496c0c50f7c8651d79b1e31f856943a7c7e25382866355c9c6986baf2437fbf2 | Triage

Analysis

max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/10/2024, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

40b634516347fa4db88db7aec15c2018_JaffaCakes118.zip
Size

13KB
MD5

40b634516347fa4db88db7aec15c2018
SHA1

7ac169071a00dd93131587f68d530ac86201b2e3
SHA256

496c0c50f7c8651d79b1e31f856943a7c7e25382866355c9c6986baf2437fbf2
SHA512

dc9e91d7587538a3b5424df3261451bee7a2df5ec2073072e36898819c97ff17f9df31c862bd9fa05bb1f84e38b41452aab2489e80992cbab00084db35fdba26
SSDEEP

384:JUzKNA7zD7IvD4gru1ZkJ4PzTkbTyyBde:2MOn7I7kAywA

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2304	7zFM.exe
Token: 35	2304	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2304	7zFM.exe

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\40b634516347fa4db88db7aec15c2018_JaffaCakes118.zip"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads