77ae25342df4b2de690bb2f189c9719f7358d1966597d918867275e5a1d1ab9e

Analysis

max time kernel
93s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15/05/2024, 10:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

45ab8d13a9b27eefa0a7f87d0ff0c73b_JaffaCakes118.exe
Size

3.0MB
MD5

45ab8d13a9b27eefa0a7f87d0ff0c73b
SHA1

27ec27e709492678e49fcc1a4a79a9b0f2fa4bfa
SHA256

77ae25342df4b2de690bb2f189c9719f7358d1966597d918867275e5a1d1ab9e
SHA512

30dd12c573421cbf203bf12c9d17a8f8f2c410cef74446e18afb0a8d6b8bb033e89deb5364f69f9f052963e85c2ce780be7a0a19c89e93ae732d026b9d144798
SSDEEP

49152:cjpEO2MFV6svprw+bNmWvoJ4uhHlRf+Jxe8vefcaMNF+amzkMokhqJ:FCV50+bZQJ4urRf+vdve7xzkMokoJ

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 4 IoCs

pid	Process
2916	45ab8d13a9b27eefa0a7f87d0ff0c73b_JaffaCakes118.exe
2916	45ab8d13a9b27eefa0a7f87d0ff0c73b_JaffaCakes118.exe
2916	45ab8d13a9b27eefa0a7f87d0ff0c73b_JaffaCakes118.exe
2916	45ab8d13a9b27eefa0a7f87d0ff0c73b_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\45ab8d13a9b27eefa0a7f87d0ff0c73b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\45ab8d13a9b27eefa0a7f87d0ff0c73b_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nss4D75.tmp\ButtonLinker.dll

Filesize
7KB

MD5
dd85ac7d85c92dd0e3cc17dfd4890f54

SHA1
a128fb7a05965c1a9913c6f5e419e6c4c0a7d2fa

SHA256
27abd2a4fb1bf66add60221b52d061bbe24d2d21e13600725ff7a5c6c777b504

SHA512
e4ff8216c65110a9d156f37c2062acb53a72daa8af12dfc24278920d9e1a4083a81b1446759df75405b2da34c7bfb1afc33184feedd0aee4ed73f79fcbb1a8a1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nss4D75.tmp\System.dll

Filesize
10KB

MD5
2b54369538b0fb45e1bb9f49f71ce2db

SHA1
c20df42fda5854329e23826ba8f2015f506f7b92

SHA256
761dcdf12f41d119f49dbdca9bcab3928bbdfd8edd67e314d54689811f9d3e2f

SHA512
25e4898e3c082632dfd493756c4cc017decbef43ffa0b68f36d037841a33f2a1721f30314a85597ac30c7ecc99b7257ea43f3a903744179578a9c65fcf57a8b7

Download Submit