Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
25-06-2024 06:36
General
-
Target
0d13642056a92cb228c51bac1e3bf739_JaffaCakes118.exe
-
Size
350KB
-
MD5
0d13642056a92cb228c51bac1e3bf739
-
SHA1
90dbcd3e9fb78188182f82736814f7faeff8eec7
-
SHA256
51630ff215dc475e6747080568a5e83bacb7840809f0d83c131acb75eb2696c3
-
SHA512
8c013c8abe4190dd79e8ad40caae3e569abd9b9c061a2cd94e9f5e67f127c3d0ea65ddc18ded13616eef1d13723008c3a7627040d2efec40d7dd8c2d4a972390
-
SSDEEP
6144:V6ad13kBF2ecynyKrjcuBAC4oUyTDVuQxC2ibsHHJS8Dw8xAZo:V6013M6ynyKrjcuEoVVuuC2IsHHJS0w8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0d13642056a92cb228c51bac1e3bf739_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0d13642056a92cb228c51bac1e3bf739_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
456KB
-
Filesize
4KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
456KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
220KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
456KB
-
Filesize
456KB
-
Filesize
456KB