d36953ea3674a713e25f0cc88b3ad1dfddc44258e32340655a958c4fb044939c

Analysis

max time kernel
132s
max time network
119s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-09-2024 18:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d291a94334e46a1ce46f0af6e86cb311_JaffaCakes118.js
Size

10KB
MD5

d291a94334e46a1ce46f0af6e86cb311
SHA1

cf6f0ee7c7cfaf72e6a4b2e219f0d26cdde1fb93
SHA256

d36953ea3674a713e25f0cc88b3ad1dfddc44258e32340655a958c4fb044939c
SHA512

82e6ba723360d8cd48a53decf013a4e8281cca8d34ffdbfc452b6e5ee33d3251287abfbd530a7074ac8fe85cfa97efa1102d4dab730bdc6f2b3127a2ca96c3e7
SSDEEP

192:W6glICDv8PAh+ZodQs5HVjWJ9jvKaafjWkCip:W6glICJ+8QKHfV5

Score

5^/10

execution

Malware Config

Signatures

Drops autorun.inf file 1 TTPs 4 IoCs

Malware can abuse Windows Autorun to spread further via attached volumes.

Replication Through Removable Media

T1091

description	ioc	Process
File created	F:\AutoRun.inf	wscript.exe
File opened for modification	F:\AutoRun.inf	wscript.exe
File created	C:\AutoRun.inf	wscript.exe
File opened for modification	C:\AutoRun.inf	wscript.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\selamat_berposa_dari_umt.js	wscript.exe
File opened for modification	C:\Windows\System32\selamat_berposa_dari_umt.js	wscript.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\d291a94334e46a1ce46f0af6e86cb311_JaffaCakes118.js
1⤵
- Drops autorun.inf file
- Drops file in System32 directory
PID:2168

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Replication Through Removable Media

T1091

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Replication Through Removable Media

T1091

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\AutoRun.inf

Filesize
1KB

MD5
8728e880fde66f990234dd3d204145d8

SHA1
0cfbc28f5b50924a856df0865e4a23f98bf49935

SHA256
bc82a2536ea3112105f14c40c90b9925a5a1d8a2d5f0af9cf785d4b816c896c1

SHA512
1a1d3005633f46171d8895ee7043fb5d279d8d2beaa64278f70a7e009846a33311d905db0cba7abab7ddda90228ecbde4893b9016f2b8f38273e68a8868302bf

Download Submit
F:\selamat_berposa_dari_umt.js

Filesize
10KB

MD5
d291a94334e46a1ce46f0af6e86cb311

SHA1
cf6f0ee7c7cfaf72e6a4b2e219f0d26cdde1fb93

SHA256
d36953ea3674a713e25f0cc88b3ad1dfddc44258e32340655a958c4fb044939c

SHA512
82e6ba723360d8cd48a53decf013a4e8281cca8d34ffdbfc452b6e5ee33d3251287abfbd530a7074ac8fe85cfa97efa1102d4dab730bdc6f2b3127a2ca96c3e7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads