05fac05fc49251b5e2ce702d6bc2ff57ccac30f064e34b16105f98a832786700

Analysis

max time kernel
154s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
21-04-2024 10:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ff1d1b94e3db521ceeb84b92e6916d96_JaffaCakes118.exe
Size

53KB
MD5

ff1d1b94e3db521ceeb84b92e6916d96
SHA1

696714bdf463ecdb25c1effe3cf524c06efc6545
SHA256

05fac05fc49251b5e2ce702d6bc2ff57ccac30f064e34b16105f98a832786700
SHA512

190728a6894975913cdb9b6a31627330f1c4c57a8b67479b066bf7156b8c0fab3e8ae22bee06ac234d5d029534fb92d1e08a9ed63825fcd3b676dfeb2cb0b8c4
SSDEEP

1536:yLXB65939tY6HBg4sXJI4UPG5igQ+uQuJ2:yLk395hYXJlUPG5ihCuJ2

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
5020	ff1d1b94e3db521ceeb84b92e6916d96_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ff1d1b94e3db521ceeb84b92e6916d96_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ff1d1b94e3db521ceeb84b92e6916d96_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:5020

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3868 --field-trial-handle=3088,i,14310325015283915034,7660943942870463106,262144 --variations-seed-version /prefetch:8
1⤵
PID:3804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsu2AA6.tmp\CABSetup.dll

Filesize
12KB

MD5
8f8dde721d0fd4c11095882cc9ad7134

SHA1
0bc4fc0be7a86446a9e9793804d8596ef672b6de

SHA256
503757402e66af649298f324e2af1a6928c7b75cb21b8a0518106988c9fe97a0

SHA512
30e0d7cbc07155fa547ef562b448adad151d2e0f28ee3411d69bf8961b36287a1218dc80ced86507353814d702a78bf0053718d3c5a4685d3ebc7168028ff0a3

Download Submit