Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 22:55

General

  • Target

    2e200f7769d9349644d7e06bd6c86f16_JaffaCakes118.exe

  • Size

    545KB

  • MD5

    2e200f7769d9349644d7e06bd6c86f16

  • SHA1

    ab23deb1fdb262e7713fe2b7f4a6457279ea6a11

  • SHA256

    741ea12455f09ce60fc40b8596cee7facf4646970af2c2db446a066efe699ef8

  • SHA512

    c10aa91c7ef81f7cfd8170824252b52d91d19e2f0b4824ef92e7ea9ed639345d72dcfc9b096f1737b86e4f32cf2160d1d3afb5cd4b9ddd37865f58848a591249

  • SSDEEP

    12288:vi9MQsFqTU4jAMv43c8EK/s0SKHtYiPTpS1G:vGbFTU4jJAHxsbiPTpSE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2e200f7769d9349644d7e06bd6c86f16_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\2e200f7769d9349644d7e06bd6c86f16_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2356-0-0x0000000002230000-0x0000000002231000-memory.dmp

          Filesize

          4KB

        • memory/2356-1-0x0000000000400000-0x000000000048D000-memory.dmp

          Filesize

          564KB

        • memory/2356-3-0x0000000002230000-0x0000000002231000-memory.dmp

          Filesize

          4KB

        • memory/2356-14-0x0000000000400000-0x000000000048D000-memory.dmp

          Filesize

          564KB