17a47c7f0a685fbdd6d206cfd2338452600c78155726dda1fe37750738531d73 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/04/2024, 22:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

fb54d682603fb51ae53d68a3daf039d5_JaffaCakes118.exe
Size

34KB
MD5

fb54d682603fb51ae53d68a3daf039d5
SHA1

2ee5e24bf19a003fc15815a363c721f4e630467b
SHA256

17a47c7f0a685fbdd6d206cfd2338452600c78155726dda1fe37750738531d73
SHA512

8c91342ff8e82f7e79ce6a8905285a3810ab58d57469e9280c328704cc607f8ee353dc0e991116e0e17d21d0330b8473a163bb9631bab6862e27dba203c34254
SSDEEP

768:DtsdrvuiANvJloRZmF1Q0WbwNX70mWbA2WCrc:D+rGi6JlmZmF1Q0WcNX70mW/o

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fb54d682603fb51ae53d68a3daf039d5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fb54d682603fb51ae53d68a3daf039d5_JaffaCakes118.exe"
1⤵
PID:2156

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2156-0-0x00000000003F0000-0x00000000009E4000-memory.dmp

Filesize
6.0MB

Download
memory/2156-1-0x00000000003F0000-0x00000000009E4000-memory.dmp

Filesize
6.0MB

Download