05c24fe54f55d1d54d56908d5e9f55672d1eda52cda1e1fff73ca9e2cb83dfe2

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 23:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118.exe
Size

752KB
MD5

5e0aafdd4d056ef8889fd8d83357708d
SHA1

5d30e99d2d557bb947bf4b1677ba70745741a491
SHA256

05c24fe54f55d1d54d56908d5e9f55672d1eda52cda1e1fff73ca9e2cb83dfe2
SHA512

58ebd0918521a1e2262e69cd1ccb46c50d908a814e18985bb518f61e88891cbbf074fb449dd4e792efcaa1183b451c4bdf35d3d713593bd14b0ac9803e03a153
SSDEEP

6144:CRF072zPGT8d11Zty2rFWaBFqv9L3smdyBZW/wd7LjD3YEH+5FvH:G1ntt7qvLdS

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main	5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3028	5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118.exe
3028	5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118.exe
3028	5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\5e0aafdd4d056ef8889fd8d83357708d_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3028-5-0x00000000057C0000-0x0000000005BD2000-memory.dmp

Filesize
4.1MB

Download