24e9715cb939a5d4c0ffa3f156495e77d38f715e67c93f879a4cc13ff07dd0d9 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 00:03

Sharing

Report Analysis Logs

General

Target

48ac9a0a8db1ef182970ccfe9efb4b11_JaffaCakes118.exe
Size

159KB
MD5

48ac9a0a8db1ef182970ccfe9efb4b11
SHA1

4984e2bda3f9459f3c6bbbfc0d6acd339ed9f56c
SHA256

24e9715cb939a5d4c0ffa3f156495e77d38f715e67c93f879a4cc13ff07dd0d9
SHA512

b3e33e67b9aa634041102fb681a767a54e75df9ccdb1f6645d350b583f3a9bfe2f67ed82fb8503108ad4d88ccc9c393354be8b84c8b09302e488c77d7ee34aa1
SSDEEP

3072:eRbmfPyLePnYXOPHoDMd82HkqyHLRnFR+X/lh:eRbmo+voOByHlFR+Plh

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\48ac9a0a8db1ef182970ccfe9efb4b11_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\48ac9a0a8db1ef182970ccfe9efb4b11_JaffaCakes118.exe"
1⤵
PID:1952

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1952-1-0x0000000000B10000-0x0000000000B11000-memory.dmp

Filesize
4KB

Download