78e4ea3e99415c528612791836fa3ce641176526adfbdd7c50ded222f29d8d00

Analysis

max time kernel
55s
max time network
52s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27-04-2024 22:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

03c96fbb3abe76e0e9fd8fb7ecb6db68_JaffaCakes118.exe
Size

343KB
MD5

03c96fbb3abe76e0e9fd8fb7ecb6db68
SHA1

c7f0d76e0c037fabed06fac5f2d69de2814478c5
SHA256

78e4ea3e99415c528612791836fa3ce641176526adfbdd7c50ded222f29d8d00
SHA512

8f205d425b378fc079576047b2d571f78041f21629757092a586139a1c95e4ea22f0cab52b7107b63a2a8a1d189de2df135b9ad988403c58338055d47021af98
SSDEEP

6144:2W+7+eMqMJWJWMEHvpRzphnp4Ra5YlYhHs4U9wTADXabmKPgKdzWruMRAjVCCR:2R5MJNMkx3Bp4Ra5IYhM4AwAmbxxengr

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

Processes:

03c96fbb3abe76e0e9fd8fb7ecb6db68_JaffaCakes118.exe

pid	process
872	03c96fbb3abe76e0e9fd8fb7ecb6db68_JaffaCakes118.exe
872	03c96fbb3abe76e0e9fd8fb7ecb6db68_JaffaCakes118.exe
872	03c96fbb3abe76e0e9fd8fb7ecb6db68_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\03c96fbb3abe76e0e9fd8fb7ecb6db68_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\03c96fbb3abe76e0e9fd8fb7ecb6db68_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:872

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsk3AD8.tmp\System.dll
Filesize
11KB

MD5
3e6bf00b3ac976122f982ae2aadb1c51

SHA1
caab188f7fdc84d3fdcb2922edeeb5ed576bd31d

SHA256
4ff9b2678d698677c5d9732678f9cf53f17290e09d053691aac4cc6e6f595cbe

SHA512
1286f05e6a7e6b691f6e479638e7179897598e171b52eb3a3dc0e830415251069d29416b6d1ffc6d7dce8da5625e1479be06db9b7179e7776659c5c1ad6aa706

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsk3AD8.tmp\nsDialogs.dll
Filesize
9KB

MD5
dbdbf4017ff91c9de328697b5fd2e10a

SHA1
b597a5e9a8a0b252770933feed51169b5060a09f

SHA256
be60a00f32924ccbe03f9914e33b8e1ad8c8a1ca442263a69896efba74925b36

SHA512
3befc15aab0a5dbe7fde96155b0499d385f2799b1a2d47ce04f37b5804006b1c6c4fff93d3cedb56a2a8172b23752b6f9dc6168cfce3596b91def3247836cf10

Download Submit