Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
04-07-2024 23:57
General
-
Target
26b7b3f57cb79662d932e18ca736522b_JaffaCakes118.exe
-
Size
141KB
-
MD5
26b7b3f57cb79662d932e18ca736522b
-
SHA1
57e6145686d8cc05a9e8e65f73ee2454517f76e5
-
SHA256
c582fe04d45f23f5d573a23743b59572ecdaa2ee5bac3186de71a4c0979a08b9
-
SHA512
d7fd16a52a77c77a1541a502335eeef435d7542ed7953a614b6167fdb175b221406ff6c6761f4cbdb50208b8c3df2b5be0af13e9668dcf9c4a3931f1c6ec42b9
-
SSDEEP
3072:gKH9NqxnGA2nGBWM7iJ41X/aF2aO2ugdhyomGog5cMKUK/Si6J:fd0nB2nG0J4oTuqmGnWMaSi2
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\26b7b3f57cb79662d932e18ca736522b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\26b7b3f57cb79662d932e18ca736522b_JaffaCakes118.exe"1⤵
- Loads dropped DLL
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4bc 0x4081⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5780d14604d49e3c634200c523def8351
SHA1e208ef6f421d2260070a9222f1f918f1de0a8eeb
SHA256844eb66a10b848d3a71a8c63c35f0a01550a46d2ff8503e2ca8947978b03b4d2
SHA512a49c030f11da8f0cdc4205c86bec00653ec2f8899983cad9d7195fd23255439291aaec5a7e128e1a103efd93b8566e86f15af89eba4efebf9debce14a7a5564b
-
Filesize
584KB
-
Filesize
8KB
-
Filesize
584KB
-
Filesize
8KB