6bc088efcca40085f6c711a1b011f9947b97ed2538f5f280d4b82ec3116462d7 | Triage

Analysis

max time kernel
94s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
14-07-2024 17:35

Sharing

Report Analysis Logs

General

Target

46d40a00f37af8335bac8390ff7d0682_JaffaCakes118.exe
Size

513KB
MD5

46d40a00f37af8335bac8390ff7d0682
SHA1

3387acac9bb39e3459109f8ebf426ad6d9e5e3ad
SHA256

6bc088efcca40085f6c711a1b011f9947b97ed2538f5f280d4b82ec3116462d7
SHA512

42f6ac7bf1e8f57638855e665c805502ff062a173b04cd54c52e7ed50c7da08c21e04810c0bd6c8ee5f7f1ad27e1b548db26151f2c6d53619ab93812e2f0d341
SSDEEP

12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd79:AtMCkmOMXJbFSv/JivQss

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\46d40a00f37af8335bac8390ff7d0682_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\46d40a00f37af8335bac8390ff7d0682_JaffaCakes118.exe"
1⤵
PID:4892

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads