6df51b176106f441de57e7e21574c4613d3c58c62e01549da34813a81875a110

Analysis

max time kernel
94s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
09/07/2024, 03:24

Target

2ed468cd46e04c61e7b571aa94499d15_JaffaCakes118.exe
Size

325KB
MD5

2ed468cd46e04c61e7b571aa94499d15
SHA1

3a4e0b6c927e0e1bfd0eebddf8fdecdfed20f03a
SHA256

6df51b176106f441de57e7e21574c4613d3c58c62e01549da34813a81875a110
SHA512

7d8fbacbbcd06a0b114baa4a7ace6ce1f85598975dbce1d114caac8c740c7238674226d93c2d5247169266ef1301886d05d1c20326b09cfd0ce32aac25319c2c
SSDEEP

6144:ge349NUy4tuuAiJmtWUeXWkNq6TLA+dcs2aQFGu4r/zqvUA6OAit:OmyG7AiJcW9hrTcs2acGuMLA9vt

Score

7^/10

Loads dropped DLL 9 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2ed468cd46e04c61e7b571aa94499d15_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2ed468cd46e04c61e7b571aa94499d15_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:4864

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\nsoDD41.tmp\System.dll

Filesize
11KB

MD5
c17103ae9072a06da581dec998343fc1

SHA1
b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d

SHA256
dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f

SHA512
d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsoDD41.tmp\inetc.dll

Filesize
20KB

MD5
e541458cfe66ef95ffbea40eaaa07289

SHA1
caec1233f841ee72004231a3027b13cdeb13274c

SHA256
3bce87b66d9272c82421920c34b0216e12c57a437d1955c36f23c74c1a01d420

SHA512
0bf6313e4cb7bbdcfba828fb791540b630adc58c43aa4b5ba77790367d0f34f76077cd84cc62e2a2c98c788a88547f32a11e549873d172c5aa2753124847cd0c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsoDD41.tmp\nsDialogs.dll

Filesize
9KB

MD5
c10e04dd4ad4277d5adc951bb331c777

SHA1
b1e30808198a3ae6d6d1cca62df8893dc2a7ad43

SHA256
e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a

SHA512
853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e

Download Submit
memory/4864-55-0x0000000010004000-0x0000000010005000-memory.dmp

Filesize
4KB

Download
memory/4864-54-0x0000000003230000-0x0000000003231000-memory.dmp

Filesize
4KB

Download
memory/4864-57-0x0000000010004000-0x0000000010005000-memory.dmp

Filesize
4KB

Download