Analysis
-
max time kernel
92s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-12-2024 12:36
General
-
Target
JaffaCakes118_2de716414a5246e7d4f1d9679a9c5fdefd194c30807331d05798253ebceb87a2.iso
-
Size
86KB
-
MD5
d0ea5ecfd59f7704114a91e85a697103
-
SHA1
6d8ff4e7142ba828a35365f847b72bb51890341e
-
SHA256
2de716414a5246e7d4f1d9679a9c5fdefd194c30807331d05798253ebceb87a2
-
SHA512
2c80477abd3dbae464675eacbac2ac103746c60d7dd1ea9853b07572fcbd1b06a052ff1e09df3fdb71146ed2f4c084bb72697236512bc703f85065a64c7198d8
-
SSDEEP
768:nQ9QyY4F/l3Q2ZEOG+hKTmOrfWlKFxOVQ0dn3I:nQ9QMF/9QxMPO7WEFxI
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_2de716414a5246e7d4f1d9679a9c5fdefd194c30807331d05798253ebceb87a2.iso1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken