Analysis
-
max time kernel
21s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
12-08-2024 04:42
General
-
Target
8d5af4ca36d52f838e5d2b7e06ba1909_JaffaCakes118.exe
-
Size
13KB
-
MD5
8d5af4ca36d52f838e5d2b7e06ba1909
-
SHA1
4c6721c6a196d3b79274d87eafadcc93310ccb57
-
SHA256
e7865605a01c678d1b6fd05b43fe80fd2c17ee51c717a2f49d2c194c839d7bfe
-
SHA512
db8e904f255cb757e7dbd680563cd29365c37bf600ec36298d7ae14e589019720074599fb90fa6fa2e54bf52a1d125371add4180c845dc93426a3970c647104d
-
SSDEEP
192:rckvv6biLUu6aT/oILuIvBvuNKnnhDErxg9ggIzGRhuprf8zdTksyXUwuu:4u2iZ621fvuggrxgGchYUzhQX7
Score
6/10
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8d5af4ca36d52f838e5d2b7e06ba1909_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\8d5af4ca36d52f838e5d2b7e06ba1909_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB