Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
24/07/2024, 00:36
General
-
Target
699729f64bcedba44a6a3a56d2136496_JaffaCakes118.ps1
-
Size
96KB
-
MD5
699729f64bcedba44a6a3a56d2136496
-
SHA1
b64941f14e0d737b3f7c0ea1ab7d960ab58da83e
-
SHA256
2f2b90eac40bffbfc6767add1a5f10d2be329b0b9e3a7568bc659bb01f2d023e
-
SHA512
0a3d32b0402258ecd3f8312a13286edb5319c57c38667380857e185312e2a0e4461205795a543d668e32d068674f5c89c5b809893f50334b476a97684941ce77
-
SSDEEP
1536:t44OE/0ituN/yhBesC+HvhNSbZTrYmgV33umap5V9my5n2O7mg:W4OE/0iWZTrYHna7jm5OKg
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\699729f64bcedba44a6a3a56d2136496_JaffaCakes118.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.9MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB