0729e0eb92d932d70e280fbb187fa0ed913d8ca2b7064d29573cec52f73d61c1

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
19/05/2024, 19:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5b2b679a4ccb40b5d4e4a5027197db33_JaffaCakes118.exe
Size 19.6MB
Sample240519-ym9snsfb2z
SHA256 0729e0eb92d932d70e280fbb187fa0ed913d8ca2b7064d29573cec52f73d61c1
MD5 5b2b679a4ccb40b5d4e4a5027197db33
SHA1 f26e82d6c5d9713f82c6cf72dd229009d1570aa0
SHA512 744f12c1f6997c57650918d99e037862475573f64c399b74f174dbd6fc4c8d2d762e6dde528fc30120a5b674c92dc6aa8fbf44fcfd67c213da200d556fd0941b
SSDEEP 393216:bxF6Eeib2BDlGs3smI/rH9VbzX3NydzHQC4UjTcNSUejwdEppXxjEfWFItQDEZ:l4Ehb21lGpTz3IdzHNdvtRkEpjPIO2
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2276	5b2b679a4ccb40b5d4e4a5027197db33_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5b2b679a4ccb40b5d4e4a5027197db33_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5b2b679a4ccb40b5d4e4a5027197db33_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:2276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsi5B21.tmp\InstallOptions.dll
Size 14KB
SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
MD5 0dc0cc7a6d9db685bf05a7e5f3ea4781
SHA1 5d8b6268eeec9d8d904bc9d988a4b588b392213f
SHA512 814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
SSDEEP 192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsi5B21.tmp\ioSpecial.ini
Size 615B
SHA256 ba2fe485ff22078981d41a7dc6eccc686168d5a38bb9e2621d978d12dde96c03
MD5 a6a50a56ce7cf20a38e33da7d5bf71e9
SHA1 a715a12795cd76b348e587ea668e3a81db24d166
SHA512 651aea0febf563326270bb87a402ea9a7a6cbb8f11f814e2300333c8b6038c80e462c00b11d8aa84ad73c967317d0c808eff1a5b2926ddedea366e719d52c1ea
MD5 SHA1 SHA512