75b33e0435536fb883b99aa5659469318c5c480887ec8f1cb1ab380475e2cb26 | Triage

Analysis

max time kernel
142s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 05:28

Sharing

Report Analysis Logs

General

Target

447e79fb02300cae0667c86b4dc0ad21_JaffaCakes118.exe
Size

7.6MB
MD5

447e79fb02300cae0667c86b4dc0ad21
SHA1

2206b0b5cfc435ac50afe5bdd0d21a50ab7552bc
SHA256

75b33e0435536fb883b99aa5659469318c5c480887ec8f1cb1ab380475e2cb26
SHA512

ee12dc71a6b88f80fa8c115e16ea33bda75fd8092d4d3625fc619d4d83227415673aa5a6ab817612d3505ae9e2d08d05b13416678f13a2ae65fd6735f872f004
SSDEEP

196608:bHSnJYHmyxJZUHglsOSacSxQ0icCn1DG7ywPEXQ52F21:jyJYHx/bls+pxDMG7nsXo281

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\447e79fb02300cae0667c86b4dc0ad21_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\447e79fb02300cae0667c86b4dc0ad21_JaffaCakes118.exe"
1⤵
PID:2348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2348-23-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download
memory/2348-24-0x0000000000400000-0x0000000000448000-memory.dmp

Filesize
288KB

Download