fe0b2a6cb1698aca790ca9a65d426ea0be1682168f6783bc3bb7ca605e4cb39b

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/05/2024, 07:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0b5de85731cd0ead36c87a41626c9d8b_JaffaCakes118.exe
Size

615KB
MD5

0b5de85731cd0ead36c87a41626c9d8b
SHA1

bb888912f81933aa768834119b332a0a023e332f
SHA256

fe0b2a6cb1698aca790ca9a65d426ea0be1682168f6783bc3bb7ca605e4cb39b
SHA512

575c2b6da42610b781401d06bb1ee3419574d80b8ad446c1e830864822aff72b8b8a4d5d313de9e1242e0cac71f5bb720d945da8153cafdfe930edb112df3a5d
SSDEEP

12288:whkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNi4:4RmJkcoQricOIQxiZY1WNi4

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
behavioral1/memory/2784-0-0x0000000000400000-0x00000000004AF000-memory.dmp	autoit_exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\0b5de85731cd0ead36c87a41626c9d8b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0b5de85731cd0ead36c87a41626c9d8b_JaffaCakes118.exe"
1⤵
PID:2784

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2784-0-0x0000000000400000-0x00000000004AF000-memory.dmp

Filesize
700KB

Download