de3ef49d6069bccd8aa68d7db9aef396343fdfb46b01ad765c5c718d19adfe07 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
14/07/2024, 18:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

46f67b9e9c9e79526303981e54580589_JaffaCakes118.exe
Size

43KB
MD5

46f67b9e9c9e79526303981e54580589
SHA1

a31cc6fee31c4ef8460343b7c8ddd1c0eca481fe
SHA256

de3ef49d6069bccd8aa68d7db9aef396343fdfb46b01ad765c5c718d19adfe07
SHA512

c5db7988da2a94db3a60ed45785ff0d5edbcf92b82277c2cecf6920b1cd13cf338f8594aa28672a51ae6b62bc2afa992ee15a4b8f9aaa3aadfe84cfc715d1e70
SSDEEP

768:nX+iqt1szjyRwMyQgx67y8WDEgefLo8wgzK39Sy46b9Hn8E9uB3TX:Oiqt1sXy2vq5/fop9T46b9cEGX

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\46f67b9e9c9e79526303981e54580589_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\46f67b9e9c9e79526303981e54580589_JaffaCakes118.exe"
1⤵
PID:2656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2656-0-0x0000000000400000-0x0000000000412000-memory.dmp

Filesize
72KB

Download