d3351dfdcaa85cea4092b34fcc93b96636d43d32b6ad338208dcb2c124de1756

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
28/06/2024, 02:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

18727f9489617c426cdd80939ecb9387_JaffaCakes118.exe
Size

721KB
MD5

18727f9489617c426cdd80939ecb9387
SHA1

b0fec0df599a67344322b3c05ba588597b5c869e
SHA256

d3351dfdcaa85cea4092b34fcc93b96636d43d32b6ad338208dcb2c124de1756
SHA512

2fd1b3fb8db38897a14473f70d88b15e4d23e6e35eeec6aaf63ae756dc7ec64f14affc8e4f8145075cbcd46226a459e62771f5249889f8f8a5effe7ecb4884ef
SSDEEP

12288:YB8CU3PBeV+qh8JTkTSudx9IbLSPyl13s+N92zcF+kI71rnEyZcsoI:YB85JeVbNS8uK23iIFvI71rnfWI

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
1388	18727f9489617c426cdd80939ecb9387_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\18727f9489617c426cdd80939ecb9387_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\18727f9489617c426cdd80939ecb9387_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:1388

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsp51EA.tmp\InstallOptions.dll

Filesize
14KB

MD5
0dc0cc7a6d9db685bf05a7e5f3ea4781

SHA1
5d8b6268eeec9d8d904bc9d988a4b588b392213f

SHA256
8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c

SHA512
814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsp51EA.tmp\ioSpecial.ini

Filesize
751B

MD5
5bb0700d89760e8952c620a6cc276a3c

SHA1
2eb1634a8681d382552e308689c3409f5843cdc5

SHA256
dade24be27861d92301708121ebbd52efa19db93b062cc815e6862408d757fb4

SHA512
a03fccc41e35bd4921aae0c29a8582d4150f2b451d8c17e081a9e76ec784175315e80831750304549adce8d0a2f0303ac7f6831a2e918da0bc684946c550e6ff

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsp51EA.tmp\ioSpecial.ini

Filesize
411B

MD5
74ff1e27c011e963e54144c36e505709

SHA1
ff84e766a2780a5946c2475461c08d6343e4b11e

SHA256
92fb1ec38a903df08b8798264ee172fd59837cf50483a470365520099d27574c

SHA512
56d04a54813a037bd2681a6ebb3eee0cd39a7ce8dd8f3d5223fa85d20467e5c4fa2437285bd0d10c8046dd6247aaeae473fca74fcc250610369a5592b1fbb5cc

Download Submit