Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
30/12/2024, 00:26
General
-
Target
JaffaCakes118_88d5612f38441b9fbccb9e2e43bba16291eea23e7d90bc7755920a0252369eff.iso
-
Size
74KB
-
MD5
e4212b979b861348f093eb502d54a555
-
SHA1
126bbb8e12495a386afa30771268fe4b5f017d29
-
SHA256
88d5612f38441b9fbccb9e2e43bba16291eea23e7d90bc7755920a0252369eff
-
SHA512
296622420cdff956e61c561995265c36e204c009159aaed967e150c7435abbda1ea8907eda67985a1960588090f6c1109d64287769bf0b6f8fbc035b246b3114
-
SSDEEP
384:BiBp7z4C7+owFhl3rwUY5mn33QPHOS2A9P2:YBp7zV+ow5qk3AOSx9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_88d5612f38441b9fbccb9e2e43bba16291eea23e7d90bc7755920a0252369eff.iso1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken