Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 11:35

General

  • Target

    e2736b77c9494202e9fb1cbe5381c52c_JaffaCakes118.html

  • Size

    12KB

  • MD5

    e2736b77c9494202e9fb1cbe5381c52c

  • SHA1

    a531fefa678abe9585e2a647eddbc1811b072d20

  • SHA256

    f11666522f2ab6ac1a98064d4ad4183b8fd6760fc54749a92e926ddc4ccfee26

  • SHA512

    2e403fe1e7b62fa3228a34e9f760a17a0396059658fa4fed4cebe2368ed8397441f6ca8666265b51c3a4a21571f5e62931d77227e0c2e926fd8f62de00390efd

  • SSDEEP

    384:xy1R1QREDBeVliOVPpFvU2ee7Io48aXhRKY35nCPRrMO77OM0TCtxYLuZ4mXYHbR:xy1R1DeVUO17cz+Io4SV77Onh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e2736b77c9494202e9fb1cbe5381c52c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2120 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    251344ce517f367e4e08bf97b6e0ab73

    SHA1

    ed7c98ae3c9f4a9cdf8298b52f87dc9ef1d9d895

    SHA256

    d109ee4bcd7a4e4629d9478a0263babab333f52c96271a9f1b4cea8dcf82e306

    SHA512

    d44418ae38f183d598ac75127156d5e506c547ed9476a846a3da3a8bdb3bb6ec34854057834dd61f9da79d7773a65a5a6ce856a327232ac0f8777cf6a748d11b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81a5108d6512563d59fabeeb33371d80

    SHA1

    ad992cb8ffe413cae9fdd5500a5b7bac4f1cfcb2

    SHA256

    46fc9b86d6c311b27f70ca98ba9411dadd8f6266895f3dd79792813fba1d6607

    SHA512

    32963eed7b7710b9c38d321d2bb24c8a3c5a50a76945cc560b30769a2b4a9f20306290910d211a74705a8b6b875f48ef6f86c9c1d3e0e7f2db533727fc2db120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebf1c6df6ea902bf3559d8dde2bd58ec

    SHA1

    e54746f9d7d559b6f8792560ef24ab152a644621

    SHA256

    569e52f5af1a23700a0083e9bfe9054a297393610185b3ac504e9fba529aec8c

    SHA512

    ed21e339caadb33a994822f6b1cd9cdd63c3e1d95b4cbb05902d86705f5549e89262e3165819b1c432eb7aa21ef95418068e93b95a246736cc8dc9e74a18c5d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33ea07aab35ee419d2f04c7f11e92b9e

    SHA1

    2e6cb7cacac9e18df8f55bf66cbc214d3955bd82

    SHA256

    77e38b24a059554c7885652910088d3d3daca9faca7904aeca671f1c498e41de

    SHA512

    15a35d0adc5481f9fcf9bcb503a4d1d082296ac82e5a83675349e813e05bb2dc8f182e72fd039bae0282a142e5e812be63edc63023e23b209e9a993db3e1c1fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a33ebd1e298521a4148d040ddd6503c4

    SHA1

    c0e33ffcc508a4ef05a67d50bbcf9ad3f3bf1579

    SHA256

    f777844a46164ab0c94e95b607783cd351af0eae0a0c5be808f576f062f87381

    SHA512

    3c26547c82f631c405f632ed58ed4aadc52fb9c2b7fe52ebeabc8c1c70d989b2cf9d56fb9f5b352fd12e0d321632724a14e1b39c32a0d48e2553110414a39a6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa24c169eaf0a3ab49b825b171b64cb8

    SHA1

    3a56a9a9a9222e7b89902a07d7b64ea849c7f70f

    SHA256

    3a5e0379fa97f3b9793a87f2091776e02f0c9e3120e95a3c73242780a6ddfccb

    SHA512

    8d2f02221fce82ff286e8059b784e75283d77dded6c11bdb4b12fb337d9ee2a22891e9637d00257794b620df270fa4c5961e6038533f6ae17a15d6177cfbf94b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f47723a454932e0eac975f2a777e0289

    SHA1

    bff49b402c7b505d229a5f80e67f4682ee15aa8d

    SHA256

    3b68b59af977b24697b87dee95a6fcce7f3d42f31e5be865fc4204d236bcb906

    SHA512

    275d1e5cde25cd593a7f59da48d6109984c71416fb03613c866e1739eaa34edc13ad1d1779c527a21b3020eacbc1f2bd24796e5855f067999391d1a4020a8c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd255527a07768cfd30275e13b6a9a93

    SHA1

    3aa5abf68413699ef05bc62eb4bbc99221226fbd

    SHA256

    08a730e715cd74fda66cb3ec658f0d59c1c6cd27ac53fe919c390cb5629f253e

    SHA512

    62ae6d93ab5a3304ce64c71eb98acc42664f277712e3b7ef5061cf1351a3d188645d26db22c7bb755efbec1907f0eb50dc2b0ae5e0cadbfda3317248c29b470d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4377505a5332067b84bc195105ac0c2

    SHA1

    eca462e7ce04a924d89483c43345d2c3e5204ab4

    SHA256

    cd4d98d982d0034ff5121d6b52d07c809281dbee945e2d3d3361e2d077625bac

    SHA512

    8215b29bc771080b0dcb8669936c605ac03b0439e958a90b3e28dca4222b74142c188ecc965f41f300ebf2ad21ad0fd696376a1952d3672adbfb698a1c9f98ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    178cf259dda8b72298c6423fa0affe99

    SHA1

    db6991c4d61620b3e9f48fabf54143e8eb988938

    SHA256

    4e453233ddee8f5eb6f5940badad138921f541865bffd476e88ecf826759088e

    SHA512

    a9181e2fd36137e3c73c8e53c77dca2cdd9b26171926e9c9753e0f2d5ae6bb8c5386ec6767be8c2f01f0e4430bf9f15afd769b4942a5fcbdcc9a46918d3df9c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    628eefda80d8cf51213d741067501b73

    SHA1

    f4eb7a1ef490f0f0d9dfd89719bc173a5386afdd

    SHA256

    d0466833b755e26e934f42dba9d0f67ca3528592ada2f54793ebd331ecb42456

    SHA512

    b8bce1db1d4ed9b0b93bf33888c7a09fe7a57726bcf5baf09a0a37a4b5397cd3a8ee89fa931f62ceb8d3a556f2ebc710f0512387c866da24ae21ac43e1db4b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d7bfc1a5939ea506a6a40f0b4f769e9

    SHA1

    4953ba6aea867b2f997af5d29ecf6ebd8fef0a70

    SHA256

    3903433a3bfaff840892e592c007335ceeaec7a02b31861ec5649850ff825146

    SHA512

    a4d8a5d2c82cee9d745e6422c1dce5005a4e1dd3b277f8e668bd78c4e6b5e1d4c375d5c23edf53e5a0596158bb8d2a5522f95eb16daa7f8137512fce9afef943

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c49182be3352c50d21f3a97b939f777c

    SHA1

    6f6fd04dbde582788cecb46e4d745a69d6e4da4e

    SHA256

    881c5e4740efd8529e32d743e68d115eae5c73d819e25bdb6ac6aaaa3090c5de

    SHA512

    0020777fdaf69f62b1532dfc8f2d09e7ce23a92219f34343b006fb9d0ab7ed2b914762da380713a62c4dec5500e6212b8edfb197417ad728d9334740999503f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3ba9b25118ea80a91021f4fb59ac6f5

    SHA1

    224fb7d50689e6f36bf7c57fc34a79a8112547a0

    SHA256

    6144d42cef6d98c44b73a7dd7ce43df0c0d77c120341277ab3c2955c25eabd5d

    SHA512

    e56764213c89ed14a5523e02432551ebbcd124f89f659a7eff4508bdbf96b6623d203bcfda83d01d80d7f7bd1995137fdde90fd5fa79b18a7828fb1e8e08d5d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2debdfb8b323f040b49211e8ee5eb22

    SHA1

    8a7adcf916d969fc1c44400bbfc534cc7a3f38ec

    SHA256

    8971e9a83fea454746862a20dd0f98d310c4ee4f99318b73476a91a8814d68bc

    SHA512

    6e6a7ec0a54830b80878c042b2bd58cde51e435f381d86ee36eaa4df053371ea2fe87c1f50721ab7454297ff1b60776e5d7a3a8768194fafe8fa85ce91ce7207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1bec3aca6ee84b6593dac4d1f3f6ea4

    SHA1

    e78b9055f56c495c1c624f9d357b9d92ef6be86c

    SHA256

    9ac18f3aadbd824646da896bd4a6b289978a1bf692c26f12b9c6e729bac8f553

    SHA512

    5a66f8630a7ac115c1441c0bc03918b23386ce484b95cb711f6c49ab2748dc7d0476724e7c4e23128e10333dfd4bc3fb27337e7f0d3965b2c24ec7400533d663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba73aa8a9054acd2f2cc9946170a5653

    SHA1

    312d327e6017ae7acb1b9c0bf2304e8ff3ac9329

    SHA256

    9b29ecd10bfb0d1574d1e517eeacac8fd88eb2d2c023471a0e1dff152424c2de

    SHA512

    f757906ea9d939bdcc0f7db7f54648ad4a99f5b63b26ffc66cbc31daf23b3ee74c000d114df79b9172211547f10c15c1299074460828fc6eb39559a853ddad01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00cddb38b1b0fd5c2ac5b9a61570cddb

    SHA1

    27119847df86ea7d4e230d3b6a5e7179d68ff1ba

    SHA256

    15f5b5e60b8632b2232ef6e28f0b17a6fd6f3d5cd245544a9069158dcb3ea9c9

    SHA512

    9ad0e97bd83188bb494009d16b367a39947d0164552fbebd69eda231a73e9fddf57c9e16c6e522a2f9f5939c48d18c27c084f4b9b6391009d2eada3ec6e0ebf1

  • C:\Users\Admin\AppData\Local\Temp\Cab8AE4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8C04.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a