Analysis
-
max time kernel
8s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
07-09-2024 16:35
General
-
Target
d25ee82934bec167345502a1e7e3c931_JaffaCakes118.exe
-
Size
202KB
-
MD5
d25ee82934bec167345502a1e7e3c931
-
SHA1
d017326c8d603c74c958ad551577dda3cc807e20
-
SHA256
a53ae2a8dd78aff353c51faefa97f67e8227871f0d1728680aa9b5bd680be924
-
SHA512
573da30f90e176807a6909fabf3be33e3d7b1860bfccff463fbc9326518a31190645ec17b5cca679cc82175d7aa72fab0cfff2db3e14eca1d3448691260317be
-
SSDEEP
6144:fPqtyGebnkUC2IspppppppppppppppppppppVM+/x:fCLmC2DpppppppppppppppppppppO+J
Score
10/10
Malware Config
Signatures
-
BlackNET
BlackNET is an open source remote access tool written in VB.NET.
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 53 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d25ee82934bec167345502a1e7e3c931_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\d25ee82934bec167345502a1e7e3c931_JaffaCakes118.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
664KB
-
Filesize
9.6MB
-
Filesize
4.8MB
-
Filesize
9.6MB
-
Filesize
624KB
-
Filesize
32KB
-
Filesize
304KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
392KB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB