75df59bbc927c47f5950984e09e96380cf4ef15b5099ca0def668a5eb947a8a9 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 23:01

Sharing

Report Analysis Logs

General

Target

abe4cd127119e29f88f403582d56c172_JaffaCakes118.exe
Size

191KB
MD5

abe4cd127119e29f88f403582d56c172
SHA1

166930c3cd55563381172c83149c0277b3736993
SHA256

75df59bbc927c47f5950984e09e96380cf4ef15b5099ca0def668a5eb947a8a9
SHA512

eaa20e1d3029c7df79498f4e36ee1ec28b6dc2ff3132bdf1b607a235e6425aa44fca72b572ab7aae9b1bc70c9362c351e3cfe5e858a3d5d2d106b6975bd283ef
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0d5:HAVySV1eY4k437d+4wkTHdS2R

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\abe4cd127119e29f88f403582d56c172_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\abe4cd127119e29f88f403582d56c172_JaffaCakes118.exe"
1⤵
PID:2856

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2856-1-0x0000000000C00000-0x0000000000C01000-memory.dmp

Filesize
4KB

Download