d81fdcc0520f1f01645e978ae21fcd7e01887044249d7ee1d0e018a6832320a5 | Triage

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
09-07-2024 19:00

Sharing

Report Analysis Logs

General

Target

3195bccc89f2d79e5f806474e2995706_JaffaCakes118.exe
Size

1023KB
MD5

3195bccc89f2d79e5f806474e2995706
SHA1

18791d23292f75de11ea4472b210ec33a4f0a1f2
SHA256

d81fdcc0520f1f01645e978ae21fcd7e01887044249d7ee1d0e018a6832320a5
SHA512

e09f258077d60e1979d6c5e109a373ae754d4b5f6f015b7fa26239b681be3c0f0f7c927d60d5c92b1ddc0b4ec724284e76d9d52896c4f1f0cdd477f5de960457
SSDEEP

24576:K2XwlCawZDWAGUxrlThp3sFIQnYZMBjYlCP2BlcEmxd055QaA:KawlCaFELD3st+M6ljBlcEmxK5Oz

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3195bccc89f2d79e5f806474e2995706_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3195bccc89f2d79e5f806474e2995706_JaffaCakes118.exe"
1⤵
PID:1300

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads