Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-06-2024 11:58

General

  • Target

    020648acb7ec97344a9dbca862b6b432_JaffaCakes118.dll

  • Size

    56KB

  • MD5

    020648acb7ec97344a9dbca862b6b432

  • SHA1

    6ac026e9e376d3d3ca0370b2f374be1ac9b4ab65

  • SHA256

    1cca15b8cf30d4499a91152d808185c3a7ac3e4231cd409504b5bbaa50e5507e

  • SHA512

    6127e2235d54e8989843dc1675bdae3dfb0e015d6bf07efdf468cf6c18538f6d01a0b24ddd9da5ff8b451832fd0eb9d9dbef00a622d8df9871035f8ca75a8649

  • SSDEEP

    1536:m24oKxmu40tgSysAaGknxS2acLdo3ng6I:Z4ttgSyuDnkcCn

Score
6/10

Malware Config

Signatures

  • Installs/modifies Browser Helper Object 2 TTPs 2 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

  • Modifies Internet Explorer settings 1 TTPs 10 IoCs
  • Modifies registry class 12 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\020648acb7ec97344a9dbca862b6b432_JaffaCakes118.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\020648acb7ec97344a9dbca862b6b432_JaffaCakes118.dll
      2⤵
      • Installs/modifies Browser Helper Object
      • Modifies Internet Explorer settings
      • Modifies registry class
      PID:1632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads