5c420f97d66f98758a6b74c6bd18ae4d031bc7a20b36f3a6ea67183431398b49

Analysis

max time kernel
143s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
14/07/2024, 07:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

44c9dcc4ba8b88c25ffcc389b3a621f0_JaffaCakes118.exe
Size

111KB
MD5

44c9dcc4ba8b88c25ffcc389b3a621f0
SHA1

e1de459316bdba46bb7aff8c82c261db2c2dcf44
SHA256

5c420f97d66f98758a6b74c6bd18ae4d031bc7a20b36f3a6ea67183431398b49
SHA512

e97d906b4184ddcf699be62d557c18bf7a5eb3e28aed79b8f912e8b8a56adf6903287f447e95baa0408fa81d67cb6390f91a79bbebaa2c6223fe2b2b656ce125
SSDEEP

3072:nSUbxauaFNfQKPu+qxR/KpcT2mmoeI3cGZN7GK4PKy9:nSGxhaFFQfxUvmgXEN34Sy9

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 3 IoCs

pid	Process
4460	44c9dcc4ba8b88c25ffcc389b3a621f0_JaffaCakes118.exe
4460	44c9dcc4ba8b88c25ffcc389b3a621f0_JaffaCakes118.exe
4460	44c9dcc4ba8b88c25ffcc389b3a621f0_JaffaCakes118.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\44c9dcc4ba8b88c25ffcc389b3a621f0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\44c9dcc4ba8b88c25ffcc389b3a621f0_JaffaCakes118.exe"
1⤵
- Loads dropped DLL
PID:4460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\gentee00\gentee.dll

Filesize
100KB

MD5
30439e079a3d603c461d2c2f4f8cb064

SHA1
aaf470f6bd8deadedbc31adf17035041176c6134

SHA256
d6d0535175fb2302e5b5a498119823c37f6bddff4ab24f551aa7e038c343077a

SHA512
607a81be02bde679aff45770e2fd5c2471d64439fdb23c3e494aed98970131e5d677e1eba3b7b36fca5b8d5b99580856bb8cf1806139c9f73693afb512126b9e

Download Submit
C:\Users\Admin\AppData\Local\Temp\gentee00\guig.dll

Filesize
20KB

MD5
fa3db33dcefded7b4fdcb948a5e6e53e

SHA1
0adfd644e4422ffcbcfd8bfc27fcec727f04836e

SHA256
424025e13c1a624d5900f7b264145907e1092ef68e9c51d76a2648d14fdb9a17

SHA512
9be40412d7a8939a41c764058b138f1aa6fa73e0f1d2aa8c251c4e58c0cedbcf9aeee1bf669fc4347e1bccc7a9310f25ebe4731530cc5d99c64e31ef6073623a

Download Submit