aff7b2a9e1ce86beecc45b1bde09c9e4729c25106fd4fc52ba05712bd48bcbd5

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
25/06/2024, 08:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Size

820KB
MD5

0d4e4c525bacbaa041590bb0befbf621
SHA1

44444cf9fdedc22adb70eb21f0c5f96b697250dc
SHA256

aff7b2a9e1ce86beecc45b1bde09c9e4729c25106fd4fc52ba05712bd48bcbd5
SHA512

28eb26992fcd5eb3d0137ee27bdb0277bfe192b5def27c70b3fb319a004c3e801f63fd157262823c0d617924a6a4c5bdb62c11fe968f738fce11e6c90be2151f
SSDEEP

12288:1lhAk/Q9R0fO1TznqX6rQwpO8LAxQcChz1RtLNiE0o9e:1vAk/Q9OOJqKrQwfLA1ChzXipo

Score

1^/10

Malware Config

Signatures

Modifies Control Panel 1 IoCs

evasion

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2447855248-390457009-3660902674-1000\Control Panel\Desktop	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe

Modifies registry class 18 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\print	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\printto\command	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\ = "kla"	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\open	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\printto	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.kla\ShellNew	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\DefaultIcon\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\0D4E4C~1.EXE,1"	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\open\command	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\open\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\0D4E4C~1.EXE \"%1\""	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\print\command	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\print\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\0D4E4C~1.EXE /p \"%1\""	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.kla\ = "klafile"	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\DefaultIcon	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\klafile\shell\printto\command\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\0D4E4C~1.EXE /pt \"%1\" \"%2\" \"%3\" \"%4\""	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.kla	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.kla\ShellNew\NullFile	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4704	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
4704	0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\0d4e4c525bacbaa041590bb0befbf621_JaffaCakes118.exe"
1⤵
- Modifies Control Panel
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4704

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads