e9f59772a453d9aa212e6eee9cf789d2e59c73c99267612262942d576c5196b6 | Triage™

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
17/06/2024, 23:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ba1f62e61b604fa00a25ea9edf2326a0_JaffaCakes118.exe
Size 312KB
Sample240617-3hcplashkn
SHA256 e9f59772a453d9aa212e6eee9cf789d2e59c73c99267612262942d576c5196b6
MD5 ba1f62e61b604fa00a25ea9edf2326a0
SHA1 0c62bdd9fc3a5eca53f82471b81a765a99ef494e
SHA512 0e6037ecbde3fb134b3a98c11a9fbed2c43480558633e305c5d2c20640ce3b7047ce93cacfabb1dd96f8bad37aeba1240cd297437564cccbf37ae080e1df4228
SSDEEP 6144:Me3z2O75+ZPPfnE2Qyn20Uqhj5lFBbRrQ/qQNof7R2TDtuVF575+ZPPfnE2Qyn2d:UOF+ZPPfnEUnxjvDbRrbRf7QBupF+ZPM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ba1f62e61b604fa00a25ea9edf2326a0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\ba1f62e61b604fa00a25ea9edf2326a0_JaffaCakes118.exe"
1⤵
PID:1164

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads