Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
30-09-2024 18:54
General
-
Target
02ce0f50156c5f50b5126e1185c09f81_JaffaCakes118.exe
-
Size
1.5MB
-
MD5
02ce0f50156c5f50b5126e1185c09f81
-
SHA1
5ee2c81a6d3a69c760df9afea14f90f897186398
-
SHA256
8fa095b2a5d9876f09f6275545fe61a06b51ba771f2ee2d873b2914a63243a70
-
SHA512
a9bc358b6276cb3fdb4aacaf4fb870277045fcc3cc798637b5b178ffeaf1c68b51122c1cc9f7721b7f6d06bb575e780af35ba9bb722c94fd73f16b43db85d1b6
-
SSDEEP
24576:FHhoAjL7/hhUF54clNf7lhhUF54clNf766uHAW92zt/sWu2BSMCqD0RU:jLto54clRo54cl8LH+tkWJ0Xy
Score
10/10
Malware Config
Signatures
-
BlackGuard
Infostealer first seen in Late 2021.
-
Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\02ce0f50156c5f50b5126e1185c09f81_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\02ce0f50156c5f50b5126e1185c09f81_JaffaCakes118.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.6MB
-
Filesize
472KB
-
Filesize
9.9MB
-
Filesize
9.9MB