dd7eb7bb9ec4e56dc135437ceaa36625a072eac61f0a1a2390b3086ca5d45bcb | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25-06-2024 19:53

Sharing

Report Analysis Logs

General

Target

0f53e2f6b20de9bc9618fdef17a4bd47_JaffaCakes118.exe
Size

447KB
MD5

0f53e2f6b20de9bc9618fdef17a4bd47
SHA1

0c1a3b7b122cc6879a9d516931699b7d81e21fc2
SHA256

dd7eb7bb9ec4e56dc135437ceaa36625a072eac61f0a1a2390b3086ca5d45bcb
SHA512

6eb706c8c98a14a0448dd2b35e80c4f8cea3a93e40c8b971b19a60d4190241b0ec097ead7bf02f765191299597412da24eb62242473e95b946b58e7a97cde03e
SSDEEP

6144:UeN1t4hQry/zT2fAzDR9QoIg3DEx6kQFuBz6GEW9/CtKoOahQI9hBiTfb+:p1t4cy/32aYcmTquBzG9XOcQInb

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\0f53e2f6b20de9bc9618fdef17a4bd47_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0f53e2f6b20de9bc9618fdef17a4bd47_JaffaCakes118.exe"
1⤵
PID:2320

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads