2e27950e58cbf790ff3389d30d28c544101426fd0b28dff159f3aa87399921b3

Analysis

max time kernel
145s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 07:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe
Size

100KB
MD5

6262dd91e2660fc2e9ce54f321263045
SHA1

ba468757af41ce999b3ad6753bf632b5a1567281
SHA256

2e27950e58cbf790ff3389d30d28c544101426fd0b28dff159f3aa87399921b3
SHA512

76b30c3cc536b4160d993263a5e18ea9aaa1685df6fdc56daca9a171001bf5775816d5da7e21a3095c22344044054be121e2d6ca1092ace9ba06718c186589e4
SSDEEP

1536:PxxDPBE4nMLWc5Aiyoe0ax0fh5uTVdY504AnCRe1d+e:vPBfnMLWc5AiyoE054GPMH

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 3 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main	6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\Use Custom Search URL = "1"	6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\Search Bar = "file://C:\\Windows\\system32\\sb.htm"	6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2504	6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe
2504	6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe
2504	6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\6262dd91e2660fc2e9ce54f321263045_JaffaCakes118.exe"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2504

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...