9f2bf14e31ec6527bf34cd2a14a107dcc70ec333301c5202cc3d11696b39f0ba | Triage™

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 04:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5a6f5ade9bc3d1e5d35166fa00b25295_JaffaCakes118.exe
Size 638KB
Sample240719-exbh3ssdlr
SHA256 9f2bf14e31ec6527bf34cd2a14a107dcc70ec333301c5202cc3d11696b39f0ba
MD5 5a6f5ade9bc3d1e5d35166fa00b25295
SHA1 7de5f4c919b0c01c3d4c93a64b9618c5632748a9
SHA512 60a47e31117b8ee1a5a99de121d9e87955a895398e801df6be386965a09e7ab2ec557383745574e0d21e40a73a284ba49bedd049ff1d52dc5d6255e194e422ac
SSDEEP 12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg53op:AtMCkmOMXJbFSv/JivQsG50+FIM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5a6f5ade9bc3d1e5d35166fa00b25295_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5a6f5ade9bc3d1e5d35166fa00b25295_JaffaCakes118.exe"
1⤵
PID:2296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads