6ff896aad729154910bf638774d499748272c2a1e1805e073f665d7233edbc18

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
13-05-2024 02:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3d0cdc4de04d8e29026926d40266eb6a_JaffaCakes118.js
Size

8KB
MD5

3d0cdc4de04d8e29026926d40266eb6a
SHA1

d515c2f437e9e437f75f62e7368b9830408bf079
SHA256

6ff896aad729154910bf638774d499748272c2a1e1805e073f665d7233edbc18
SHA512

881ae25f0bc1381555bf3a40f7ed51ff0fa33dbd5d839dff53aeca98cdb3cdc9ef3475b088fa3a8aaab49ef10ded6f25e324ed71b0e92b141482cf9df5a82080
SSDEEP

96:k5FtgRYdkNCih5MOUruWhbHyR4Ndb7tfcU6mQz4JrI5C2UV1Pjk9c1hJIszSoMUs:I8VNCrOUrukyKqmSYesWoIThnrRcmxb

Score

8^/10

execution

Malware Config

Signatures

Blocklisted process makes network request 3 IoCs

flow	pid	Process
5	1700	wscript.exe
6	1700	wscript.exe
7	1700	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Script User-Agent 1 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	5	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\3d0cdc4de04d8e29026926d40266eb6a_JaffaCakes118.js
1⤵
- Blocklisted process makes network request
PID:1700

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads