Analysis
-
max time kernel
150s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
20-07-2024 01:57
General
-
Target
5e981f4ffc5eb4aa73f9c79fa4a236b4_JaffaCakes118.exe
-
Size
100KB
-
MD5
5e981f4ffc5eb4aa73f9c79fa4a236b4
-
SHA1
fb92b0bef6a9497f93f7a1219e2d1053004097c9
-
SHA256
1e42dae9aec8af83d18d9e725983b7fdf703420055876d9b93c3f6f79632aabb
-
SHA512
4182070e76c010ae1140b7cc39100ff065cf4e8e7e195aa25dd278aa577fb5fce21c85d098aadc4b42ad5c185a38693606b1c85defa16477a08c6ec0e6f03d2b
-
SSDEEP
3072:dAKup0tfy/lkq/S0+WB+VpwHyUfD/khh:iKa0oeqCrInu
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e981f4ffc5eb4aa73f9c79fa4a236b4_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5e981f4ffc5eb4aa73f9c79fa4a236b4_JaffaCakes118.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3c8 0x2c81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
380KB
-
Filesize
8KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB
-
Filesize
380KB