Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06-01-2025 08:44
General
-
Target
JaffaCakes118_19dec01dd443f8b82e82a5f5f260be0b.ps1
-
Size
355KB
-
MD5
19dec01dd443f8b82e82a5f5f260be0b
-
SHA1
e77d6ad6acacaccc30dae50608b2c5721ffda526
-
SHA256
e67bdb94ed97481a1f6fa8790187a39e6f7641ae65f4ef0e601ba9c6da0cfa87
-
SHA512
9cd0189d07a88b8c11e21c9c796346548cafab4a5f2f98eed7c07ddd40f23921b31e20002ac9b62c29cb9d26037efb9cf29c2594bac6875d85ef3eb7f53cd543
-
SSDEEP
1536:EUz92i3yJc81fdDuJ8V+5FocQfb1xgHXuCL/iv6+y7X+mw/ie/uNVixz7+TmS5Pt:NsG
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs
Using powershell.exe command.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_19dec01dd443f8b82e82a5f5f260be0b.ps11⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.9MB
-
Filesize
9.6MB
-
Filesize
32KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB