803dd31ef6d0ec26ecc6a8ee683a2158dd5e76c1b40352fc62f37a65e6ed4314

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
13/06/2024, 14:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a610a4a6299d73bffd8bc289a1d4d2bb_JaffaCakes118.exe
Size

4.0MB
MD5

a610a4a6299d73bffd8bc289a1d4d2bb
SHA1

3843e1f9bc4ca107a41aa0568a9133e925c5431d
SHA256

803dd31ef6d0ec26ecc6a8ee683a2158dd5e76c1b40352fc62f37a65e6ed4314
SHA512

7d96af278d45684319db02f9e8c5293e17a41a48021f564abc4527cccaabf0f81d665f242bfbb2b7de0154020e136f68a0eb948dedaf922ed7e2c347ab991be0
SSDEEP

98304:yrNMvLcYxBtt3+hfrfeUSLnyaHZPel1xEaVe1Oflv:QMvLcYx/t3CjW1ZZPEB845

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main	a610a4a6299d73bffd8bc289a1d4d2bb_JaffaCakes118.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1656	a610a4a6299d73bffd8bc289a1d4d2bb_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1656	a610a4a6299d73bffd8bc289a1d4d2bb_JaffaCakes118.exe
1656	a610a4a6299d73bffd8bc289a1d4d2bb_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\a610a4a6299d73bffd8bc289a1d4d2bb_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\a610a4a6299d73bffd8bc289a1d4d2bb_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads