Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 15:50

General

  • Target

    e083587696326c774b730305c5cd18e7_JaffaCakes118.exe

  • Size

    1.3MB

  • MD5

    e083587696326c774b730305c5cd18e7

  • SHA1

    0b879fc68c0e3a040051f6ec1970f2423092a702

  • SHA256

    8b2e348bec91692b5c25f65e566f08de00619c8ad2f323f5872576520cb414d5

  • SHA512

    731e046aa1b98c13f97cc5aa60f48cb31009662bc06ee1dc6e160231a13e66da09e874d5c17c24692a02fe875ae4d5c8b322c02a8dacef95bc40d224af4e1735

  • SSDEEP

    24576:tsrRNzY4/9gTW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJ8mr:tsrRN8iAasY6DwOBfrnvV7UeWtea

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e083587696326c774b730305c5cd18e7_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e083587696326c774b730305c5cd18e7_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2324-0-0x000007FEF610E000-0x000007FEF610F000-memory.dmp

    Filesize

    4KB

  • memory/2324-1-0x000007FEF5E50000-0x000007FEF67ED000-memory.dmp

    Filesize

    9.6MB

  • memory/2324-2-0x000007FEF5E50000-0x000007FEF67ED000-memory.dmp

    Filesize

    9.6MB

  • memory/2324-10-0x000007FEF5E50000-0x000007FEF67ED000-memory.dmp

    Filesize

    9.6MB

  • memory/2324-11-0x000007FEF5E50000-0x000007FEF67ED000-memory.dmp

    Filesize

    9.6MB

  • memory/2324-12-0x000007FEF610E000-0x000007FEF610F000-memory.dmp

    Filesize

    4KB