Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
25-12-2024 05:42
General
-
Target
JaffaCakes118_81e404c97700d97eb4ed9274f84071f48ab947f297afac6367234995467c0c1b.iso
-
Size
76KB
-
MD5
a524114c369117af161305c725d30005
-
SHA1
591a8945d2c2bc5a2babf185fd3d9b7cccc7ea1f
-
SHA256
81e404c97700d97eb4ed9274f84071f48ab947f297afac6367234995467c0c1b
-
SHA512
4901d5f48dbb08667b8357099cd5f477d57c7c26297a67beff16591a88689f2a822bee845eab7be540c9d5cc6a4abd92723a586a2af4dc96e31e8954a3f08e6a
-
SSDEEP
384:U1rdNm05MJQo0UtDsIU0dUgpZENMsfyW2vJuxqge:U1JNm05orVSY3MynJuEge
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_81e404c97700d97eb4ed9274f84071f48ab947f297afac6367234995467c0c1b.iso1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken