Analysis
-
max time kernel
140s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
20-06-2024 02:07
General
-
Target
01ec60e3ff22d11b18e749d6efc5eee7_JaffaCakes118.exe
-
Size
169KB
-
MD5
01ec60e3ff22d11b18e749d6efc5eee7
-
SHA1
ece4ce8b30e219186ac5f98f57c0f753f8044178
-
SHA256
c49ec15ffd3c8e4ef6413918b2f09da39c71e32c49e7fdc6161359f5dd787c69
-
SHA512
39ddaedd2d1f437a87cc4785e39f28306e7ffb1a0ae32d2566f5d18936110aa7aac1389cb8e707cad12076aaf072f6681c42f49ffd6a173aa67fab51fc9d40d2
-
SSDEEP
3072:j1N1vA2Wu8mKyrecLLAZYcRwBjZnrlAWGvXGhHXVewgA8QmiT/MngNv:ZA2WuBDLqYcRANrlAWXQm/kOv
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\01ec60e3ff22d11b18e749d6efc5eee7_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\01ec60e3ff22d11b18e749d6efc5eee7_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
212KB
-
Filesize
16KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
212KB
-
Filesize
16KB