Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
20/07/2024, 00:51
General
-
Target
5e64ab1d79bcc9fa149b22d87028d74c_JaffaCakes118.exe
-
Size
272KB
-
MD5
5e64ab1d79bcc9fa149b22d87028d74c
-
SHA1
8ba52adb961f2affd80cfda39b4a0e809f01125e
-
SHA256
9355fe4ff8b0b37a09837f8f48c774d0f8d3cd47499c8983e7a63a27d5ec2a49
-
SHA512
98ee67a540db45db25c29201f9ffe576ff6b4ec7b7e8a4faf1a7e28abdfc1f4a2cb9e92848de665ff077883550fa438a98d8957e2aec7040031f99b5b8abc225
-
SSDEEP
6144:3VX1vpmKgf6YdkHVnN5XXf8F3D9Aah5eYPY8keO1+e+xZSC0:fp9gf64KVfXXf8F3BAah5eoLkvAe6S
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e64ab1d79bcc9fa149b22d87028d74c_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5e64ab1d79bcc9fa149b22d87028d74c_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512KB
-
Filesize
512KB