209477657f2c0d6129649095d20e2f16d02e7dc767221f628d397acc63b14218

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20/07/2024, 23:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

605e55bbbc109ded019c8bda316ae316_JaffaCakes118.exe
Size

2.5MB
MD5

605e55bbbc109ded019c8bda316ae316
SHA1

f226e78e75a2305840f9afab43d75564e61111cf
SHA256

209477657f2c0d6129649095d20e2f16d02e7dc767221f628d397acc63b14218
SHA512

00340ec4c41eaa40b81df228e53913e61afe00677e4664b6d69c5bdd0599b6a91bae6e19ff8fcd991bfa6f6e0ae8a1d7b3c0de83381f9dff7354e33ed938a9f5
SSDEEP

49152:c2EfcebRkLkh4EZpuSY6zr4jVRuGUOQbN+w00R4IpO40pNjkR76pQmCSjD0Jfq:HE0GkLkXfY6sRVs9LyI0lphkYpQmfjQJ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main	605e55bbbc109ded019c8bda316ae316_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2912	605e55bbbc109ded019c8bda316ae316_JaffaCakes118.exe
2912	605e55bbbc109ded019c8bda316ae316_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\605e55bbbc109ded019c8bda316ae316_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\605e55bbbc109ded019c8bda316ae316_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2912-0-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/2912-1-0x0000000000400000-0x00000000009F5000-memory.dmp

Filesize
6.0MB

Download
memory/2912-3-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download