b58c3a6d60ee8dfb0f872c208bd65b124542974774fce15942e286d36dcdd10c | Triage

Analysis

max time kernel
12s
max time network
153s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/06/2024, 16:19

Sharing

Report Analysis Logs

General

Target

098b53a76ca8ec625ae5c1061e572dad_JaffaCakes118.exe
Size

24KB
MD5

098b53a76ca8ec625ae5c1061e572dad
SHA1

aeb40d9c170e05c1408585d05d9cd5eb27207edf
SHA256

b58c3a6d60ee8dfb0f872c208bd65b124542974774fce15942e286d36dcdd10c
SHA512

ff5439dc4db1836c1f7b94676fed0a4e6cb08e932f41c6dec20d17d217f38104c241e2fd51e9c18dcd415fc6912f116aeb3558e26241a8732aab0137ee62e9f3
SSDEEP

384:GubcF4wUdjXeEvtsEN3/UxdRWb4cEfNXAnlX7zjavzDG:tbc6UEvtNsQ8c6VSXverDG

Score

6^/10

discovery

Malware Config

Signatures

Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

C:\Users\Admin\AppData\Local\Temp\098b53a76ca8ec625ae5c1061e572dad_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\098b53a76ca8ec625ae5c1061e572dad_JaffaCakes118.exe"
1⤵
PID:2164

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads