3033d42410719b3f96b234df52b86aba8b2903f67802eaf002d898401f671453

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
04/07/2024, 05:42

Target

24d2936e5d6165460257db363db81d7c_JaffaCakes118.exe
Size

1.7MB
MD5

24d2936e5d6165460257db363db81d7c
SHA1

af5b329471aab7e75e81b6d5a3f93ac26c09db27
SHA256

3033d42410719b3f96b234df52b86aba8b2903f67802eaf002d898401f671453
SHA512

981cc90fcd7b6bfa4a823397482f2c72f5c3d025b69b9293115b4653d9525926c3f0ef7166751f03cb2e7baac17a5c681f59378cbf964e0d1f03a1f39fb43f86
SSDEEP

49152:rHmQcflTK/qgqtdbBf8BlpcjrgDFoqRboJUMwzBfejkdXhIGko:rHmBfhK/qgqPbBf+lpcjrgx1poZwzleP

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2368	24d2936e5d6165460257db363db81d7c_JaffaCakes118.exe
2368	24d2936e5d6165460257db363db81d7c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\24d2936e5d6165460257db363db81d7c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\24d2936e5d6165460257db363db81d7c_JaffaCakes118.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2368

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/2368-0-0x0000000000400000-0x0000000000867000-memory.dmp

Filesize
4.4MB

Download
memory/2368-1-0x0000000000400000-0x0000000000867000-memory.dmp

Filesize
4.4MB

Download
memory/2368-13-0x0000000000404000-0x0000000000405000-memory.dmp

Filesize
4KB

Download
memory/2368-14-0x0000000000400000-0x0000000000867000-memory.dmp

Filesize
4.4MB

Download
memory/2368-15-0x0000000000400000-0x0000000000867000-memory.dmp

Filesize
4.4MB

Download
memory/2368-16-0x0000000000400000-0x0000000000867000-memory.dmp

Filesize
4.4MB

Download