c8f2f1642b04b0a138582872272b08ad8ce31e723cc606d4ea24639a9dc596b0

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
24/06/2024, 07:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

073cb7b4e9af7bf642550989916ada8f_JaffaCakes118.exe
Size

398KB
MD5

073cb7b4e9af7bf642550989916ada8f
SHA1

6bfe4fbb994e45e99eb9e5a549c650223bbfa7c5
SHA256

c8f2f1642b04b0a138582872272b08ad8ce31e723cc606d4ea24639a9dc596b0
SHA512

0cd11d61133f542d6b41ef24d35e349b21e5e0e26c2aa5c4270964dd1fd2ca25fe0bf4017ccef9dbb907e66ae6b728c902d6ecf742f3824485406d6327d6660f
SSDEEP

12288:lQt3YaXVedjuVIUhYXecsbgeasf3SdMK8LtlIxUHvM1C:uIy7VICYXecsEYfaMK8LbIeH6C

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2292-0-0x0000000000400000-0x0000000000552000-memory.dmp	upx
behavioral1/memory/2292-1-0x0000000000400000-0x0000000000552000-memory.dmp	upx
behavioral1/memory/2292-2-0x0000000000400000-0x0000000000552000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\073cb7b4e9af7bf642550989916ada8f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\073cb7b4e9af7bf642550989916ada8f_JaffaCakes118.exe"
1⤵
PID:2292

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2292-0-0x0000000000400000-0x0000000000552000-memory.dmp

Filesize
1.3MB

Download
memory/2292-1-0x0000000000400000-0x0000000000552000-memory.dmp

Filesize
1.3MB

Download
memory/2292-2-0x0000000000400000-0x0000000000552000-memory.dmp

Filesize
1.3MB

Download