0110f871e1d8a5c0a8d3a07776437e4ad831fa9badd3504edf5b51564577e397 | Triage

Analysis

max time kernel
141s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
27-06-2024 18:07

Sharing

Report Analysis Logs

General

Target

16fb64a7675704b7744e9757644c27cf_JaffaCakes118.exe
Size

226KB
MD5

16fb64a7675704b7744e9757644c27cf
SHA1

fd548f57eaad5d1abb88ea07f8da4f403d6440fc
SHA256

0110f871e1d8a5c0a8d3a07776437e4ad831fa9badd3504edf5b51564577e397
SHA512

993a59d21a685df27cb31ce8ea0a9e3910ed087b6721df1420e198f7af879acc8ffbaa40ab5df12551c00c37c6221b4c0f9f63f9ccceda7cfea2f2fda078bce9
SSDEEP

6144:cqUfbYkNDhdlqgFn2Oei/HjUM3gcmvN+5+JzpnhA:1SJb512JiIMwcmvg+rnhA

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\16fb64a7675704b7744e9757644c27cf_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\16fb64a7675704b7744e9757644c27cf_JaffaCakes118.exe"
1⤵
PID:1444

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1444-0-0x0000000000400000-0x000000000049300F-memory.dmp

Filesize
588KB

Download
memory/1444-1-0x0000000000400000-0x000000000049300F-memory.dmp

Filesize
588KB

Download