Analysis
-
max time kernel
142s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
15-07-2024 00:36
General
-
Target
477736e1a06bbc96df7a8a5730a27085_JaffaCakes118.exe
-
Size
781KB
-
MD5
477736e1a06bbc96df7a8a5730a27085
-
SHA1
a303f3697cc0b864de9d7a610982d986787d23b0
-
SHA256
dd87ce5add8927fdb27aa6b620f13f29d1df03c4872d92a01c71a5a7fc33c1d9
-
SHA512
29f5831449d197da4c16379e352796f93fa75fa9d466129fc1fa6819abecb69d5f846e3644fe5c0fcf481808c5349d228c45601ebf53fe5164ecec41ac7c8ad1
-
SSDEEP
12288:ekMtDFCAJLx8n99Xl3LjFVhg5F7wxHVnzPcV26n4L7+dHaMw2u7J2E:ZMnpA9Xl3nq5pC1nzB6n++sMw2u7J
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\477736e1a06bbc96df7a8a5730a27085_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\477736e1a06bbc96df7a8a5730a27085_JaffaCakes118.exe"1⤵
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\pRogram Files\Secon Logon.exe"C:\pRogram Files\Secon Logon.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
781KB
MD5477736e1a06bbc96df7a8a5730a27085
SHA1a303f3697cc0b864de9d7a610982d986787d23b0
SHA256dd87ce5add8927fdb27aa6b620f13f29d1df03c4872d92a01c71a5a7fc33c1d9
SHA51229f5831449d197da4c16379e352796f93fa75fa9d466129fc1fa6819abecb69d5f846e3644fe5c0fcf481808c5349d228c45601ebf53fe5164ecec41ac7c8ad1
-
Filesize
4KB
-
Filesize
336KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
336KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
2.2MB