1ddc3c0a7322ece0ccea5511f0f943196ce14398a4d6d3af2953daf0c375fc18

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09/10/2024, 10:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2f64c7b12c3c1465a4740ac1301d7983_JaffaCakes118.chm
Size

46KB
MD5

2f64c7b12c3c1465a4740ac1301d7983
SHA1

94cb412a3bd27e421cdd0fb9255e9da5e0ea8c62
SHA256

1ddc3c0a7322ece0ccea5511f0f943196ce14398a4d6d3af2953daf0c375fc18
SHA512

a33e57f8fb5638a574066877b1a5561d94464ae792172ea87d804bedc19577bd6d187a1b14ea8f5cfdb72599a10554f6edaefe1fad008e3f4f86c2415eb798a2
SSDEEP

768:yR+G/6wAgS785hMZMekxbrjVOY7eEznIsy4fYkNRX5Yv7Uw0PYs+DXKLo7h6dv:ymwAgSJeXZn3SeIs+SRJYvoPPYtDIo7K

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2668	hh.exe
2668	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\2f64c7b12c3c1465a4740ac1301d7983_JaffaCakes118.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2668

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Microsoft\HTML Help\hh.dat

Filesize
8KB

MD5
c0af817386fa35f1e1f1f0d93e5aa13d

SHA1
c84030ad6980516da7d96cbe2d0f2b377709b33e

SHA256
377a27593bd7cf18615c2b54028ccee6a15e50c8386368f5647ad0686ab826a8

SHA512
663fecf00b9b7b16ba41645668de35f9a8cfe5ec160bdfaf441fd25058bf86767378033f8310515184743ac32d5d19c04cacf24d4cb830720631e586c963ee2d

Download Submit