cb6bb334e15093e624d5a39cac6e119515bc961ea5a1232ab4aa1f6930f21584

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 19:18

Target

768be2bb7696ac531c86239484e01d01_JaffaCakes118.exe
Size

14.9MB
MD5

768be2bb7696ac531c86239484e01d01
SHA1

f6cb62a4d3b032f4fa4b7aefd2b10a2bbc61d8a7
SHA256

cb6bb334e15093e624d5a39cac6e119515bc961ea5a1232ab4aa1f6930f21584
SHA512

680f0db56f418999f18421a420d12385fb9d203da5daf0877cd9e1134fbf7d8c29229ddf173dcf6e06f49d62c91ad5581a914f705d090374c4ace31421b42c38
SSDEEP

393216:lLCpCbVuqCiV4WZGLyvqIWIaCu6EyL79Iidj3XEIH:9Sy7CyxZnqIj3u6t9bR30IH

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2924	768be2bb7696ac531c86239484e01d01_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\768be2bb7696ac531c86239484e01d01_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\768be2bb7696ac531c86239484e01d01_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:2924

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsh4CE8.tmp\InstallOptions.dll

Filesize
14KB

MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781

SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f

SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsh4CE8.tmp\ioSpecial.ini

Filesize
714B

MD5
9d114ae1bca72724070b5618bb8feb32

SHA1
fb43cacb143b507ec28a922abcef8c61f1f75039

SHA256
1b9ac72e0cc9a9a46d42e944ef07ff58cb69b621006f5e3cd21edbb399efc07d

SHA512
a55bfce8b6bdab686cbf0751956498d4ffdb7ce0ab7a9450c86d2545206ddcfa2597c11517525781c674eaa16224e58a719d7d211d3e1df541b44a9033f3546a

Download Submit