5bd8c4acc5cd7d6e16ae3271f2266b1306099910a7f502d6724c99c1f1e04133

Analysis

max time kernel
140s
max time network
121s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 09:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe
Size

346KB
MD5

3888f2418130500f639204fe5e8dee0e
SHA1

169c4763d6499a6f19609288aaa72a13726c7fd7
SHA256

5bd8c4acc5cd7d6e16ae3271f2266b1306099910a7f502d6724c99c1f1e04133
SHA512

eeb7075e235dc9cdcd75270ec1a8dd361ce7c4cdd2e38c95718c4b39599631f39cc46d637a6bac121ca945d3080950dd0c30d1c882d02bef6ae41782d01b9f28
SSDEEP

6144:5/2MMNuacCO8jJqkQ2Oj5mvwsJ2BHTGCKVKN4u02MRkVbR/bWy3y:5/arl4kQbjmwNBHTOVKau0ezbW0

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main	3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3028	3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe
3028	3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe
3028	3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe
3028	3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\3888f2418130500f639204fe5e8dee0e_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3028-0-0x0000000001110000-0x0000000001212000-memory.dmp

Filesize
1.0MB

Download
memory/3028-3-0x0000000001110000-0x0000000001212000-memory.dmp

Filesize
1.0MB

Download
memory/3028-2-0x0000000001110000-0x0000000001212000-memory.dmp

Filesize
1.0MB

Download
memory/3028-1-0x0000000001110000-0x0000000001212000-memory.dmp

Filesize
1.0MB

Download
memory/3028-11-0x0000000001110000-0x0000000001212000-memory.dmp

Filesize
1.0MB

Download