71ed4a1e5cabaac6b36488646d202aad9c2865fbf10b6471ac87c7973b9064d3

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 21:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a28b826f6cd58521e00dd5af87390663_JaffaCakes118.exe
Size

46KB
MD5

a28b826f6cd58521e00dd5af87390663
SHA1

ecee9a2c278ecfa20ec486b71d9296f743923c14
SHA256

71ed4a1e5cabaac6b36488646d202aad9c2865fbf10b6471ac87c7973b9064d3
SHA512

46ac4304e4c0e4fb712af79d6d6af688b4e28c0a131e5d65c19f0b48380c5f3fa54d77547fe871c2945eff35bf2e4fa1b15b8eddc7bcd40a1a2cad0e982045c7
SSDEEP

768:h4wO7XBz+5Qm3W0tYdrQZHV4EWuWEUOg4jjfS3XJc2dH7q9N0HqgzHSNOYxsIeXD:6LXB65939tY6HBg4sXJc2dbS8qcy45uW

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
3316	a28b826f6cd58521e00dd5af87390663_JaffaCakes118.exe
3316	a28b826f6cd58521e00dd5af87390663_JaffaCakes118.exe
3316	a28b826f6cd58521e00dd5af87390663_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a28b826f6cd58521e00dd5af87390663_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a28b826f6cd58521e00dd5af87390663_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:3316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=1036,i,13640054265074968359,8146127767143474550,262144 --variations-seed-version --mojo-platform-channel-handle=3816 /prefetch:8
1⤵
PID:2340

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nscE60B.tmp\NSISdl.dll

Filesize
14KB

MD5
a5f8399a743ab7f9c88c645c35b1ebb5

SHA1
168f3c158913b0367bf79fa413357fbe97018191

SHA256
dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9

SHA512
824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977

Download Submit