Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 00:18

General

  • Target

    59b2cb615b808a39ee4e2d053465b4a7_JaffaCakes118.exe

  • Size

    204KB

  • MD5

    59b2cb615b808a39ee4e2d053465b4a7

  • SHA1

    30bbd7219f9533bb60b8e0761cabe5f7bf5e4cb5

  • SHA256

    b25530121d45002780715cc3893a5d6a733eb0d913ead45128fac1241664d00b

  • SHA512

    d62027e61b474c014dc18d5b5c094e8b00d1aa7ed8fb4bed66d36449ab2f1ab4b62beadadd466a8342855c3b8472038aabd6c8c43737e87086010c09ddc9b77b

  • SSDEEP

    3072:r/o/rQnXKUu2yaMbMK6RCRu4KEOMVTspcduyVtcK4jg0VNSmjmL5HBQYcx:r/IQFDyIK1lvFupcVncKP0V8mS9BQYc

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\59b2cb615b808a39ee4e2d053465b4a7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\59b2cb615b808a39ee4e2d053465b4a7_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2356

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2356-0-0x0000000073D5E000-0x0000000073D5F000-memory.dmp

          Filesize

          4KB

        • memory/2356-1-0x0000000000A40000-0x0000000000A7A000-memory.dmp

          Filesize

          232KB

        • memory/2356-2-0x0000000073D50000-0x000000007443E000-memory.dmp

          Filesize

          6.9MB

        • memory/2356-3-0x0000000073D50000-0x000000007443E000-memory.dmp

          Filesize

          6.9MB

        • memory/2356-4-0x0000000073D50000-0x000000007443E000-memory.dmp

          Filesize

          6.9MB

        • memory/2356-5-0x0000000073D5E000-0x0000000073D5F000-memory.dmp

          Filesize

          4KB

        • memory/2356-6-0x0000000073D50000-0x000000007443E000-memory.dmp

          Filesize

          6.9MB