2e438647644c679ce7b71047899b3641af1ca6f97b8a3fb7d01211e0f9f02404

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/08/2024, 14:59

Target

8acfbc597b6cbd20248f95ff26863e4c_JaffaCakes118.exe
Size

18KB
MD5

8acfbc597b6cbd20248f95ff26863e4c
SHA1

9c1d436897ca6e97b15f53fe2ffcace4ff3ef866
SHA256

2e438647644c679ce7b71047899b3641af1ca6f97b8a3fb7d01211e0f9f02404
SHA512

bb913329e992cb1e08da5c3d9a25369f0d99680ed304371050f88137262e23765e2d5c3e1516028c972882546a370db156632eb48e64c7dab4a563fc8ada27d7
SSDEEP

384:DnT3ixim4bZneyhplLEfoKplWNOVp8LnwLHR168dNYzfvRKna4B6:DbR6y6V4OVpqwLH7p7+Qnaa6

Score

6^/10

Checks for any installed AV software in registry 1 TTPs 1 IoCs

Security Software Discovery

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Eset\Nod\CurrentVersion\Info\	8acfbc597b6cbd20248f95ff26863e4c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\8acfbc597b6cbd20248f95ff26863e4c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\8acfbc597b6cbd20248f95ff26863e4c_JaffaCakes118.exe"
1⤵
- Checks for any installed AV software in registry
PID:2372

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

Security Software Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact