Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
22/07/2024, 18:04
Behavioral task
behavioral1
Sample
64386644a680dfb7c4c1467585023911_JaffaCakes118.exe
Resource
win7-20240708-en
2 signatures
150 seconds
General
-
Target
64386644a680dfb7c4c1467585023911_JaffaCakes118.exe
-
Size
661KB
-
MD5
64386644a680dfb7c4c1467585023911
-
SHA1
388f3427de115e7a4fca518791e3b322cb2a3000
-
SHA256
6d9d895ac20d3302c1b42118a53a3787a77af1f81891a452d457f503092de81b
-
SHA512
1fe6fdbe1cb8a3f0ab45e5dc7c771ce67d3df38460be25b4d8990c822b8b12f79de57ffb9d0b81802bb5d6a5b0ab09ea8c9ee6d23a77458521d2df2d2f3c6799
-
SSDEEP
12288:I3OpvNW4a76S/Ddon/m09bbYlIaaMcE2YGhq3vo1RnfAvIESJgoE26yc/R:+OA4aWNn/m09fKIaaBEtWq3A1Ov8JgbD
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 24 IoCs
description pid Process Token: SeIncreaseQuotaPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSecurityPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeTakeOwnershipPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeLoadDriverPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSystemProfilePrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSystemtimePrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeProfSingleProcessPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeIncBasePriorityPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeCreatePagefilePrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeBackupPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeRestorePrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeShutdownPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeDebugPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeSystemEnvironmentPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeChangeNotifyPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeRemoteShutdownPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeUndockPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeManageVolumePrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeImpersonatePrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: SeCreateGlobalPrivilege 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: 33 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: 34 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: 35 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe Token: 36 4724 64386644a680dfb7c4c1467585023911_JaffaCakes118.exe