Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 14:02

General

  • Target

    966402431e4b66dc746a79429f7c61f8_JaffaCakes118.exe

  • Size

    1.8MB

  • MD5

    966402431e4b66dc746a79429f7c61f8

  • SHA1

    31d373324036e405da6fa769602580d244ebce9a

  • SHA256

    529775e6ca1f9ad65985de3e10d0cd61c749ce9ace439dba7b4816a46e2f14d1

  • SHA512

    853ae827dd0f9bd0fbd5a7bdb8d107d76acba0e8562d6c84173eb0210f306ef904067ac0e657f873451b2cf24ba6bd70487dfef79eb9f321b2df38a9785c2814

  • SSDEEP

    49152:PEQKzXN1G2T2ng2GJs7YY7z/QesoFGf0lVDHYO:PEQ0XN11T2ng2GJSY2/XsAGf0lVDHYO

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\966402431e4b66dc746a79429f7c61f8_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\966402431e4b66dc746a79429f7c61f8_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2088

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2088-0-0x000007FEF6063000-0x000007FEF6064000-memory.dmp

          Filesize

          4KB

        • memory/2088-1-0x0000000001090000-0x0000000001260000-memory.dmp

          Filesize

          1.8MB

        • memory/2088-2-0x000007FEF6060000-0x000007FEF6A4C000-memory.dmp

          Filesize

          9.9MB

        • memory/2088-3-0x000007FEF6060000-0x000007FEF6A4C000-memory.dmp

          Filesize

          9.9MB

        • memory/2088-4-0x000000001D630000-0x000000001DA8C000-memory.dmp

          Filesize

          4.4MB

        • memory/2088-5-0x0000000000EB0000-0x0000000000EBA000-memory.dmp

          Filesize

          40KB

        • memory/2088-6-0x000007FEF6060000-0x000007FEF6A4C000-memory.dmp

          Filesize

          9.9MB

        • memory/2088-7-0x000007FEF6060000-0x000007FEF6A4C000-memory.dmp

          Filesize

          9.9MB

        • memory/2088-8-0x000007FEF6063000-0x000007FEF6064000-memory.dmp

          Filesize

          4KB

        • memory/2088-9-0x000007FEF6060000-0x000007FEF6A4C000-memory.dmp

          Filesize

          9.9MB

        • memory/2088-10-0x000007FEF6060000-0x000007FEF6A4C000-memory.dmp

          Filesize

          9.9MB