121b577a7dac22764c8d5e89c1b0504edf7803fdf6c5ed15c0c432d9605b4f7a

Analysis

max time kernel
93s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
28-04-2024 02:00

Target

04210d6c97e3cc1e7a343d92be684ee6_JaffaCakes118.exe
Size

9.6MB
MD5

04210d6c97e3cc1e7a343d92be684ee6
SHA1

59c7a4c842faf91d26f4a98d33b92595a06e713e
SHA256

121b577a7dac22764c8d5e89c1b0504edf7803fdf6c5ed15c0c432d9605b4f7a
SHA512

c5d6843a8ce0e87fd5b2b1df9a1314955be8f98179d00868fbbf6c7889e897e2049aecd11ae5fcc9bd016f9e7b89b839b47f9171e376abb01ba7c6de46c8a158
SSDEEP

196608:QQON6Gif26Z5Ayrb9TTg7ReSxDkN02Nd9KYZ4u7rHc7vMZX0H3MUWUu6dXfr1:pIkbAyr5qkSBk224WoMZX0+sZD1

Score

7^/10

Loads dropped DLL 3 IoCs

Processes:

04210d6c97e3cc1e7a343d92be684ee6_JaffaCakes118.exe

pid	process
4776	04210d6c97e3cc1e7a343d92be684ee6_JaffaCakes118.exe
4776	04210d6c97e3cc1e7a343d92be684ee6_JaffaCakes118.exe
4776	04210d6c97e3cc1e7a343d92be684ee6_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\04210d6c97e3cc1e7a343d92be684ee6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\04210d6c97e3cc1e7a343d92be684ee6_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:4776

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsg2F3F.tmp\System.dll

Filesize
11KB

MD5
bf712f32249029466fa86756f5546950

SHA1
75ac4dc4808ac148ddd78f6b89a51afbd4091c2e

SHA256
7851cb12fa4131f1fee5de390d650ef65cac561279f1cfe70ad16cc9780210af

SHA512
13f69959b28416e0b8811c962a49309dca3f048a165457051a28a3eb51377dcaf99a15e86d7eee8f867a9e25ecf8c44da370ac8f530eeae7b5252eaba64b96f4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsg2F3F.tmp\inetc.dll

Filesize
24KB

MD5
1fc1fbb2c7a14b7901fc9abbd6dbef10

SHA1
4d9ed86f31075a3d3f674ff78f39c190a4098126

SHA256
4f26394c93f1acb315c42c351983dafc7f094b2d05db6d7a1ba7dcb39a3a599e

SHA512
76d8ff7fc301cc5ff966ad8be17f0f3f2d869ef797c5a2c55a062305c02133a842906448741bf9818ec369bbb2932b9a9c2193ebc59835b50e8703db0090fdb2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsg2F3F.tmp\nsDialogs.dll

Filesize
9KB

MD5
4ccc4a742d4423f2f0ed744fd9c81f63

SHA1
704f00a1acc327fd879cf75fc90d0b8f927c36bc

SHA256
416133dd86c0dff6b0fcaf1f46dfe97fdc85b37f90effb2d369164a8f7e13ae6

SHA512
790c5eb1f8b297e45054c855b66dfc18e9f3f1b1870559014dbefa3b9d5b6d33a993a9e089202e70f51a55d859b74e8605c6f633386fd9189b6f78941bf1bfdb

Download Submit