d0841acf6558391642874b61e5a4a06c9d7dd3cff95069cb20d9b573251c2e76

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 15:34

Target

8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe
Size

1.1MB
MD5

8e91a77e9f9629c99ad2fc48ad6e701a
SHA1

52b5c66d3dcf8ed36a7276eff5e49fcde5ae6b53
SHA256

d0841acf6558391642874b61e5a4a06c9d7dd3cff95069cb20d9b573251c2e76
SHA512

daecf168112b42c5fd4b9d18851752b2a2869d4847143b16e4ba54dc4e63af29a630da9189a80dbb08d39a371bfecfd3f9c7fafdf0d2c6ad2702ba26feeaa939
SSDEEP

24576:6pNe1RrKIxJ0JOMtq+xMvlPH/huDMMWnspIt1ewECW:mNe1RrZxJ0JVM9PHZ3fnsKt1XW

Score

4^/10

Loads dropped DLL 2 IoCs

pid	Process
2272	8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe
2272	8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8e91a77e9f9629c99ad2fc48ad6e701a_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:2272

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsy4269.tmp\System.dll

Filesize
11KB

MD5
fbe295e5a1acfbd0a6271898f885fe6a

SHA1
d6d205922e61635472efb13c2bb92c9ac6cb96da

SHA256
a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1

SHA512
2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy4269.tmp\inetc.dll

Filesize
145KB

MD5
505b89efc823507b29061168f66f159a

SHA1
db7e55cbbcb63102c619760c674705d61adc2336

SHA256
35da1e9d0c9aa0b622095d878c0a34e84db892c8124169cf095682b70ff38000

SHA512
c35355a44cebf20de7e357596213069027ad96f26af3db95d76e8249cb412d690d18deae7d3824672faafb93a6ae861e64434e18480e4a980ee553adadc6e708

Download Submit