Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
10-01-2025 22:57
Behavioral task
behavioral1
Sample
JaffaCakes118_f0794d5310c299d4ac102beda80eaea9.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
JaffaCakes118_f0794d5310c299d4ac102beda80eaea9.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
JaffaCakes118_f0794d5310c299d4ac102beda80eaea9.exe
-
Size
24KB
-
MD5
f0794d5310c299d4ac102beda80eaea9
-
SHA1
b308cb9f762bc27ce502ae5c9ed7deab7885f028
-
SHA256
3bf2c814ade54ce77c12ad089043709d78281e6b0433fbbd8010663e01a976b8
-
SHA512
1c5b323f445c258a1db87621e68c479b526f72097f3025b2698a06d6c6da1f4fc5ab5967d2a09d5de5b616c174456f886f83404251f11af9c371700d742390e4
-
SSDEEP
192:QNrAjPzOpqUg7oGtl7E3cCVLGxjMPeuxVGpwHVboitxI0:QNrAnAELb7r+u1Iu6FoizI0
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 56 IoCs
flow ioc 32 pastebin.com 9 pastebin.com 10 pastebin.com 54 pastebin.com 11 pastebin.com 23 pastebin.com 31 pastebin.com 33 pastebin.com 41 pastebin.com 48 pastebin.com 57 pastebin.com 6 pastebin.com 14 pastebin.com 15 pastebin.com 18 pastebin.com 21 pastebin.com 16 pastebin.com 8 pastebin.com 36 pastebin.com 38 pastebin.com 40 pastebin.com 7 pastebin.com 49 pastebin.com 58 pastebin.com 22 pastebin.com 25 pastebin.com 44 pastebin.com 47 pastebin.com 59 pastebin.com 17 pastebin.com 19 pastebin.com 43 pastebin.com 50 pastebin.com 24 pastebin.com 42 pastebin.com 12 pastebin.com 34 pastebin.com 52 pastebin.com 56 pastebin.com 29 pastebin.com 45 pastebin.com 51 pastebin.com 5 pastebin.com 30 pastebin.com 46 pastebin.com 13 pastebin.com 26 pastebin.com 27 pastebin.com 39 pastebin.com 55 pastebin.com 53 pastebin.com 4 pastebin.com 20 pastebin.com 28 pastebin.com 35 pastebin.com 37 pastebin.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2684 JaffaCakes118_f0794d5310c299d4ac102beda80eaea9.exe