Analysis

  • max time kernel
    114s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/08/2024, 00:00

General

  • Target

    c1dd177f021055c74677beb3d80398cc_JaffaCakes118.exe

  • Size

    108KB

  • MD5

    c1dd177f021055c74677beb3d80398cc

  • SHA1

    857f56d2b42049ad30706fae39f32a315bf561ad

  • SHA256

    98171c88ff403722b5a59bc0a94102c46f2df60db985fd4e13e7d1d86c4bf587

  • SHA512

    00978a3d0f32fac330e909c5054db4911b50db358629e507e0014b5f9d3ce3da7c6efb6b8a12224fad702f012595caef6779c1bb6b39dfba366faf1f642d0200

  • SSDEEP

    1536:AwEqWt8tNAKwE7vr8JXC5tbvcf7JWdooLIfhyGuiPQV0nOdzz8uzhSmHnT:qqGaCEvr8Ju5vgJIQ1zQGngzz8uzznT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\c1dd177f021055c74677beb3d80398cc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\c1dd177f021055c74677beb3d80398cc_JaffaCakes118.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3424-0-0x00007FFBD12C5000-0x00007FFBD12C6000-memory.dmp

    Filesize

    4KB

  • memory/3424-1-0x00007FFBD1010000-0x00007FFBD19B1000-memory.dmp

    Filesize

    9.6MB

  • memory/3424-3-0x00007FFBD1010000-0x00007FFBD19B1000-memory.dmp

    Filesize

    9.6MB

  • memory/3424-2-0x0000000000B50000-0x0000000000B58000-memory.dmp

    Filesize

    32KB

  • memory/3424-4-0x000000001B380000-0x000000001B426000-memory.dmp

    Filesize

    664KB

  • memory/3424-5-0x000000001B900000-0x000000001BDCE000-memory.dmp

    Filesize

    4.8MB

  • memory/3424-6-0x000000001BE90000-0x000000001BF2C000-memory.dmp

    Filesize

    624KB

  • memory/3424-7-0x0000000000C80000-0x0000000000C88000-memory.dmp

    Filesize

    32KB

  • memory/3424-8-0x000000001C120000-0x000000001C16C000-memory.dmp

    Filesize

    304KB

  • memory/3424-9-0x00007FFBD1010000-0x00007FFBD19B1000-memory.dmp

    Filesize

    9.6MB

  • memory/3424-10-0x00007FFBD1010000-0x00007FFBD19B1000-memory.dmp

    Filesize

    9.6MB

  • memory/3424-11-0x00007FFBD1010000-0x00007FFBD19B1000-memory.dmp

    Filesize

    9.6MB

  • memory/3424-12-0x00007FFBD12C5000-0x00007FFBD12C6000-memory.dmp

    Filesize

    4KB

  • memory/3424-13-0x00007FFBD1010000-0x00007FFBD19B1000-memory.dmp

    Filesize

    9.6MB