Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
15/07/2024, 16:44
General
-
Target
4a880a2e48119fc94fd1eeecf005bf13_JaffaCakes118.ps1
-
Size
68KB
-
MD5
4a880a2e48119fc94fd1eeecf005bf13
-
SHA1
427d0495d22a8795f42143b961a3c14d551267bf
-
SHA256
40923542532bddd3e785cd84b90f97455d322c2caf7a2327e96011cdf52fd454
-
SHA512
8ffedd76395c39e6cfa393e54f72eff326eaffc20bac27d273d0c44570907d18f4d861bdc9125980ed382b210d761c8dbe077ec246a74a579469219e74d5a154
-
SSDEEP
1536:IJz6V9W30iO9ykGgAlw2tsNI0qhp7uqfjftqpBjL9CjNVLp:cz6V9W30iO9ykGgAlw2tsNI0kp7rfjfd
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\4a880a2e48119fc94fd1eeecf005bf13_JaffaCakes118.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB