5e00ba42dc194f5da25bb083b3e12e156aba437ca8f8a1015dacdd3ec14be526 | Triage

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
07-07-2024 12:55

Sharing

Report Analysis Logs

General

Target

29fd6f125c5089cf862f405082368bfd_JaffaCakes118.exe
Size

254KB
MD5

29fd6f125c5089cf862f405082368bfd
SHA1

256ca2ce1c55fe45e4b2367a5ffe396a657508df
SHA256

5e00ba42dc194f5da25bb083b3e12e156aba437ca8f8a1015dacdd3ec14be526
SHA512

53be8a45dcc03f0abaed39012fce8d86b6ad533a05f4eab20d850fbedc62d6c19aeb4bca860437b19186ea33967dff8899c66ff7f6231642485629b83842b5bc
SSDEEP

3072:NV5pU8DSmJ/A8fJ8N71vDSQoC6tnG2VBkxxEXVGUSlmSpL6UW/HutfH3jiE11mxQ:NAUfuJ9DanldxSjx7f2PCipPJyiS5l

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\29fd6f125c5089cf862f405082368bfd_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\29fd6f125c5089cf862f405082368bfd_JaffaCakes118.exe"
1⤵
PID:3564

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads