Analysis
-
max time kernel
94s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2024 03:35
Behavioral task
behavioral1
Sample
9254b772e035e4f08ae2c9c0d0453cf3_JaffaCakes118.exe
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
9254b772e035e4f08ae2c9c0d0453cf3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
9254b772e035e4f08ae2c9c0d0453cf3_JaffaCakes118.exe
-
Size
24KB
-
MD5
9254b772e035e4f08ae2c9c0d0453cf3
-
SHA1
34e8c8649072411ad40d95c6d10f3e9e5cbca68d
-
SHA256
c366d4aaac34ea0cb14c1ab8fd2f55e0bf328001afd258aae4686935205649e5
-
SHA512
85b3d98e8e1004c0d414f642f1fa4a1c7872be4831d06a550379fcccbe4ba97cd0deb6eb23e874000b4121f0ef83cb8f1c379f975442bff8154625b90e41a180
-
SSDEEP
192:F5rAjPzOpqUg7oGtlCjM8T4MDemMVGpwHVzoitfcw:F5rAnAELbCDTGFu6toi9cw
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 14 pastebin.com 15 pastebin.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2004 9254b772e035e4f08ae2c9c0d0453cf3_JaffaCakes118.exe