Overview

overview

10

Static

static

10

1e60aa5b67...18.exe

windows7-x64

1

1e60aa5b67...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-10-2024 23:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe

  • Size

    116KB

  • MD5

    1e60aa5b672b3ecb62c7bcd0684d016e

  • SHA1

    892c9c4d165b8cbc3841e48e90da4da72337098f

  • SHA256

    9440f0798252c8a0d9ad7d9a930694c1d4bd20263c3797b14a932c0fdd193463

  • SHA512

    cc14c65495f45bf21fbe73599440947932739d59e0e04606a12aa66d2959d07074b054c3e6ccd5f491b2c77786760080b52886ceac88ad2de484a4bf062635d2

  • SSDEEP

    3072:Q0puHjtk03WR5mVJxmOIIiLYj5+GtjyYlVnGa1A+jWTQas7fkE0U0w2yMww1331O:LpwpfCZn5yMwYXIp

Score
6/10

Malware Config

Signatures

  • Drops desktop.ini file(s) 2 IoCs
  • Drops file in Windows directory 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\1e60aa5b672b3ecb62c7bcd0684d016e_JaffaCakes118.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    PID:3728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3728-0-0x00007FFF30E95000-0x00007FFF30E96000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3728-2-0x000000001C380000-0x000000001C84E000-memory.dmp

    Filesize

    4.8MB

    Download

  • memory/3728-1-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/3728-3-0x000000001C850000-0x000000001C8F6000-memory.dmp

    Filesize

    664KB

    Download

  • memory/3728-4-0x000000001C9D0000-0x000000001CA6C000-memory.dmp

    Filesize

    624KB

    Download

  • memory/3728-5-0x0000000001670000-0x0000000001678000-memory.dmp

    Filesize

    32KB

    Download

  • memory/3728-6-0x000000001CC80000-0x000000001CCCC000-memory.dmp

    Filesize

    304KB

    Download

  • memory/3728-7-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/3728-8-0x000000001CA90000-0x000000001CAA2000-memory.dmp

    Filesize

    72KB

    Download

  • memory/3728-11-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/3728-12-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/3728-13-0x00007FFF30E95000-0x00007FFF30E96000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3728-14-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/3728-15-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/3728-16-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download

  • memory/3728-17-0x00007FFF30BE0000-0x00007FFF31581000-memory.dmp

    Filesize

    9.6MB

    Download