Analysis
-
max time kernel
141s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
08-07-2024 14:54
General
-
Target
2cc4dcc73616ecb49febc14db44234a4_JaffaCakes118.exe
-
Size
112KB
-
MD5
2cc4dcc73616ecb49febc14db44234a4
-
SHA1
e2411e38f6d01509caaa3f3cfe98e55a0e0c9750
-
SHA256
44815b6b6ff74dcb9721d858ae24585103e66856ec2467260f826b2a8888e856
-
SHA512
11ee7be0fffbc06ac741d95718d4865710ff0cfe8afc24856c0e14dbd2ddb78252fe73b2c9c296653dafd4b4fc3af014a0dbee27cefea2b8e2608d7d62ad7504
-
SSDEEP
3072:yrqw8YJepwcUDadeW5ohiK+yCCbJ/jH3Ld:yrqw8YgxdeW5ohX9jX
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2cc4dcc73616ecb49febc14db44234a4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\2cc4dcc73616ecb49febc14db44234a4_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4c0 0x4041⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
9KB
MD5f50b8a4c009af0bc9acd5fc358ea4221
SHA155c457bde5d5e3c0a939f93a2a0086cd172df427
SHA256cea123f206cc17363fb50fb7c064de1acaa55a9307c01e07709e8d95bb15c6c0
SHA5129f4ba1df50724bbf081766d01e7a2ae0d85173f342a8050c99e4df07994f3f62776d234d51c27a06ab51ae2e7fdbcd9e67ff908d0794ea07d283510d18ae8ff3
-
Filesize
376KB
-
Filesize
8KB
-
Filesize
376KB
-
Filesize
8KB