62f888464225c4ee79a802d90d6e76c4248ff45458b8f48c47c044e336f0831f | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
31/05/2024, 17:57

Sharing

Report Analysis Logs

General

Target

87d709739a6de9e2dae47c53ee48e9ee_JaffaCakes118.exe
Size

191KB
MD5

87d709739a6de9e2dae47c53ee48e9ee
SHA1

5bb86df699ed12ca9bda84cba5a8d3143d5e0dd6
SHA256

62f888464225c4ee79a802d90d6e76c4248ff45458b8f48c47c044e336f0831f
SHA512

fa49c61862f4aee723aac0b7c1fe97940df64bfea1bd02b949489944289b8cd450d101b0d0995d769ea86ad332f022cbe2bd8b0aa48b54f7b1f6e74cb887b27d
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dT:HAVySV1eY4k437d+4wkTHdS27

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\87d709739a6de9e2dae47c53ee48e9ee_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\87d709739a6de9e2dae47c53ee48e9ee_JaffaCakes118.exe"
1⤵
PID:2952

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2952-1-0x0000000001E60000-0x0000000001E61000-memory.dmp

Filesize
4KB

Download