02ed70ca5fc0e47d0cb7016a0959a0793853beaa8bba1e1d26b9fe9489c798fe

Analysis

max time kernel
120s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17-04-2024 12:33

Target

f5c77ef21662451265e0828c66274852_JaffaCakes118.exe
Size

1.7MB
MD5

f5c77ef21662451265e0828c66274852
SHA1

5e479f7e68943f792e754fac4bea372c41fc8b5d
SHA256

02ed70ca5fc0e47d0cb7016a0959a0793853beaa8bba1e1d26b9fe9489c798fe
SHA512

02abf7e20f37041d0594deccc2daa59ffed761b0d7f898f2cccf93502c9719729abe03f7e67348b645c3107c7a0dc7db602eb67c40dbc103794f6e0bdf7069f8
SSDEEP

49152:itLrXclQ6jGV1C4MSRBSAXTdxd8rNPk45COkDwuFhnEo:itLgQBqoRBSAX58rG45COPuFP

Score

7^/10

Loads dropped DLL 1 IoCs

Processes:

f5c77ef21662451265e0828c66274852_JaffaCakes118.exe

pid process

1808 f5c77ef21662451265e0828c66274852_JaffaCakes118.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

pid	process
1808	f5c77ef21662451265e0828c66274852_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\f5c77ef21662451265e0828c66274852_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\f5c77ef21662451265e0828c66274852_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:1808

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

C:\Users\Admin\AppData\Local\Temp\nsk2CEE.tmp\InstallOptions.dll
Filesize
14KB

MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781

SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f

SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk2CEE.tmp\ioSpecial.ini
Filesize
652B

MD5
7e48c5fe19c01acb7787649926780ced

SHA1
291f6627dd256b5bb2cb24343761ba19dede0b95

SHA256
6381aa1f8d52f79649ba25002f49f590e23a89ccbaabffc4d00d3da4f1987f2e

SHA512
bd48500a0e75013f1bd7c137d5ef820dc6a6ce6e4de1f577b1a636b8a2153b36d6305328856bc2340821a1378d802e332b901e8014099d5f1286bd47c8f2b857

Download Submit