Overview

overview

10

Static

static

3

084d9c372d...18.exe

windows7-x64

10

084d9c372d...18.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-06-2024 11:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    084d9c372d05fc7450a7acc2d730e40a_JaffaCakes118.exe

  • Size

    816KB

  • MD5

    084d9c372d05fc7450a7acc2d730e40a

  • SHA1

    e87fbc8d77a456d97cd0c7d8a1f69752f2ef50b0

  • SHA256

    f12df428fa830292897aabb6f73c5ecf96e855e278c3320e21e45629c84bf9ef

  • SHA512

    c3655b286f886b5665ec0dffcea84687046170b72add2a23f287ea8fd3df5cd7daeb402ab5d9af25b163bc454bfa0c30e7f39d2cbfa1dbc385b7575ff92e6dfb

  • SSDEEP

    12288:AlNwTyzx+jxivZgVm2WCD1QbwBaYCQJVHmlZ:AlNwWN+jwZSm2ZivqJVHyZ

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\084d9c372d05fc7450a7acc2d730e40a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\084d9c372d05fc7450a7acc2d730e40a_JaffaCakes118.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4152

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4152-0-0x000000007527E000-0x000000007527F000-memory.dmp
    Filesize

    4KB

    Download
  • memory/4152-1-0x0000000000660000-0x0000000000732000-memory.dmp
    Filesize

    840KB

    Download
  • memory/4152-2-0x00000000057C0000-0x0000000005D64000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/4152-3-0x0000000005150000-0x00000000051E2000-memory.dmp
    Filesize

    584KB

    Download
  • memory/4152-4-0x0000000005210000-0x0000000005564000-memory.dmp
    Filesize

    3.3MB

    Download
  • memory/4152-5-0x0000000005610000-0x00000000056AC000-memory.dmp
    Filesize

    624KB

    Download
  • memory/4152-6-0x0000000075270000-0x0000000075A20000-memory.dmp
    Filesize

    7.7MB

    Download
  • memory/4152-7-0x000000007527E000-0x000000007527F000-memory.dmp
    Filesize

    4KB

    Download
  • memory/4152-8-0x0000000075270000-0x0000000075A20000-memory.dmp
    Filesize

    7.7MB

    Download