Overview

overview

6

Static

static

3

45983bafc7...18.exe

windows7-x64

6

45983bafc7...18.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 11:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    45983bafc722f095cc55b36e27614a2a_JaffaCakes118.exe

  • Size

    2.8MB

  • MD5

    45983bafc722f095cc55b36e27614a2a

  • SHA1

    16457033534b895586418578986320eb4e83cfaa

  • SHA256

    e3c7f8fcc69599141b50ed8bb3763bdb01cdc99b4175e7eb7c238c443fb139a7

  • SHA512

    f3f1b44bfbd8f756cbb67842d2a06ce208e7c0fe70918dc4827c3e9dc4ceab30d80bdcef4c9ab8d362db3962054527508ebdd4b8ae478ddc2cf13cacfb21fbf5

  • SSDEEP

    24576:ucYxc4QGA7f4AmTIRUpBVrqKB7r2fsZHKkinWpbDb7PpB1V9g+Sf6568PoQa8C:ucW2/+ejkinWpbDpB/1568PK

Score
6/10
persistence

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 2 IoCs
    adwarespyware
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\45983bafc722f095cc55b36e27614a2a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\45983bafc722f095cc55b36e27614a2a_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Windows directory
    • Modifies Internet Explorer settings
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6B2043001D270792DFFD725518EAFE2C
    Filesize

    579B

    MD5

    f55da450a5fb287e1e0f0dcc965756ca

    SHA1

    7e04de896a3e666d00e687d33ffad93be83d349e

    SHA256

    31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0

    SHA512

    19bd9a319dfdaad7c13a6b085e51c67c0f9cb1eb4babc4c2b5cdf921c13002ca324e62dfa05f344e340d0d100aa4d6fac0683552162ccc7c0321a8d146da0630

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6B2043001D270792DFFD725518EAFE2C
    Filesize

    252B

    MD5

    c052cf84049749276b20ab52a47c2632

    SHA1

    f9be4c35289d5c904d364e163bbe1720e9c9591f

    SHA256

    9228ce639f97bca08e179072dacd46a9a01e20ff4ee72d40990c316467538f9b

    SHA512

    3e93e7ba26bbd198b5e8412c3618f2d1a70df045f138c2c38aaa0fad230e069ea2f6476c12cc6a843b99b01bb3ceb222cc69028c5c0010cdc620df3e5ee8e5d0

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    1355ed47f9fe8945faa03c9ede8d0274

    SHA1

    8d751ec361aeefd4664de6b6830a1c777d17c441

    SHA256

    2eb31e5d8231a2436af128303bc50da8be12f4c59ae4fa17ef290ca60b1bd51b

    SHA512

    6a95789c21fb5dfde05fd5a3f51af32898cc326a218ee9a3ca3dc1078fd62f68108bd8423606feb05a8e55692c9f76154618a62bb2fd21e0db10e9f4e80009dd

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    1a072291e3baf590182679dfb49d87b2

    SHA1

    bb9436835f7b79caae7af81b533c98cf13996dd3

    SHA256

    8bd77dee7e9d8f246a4ef771f58cb5009ef706ec1929b643636701ae971037d1

    SHA512

    2466eca37933376b18116cd88913deb9c8a8c9408e7f2052953462ff860b0a3ca7d288e90103c8cf0f7207cf985ad6c949be3eb8ba76079c3b69347b9589050c

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    c60434735afaada2799d3e549c513e94

    SHA1

    a9517c1d238b720eb85598b1e8e0338a4d630ba0

    SHA256

    5a7ccacddd4a9bc9c5c74e550595e9c9a806a9788212da2108ae7eac16a7f0ec

    SHA512

    2350a273c7d8dc90105cd4442c737193d4febb78e1159152f1c72e2171d14519907434d6a8c6c3bd6d2f4d4d521a905d1d8859d52b9c61500ec72ef43afed43d

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    0621ca3cabd09c030941f6539c8180f5

    SHA1

    42196f68cbb043e2dfce52b8946cf5de5b6f0bce

    SHA256

    42b0b9feb8284aa686074a1f0a7caa4eb1bc390f23f6dc242d02b10a27bd459e

    SHA512

    0c2c0c4ea83c6ee12fe9e0544a8edffa5bedb6289ae9b39bc0dc5a2aaae1876bebf903a860ae1fb83e530e926cad1f0d9513179066103927381cb8221cdf3708

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    63e450ad1febde706ea73bd7e581daf0

    SHA1

    dbab1f2f0f80ea8eec5633e07eda853f49de1e7f

    SHA256

    a4d65825f2228715e6312ddfb4df85f17896aa4c12dda2ef04f0cb350c3c0c76

    SHA512

    4b4fa4d79bc0ead325ff0bc24510fc4330a6021f1af06a4208c47085cef6bd3c3aabf5dd3d049af20bcda793cdaa7dad642feb822f303ace9c628d7395ca658b

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    72b0e98d065fe39b6f6cfc58db25cea5

    SHA1

    3986f0a6c9dc6532a9830d162e926c1d9217fdfa

    SHA256

    18cbf54dc28440e929a02d244fce990a3349cb87ebfd8dad708d9035b09641fe

    SHA512

    7eeb4198aa70dc5d50d5a4a9203c44bb39fe2758cadf2d9d170aae02a8578347a8a3ad2c4269a3321764160696a8f18313febb72016c42c30bd179aa3d9c3006

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    663f277d95cff97e106d233e8eeed012

    SHA1

    022f722cda07f530b2b608f74a024d31eabd8126

    SHA256

    bef35f0d450709dd22ba5997f49e124a80f5e870aae36ab256e34b7cfe4ab1e1

    SHA512

    ad766f8887e2c15d09167ed5e2f82d442c2f1c28fdc1c9b1b4a34fc31606910d1c4bc477684e3812795b9d838d619a6a0a473b6c20bb5f52b2a272ca2540fcec

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    c23d0f845604a8359f31b38bc9f49d57

    SHA1

    f1467ca316d3c0060ad64328409fda467ca20584

    SHA256

    12fe7e6b5938392aac5aaa024e97c6e1aff83ba79bffa29ae716b22e3ec18fd0

    SHA512

    6ffec92299d4d10268ce5551427e15fd9baa893bd547fe2efb8480b6051978d0520cf025d96f5b49e1794b55e3ee3dae3100764a333f9e1cf05b33d657c170df

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    66cdee1e456163d437f48e0d6fdb8b80

    SHA1

    87f3c03711664a4e06131dbb57faca45d7ffc3d0

    SHA256

    1b4c44f141560660b70f93ac45e5bfdde30bec75737ec8b0ee078e0bb0fa4e6f

    SHA512

    927a91cfd4afbaee97bdf15e517e7c632e2651a82162ca988db4ab9c4fdc387352124260e86a57c3b0cb49b7751eeb6666c60cf90b90b7bafdb16a9b0df648c1

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    1fca56811209c4879287fb5a7273e724

    SHA1

    43b9a29a17df3618c91cc6d174b905e4c07153a2

    SHA256

    2b0e2e233ba5c9bf23b75d2381b4521899b304f501aacd130a5a2a04474e6cc6

    SHA512

    e4569a2f631938bb43a11c22655d26565d26fb23f37e693b432a112cdb10392b525bd90ee76d64c0bb1ea93266b70d4557b993f1a3ef7cfe9353f12cdfb6f316

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    bba0581a12d6cf9433f0f380bea6a730

    SHA1

    ba4df9d0861096727b35fcd69a046f7159f548db

    SHA256

    b05081bbd74d514a3d8d53b5ab6e1ebf69dc14da809eb53c71995a71d86e72e3

    SHA512

    f06f9c3c181bd6fb807558d376e4fc4582217b817087eace19d6919c98ffcaeadd7cfa3c4eeeee41abcfd6ddb80415fd80753dd9170931110bd5d2a3624ef530

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    0d9d26852b2e06aa4eb8fccb9dd3ef52

    SHA1

    993b1bc350f0a57522a7be08ab1282a0d16e3803

    SHA256

    5a88493de5c6bc45be900fa1ebd0ff0ab986fa7780ae181931ae5612a58c1db9

    SHA512

    24bbc1e3c398ee038dc0cbe054cf578c09818f0a1af8d6e2fee2e205626bef448a69b29ae3f4771a6d57614269397fda1ca40ae03b73f2ef8cb0a13975f25217

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    cfeec7b8684b9a81600b8858c1872319

    SHA1

    e5613dba41aec8e2973cfd0315e842b97c917f81

    SHA256

    318a9429a024ada6e2bad1b6ffb619adc436b134a6a3debdaef1dd7e57092d7d

    SHA512

    58a9548a7a62c216c8fcd868b7350caec75c66c4c1b1720365e9636e7350d6a1c7f3afe5d4decac09bea7ada364bab74495f28f92ab18757a29f17e1c876e793

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    8fa042f32ec1d43bae42ab785d84af0e

    SHA1

    424c41898415eea8540d1b44f7b6baa2d0389aba

    SHA256

    498cd985a2b822c1a84531a7f87a6849bbbbf441008b674a4646b981bfb73cae

    SHA512

    c240e8c1165afa649369586cfce505f4359bdb52494eb966506d0448d96e28954fbc06b228103d65360360e3e223dcc9ce3b37f44bf1b5053c488361d103eeea

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    b7ea508e6b7d2ee1078973182d0ddf7f

    SHA1

    58764bfc77c781f1b8a370a0c125f4894d570a62

    SHA256

    a191dac490e2b6816050496a99ecfa85f87782d5dd64d9ce6e2b589a83ad0bac

    SHA512

    f3e190c39cb7bf3951678bb8f3765fea62d124ba51950ce42277e729c5abd543fa5aceefc58d1145d8ff6706eacfc4f4dfc87dfbacef3e16169b77172b4b8db9

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    86b2df739cdc6af4b365da08253851be

    SHA1

    d90416a58a23fbfc50c1e2084b3aa8cd9c690e16

    SHA256

    0287eaf53a79b6c7cca0c5fd727c0bd4faf32bed2e9cac20f7482e3fbaeeba71

    SHA512

    ef8c38b7bbe97731f40ee985b7f5af8109bea9ce77d7b5112da68c8a66b04e1395ccd4a3d42617a5c8e29a3be749510dc0d655e1c32f2fe8da1aadb90564b0dc

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    666b4c3fd9f66cb138bdc20fd4de2721

    SHA1

    3d47e7e6359625f39414cc93bb09e3f457d4bfcd

    SHA256

    5ba8ae3781079fca2b10d0904eb4c199be5f63c0819e685048828456cdafcfe1

    SHA512

    f34a31a9226b03c135b836c1269d08758ba4b45de89dc085062b8dac83bd0c3ebe2baf9d899234eb5d75735a5f30008236fe6e9bdc8114d333b795113e509374

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    8d51f2665bc4dc06256d884a3a4035ce

    SHA1

    5bb00b62fb189a904b3aab43ad54c4f53d03f94d

    SHA256

    6f12a7842e4dd86717819380f498b4642c67e1018952c549b7a5d4e6122d371d

    SHA512

    09defa38b8e89cdf35ada674c4c4410fb7dc4132523750c21eac1418cdc60a2aa21ac174b9c1b1db8fa8d73f87d52c597fad74d4e4119c5395dade174fdcb5f0

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    2a203e5945ee9d4f13b70902deaee482

    SHA1

    66c98a12c330e4a46044e41d1f3d02b63f60e359

    SHA256

    90ea7f2bc4f6d94d945c90cbbc591f5d1678160fd51b6b144cd738015308b055

    SHA512

    4fd3aa98108d41fa9f82353e518463907caebed6e370e132d41d7a1bdd6daf2c7d4cf3c8dcd6356e714c2ff4096c50336f36700103ae64010ebb6210ccae366d

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    8b067a090bc230ba3483389edc5025b9

    SHA1

    1099ba2d72864c37be464b86510972aeb23c5dae

    SHA256

    a85f597c5b0789ebb874e0a8b0d12ae82436cdf279760d7a670d11caddd91dd5

    SHA512

    8358ea934e8646a46c0c8f40baadbb05986d0ee16b83e7c0683c8365e53dd887efa0227087e6f52718858a89f813cb067396a0b1499bc36ea379599c5061de60

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    b38ab5cdb86d6153c05b9fef26a9d21e

    SHA1

    0dfd224c5a24cc5ca8fb3f05250fd5de8bb72cb2

    SHA256

    07916b495fd8712a077e9868a65d7a5eff578610a59be36d806d02f50f00fdfa

    SHA512

    441a60c034022e47c0f9e1a8a6f8347b64544ad67c3b183240e72ed6f4103433332b337832f80536f72fa854bf2f95d6782b70500c0ebab38a6654f1ea400cc9

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    a1b1e2a12cdb9392bd5830f252369df7

    SHA1

    3d2650e34c363d1305e64041c8c0b6d06b2cdbba

    SHA256

    19dd046cdcb64d7ad3b1101944aab9af485abd3bbe8e36975122871a94d17f78

    SHA512

    f978d355754175efe48171ecd58e0a95e06257804a19ced8bb41f0dc02e9f6c3ec9b2a6e124b8949342d07d52f8563d5d9846ffda02f07cfbe64a6a084a5a545

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    bc29e2cd5a313ae2413aa2108cca7c7d

    SHA1

    fcbf2d40cd807c66371f4f9e1a6bbcd96bb256a8

    SHA256

    b2dab988e778df645392afa729b3922d46ed9bd16d0c870bfd4df827661e2739

    SHA512

    f855971fe925f7551ebe41cb2025fc2520e9ea4958e95631bb3f437fc0f3dfd49002f59529b588328cf59269b0741adab5f33f2430fecde93f2a5b17c007f8e4

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    342B

    MD5

    eed3b0aa5cf631d3c66c52e4da33f10d

    SHA1

    0d66407f02e848723ee9fae58f49635a8bc6712f

    SHA256

    4a09251f54599d856f381e7546ea47604e1ba063881d9d0ec14e22d0be6f459f

    SHA512

    998d13fc04f337ff465b6368e4991677ef1acfbcd9afa43db0dc1f19cfce0dd3896e8fe39aaeaff132d0b30b3a5479e8beb86464ed5233b371de3c926ef96f0e

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\CabB666.tmp
    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\TarB688.tmp
    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    Download Submit

  • C:\Windows\syst.dat
    Filesize

    59B

    MD5

    608cc37046815bca65f8911101fde569

    SHA1

    1973bd22e2f6dd8676c25bd2ccc9a778e444b9cc

    SHA256

    851cbe5bfdcd2e18005852408243b985ad81f90d8f36d7fe479b460cf0015efd

    SHA512

    39d967911fcbad11d2672bb6dca1d426ef4cfdaeb8555248baf51df0ccbbb1d38da0d849e7e54a165889d772aacaf26f58383d2593b3a41898d6f824d2addeb8

    Download Submit

  • memory/2120-1-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

    Download

  • memory/2120-0-0x0000000000400000-0x00000000006D9000-memory.dmp

    Filesize

    2.8MB

    Download

  • memory/2120-1998-0x0000000000400000-0x00000000006D9000-memory.dmp

    Filesize

    2.8MB

    Download

  • memory/2120-2075-0x00000000001C0000-0x00000000001C1000-memory.dmp

    Filesize

    4KB

    Download