61554022c36d333ad83d78fd23af5bfc3ff037ad334c6ceb35f39a9c0a0a6e10 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240319-en
resource tags

arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
submitted
10-04-2024 21:11

Sharing

Report Analysis Logs

General

Target

ebffca96d28ae2da356ea3c7fc2c61c8_JaffaCakes118.exe
Size

160KB
MD5

ebffca96d28ae2da356ea3c7fc2c61c8
SHA1

64b5fb0bc717893a16b2257aade0fb920f2e0c5c
SHA256

61554022c36d333ad83d78fd23af5bfc3ff037ad334c6ceb35f39a9c0a0a6e10
SHA512

0a16d7d538f6c297bcf137a2967547529084082413397ea62e9cc814d49f7b4c198dc4cf6adfc67d3a213ce1fd49b5638e8a40e5a8ee6324089e3097b5b552f4
SSDEEP

3072:8sDV6Az1lWgFvYGnJd6KKZV3uTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd6KKZV3uTN9WU/G9h2w591

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ebffca96d28ae2da356ea3c7fc2c61c8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ebffca96d28ae2da356ea3c7fc2c61c8_JaffaCakes118.exe"
1⤵
PID:2884

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2884-0-0x000007FEF61C0000-0x000007FEF6B5D000-memory.dmp

Filesize
9.6MB

Download
memory/2884-1-0x0000000001D50000-0x0000000001DD0000-memory.dmp

Filesize
512KB

Download
memory/2884-2-0x000007FEF61C0000-0x000007FEF6B5D000-memory.dmp

Filesize
9.6MB

Download
memory/2884-3-0x0000000001D50000-0x0000000001DD0000-memory.dmp

Filesize
512KB

Download
memory/2884-4-0x000007FEF61C0000-0x000007FEF6B5D000-memory.dmp

Filesize
9.6MB

Download