e1bf4465fac560f5bbfcb7e3b8f967b53354cf5e28ba6f94873f737d41737584 | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
17-10-2024 13:02

Sharing

Report Analysis Logs

General

Target

52282692c637a58acc98bbb2baddf6fd_JaffaCakes118.exe
Size

861KB
MD5

52282692c637a58acc98bbb2baddf6fd
SHA1

803b6c7c5f0e2b4edd3cece9ac961954d7c8a578
SHA256

e1bf4465fac560f5bbfcb7e3b8f967b53354cf5e28ba6f94873f737d41737584
SHA512

7cf03c7a30271af405eb3c887228412ef0a6ed21672abb88979d90b72e410ab4191aec22912b1ffeb1fff36c5f5fc7f50c045ff9aa9662c665056790d89dea0b
SSDEEP

12288:64su2IyR8hkw8lKTGPM3LeFv6ibe3EtbzyeeVlcb4nTTomE4UqbP4FeS1:64sb18+OGPMaeguVM4TEmEXdFeS1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\52282692c637a58acc98bbb2baddf6fd_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\52282692c637a58acc98bbb2baddf6fd_JaffaCakes118.exe"
1⤵
PID:2568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2568-0-0x000007FEF664E000-0x000007FEF664F000-memory.dmp

Filesize
4KB

Download
memory/2568-1-0x000007FEF6390000-0x000007FEF6D2D000-memory.dmp

Filesize
9.6MB

Download
memory/2568-2-0x000007FEF6390000-0x000007FEF6D2D000-memory.dmp

Filesize
9.6MB

Download
memory/2568-3-0x000007FEF6390000-0x000007FEF6D2D000-memory.dmp

Filesize
9.6MB

Download
memory/2568-7-0x000007FEF6390000-0x000007FEF6D2D000-memory.dmp

Filesize
9.6MB

Download