bc565b1b5e09c201e9b92341cc73da4771c4f7cb127cf094b98d1ae5554cf2a8

Analysis

max time kernel
95s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
14/07/2024, 23:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe
Size

328KB
MD5

4733fbbe363526c1bf02bb7c731c3ebf
SHA1

927048ddd04484d0ca8dba3d32b159c4de64c6f7
SHA256

bc565b1b5e09c201e9b92341cc73da4771c4f7cb127cf094b98d1ae5554cf2a8
SHA512

2cfdeb0d6b28a32f07bf8666d444debc3b23b23591c534f78f4398d8732d505955c6b4c6aaae0c7043bc0c89764edec274418614144395d3526018918daa05d2
SSDEEP

6144:mwtV9F2idZecnl20lHRxp3gQqjHOyfR1yOxPGzjjTrwv54Zda5l3NAEIlKGOu7:mwbHF3Z4mxxf4HOcZ9GD6gajN9OD7

Score

8^/10

Malware Config

Signatures

Drops file in Drivers directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\drivers\svchost.exe	4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe
File opened for modification	C:\Windows\SysWOW64\drivers\svchost.exe	4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe

Drops file in System32 directory 1 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\update.bak	4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeRestorePrivilege	3704	4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3704 wrote to memory of 3916	3704	4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe	84
PID 3704 wrote to memory of 3916	3704	4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe	84
PID 3704 wrote to memory of 3916	3704	4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe	84

C:\Users\Admin\AppData\Local\Temp\4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\4733fbbe363526c1bf02bb7c731c3ebf_JaffaCakes118.exe"
1⤵
- Drops file in Drivers directory
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3704
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c afc9fe2f418b00a0.bat
  2⤵
  PID:3916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\afc9fe2f418b00a0.bat

Filesize
2KB

MD5
942b91b1fcd89c804116bc39665c5b45

SHA1
4c285c4154a2fc425410e0cdfa9a4e99c438b7a4

SHA256
75e0ab74331471ed57e2072b71fa9c322a70155ed05ba9586603720826e860fa

SHA512
3b4c37620457fd2646be0676692ac3042d84320d024e91327a3ef7ad3d11e0cf803078db0967266fc60ccbf30b7ce310a45538826ae2e6f596f4aad703647e7d

Download Submit
memory/3704-0-0x0000000000400000-0x0000000000466000-memory.dmp

Filesize
408KB

Download
memory/3704-1-0x0000000002220000-0x0000000002274000-memory.dmp

Filesize
336KB

Download
memory/3704-17-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-16-0x00000000033F0000-0x00000000033F1000-memory.dmp

Filesize
4KB

Download
memory/3704-15-0x00000000033F0000-0x00000000033F1000-memory.dmp

Filesize
4KB

Download
memory/3704-14-0x00000000033F0000-0x00000000033F1000-memory.dmp

Filesize
4KB

Download
memory/3704-13-0x00000000033F0000-0x00000000033F1000-memory.dmp

Filesize
4KB

Download
memory/3704-69-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-68-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-67-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-66-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-65-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-64-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-63-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-62-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-61-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-60-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-59-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-58-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-57-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-56-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-55-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-54-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-53-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-52-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-51-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-50-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-49-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-48-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-47-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-46-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-45-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-44-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-43-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-42-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-41-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-40-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-39-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-38-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-37-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-36-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-35-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-34-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-33-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-32-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-31-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-30-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-29-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-28-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-27-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-26-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-25-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-24-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-23-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-22-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-21-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-20-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-19-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-18-0x00000000033E0000-0x00000000033E1000-memory.dmp

Filesize
4KB

Download
memory/3704-12-0x00000000033F0000-0x00000000033F1000-memory.dmp

Filesize
4KB

Download
memory/3704-11-0x00000000033F0000-0x00000000033F1000-memory.dmp

Filesize
4KB

Download
memory/3704-10-0x0000000002420000-0x0000000002421000-memory.dmp

Filesize
4KB

Download
memory/3704-9-0x0000000002490000-0x0000000002491000-memory.dmp

Filesize
4KB

Download
memory/3704-8-0x0000000002460000-0x0000000002461000-memory.dmp

Filesize
4KB

Download
memory/3704-7-0x0000000002470000-0x0000000002471000-memory.dmp

Filesize
4KB

Download
memory/3704-6-0x00000000023E0000-0x00000000023E1000-memory.dmp

Filesize
4KB

Download
memory/3704-5-0x0000000002410000-0x0000000002411000-memory.dmp

Filesize
4KB

Download
memory/3704-4-0x0000000002480000-0x0000000002481000-memory.dmp

Filesize
4KB

Download
memory/3704-3-0x0000000002430000-0x0000000002431000-memory.dmp

Filesize
4KB

Download
memory/3704-2-0x0000000002450000-0x0000000002451000-memory.dmp

Filesize
4KB

Download
memory/3704-79-0x0000000002220000-0x0000000002274000-memory.dmp

Filesize
336KB

Download
memory/3704-78-0x0000000000400000-0x0000000000466000-memory.dmp

Filesize
408KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads