331c4b65cc3859aabcf21d012e8e7e89ae68a591de66e1b61064b3263694ebe1

Analysis

max time kernel
143s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 06:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118.exe
Size 9.9MB
Sample240528-g7a2eahc5y
SHA256 331c4b65cc3859aabcf21d012e8e7e89ae68a591de66e1b61064b3263694ebe1
MD5 7c0231eb508e6f8ad60288a61b4212c4
SHA1 4150458566dab48108535f3a32e6ffe4f1a2a92c
SHA512 05c623a3529c98fb2badebf627d06d019010b475415670d37e4545cdffa23912a20a321f47d555c2e39c837211b33c129662767ed287921af8b4b8db8484f9de
SSDEEP 196608:uYSpn6L1iqCTZV2AopAVzPtDaRyry6DG/eik/anX7+Jol1LnAP6XVh:HU6L1wDFomBi6y6imV5JWhE6XVh
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
4504	7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118.exe
4504	7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118.exe
4504	7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\7c0231eb508e6f8ad60288a61b4212c4_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4112 --field-trial-handle=2292,i,2103142837140538807,15881446839139365070,262144 --variations-seed-version /prefetch:8
1⤵
PID:4416

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdC7F.tmp\InstallOptions.dll
Size 14KB
SHA256 78012f560bb917218435f4b3ef2e3491bab15647e11ccb90bc117731181134c4
MD5 5d195f1ac9869c208f6c02a5bde6f9c1
SHA1 a8ec993a12708572ca8ca3d1fcbdc25230bdaf10
SHA512 1f6a2e909e3a7188f24758715cdc7c9d8c17450a67c37cc74487924b00d5402c125ff8ec27b42038e20b560016f086b05133bf2bd04e670a1c46fa38c1b20672
SSDEEP 192:C4n3T5aK+dHCMR1aQR9RuZl3WWmU7WYZsw1JpVGnrjYK72dwF7dBOne:jn3T5KdHCMRD/R1cOnrjY+BO
MD5 SHA1 SHA512 SSDEEP

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdC7F.tmp\UserInfo.dll
Size 4KB
SHA256 11adf8916947b5a20a071b494fa034cf62769dcc6293a1340b29a5bb29ac8e87
MD5 7836f464ae0102452e94a363b491b759
SHA1 59909a48448b99e2eb9cd336d81d60764da59f31
SHA512 5ed63eefa1b3b3caad4cb762ccb8419c05bcad3da3a7415235cda2d2a1f79eb018503ca30a0a92d6b72160327decea9a70c48e0c28de94dd67303d4aea4a02db
MD5 SHA1 SHA512

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsdC7F.tmp\ioSpecial.ini
Size 682B
SHA256 15db395166018625fec4d214f1680c43e3bd389eb42d3d5fb9e740a1a483e3a7
MD5 ada91389f371a2d8b0cba86446a86f1a
SHA1 6571369a5f7639763b82be30cd52aeb43ef56a77
SHA512 26301cd13a904766efbfd0047b4e55f15e3aa9c930b017fb90fcba19c9bab98d1397eeb7a28100b1f141f92af7fcb9edbdf9d1b5d72279d91774aa0a019ef282
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads