Analysis

  • max time kernel
    17s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    21/08/2024, 20:40

General

  • Target

    b4f6f09451596da1a4a47c04c0ca2c08_JaffaCakes118.exe

  • Size

    150KB

  • MD5

    b4f6f09451596da1a4a47c04c0ca2c08

  • SHA1

    91abc00d0ab2b0703f4c81c587ebcc7590a05d05

  • SHA256

    ab195b310f1db895dd494957ee0561740fc6a2acf0d7c7aeb72c4fffc91776dc

  • SHA512

    0861823eb84bb5fff93a023ecaa86542df5de547dda035d9f0b1de34eee2e48ff052cfdb08150712cab2dd1e449f23e74475ef9b165c17b0dc0cbb6bcbb098f1

  • SSDEEP

    3072:1ZAtmRuh/bGoA/UbvdQqZAtmRuh/bGoA/UbvdQqZAtmRuh/bGoA/UbvdQ:Kh/bGozbFYh/bGozbFYh/bGozbF

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\b4f6f09451596da1a4a47c04c0ca2c08_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\b4f6f09451596da1a4a47c04c0ca2c08_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    PID:2000

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2000-0-0x000007FEF63BE000-0x000007FEF63BF000-memory.dmp

          Filesize

          4KB

        • memory/2000-1-0x000007FEF6100000-0x000007FEF6A9D000-memory.dmp

          Filesize

          9.6MB

        • memory/2000-2-0x000007FEF6100000-0x000007FEF6A9D000-memory.dmp

          Filesize

          9.6MB

        • memory/2000-3-0x000007FEF6100000-0x000007FEF6A9D000-memory.dmp

          Filesize

          9.6MB

        • memory/2000-4-0x000007FEF6100000-0x000007FEF6A9D000-memory.dmp

          Filesize

          9.6MB

        • memory/2000-5-0x000007FEF6100000-0x000007FEF6A9D000-memory.dmp

          Filesize

          9.6MB