Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
16/07/2024, 10:22
General
-
Target
4de56330680dc35fda0aeee386f46338_JaffaCakes118.exe
-
Size
49KB
-
MD5
4de56330680dc35fda0aeee386f46338
-
SHA1
69c58721d17e0eef5d14fcbf6a2282d14accd710
-
SHA256
fd165e308cfc610091e52e1715072403580d6b54caa0e90970e1e70870adb55a
-
SHA512
e9a9ac9d291fa1b85df245e55d3f4c7307fd0600974c53216dc33c03bb88c8a546e54dc33198560d63f7eac813f72ba4a99aca30cdf849b825f688cdf74cd0fe
-
SSDEEP
1536:UN+kEVFZf4a3yt6yNT4cbJXH0Yk+GyGrrFX:pjFZf4jNTRbdH0Yk+GfN
Score
9/10
Malware Config
Signatures
-
Detected Nirsoft tools 2 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4de56330680dc35fda0aeee386f46338_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4de56330680dc35fda0aeee386f46338_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
104KB
-
Filesize
104KB