Analysis
- max time kernel
128s - max time network
124s - platform
windows10-2004_x64 - resource
win10v2004-20240611-en - resource tags
- submitted
28/06/2024, 01:17
General
- Target 18414db2e9cefdaa86f44621910a4b1f_JaffaCakes118.exe
- Size 241KB
- Sample240628-bnfvnashmc
- SHA256 b4b3bafc0e6e3fb5fcf666f1abb37a06fb90b379b1395ebdd5577a32206c2bc2
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\18414db2e9cefdaa86f44621910a4b1f_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\18414db2e9cefdaa86f44621910a4b1f_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2884-63-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-56-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-48-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-46-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-19-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-5-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-0-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-275-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-257-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-202-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-180-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-167-0x00000000778C2000-0x00000000778C3000-memory.dmp
memory/2884-143-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-120-0x00000000778C2000-0x00000000778C3000-memory.dmp
memory/2884-109-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-103-0x00000000778C2000-0x00000000778C3000-memory.dmp
memory/2884-268-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-277-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-276-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-263-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-246-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-233-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-223-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-212-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-192-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-183-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-175-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-174-0x00000000778C2000-0x00000000778C3000-memory.dmp
memory/2884-173-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-172-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-165-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-155-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-132-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-119-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-101-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-95-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-82-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-62-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-59-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-57-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-53-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-51-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-50-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-43-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-41-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-39-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-37-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-35-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-34-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-31-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-29-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-27-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-26-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-23-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-21-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-17-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-16-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-13-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-12-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-9-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-7-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-3-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-1-0x0000000000570000-0x00000000005C2000-memory.dmp
memory/2884-279-0x0000000000570000-0x00000000005C2000-memory.dmp