Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22-07-2024 10:12

General

  • Target

    62d0b7a57c1028ed7ef7d442a7966795_JaffaCakes118.exe

  • Size

    91KB

  • MD5

    62d0b7a57c1028ed7ef7d442a7966795

  • SHA1

    283e642311ed8840525c8da7041872fe5fb6a66d

  • SHA256

    4f524fe7de7c89eeb904cc460a85561f27bb1f60eee8beee134dfd24292de472

  • SHA512

    2a16511a6c5c78011c0f6a4fc59b2f6959a57dd43a2648f886206df3bff487974738252390624573dffe3509e6ab03b3f1c29e81969dc87445efd9d74a629ac1

  • SSDEEP

    1536:EGwtRxOBJyypgmDjVwCfIAIYfGJmIMWtEMfgjtEFs:NwtRonyypexoiNtxYGs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: MapViewOfSection 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\62d0b7a57c1028ed7ef7d442a7966795_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\62d0b7a57c1028ed7ef7d442a7966795_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: MapViewOfSection
    • Suspicious use of AdjustPrivilegeToken
    PID:1188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads