2bf718e558b265fd5c78b4d09d66982ce1443ef29b81987d2ca6ccc1391f352b

Analysis

max time kernel
136s
max time network
142s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:44

Target

6955164257a439c5e31aa32cb7819ec8_JaffaCakes118.exe
Size

936KB
MD5

6955164257a439c5e31aa32cb7819ec8
SHA1

fe561dba7d463c091082b8be80f2669ba6d6799f
SHA256

2bf718e558b265fd5c78b4d09d66982ce1443ef29b81987d2ca6ccc1391f352b
SHA512

08de44f17b2ec91d39b9c0743bc7272f01382548f4fbe6e10374fc4d31951d15dd66a711b6e7cfa2750df88ac9b5499e79108d51ebf3c212a05c2abac5f98644
SSDEEP

6144:lB5VEKUumP1QjdWiW3Uu6rtl4tB/q2okYYWcLLtgK53i7jmxteNNjDuZSFFPSQ:lzVE3uJ5nW3Uuy7n+HtgK534jmXej

Score

1^/10

Modifies Internet Explorer settings 1 TTPs 4 IoCs

Modify Registry

Processes:

6955164257a439c5e31aa32cb7819ec8_JaffaCakes118.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	6955164257a439c5e31aa32cb7819ec8_JaffaCakes118.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\591314.org	6955164257a439c5e31aa32cb7819ec8_JaffaCakes118.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage	6955164257a439c5e31aa32cb7819ec8_JaffaCakes118.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DOMStorage\591314.org\NumberOfSubdomains = "1"	6955164257a439c5e31aa32cb7819ec8_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

6955164257a439c5e31aa32cb7819ec8_JaffaCakes118.exe

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/2284-0-0x0000000000400000-0x00000000004FD000-memory.dmp

Filesize
1012KB

Download