Analysis
-
max time kernel
140s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
15-08-2024 21:51
General
-
Target
9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118.exe
-
Size
67KB
-
MD5
9bc047adfeff396a16de8ad2a0c961dd
-
SHA1
0c556871050029a2ec53326655625767f82d1377
-
SHA256
aed0a4bc8a6c44e4c0ce77a39c34e6595865441031aec0473c09277a90913592
-
SHA512
319686f77a693212a31daddbb0c0dab68a04222a235e6ba7affed719cf3b770e47ddba07565cc24ffbaf6d1261532c0cc28c48c30e95affc6e029b1d60cbe1ca
-
SSDEEP
768:9mmXehf22v5H2Y0cYeFenyJrkcvPhOS4/Vi3xnehErtX+GsMw:EAehvHJ0cYeWQzPhOvVihneW9+V
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://store2.gofile.io/download/96d02aa6-bb06-428e-a463-557e1bf9c1e2/Evoodujajdx.dll
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\9bc047adfeff396a16de8ad2a0c961dd_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
80KB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB