b43a0aaefcbe8d4924b0a1e8def9195e0b217545cc46876c4d029073ee2b638d

Analysis

max time kernel
117s
max time network
125s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 03:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

379f2e8347f91b1566409a759ce3c2e3_JaffaCakes118.exe
Size

20KB
MD5

379f2e8347f91b1566409a759ce3c2e3
SHA1

6d07b7288d3e41716eb8eff16731783f0b65b9d3
SHA256

b43a0aaefcbe8d4924b0a1e8def9195e0b217545cc46876c4d029073ee2b638d
SHA512

344b40f7bf5d2e14b8d661fa8f8801f5d90525695907ca4cfdaa6d9d47444c4ac9a6cad7aa5cbb92462ba97ecbee58b9d15eb14e909112fe9f3663e56eba9287
SSDEEP

96:ea4C7A6/lIbWhTDs1jMYTXP3RIjbseJ5AG66wuozW+LAreWyh/lIbWhTDs18r:wqA6/lIF1XP3RKjwr9AaWyh/lIO

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main	379f2e8347f91b1566409a759ce3c2e3_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2372	379f2e8347f91b1566409a759ce3c2e3_JaffaCakes118.exe
2372	379f2e8347f91b1566409a759ce3c2e3_JaffaCakes118.exe
2372	379f2e8347f91b1566409a759ce3c2e3_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\379f2e8347f91b1566409a759ce3c2e3_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\379f2e8347f91b1566409a759ce3c2e3_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2372

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2372-2-0x0000000004A70000-0x0000000005AD2000-memory.dmp

Filesize
16.4MB

Download