c3f06db712c21d2d93d8d9a09197af60c3c614dc0bc900e3f6afb25fd46edc01

Analysis

max time kernel
140s
max time network
125s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
09/07/2024, 19:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe
Size

279KB
MD5

319ea2e99512ce87668a18103eafbc3c
SHA1

c0bca8bbbe6d56e46088e784a89ac072d3588158
SHA256

c3f06db712c21d2d93d8d9a09197af60c3c614dc0bc900e3f6afb25fd46edc01
SHA512

d56c8cfc5ed83c52b74304265bb17bd73e5b6e90055b1b185151d8fe07ad09838cc598967f973e95962c9ff881699ee2d1a5b61d6719b0fbbfc372417aec2160
SSDEEP

6144:aaeeKzJEDTTYJpoZi+wLAkg1sKKzwwJoSgn:jeeN3TYXoZYc1rKzw0oSg

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main	319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1960	319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe
1960	319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe
1960	319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe
1960	319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\319ea2e99512ce87668a18103eafbc3c_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1960-0-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-9-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-10-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-12-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-13-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-14-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-15-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-16-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-17-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-18-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-19-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-20-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-21-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-22-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download
memory/1960-23-0x0000000000400000-0x00000000004C9000-memory.dmp

Filesize
804KB

Download