777730664beeade5b6f7b22e8dab7682caa8dfa1456b4c503be930f857265cea

Analysis

max time kernel
135s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
04/05/2024, 08:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe
Size 161KB
Sample240504-kayb8age2v
SHA256 777730664beeade5b6f7b22e8dab7682caa8dfa1456b4c503be930f857265cea
MD5 11e12e0c4d93c8d9f2efc3787cc100c0
SHA1 12b61e351415a72f67afe5e7d6650c1443b47413
SHA512 7ecc0f2582171b5660b51fef1e2a54464450163a382d6818f68727e23668d5007ee7e19e0afcec0d6780a7864ed41ebb85dead3eeb5eaedd999d4dc8521525ce
SSDEEP 3072:fLk395hYXJkmCQMpywCP9EuToe4kNnuB6J0y0dxXiQbLUd/FVhfY2V7kl:fQq6mCQMpLCF1gSnuAJ0y0dxXXLUxFv+
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
4620	11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\11e12e0c4d93c8d9f2efc3787cc100c0_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:4620

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsw3D87.tmp\InstallOptions.dll
Size 14KB
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsw3D87.tmp\ioSpecial.ini
Size 712B
SHA256 56e03b11c76f2b16f58de4f4bf4cc506501f72eb5e53f1e606408f81a6bf0589
MD5 9a203351178d59719e7bea170e0aefa6
SHA1 cb1ab978c1ef75610b7ea2562525d11966cf6564
SHA512 a6bb3c97dbf7bd10248f0133950390437f8ef3257899dcf1d8f0cc2110e053c661df7010602c7c96453777e6b332335f9791ff9ec7f0fd94eb543817a9af79c3
MD5 SHA1 SHA512