Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
22-07-2024 16:52
General
-
Target
63fe01015f4ceb19c9b64ad0bccc723b_JaffaCakes118.exe
-
Size
214KB
-
MD5
63fe01015f4ceb19c9b64ad0bccc723b
-
SHA1
cc2a9fb065871024e41c20dca051f3e416677c89
-
SHA256
a190817db0b96037545737db585c08bac0d1190fec83a454c23a85fad2e7df33
-
SHA512
5ec98e2215d88552af88ae5b0feaf8a0e390080e3150cfb20ce439fb0064f8ef2fe9c0b963de0e9cc6bc93f0cbdd4dc6950138e878005b8901c07a35438c40b5
-
SSDEEP
6144:hr8BPOXg3B5eDyV9/ZxoqiLB2wS4hcu8Fq:hr8PKgx5rV9/ZmLBy4IFq
Score
7/10
Malware Config
Signatures
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\63fe01015f4ceb19c9b64ad0bccc723b_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\63fe01015f4ceb19c9b64ad0bccc723b_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
284KB
-
Filesize
4KB
-
Filesize
16KB
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
16KB