39f033abc417ac9a14b3acf4729c3ee9ed1424ccf6848cd973b037e2d899de02 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
19/06/2024, 20:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0045400ae2c084143598b8dd1f57eb48_JaffaCakes118.exe
Size

649KB
MD5

0045400ae2c084143598b8dd1f57eb48
SHA1

b4fc6de46eb8114d995de24eb660137ee7bd39d2
SHA256

39f033abc417ac9a14b3acf4729c3ee9ed1424ccf6848cd973b037e2d899de02
SHA512

589eeb1f50dd2b59bb3d0c80de3147f3f8ffe0a38690d49468728c91f013c2d1760a0b0d3351d41e586bd266f526ad0e2c282975e08ad9406795c72ab82f34de
SSDEEP

12288:pYjRQoCzpVfuM+FiEe5c1+6Kfw+IZUUclcTYoirkuliJ2/r7qm/:pYGDpIM+7e5wK4xZUKfUo47P

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\0045400ae2c084143598b8dd1f57eb48_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0045400ae2c084143598b8dd1f57eb48_JaffaCakes118.exe"
1⤵
PID:2924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads