Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
23/07/2024, 05:38
General
-
Target
66564f9b68d540541d71e439b8ffeb8e_JaffaCakes118.exe
-
Size
250KB
-
MD5
66564f9b68d540541d71e439b8ffeb8e
-
SHA1
9b2464f37dfd430bfe9e9e49bafe7a8205e002d6
-
SHA256
89b10d887f577a3df59dd562c1bc523f159e4ec1cec6c21b17adfdcc6e47f4f9
-
SHA512
e15ef5e1e935d5fcdbf1d7fbcc7c7c3fae357c1ffe2e8409e63538523eb684c25694fdfa96bc7a6927bc4c80b82651e4a8b7b56b44f5fed548e7fc4c372c4cbd
-
SSDEEP
6144:/cjlsubtn6BV+/1PSSggDhBkLq2pjMoyYKRKESBv:EiuZ6Bq1aMWqBTSV
Score
10/10
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Modifies WinLogon 2 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\66564f9b68d540541d71e439b8ffeb8e_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\66564f9b68d540541d71e439b8ffeb8e_JaffaCakes118.exe"1⤵
- Modifies WinLogon for persistence
- Adds Run key to start application
- Modifies WinLogon
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
412KB
-
Filesize
228KB
-
Filesize
4KB
-
Filesize
712KB
-
Filesize
712KB
-
Filesize
328KB
-
Filesize
712KB
-
Filesize
712KB
-
Filesize
712KB
-
Filesize
712KB
-
Filesize
736KB
-
Filesize
4KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
736KB
-
Filesize
412KB
-
Filesize
228KB