17913f900619cd38eef950eb355876a6466923d51c04aa9e17bf51e0a172226a | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
03-05-2024 01:27

Sharing

Report Analysis Logs

General

Target

0f5baaa4b08121246e8433735776e718_JaffaCakes118.exe
Size

48KB
MD5

0f5baaa4b08121246e8433735776e718
SHA1

65e160aa7603a3fa96a1b12f8bd1360989bda3c1
SHA256

17913f900619cd38eef950eb355876a6466923d51c04aa9e17bf51e0a172226a
SHA512

747c17017897e6cd0045311b99bc75b9213d80866a961868d6904c0e8247c3fe846836efcd8623034f1ab0c21b4c673286d98010f5287215a654b116b6070af2
SSDEEP

768:t9lUImPQ3mejskIZE5k0Y3CR87DmCP8nn3gYRNBGzFtWnQce4JE2:WG38ZE5rY3BYRNLQca

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\0f5baaa4b08121246e8433735776e718_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0f5baaa4b08121246e8433735776e718_JaffaCakes118.exe"
1⤵
PID:2220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2220-0-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download
memory/2220-1-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download