4fce508cfa7a31c7e19aec69e49725cb67206d482584e407c5c208cc1dc1ba5b | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
27/06/2024, 09:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1570342c8a6b3fdea0d3f5639c6e2e2b_JaffaCakes118.exe
Size

159KB
MD5

1570342c8a6b3fdea0d3f5639c6e2e2b
SHA1

42f6279abcef60c4e571910aaf21674b3d6cc06a
SHA256

4fce508cfa7a31c7e19aec69e49725cb67206d482584e407c5c208cc1dc1ba5b
SHA512

f0fad09f0d3175d24eb6bb5b228c40e0224200c3f1c02052d4604f9805ec8eed33038299ed24c967fd294d7f1651a0146284576ebefbb16a83d4d57c8d1e9a70
SSDEEP

3072:BQIURTXJ9nHSDAEc8OUW6D6/OP78vU8p48cKtgr8iRNydea+LpA:BsfnyAsl6/OP72U8m8cCK3Nyd7

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1570342c8a6b3fdea0d3f5639c6e2e2b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1570342c8a6b3fdea0d3f5639c6e2e2b_JaffaCakes118.exe"
1⤵
PID:2180

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads