0160a8646367fe389f9cab8230b2f93546165abe0d5b222dfe040a03e3fb3cc7 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 23:13

Sharing

Report Analysis Logs

General

Target

652ffe20ff7c0a9534ae014fb84042a8_JaffaCakes118.exe
Size

1.9MB
MD5

652ffe20ff7c0a9534ae014fb84042a8
SHA1

aa27c34b49ce49e9ab7e75c02b35696bcedfab24
SHA256

0160a8646367fe389f9cab8230b2f93546165abe0d5b222dfe040a03e3fb3cc7
SHA512

87026959cab0287a7cbbb1ba6e133896a4d32fde3dd4e8ffb2c24fe698f0d39cf307c1daff1a408000b1962dd06b3d7a3d88c377afb633036c03ba88fc941ea8
SSDEEP

49152:dh9BQXNACvVS6JJan/DTSV/V6MGdiyfTK756N:tY+D+P6MGdiyusN

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\652ffe20ff7c0a9534ae014fb84042a8_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\652ffe20ff7c0a9534ae014fb84042a8_JaffaCakes118.exe"
1⤵
PID:2420

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\ntdete.exe

Filesize
10KB

MD5
e90bd56960a8d74a830e7ff46d08e1c1

SHA1
6e1d058da7c770d6d984f0e114a097e7a8ff7aef

SHA256
9c86c58efa05fb3d0513edbb27e0489938e2fe41beecec67a1ee28d4c87e29b1

SHA512
06564afef751f8d39a1ebee4c739595f1ae7232c03de0f5b9c7f5fc279809f071a806f80e13bbf67dd70bad3d5df3b39a030be880444aad75d61023a3c46b7e4

Download Submit
memory/2420-0-0x0000000000400000-0x00000000005F2000-memory.dmp

Filesize
1.9MB

Download
memory/2420-14-0x0000000000400000-0x00000000005F2000-memory.dmp

Filesize
1.9MB

Download