9a8907ac933ece337f7a5ae3dbaac34daa774372c899da652674cb35e2cdc6c7 | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 06:52

Sharing

Report Analysis Logs

General

Target

fc2d3ff8e65a6a9bece210259ab70b96_JaffaCakes118.exe
Size

15KB
MD5

fc2d3ff8e65a6a9bece210259ab70b96
SHA1

36f0705a54df316efbfde0b0a1f2a6d287e18720
SHA256

9a8907ac933ece337f7a5ae3dbaac34daa774372c899da652674cb35e2cdc6c7
SHA512

054c250bc95160df22d46bcb0df67f44c3533374195d0757fe1c397b076006ab938f0ce65c5aa739f8bb4eae3cd1578cc4e8815d5dcb559cf311735520f54943
SSDEEP

192:nI4cnORgLUOHqfgxbJO5sY0YU43iQSsSZKq9wspqWnQ1aTh5K4hQjcWIOF:3p4UOHqKCIQSlZKq9wv1al5K4hAzIO

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fc2d3ff8e65a6a9bece210259ab70b96_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\fc2d3ff8e65a6a9bece210259ab70b96_JaffaCakes118.exe"
1⤵
PID:1688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1688-0-0x0000000026380000-0x000000002638B000-memory.dmp

Filesize
44KB

Download
memory/1688-2-0x0000000026380000-0x000000002638B000-memory.dmp

Filesize
44KB

Download