45

Download Submit
memory/1912-11-0x0000000005CB0000-0x0000000005D42000-memory.dmp

Filesize
584KB

Download
memory/1912-8-0x0000000005760000-0x000000000576A000-memory.dmp

Filesize
40KB

Download
memory/1912-12-0x0000000005C70000-0x0000000005C7A000-memory.dmp

Filesize
40KB

Download
memory/1912-7-0x0000000005700000-0x000000000575C000-memory.dmp

Filesize
368KB

Download
memory/1912-13-0x0000000074810000-0x0000000074FC0000-memory.dmp

Filesize
7.7MB

Download
memory/1912-9-0x00000000061C0000-0x0000000006764000-memory.dmp

Filesize
5.6MB

Download
memory/1912-10-0x0000000074810000-0x0000000074FC0000-memory.dmp

Filesize
7.7MB

Download
memory/1912-14-0x0000000074810000-0x0000000074FC0000-memory.dmp

Filesize
7.7MB

Download
memory/1912-0-0x00000000006F0000-0x000000000077B000-memory.dmp

Filesize
556KB

Download
memory/1912-3-0x000000007481E000-0x000000007481F000-memory.dmp

Filesize
4KB

Download
memory/1912-1-0x0000000001410000-0x0000000001413000-memory.dmp

Filesize
12KB

Download
memory/1912-15-0x0000000009080000-0x00000000090E6000-memory.dmp

Filesize
408KB

Download
memory/1912-16-0x0000000074810000-0x0000000074FC0000-memory.dmp

Filesize
7.7MB

Download
memory/1912-18-0x00000000006F0000-0x000000000077B000-memory.dmp

Filesize
556KB

Download
memory/1912-26-0x000000000B3D0000-0x000000000BB76000-memory.dmp

Filesize
7.6MB

Download
memory/1912-27-0x000000007481E000-0x000000007481F000-memory.dmp

Filesize
4KB

Download
memory/1912-28-0x0000000074810000-0x0000000074FC0000-memory.dmp

Filesize
7.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads