f24a509ad78acc5eeed6be163c25840981ef9dea5aa31ba8ae64ff892c9a3ce0 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 04:34

Sharing

Report Analysis Logs

General

Target

69bc9bd5f7e00d800d0973cc370578f6_JaffaCakes118.exe
Size

95KB
MD5

69bc9bd5f7e00d800d0973cc370578f6
SHA1

4bbb367430efdb514fce13501483d2627dd15b2d
SHA256

f24a509ad78acc5eeed6be163c25840981ef9dea5aa31ba8ae64ff892c9a3ce0
SHA512

36ad8d90c29b9e328ace93a1196fa622108619faedfd9e71d79f72b3b7c9c77db531d729b959d944dadb2e6dd8d34191993c755548bc167624d9c7e13dfc4e18
SSDEEP

1536:FG56bL7x+qR+eE88x8/eZKakO9V1meNL6CsNI8VpfodU2EjNZwD4rB7MwU13kyG+:AQ3cz8G4eKakOBpL6CAI8VOEO4r813kF

Score

6^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\69bc9bd5f7e00d800d0973cc370578f6_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\69bc9bd5f7e00d800d0973cc370578f6_JaffaCakes118.exe"
1⤵
PID:1736

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...