58465648d792f118660ff7515e0b0350ebcfe576e19fcfd05a23b58c45770a3d | Triage

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04/07/2024, 17:38

Sharing

Report Analysis Logs

General

Target

25a5ef4ca2975ce5a674f7130d3da4bf_JaffaCakes118.exe
Size

601KB
MD5

25a5ef4ca2975ce5a674f7130d3da4bf
SHA1

0f5db705938ef84f0c08542fe572c3751042fede
SHA256

58465648d792f118660ff7515e0b0350ebcfe576e19fcfd05a23b58c45770a3d
SHA512

d2b1a546c3291a195906ec9940510d2868b30601d39b5bcfef1bcf2d9af8b7d3f49e72db3eed9f92d5e214f806f0268c018326fc146604f9e6e28f0aca379a4a
SSDEEP

12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg5O:AtMCkmOMXJbFSv/JivQsG50M

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\25a5ef4ca2975ce5a674f7130d3da4bf_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\25a5ef4ca2975ce5a674f7130d3da4bf_JaffaCakes118.exe"
1⤵
PID:3016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads