Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
20-07-2024 01:04
General
-
Target
5e6ea617622dbc2aff2a7d873bbf6987_JaffaCakes118.exe
-
Size
523KB
-
MD5
5e6ea617622dbc2aff2a7d873bbf6987
-
SHA1
64fe4d4b2a87fd1b6f0128070152980eefe6da20
-
SHA256
b07414d213bc858ed1a9aaff33b50bc847d09859560740640699542d08ab98f3
-
SHA512
af5fb9c5c16cf937b475c13c1055203e59cdd35b2d2f2ba2e0c510e3d9a69e543b220d41544d6c05563835732434596ebe7afe6415451b0fe7f0f61aa0eaa129
-
SSDEEP
6144:+HtAvDQ5y/QsQNbq3DH40FunRvPGyjkIDb4fCk4BOiXzqmbbX/tXJxofs6Yxgt4d:+NAvDQ56SmFmHWk8gXzqETyUzEI
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
-
Loads dropped DLL 2 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 23 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e6ea617622dbc2aff2a7d873bbf6987_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5e6ea617622dbc2aff2a7d873bbf6987_JaffaCakes118.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
MD5685f1cbd4af30a1d0c25f252d399a666
SHA16a1b978f5e6150b88c8634146f1406ed97d2f134
SHA2560e478c95a7a07570a69e6061e7c1da9001bccad9cc454f2ed4da58824a13e0f4
SHA5126555ad6b4f4f26105ca8aad64501d74519a3e091f559b4b563d6ffb20a2ddfcde65e4fe94971a9bc65e86db577f2548ca00f9920d341c8ea808b04c0947d61d9
-
Filesize
364KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
460KB
-
Filesize
364KB