b5529f4fe0667bc9a09a04d16ca49fc170ae464f6e6cb78603f638046d5ae707

Analysis

max time kernel
141s
max time network
126s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
20/06/2024, 05:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

031919d6c99a9cffd61d43d26ae28eba_JaffaCakes118.exe
Size

2.2MB
MD5

031919d6c99a9cffd61d43d26ae28eba
SHA1

cad74f70759ef0089cac9b16224efeb7f843fb79
SHA256

b5529f4fe0667bc9a09a04d16ca49fc170ae464f6e6cb78603f638046d5ae707
SHA512

50e5b99dd216e0c325c6ecfd69faf1c386a0887a19b2acfc1c8ee6967b3ce8a9aa2a2b6f48772d7c8055e1cdf4535046969790ce684d92e46c7067f27366410f
SSDEEP

49152:MecrLa6dkeFx+OpoUwlFUV89GHlBmuLfixvBlKhEm:MrrpDFx+bUwlFUeimub8vB8K

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\031919d6c99a9cffd61d43d26ae28eba_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\031919d6c99a9cffd61d43d26ae28eba_JaffaCakes118.exe"
1⤵
PID:2216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2216-0-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-2-0x0000000000370000-0x0000000000372000-memory.dmp

Filesize
8KB

Download
memory/2216-1-0x00000000005E0000-0x00000000007BA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-7-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-8-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-9-0x0000000000370000-0x0000000000372000-memory.dmp

Filesize
8KB

Download
memory/2216-10-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-11-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-12-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-13-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-14-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-15-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-16-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-17-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-18-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-19-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-20-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download
memory/2216-21-0x0000000000400000-0x00000000005DA000-memory.dmp

Filesize
1.9MB

Download