858708a0cb111907b111c9e3963d13e9f893db9884894099c575b64420faad90

Analysis

max time kernel
140s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 08:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

451bfff4f3d2b2546a8ed352f65723d0_JaffaCakes118.exe
Size

509KB
MD5

451bfff4f3d2b2546a8ed352f65723d0
SHA1

a3ac27d830177511dc53b4e71d9806af449ca86a
SHA256

858708a0cb111907b111c9e3963d13e9f893db9884894099c575b64420faad90
SHA512

c78ec4398e3dce84f68acd58f02f719b17ce1310b9c83dae7c771af9a8c3de54885a9e90c96c745e4863825609ea65b41fdf792849332c2f7d6fc81ba7a8b2a4
SSDEEP

12288:75lndfW0A1zqbhLuuHf8fA5sxYkACGLRGQMSU:Pds1zeEoUA6xYkJORR4

Score

6^/10

adware stealer

Malware Config

Signatures

Installs/modifies Browser Helper Object 2 TTPs 1 IoCs

BHOs are DLL modules which act as plugins for Internet Explorer.

stealer adware

Modify Registry

T1112

Browser Extensions

T1176

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects	451bfff4f3d2b2546a8ed352f65723d0_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\451bfff4f3d2b2546a8ed352f65723d0_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\451bfff4f3d2b2546a8ed352f65723d0_JaffaCakes118.exe"
1⤵
- Installs/modifies Browser Helper Object
PID:2176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

T1176

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2176-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/2176-1-0x0000000000400000-0x0000000000485000-memory.dmp

Filesize
532KB

Download