49624ad96aed491dc5ced11533a158275bf8c786339e5625deb81ac08ce7bb3c | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
11/06/2024, 19:09

Sharing

Report Analysis Logs

General

Target

9f3fce10afbf1c33ef981b771319fc41_JaffaCakes118.exe
Size

191KB
MD5

9f3fce10afbf1c33ef981b771319fc41
SHA1

52db149f0dde41049aa148661adfe8d19e1934f4
SHA256

49624ad96aed491dc5ced11533a158275bf8c786339e5625deb81ac08ce7bb3c
SHA512

3cea8dc16f3cdc736e49ee70f2b48b41bb38fb2c2f4e86674eaf929aabbdbe9484cb2c986fb966c06bd99d0fac88af2f56a8d16291d92b7b01e901392c1b61d6
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dC:HAVySV1eY4k437d+4wkTHdS2K

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\9f3fce10afbf1c33ef981b771319fc41_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\9f3fce10afbf1c33ef981b771319fc41_JaffaCakes118.exe"
1⤵
PID:2932

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2932-1-0x0000000000B70000-0x0000000000B71000-memory.dmp

Filesize
4KB

Download