e312ebe4a817aabaf152ece6f73f04846e294ae97d6acf53d5659f94f9e66537

Analysis

max time kernel
139s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
17/10/2024, 15:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5273103a236bf40a83ba465d30517648_JaffaCakes118.chm
Size

1.5MB
MD5

5273103a236bf40a83ba465d30517648
SHA1

9829ced969ba3c189fb70099d1fb00d758b99964
SHA256

e312ebe4a817aabaf152ece6f73f04846e294ae97d6acf53d5659f94f9e66537
SHA512

9e769fcbfeab925a32c110255ca9945be68f5e554de0ce14920806ad45095639e952e4527698face998870e2ab648f6163dea2c3d083337cef810974c8ac36f5
SSDEEP

49152:Sy0LdRlNHgz24fTPi9lLlt/ME5+KQ91lA1Y:2Ly7W75xME+/A1Y

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 5 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\SOFTWARE\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	hh.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\SOFTWARE\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	hh.exe
Key created	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\Software\Microsoft\Internet Explorer\International\CpMRU	hh.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\SOFTWARE\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	hh.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-493223053-2004649691-1575712786-1000\SOFTWARE\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	hh.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3308	hh.exe
3308	hh.exe

C:\Windows\hh.exe
"C:\Windows\hh.exe" C:\Users\Admin\AppData\Local\Temp\5273103a236bf40a83ba465d30517648_JaffaCakes118.chm
1⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3308

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads