Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
19-08-2024 17:12
General
-
Target
abddcbc0fdf0ea4f4af27a3ec5984a45_JaffaCakes118.exe
-
Size
45KB
-
MD5
abddcbc0fdf0ea4f4af27a3ec5984a45
-
SHA1
81b4bab377551f2c531b99226641699691b6d722
-
SHA256
51b2e2bcaba8db498a356c4f3e41bffe3438618169d00e14be88a83746ea112b
-
SHA512
4cb028fc544584a7669f0de94912499afc710de73a8c20e0980c3c13f92914663dfcd9b52e698d8c3a3a0d05d9f6e21736f1575bf7f24f62f845c0e15638665b
-
SSDEEP
768:BXy4kNPqpahMdHppnSHaZeHZRZo6pnr88IilkX3QJY9GrM+HflGeXtqrgIErxAQN:BCNPqkhcjS6ZwZTH48Jl1J+GQAlGQtqr
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\abddcbc0fdf0ea4f4af27a3ec5984a45_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\abddcbc0fdf0ea4f4af27a3ec5984a45_JaffaCakes118.exe"2⤵
- Drops file in System32 directory
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
76KB
-
Filesize
76KB