e993c327b836750ebbe1849acec895e87d152b48f0dff62fb4bd6e7dbe4b8f10 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15/06/2024, 22:30

Sharing

Report Analysis Logs

General

Target

b06efb1b8d7105c540ce89bdfb5ec6e5_JaffaCakes118.exe
Size

191KB
MD5

b06efb1b8d7105c540ce89bdfb5ec6e5
SHA1

bbfd1af19f235dd3fd36bfb8d42dae777062d691
SHA256

e993c327b836750ebbe1849acec895e87d152b48f0dff62fb4bd6e7dbe4b8f10
SHA512

d7439a25ba47ae2b00f584d90dfff3b2af0cd73744809b126de6b67e1600ad3ef8e28a0da5a0014d176ec579a7a85f54460ac4f55565ae4c184c551972bbdf81
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dZ:HAVySV1eY4k437d+4wkTHdS2h

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b06efb1b8d7105c540ce89bdfb5ec6e5_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\b06efb1b8d7105c540ce89bdfb5ec6e5_JaffaCakes118.exe"
1⤵
PID:1928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1928-1-0x0000000001120000-0x0000000001121000-memory.dmp

Filesize
4KB

Download