Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
10/08/2024, 08:40
General
- Target 857395c22c5bd4b707376b4cfc7c6308_JaffaCakes118.exe
- Size 16KB
- Sample240810-kk236axapd
- SHA256 c6204984759803b0498b654dc19e74e5d8791f398d98e3db290da1c89c832004
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\857395c22c5bd4b707376b4cfc7c6308_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\857395c22c5bd4b707376b4cfc7c6308_JaffaCakes118.exe"1⤵
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/628-0-0x00007FFE637C5000-0x00007FFE637C6000-memory.dmp
memory/628-2-0x000000001C550000-0x000000001CA1E000-memory.dmp
memory/628-1-0x00007FFE63510000-0x00007FFE63EB1000-memory.dmp
memory/628-3-0x000000001CA20000-0x000000001CAC6000-memory.dmp
memory/628-4-0x000000001CB90000-0x000000001CBF2000-memory.dmp
memory/628-5-0x00007FFE63510000-0x00007FFE63EB1000-memory.dmp
memory/628-6-0x00007FFE637C5000-0x00007FFE637C6000-memory.dmp
memory/628-7-0x00007FFE63510000-0x00007FFE63EB1000-memory.dmp