d06bcf6fc5cf621e3a8585a32a46cea3b91befd293c29d1673def6dbd167f8c2 | Triage

Analysis

max time kernel
9s
max time network
15s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 04:31

Sharing

Report Analysis Logs

General

Target

334f97272efafb1b6691f4962528322b_JaffaCakes118.exe
Size

4.5MB
MD5

334f97272efafb1b6691f4962528322b
SHA1

3679cf2818340e2dca7795875f75f9d2cc1b3533
SHA256

d06bcf6fc5cf621e3a8585a32a46cea3b91befd293c29d1673def6dbd167f8c2
SHA512

3d172675bbbbb42b0dd8eb72748b76fa09c9fbc8bbf476708f6cb16e903ea7df6f19e24cb723e132695fd974dde930cd7e6ac89edfbd96908c1b3479dd40b361
SSDEEP

98304:hQWSaqsHx8ZvA8AEJueiIjcdfJaNL0PnoMB0Y3HplLtXwTu95Su:As+VA8ArijcdfJiL8noMWY3HplZgTO0u

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\334f97272efafb1b6691f4962528322b_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\334f97272efafb1b6691f4962528322b_JaffaCakes118.exe"
1⤵
PID:2120

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads