5fa7395989cbaf0fda1feb5494b33ec04c3f644adf00c35304b150042e0a27ed

Analysis

max time kernel
141s
max time network
127s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 07:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1a7eb5dc0be3a89bf4bc9f0e32774fef_JaffaCakes118.exe
Size

419KB
MD5

1a7eb5dc0be3a89bf4bc9f0e32774fef
SHA1

3e4939d6dbc3ce3a46866a753f9b943774b784ae
SHA256

5fa7395989cbaf0fda1feb5494b33ec04c3f644adf00c35304b150042e0a27ed
SHA512

e96964836b722bdbc5252b39e81709dd6c21259188dd95e5d2bb03bb43218a9f4991e5af7d2d919b15c8ea85cd441971f9a11a77132f9fdf64da1cdcc4720449
SSDEEP

6144:iPjHV6aLgR3TcIFitQCzin6hOCJoXBm36SQgrHxImNxQY97Sx2JXiTKZgwU6El7/:46aLkjcSifOC8s3hlBxQe7o2LKCK7/

Score

6^/10

adware stealer

Malware Config

Signatures

Installs/modifies Browser Helper Object 2 TTPs 1 IoCs
BHOs are DLL modules which act as plugins for Internet Explorer.
stealer adware

Modify Registry
T1112

Browser Extensions
T1176

Processes:

1a7eb5dc0be3a89bf4bc9f0e32774fef_JaffaCakes118.exe

description ioc process

Key created \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects 1a7eb5dc0be3a89bf4bc9f0e32774fef_JaffaCakes118.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects	1a7eb5dc0be3a89bf4bc9f0e32774fef_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\1a7eb5dc0be3a89bf4bc9f0e32774fef_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\1a7eb5dc0be3a89bf4bc9f0e32774fef_JaffaCakes118.exe"
1⤵
- Installs/modifies Browser Helper Object
PID:1808

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Browser Extensions

T1176

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1808-0-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/1808-1-0x0000000000400000-0x000000000046F000-memory.dmp

Filesize
444KB

Download