Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
07/09/2024, 05:36
General
- Target d13113f2dca5fdfdbc9980f3d5ff0561_JaffaCakes118.exe
- Size 269KB
- Sample240907-ganagaxfjf
- SHA256 6a04418a175c1fcc515de77263ab09e30bf482c027cd0bde93ddd6fa15108e80
Score
10/10
Malware Config
Signatures
- Zeus
- Suspicious behavior: EnumeratesProcesses 4 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d13113f2dca5fdfdbc9980f3d5ff0561_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d13113f2dca5fdfdbc9980f3d5ff0561_JaffaCakes118.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3600-0-0x00007FFB52195000-0x00007FFB52196000-memory.dmp
memory/3600-1-0x00007FFB51EE0000-0x00007FFB52881000-memory.dmp
memory/3600-2-0x000000001B380000-0x000000001B426000-memory.dmp
memory/3600-4-0x00007FFB51EE0000-0x00007FFB52881000-memory.dmp
memory/3600-3-0x000000001BDB0000-0x000000001C27E000-memory.dmp
memory/3600-5-0x000000001B520000-0x000000001B5BC000-memory.dmp
memory/3600-7-0x00007FFB51EE0000-0x00007FFB52881000-memory.dmp