d0f6ff0ee65f90b0e6b1f9ed5cbfdbcb7b752fc88b1c000a0398a501185e67b1

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
01/07/2024, 21:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1c86aa8b908fdc334adf572d0d264662_JaffaCakes118.exe
Size

442KB
MD5

1c86aa8b908fdc334adf572d0d264662
SHA1

081117441550cb26f09ebc252580d1b17fcd8e22
SHA256

d0f6ff0ee65f90b0e6b1f9ed5cbfdbcb7b752fc88b1c000a0398a501185e67b1
SHA512

46b938e420ffe966f4be2f741f7f4effd1b8e6e5c498cbb64ff0de20c0c2ec5ad810bc95072f6842194f75cbafa05c879e7f8b87e2a6b820f67943647750b654
SSDEEP

12288:9eFFJSqnVsFTX7IJHCVWuNMFgH1eqe3nUjLo4etzD:0FFJSqVeT0JiMuMFgH1eq62wVD

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3116-0-0x0000000000400000-0x000000000055D000-memory.dmp	upx
behavioral2/memory/3116-1-0x0000000000400000-0x000000000055D000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1c86aa8b908fdc334adf572d0d264662_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1c86aa8b908fdc334adf572d0d264662_JaffaCakes118.exe"
1⤵
PID:3116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3116-0-0x0000000000400000-0x000000000055D000-memory.dmp

Filesize
1.4MB

Download
memory/3116-1-0x0000000000400000-0x000000000055D000-memory.dmp

Filesize
1.4MB

Download