Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
29-12-2024 02:53
General
-
Target
JaffaCakes118_70b34fd39a8536035490ba2000aba26d8a4bf416275a8091a962770477026f3d.rar
-
Size
5.0MB
-
MD5
176d3f4f148b323076261ff3e25ffcdd
-
SHA1
de96a1eca638bf3aa0ef95b93e0c6617b28bec4e
-
SHA256
70b34fd39a8536035490ba2000aba26d8a4bf416275a8091a962770477026f3d
-
SHA512
6a47edf54a98f911e0b148c510166f7fa84a2833469e6c0edc8b2f79a767f08ca02c543da9da808ea9e41c26b3365656722e94ff6f40663b4088e5f63013e09c
-
SSDEEP
98304:gr69xeRSKie9LMxs5yTgt0gf/bFOAjwhDiJkLU:gTQKiSzUqv7F70iP
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_70b34fd39a8536035490ba2000aba26d8a4bf416275a8091a962770477026f3d.rar"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow