16b6f6d90d3660f8adc39145ac20c2089ea376f9861f24d1925063f4aece2a22

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 11:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

34744a5749315d0cefc2a57759a5c7c1_JaffaCakes118.exe
Size

51KB
MD5

34744a5749315d0cefc2a57759a5c7c1
SHA1

d53abf853c65fc8a41bd52e833041cfcef33bc62
SHA256

16b6f6d90d3660f8adc39145ac20c2089ea376f9861f24d1925063f4aece2a22
SHA512

91a90e9e973e26abdfc7e952a8ea009a29c577c078297fe8be1655f69c23913c86ec0cc96516ffe2c6d0a8aff7ebc9d29c559edd3ed81f4edcce03b29fca5e25
SSDEEP

1536:+HYMiClDhdyA5x5Z0DvyecUpjTGetwRXV:WYjClDhQlDvrcUp1twNV

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2064	34744a5749315d0cefc2a57759a5c7c1_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\34744a5749315d0cefc2a57759a5c7c1_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\34744a5749315d0cefc2a57759a5c7c1_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nsd2BD2.tmp\UserInfo.dll

Filesize
4KB

MD5
dada3e1836af78d5b24499da252d01e4

SHA1
d2a1c25405e3c74973cf18dec2c7138df9e96a83

SHA256
0073337816509851476c2cc154f471a3e3a1a2806b97c363870acc09a30a5ed7

SHA512
f8bda8413dadb00a644341da5e076f203a3134daaefd2961fa0341f5a533eee28582ce9872354ead698bb1275ee7726fa574267e909a3e2f977908392e7a5c66

Download Submit