c11f6d7f0d71a4fb0b7f775932c3c8f90797175c82ab161bfcdcf6dd7931016e

Analysis

max time kernel
93s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 15:11

Target

3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe
Size

144KB
MD5

3de1f3abab369f69f0fd214f492a548f
SHA1

2fdbee5ed3abd68953d050ff151090c46e36773b
SHA256

c11f6d7f0d71a4fb0b7f775932c3c8f90797175c82ab161bfcdcf6dd7931016e
SHA512

3647fb8124511f60d9e2bbc3f1a84197f72f2ec275cad034681b68aaa17cfba56e9bf0548c5612a228d79fa1d2966017c9eba52c9267387a2d416ade0a87df8f
SSDEEP

3072:iBMvzevo6jEHoIrnp/zzrTJ0iaeeDrQ1C4aaStc+1n:kMiw6HSBHrqYCvW+1n

Score

7^/10

Loads dropped DLL 5 IoCs

pid	Process
1744	3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe
1744	3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe
1744	3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe
1744	3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe
1744	3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3de1f3abab369f69f0fd214f492a548f_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:1744

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Temp\gentee00\gentee.dll

Filesize
96KB

MD5
52a8e86ecb39f5bb63b26d4621f8e698

SHA1
51bd9538dc02193e60a35cca499d9a737dfd4e7f

SHA256
ca48e49874eac27d5dd57878de190dd9ae7f76976e1bb095adc002e37fddc709

SHA512
198c6535cdb82420ccd069b496461fc6c9026070188a16a6914f145e8552e1d28def044dab9c2c11bd241bb5c2491c8e8f5b814906ee43db57cb1e87c728438a

Download Submit
C:\Users\Admin\AppData\Local\Temp\gentee00\guig.dll

Filesize
20KB

MD5
2eaed54cdb5fdb8e6251de8dcd4ec25a

SHA1
597d55b4c90922bfa3e32641316401ccc38bd75a

SHA256
93798ebd08698389485fc9a05a802ca8ae06033c955ed2f3728333ab7584a0ba

SHA512
a1af6506051ebf5aa89700a2430e96f6d4cff078ea5a9285a2a065349482315b4bb92c809c2021898beeb1e0e2ffb4bdb9fbc7941041664eb9e0749f00653a30

Download Submit
C:\Users\Admin\AppData\Local\Temp\gentee00\unppmd.dll

Filesize
8KB

MD5
7b97f7a822f0f4f54c54b8ef92aaf09a

SHA1
d0916590b36d8e0507b6722449d7ffd2187498a6

SHA256
d6f3429b8ffe80e1bc023de22bc23d9b4d384d89a9b22db51aa27c804581642d

SHA512
d33c0c31df17738f0cd5384f579bacb512668ec8fec9c96e12125ffe58a38a46ac498f5924c8620a146b762fc318dd7f291efd27caaec45ca9f16d80dae05387

Download Submit