af8ff94957bef83b68e4047ee8c8dde2ddc81b785bfe345cf8c88ed7dcd09e5b | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13-06-2024 09:39

Sharing

Report Analysis Logs

General

Target

a4e4d06ae822ab10141c510595f0bc18_JaffaCakes118.exe
Size

2.1MB
MD5

a4e4d06ae822ab10141c510595f0bc18
SHA1

6f984373e7e3a55fa9437de2c6590a0bb79f19bd
SHA256

af8ff94957bef83b68e4047ee8c8dde2ddc81b785bfe345cf8c88ed7dcd09e5b
SHA512

64d68cdc3b60608db43589ef9006b0605ee1fe1644022027fa28fd32b29cc9d9597b0fd6d623036e4c5859970a1749ec8a47580c62930af8b027406d094c3172
SSDEEP

49152:GwW4tfIq56AT5W5l4Lvhx0sAuuaJTQx/V+/v95JdJWeTpONufFrb:zWgfn5aUZCuuaJvdPdD9DfFX

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a4e4d06ae822ab10141c510595f0bc18_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a4e4d06ae822ab10141c510595f0bc18_JaffaCakes118.exe"
1⤵
PID:2200

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...