07ef0ee7d8eef0398fa0fcc05332e4428ee48d39ddf362b4e47b0821eff0184c

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24/06/2024, 01:47

Target

06fb8f33d99086c0ab4c74f7055b0186_JaffaCakes118.exe
Size

79KB
MD5

06fb8f33d99086c0ab4c74f7055b0186
SHA1

151a965d070ddd21ca2bcf556b186869e24865e2
SHA256

07ef0ee7d8eef0398fa0fcc05332e4428ee48d39ddf362b4e47b0821eff0184c
SHA512

47fb977f5f5587a3bfea7767db42d179b58dedd470564b2e50108d3f619bf2048b92a01faa165cdf3e179a44f95a969d47589a4728faa2001438bdda4f2eb479
SSDEEP

1536:WpgpHzb9dZVX9fHMvG0D3XJ2LvGT/nJozgg5XAJDCXCSK/ff26Gj:8gXdZt9P6D3XJsvGT/neA4A/fOv

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
5108	06fb8f33d99086c0ab4c74f7055b0186_JaffaCakes118.exe
5108	06fb8f33d99086c0ab4c74f7055b0186_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\06fb8f33d99086c0ab4c74f7055b0186_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\06fb8f33d99086c0ab4c74f7055b0186_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:5108

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsl56FA.tmp\LangDLL.dll

Filesize
5KB

MD5
9384f4007c492d4fa040924f31c00166

SHA1
aba37faef30d7c445584c688a0b5638f5db31c7b

SHA256
60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5

SHA512
68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsl56FA.tmp\System.dll

Filesize
11KB

MD5
c17103ae9072a06da581dec998343fc1

SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

Download Submit