ef6657adb3c24e32e44ee8a9ad1e1be2f93caf833922d8ae39fc465bfca6930e

Analysis

max time kernel
141s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
03-10-2024 19:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Size

12KB
MD5

102d322b5ba3cdc7430a8173367de4ca
SHA1

f3bb8efc35ddac02527273c58bfe6cf58ac68475
SHA256

ef6657adb3c24e32e44ee8a9ad1e1be2f93caf833922d8ae39fc465bfca6930e
SHA512

6442e8f0e3f1670c654e0ad35306259a1c957f4b7dfb11f32ded2f0694af30a039db18ce1ce15c274e50d35feaa01261985322f9c433c39c8c54b949d9f0879f
SSDEEP

192:nLEvbootrgMLPkrM7ERgeAXp8lyXjtmkGi9gxeP5RraEQ4Sdbl87wZ:LEvvtjUcKrKjt9Gi9kkraElWl5

Score

1^/10

Malware Config

Signatures

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\LocalServer32	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe"	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\Data	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\LocalServer32	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\Data	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\Data\ = 00000000e63326e100000000000000000000000000000000	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\LocalServer32\ = "C:\\Users\\Admin\\AppData\\Local\\Temp\\102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe"	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FCAD1035-E2E3-5AF6-EE64-147D06321C70}\Data\ = 00000000e63326e100000000000000000000000000000000	102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe"
1⤵
- Modifies registry class
PID:2268

C:\Users\Admin\AppData\Local\Temp\102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\102d322b5ba3cdc7430a8173367de4ca_JaffaCakes118.exe" /s
1⤵
- Modifies registry class
PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2228-1-0x0000000000400000-0x000000000040A509-memory.dmp

Filesize
41KB

Download
memory/2228-4-0x0000000000400000-0x000000000040A509-memory.dmp

Filesize
41KB

Download
memory/2268-0-0x0000000000400000-0x000000000040A509-memory.dmp

Filesize
41KB

Download
memory/2268-3-0x0000000000400000-0x000000000040A509-memory.dmp

Filesize
41KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads