78b813d01a006302cbeb57c610e4b5c26e2b9ad369644a35b143d8bbdaf8c91f | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 05:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a8382d0f41bed66c18b43b2b25b7428a_JaffaCakes118.exe
Size

5KB
MD5

a8382d0f41bed66c18b43b2b25b7428a
SHA1

a69117cbc559071cadf98757f070327c9cfc28f0
SHA256

78b813d01a006302cbeb57c610e4b5c26e2b9ad369644a35b143d8bbdaf8c91f
SHA512

7fd05c73baaa3111849f3ac724ca009b086bd0ff7b2991828b5a2ec58faf93b11cf71c54e28ff8eba4e0faf6e49749c55b486eea6f796bd5f34fc083aea814c6
SSDEEP

96:uIBVRBvlcTcSZ8w/71VbPZcfnp3F9ONEWZ2RQNc9NWhI:uIXflccSTjzbxYp1tWQ3WK

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a8382d0f41bed66c18b43b2b25b7428a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a8382d0f41bed66c18b43b2b25b7428a_JaffaCakes118.exe"
1⤵
PID:2040

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2040-0-0x0000000001000000-0x0000000001006000-memory.dmp

Filesize
24KB

Download
memory/2040-2-0x0000000001000000-0x0000000001006000-memory.dmp

Filesize
24KB

Download