4824b32e77aaa215c6497d16df9c022feddd5162fc8a3aa67a609150d91b8e92

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/06/2024, 00:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118.exe
Size 16.2MB
Sample240604-ajw6eaed2w
SHA256 4824b32e77aaa215c6497d16df9c022feddd5162fc8a3aa67a609150d91b8e92
MD5 93182ebc2cb2ae696c097d85759dfed8
SHA1 079b4157ebb976d0f26630285f3e0cc10b126da1
SHA512 d6ade9a5ccbcdfdd9311ee06ced7097ea1558cffb796a22d943d1363750c9dfbf246535e1e36b22e255a9c379d375345aca65c4ed0c1f584acd79e8951cb760e
SSDEEP 393216:b+zq2PjlG6Oy86+4kWIDoGIfZaoizv3joCwKRYvOVa30IEd:K+oG6DEWugpuMC74kIEd
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
3048	93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118.exe
3048	93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118.exe
3048	93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\93182ebc2cb2ae696c097d85759dfed8_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:3048

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

RCWidgetPlugin.dll

Path C:\Users\Admin\AppData\Local\Temp\nstD98F.tmp\RCWidgetPlugin.dll
Size 5.2MB
SHA256 2d158ba1e557aff957947ceb927183d1148acd8f54a0029083be619e2844cf36
MD5 713c4b658cbbef6e7ca8c298689b2281
SHA1 f4d4d5d9ed19786abebd4f028dbcabd563895e35
SHA512 b69f0e1748dd5f3c4497dca21899826648d09f2979ec608e69a04b9a3fc1fac1972149f2fa50503c80f3ff8e13456b50cf70e31b17fe5cc2fafe1a5fd1b26955
SSDEEP 49152:r4dxo8I4F/hfRumdzTxx81C+H0P3UekweGRgpS1CzHrPiWDhpPQEpWuyXoiLdaur:cdxoijJphDkwopS1gTDjlU4iL0iKjbGH
MD5 SHA1 SHA512 SSDEEP

Submit Download

FileInfo.dll

Path \Users\Admin\AppData\Local\Temp\nstD98F.tmp\FileInfo.dll
Size 121KB
SHA256 8f7d75e4ea90962c8438785b8f32b0069d0402f8befed741a3a98391e478b090
MD5 80fe0f9702d94bb88515f42bf8a4ed34
SHA1 7af08fa14927a2f5ec7121c5adb7bf98514696d9
SHA512 387123c2577e44db41d297c5dc30848d6a733fd233798de642f831b81aada5bb2bd0fa334b3a599468330eeb66efa9655a4fb5c8797b1cfc13a87d9b5d29a696
SSDEEP 1536:UPbjnSKdEa7gtJzYAvqIe6zq204iuX+RJmrcpOzsWjcdGf+mdJuMczQ//5h:UP9pMvRvnRq2NzqO86+mdJuMczQv
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path \Users\Admin\AppData\Local\Temp\nstD98F.tmp\System.dll
Size 29KB
SHA256 f8d7c15bce6ccf0c3f230ef8e2499f179bf4fe7163fe524177ce53514eab72f3
MD5 cd9c08ef7483118c960b594afe2ac37e
SHA1 912394b4f53a6d9468c6cf58c266b1d6342df54e
SHA512 d3949e1d54019cf1bd6ad5caf9d30442c50f755f3c2afff4d97234609caa773a7820e14bf35502c98129d93e3041f1e065d719f90fc4e84058332601014a561a
SSDEEP 384:CFx8XpXIgtyMKJnoHLJ84QN+pkEkpQZfUXVPr/ceMWJ8H6pkEkhRK5RwV0/XzJdB:CFSYgty1orJ8zNjEs7x+Em+M7dK
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/3048-17-0x0000000006520000-0x0000000006521000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads