e66e49f12b91b272a23d081c5d34323795a3aee4f28d46d2365a2ebdedd41ab1

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27/06/2024, 13:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1637253615687158ebc8c0caf7a0b668_JaffaCakes118.exe
Size

319KB
MD5

1637253615687158ebc8c0caf7a0b668
SHA1

57fbf557ead50a4fa95db53d0799386b28c1e8fa
SHA256

e66e49f12b91b272a23d081c5d34323795a3aee4f28d46d2365a2ebdedd41ab1
SHA512

123765ada2f7b4ddd4620ec8ec37f1663903ef5c55f4a0e3e09ca1c08f1c2fc0ccfa5358623646a113d7688282998acab953e5c764a691c9599be8e8003d9701
SSDEEP

6144:nz4tTh9YSbSRrSyHdcdCKym4GMTv51MgGdI1ICCFhXezLCNM:nz4tTh9YSbGBdcgcovb3GsshXTM

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	1637253615687158ebc8c0caf7a0b668_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2284	1637253615687158ebc8c0caf7a0b668_JaffaCakes118.exe
2284	1637253615687158ebc8c0caf7a0b668_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1637253615687158ebc8c0caf7a0b668_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1637253615687158ebc8c0caf7a0b668_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2284

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2284-0-0x00000000003F0000-0x00000000003F1000-memory.dmp

Filesize
4KB

Download