d0841acf6558391642874b61e5a4a06c9d7dd3cff95069cb20d9b573251c2e76

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02-06-2024 15:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe
Size

1.1MB
MD5

8e91a77e9f9629c99ad2fc48ad6e701a
SHA1

52b5c66d3dcf8ed36a7276eff5e49fcde5ae6b53
SHA256

d0841acf6558391642874b61e5a4a06c9d7dd3cff95069cb20d9b573251c2e76
SHA512

daecf168112b42c5fd4b9d18851752b2a2869d4847143b16e4ba54dc4e63af29a630da9189a80dbb08d39a371bfecfd3f9c7fafdf0d2c6ad2702ba26feeaa939
SSDEEP

24576:6pNe1RrKIxJ0JOMtq+xMvlPH/huDMMWnspIt1ewECW:mNe1RrZxJ0JVM9PHZ3fnsKt1XW

Score

4^/10

Malware Config

Signatures

Loads dropped DLL 2 IoCs

pid	Process
1924	8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe
1924	8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:1924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

\Users\Admin\AppData\Local\Temp\nst15A4.tmp\System.dll

Filesize
11KB

MD5
fbe295e5a1acfbd0a6271898f885fe6a

SHA1
d6d205922e61635472efb13c2bb92c9ac6cb96da

SHA256
a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1

SHA512
2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06

Download Submit
\Users\Admin\AppData\Local\Temp\nst15A4.tmp\inetc.dll

Filesize
145KB

MD5
505b89efc823507b29061168f66f159a

SHA1
db7e55cbbcb63102c619760c674705d61adc2336

SHA256
35da1e9d0c9aa0b622095d878c0a34e84db892c8124169cf095682b70ff38000

SHA512
c35355a44cebf20de7e357596213069027ad96f26af3db95d76e8249cb412d690d18deae7d3824672faafb93a6ae861e64434e18480e4a980ee553adadc6e708

Download Submit