89804d32705aff64526d4103461c3404d7d3781ca73324b9f8bde29c24fbcfa3

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
30/04/2024, 15:27

Target

0a0f93775b404583d1ba41366c1f78bc_JaffaCakes118.exe
Size

62KB
MD5

0a0f93775b404583d1ba41366c1f78bc
SHA1

5d4b5511832552b1e553bc03d87c89763c137d60
SHA256

89804d32705aff64526d4103461c3404d7d3781ca73324b9f8bde29c24fbcfa3
SHA512

f9778098b22f786475f569368c2df6fb3de918d0a374fee6748c9ae573b23ea399190b3ce6672521bb38377f6a2db7084c174475f1e6994f99ee41e96957a9b8
SSDEEP

1536:bErPZ3IBZcbTfu1HlrJFCPcbPnLsOpNZt:GPC23aJFC0bPnLlpTt

Score

7^/10

Loads dropped DLL 3 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\0a0f93775b404583d1ba41366c1f78bc_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0a0f93775b404583d1ba41366c1f78bc_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:1876

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

\Users\Admin\AppData\Local\Temp\nsd1EB8.tmp\NSISdl.dll

Filesize
15KB

MD5
7caaf58a526da33c24cbe122e7839693

SHA1
7687112cb6593947226f8a8319d6e2d0cdef3b11

SHA256
19debdc4c0b6f5dc9582bda7a2c1146516f683e8d741190e6d4b81ad10b33f61

SHA512
aafd0cb2abb3d2dee95c2d037a6a1a5bff0518e3210ced0c39e6d6696e4fab4734df01476fe9dcb208f02c529cd03346bc8b7f3319ae49701bbf2cb453d59bae

Download Submit