41bbbbd3c99110ca61683408e4bca349e92ad6ba9dd4ef37824a1e4430d6a20a

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19-07-2024 11:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Size

605KB
MD5

5bd7e3a6c388c65376a5465c172d61ed
SHA1

acf74d00da4b420e41d35e974b8374300b78e3af
SHA256

41bbbbd3c99110ca61683408e4bca349e92ad6ba9dd4ef37824a1e4430d6a20a
SHA512

f9721e28c15b43a356d55e3fb839bc3cfef3b35b31958764ff9749d0ba450e29201db1bf4da152cb97dca4b044ffddaee5919e727e39aafd6e32699e2f4fbe7b
SSDEEP

12288:ZplRdeYxlbb83Tg4oxEw/21XLHr+FlRnSmWR2UkpSfQKU7r7k1lo+CI:ZplHRv83U4ox417qgipSft2rA1loh

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 19 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeSecurityPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeTakeOwnershipPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeLoadDriverPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeSystemProfilePrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeSystemtimePrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeProfSingleProcessPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeIncBasePriorityPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeCreatePagefilePrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeShutdownPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeDebugPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeSystemEnvironmentPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeRemoteShutdownPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeUndockPrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: SeManageVolumePrivilege	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: 33	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: 34	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: 35	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
Token: 36	3416	5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5bd7e3a6c388c65376a5465c172d61ed_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3416-0-0x0000000000A90000-0x0000000000A91000-memory.dmp

Filesize
4KB

Download
memory/3416-1-0x0000000000400000-0x000000000049D000-memory.dmp

Filesize
628KB

Download
memory/3416-3-0x0000000000A90000-0x0000000000A91000-memory.dmp

Filesize
4KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads