Analysis
-
max time kernel
51s -
max time network
53s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
27/06/2024, 22:45
General
-
Target
17cee229eda792c4c8cccd06fdf40e24_JaffaCakes118.exe
-
Size
111KB
-
MD5
17cee229eda792c4c8cccd06fdf40e24
-
SHA1
44270b7b26378d94ac7cc4fd06987f4297aaccdc
-
SHA256
d50b4ea965141324c22201ad1004ed56d8e7c2bf4177766fc295b3c55482cbb8
-
SHA512
c7a47a92fefc2a421aee528d3f658fb4f4a97fe78a27bfc1ec422c7c26eecec0c0b630887be14c246f91ec0860c753b6d7651f3f4ac46a0c054cb810a7bb3ae7
-
SSDEEP
3072:4+f+23qAfAM2V7K9R6wJjU+H2GH0RF4t+va5:4+f+eq0SxwtU5GHsGt+C
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 3 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\17cee229eda792c4c8cccd06fdf40e24_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\17cee229eda792c4c8cccd06fdf40e24_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken