5ccab528cc8fd779b2121417032395fde5b601f874ddf758f392f6efc0af00a1 | Triage

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
06/07/2024, 03:27

Sharing

Report Analysis Logs

General

Target

27518727d45cb3129c7c242b341def5a_JaffaCakes118.exe
Size

1.9MB
MD5

27518727d45cb3129c7c242b341def5a
SHA1

c38d557031060a12efc98f750d4248301baee9ba
SHA256

5ccab528cc8fd779b2121417032395fde5b601f874ddf758f392f6efc0af00a1
SHA512

40c574c6cadafbb5ad7aca35814eb1ab0c90b1a41b4289c41588907f5aa9473db2b4f6bdc0bd00042c4954eac63e6bdebb64572ca4a50c4d49c7a2f484f6b2ff
SSDEEP

49152:R8DBWibAiy+rpEJMt3xQf4IM54glnhH/p0r:qdWiMWEJMt3+wIMf0r

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\27518727d45cb3129c7c242b341def5a_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\27518727d45cb3129c7c242b341def5a_JaffaCakes118.exe"
1⤵
PID:3044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3044-0-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/3044-1-0x0000000000400000-0x0000000000865000-memory.dmp

Filesize
4.4MB

Download
memory/3044-3-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download