Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
11/07/2024, 02:36
General
-
Target
376257193d362518966ddffc73f7a8a1_JaffaCakes118.exe
-
Size
37KB
-
MD5
376257193d362518966ddffc73f7a8a1
-
SHA1
b6627e48b395fe0378cddb81c58a65b966d19f38
-
SHA256
ae056124db48a75556acbf66e3501ed29bff0c3d317dcbb005dc431bb1559c90
-
SHA512
369e6ca55616c3e910744892e840401441394f5ff153eafddc3fef5af59057bce30c7f3e5b253cf6e1b6bd2c08299711dfd5fcfad3dffbd9e98ec4c389d254d8
-
SSDEEP
768:XsOaoq3R1VfWiNZR9X85PvN6PTOyYG0N+G+E3vzBcVgm:XXaXBPWiNZrXoXNUq5GBGP3vOb
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\376257193d362518966ddffc73f7a8a1_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\376257193d362518966ddffc73f7a8a1_JaffaCakes118.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious behavior: RenamesItself
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB