Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
20/07/2024, 07:27
General
-
Target
5f90c53fe25daf2163819000c05cfc51_JaffaCakes118.exe
-
Size
270KB
-
MD5
5f90c53fe25daf2163819000c05cfc51
-
SHA1
5cb6be5ba3f1837f37ce76d02239e8ee6b153a9a
-
SHA256
8aaa40bb98c6cf6bd9e6ace2d449594bec416f9d8a29fb2ca85c5978166dc910
-
SHA512
523483c9d982bbb8080c1551f21a9901cb2751039fbaeff5bb28a3d8e72db4596b67e765e71226f7d54ae39691f677dc2ce4c21aacf01a11e01618125581e6e9
-
SSDEEP
6144:tPqWWsF6kD8v95PLOSsM5rlUQaDWtqCZvHqLRi3:tSDsFnDErD7sMlySrZv+i
Score
7/10
Malware Config
Signatures
-
Checks BIOS information in registry 2 TTPs 1 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
UPX packed file 8 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Enumerates system info in registry 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 24 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f90c53fe25daf2163819000c05cfc51_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5f90c53fe25daf2163819000c05cfc51_JaffaCakes118.exe"1⤵
- Checks BIOS information in registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
788KB
-
Filesize
4KB
-
Filesize
788KB
-
Filesize
788KB
-
Filesize
788KB
-
Filesize
788KB
-
Filesize
788KB
-
Filesize
788KB
-
Filesize
788KB