Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 22:04

General

  • Target

    26f30620b8ad75677e2611c7706f73c6_JaffaCakes118.html

  • Size

    36KB

  • MD5

    26f30620b8ad75677e2611c7706f73c6

  • SHA1

    59fc6e2f29072446d3479de3ae1918fcb82d20b6

  • SHA256

    852bc017bf948c998b35e0e4a152d8ca0597811c9aea0af71e1df01a4f726efb

  • SHA512

    a4faae1d2ccdf1a0ea3a1fd702051384aafc32e7aa32985c94980311472e57e9ff4d4cebf916adddb4cb2bdb1f667e8c7853a7ddd429929abfd1a154801c6810

  • SSDEEP

    384:RYG2iSPEjSFlWs+MqjIHu2BprbaZ4apqdSI14LFKun3DFgx:TRCqjIhpvaZ4gLxDFgx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26f30620b8ad75677e2611c7706f73c6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2348
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1744

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4b65e5bb4d521fc37791e27d6823235e

          SHA1

          1ae15b7dd9892eed53568eef21edf45f5a9f918f

          SHA256

          fc20d664a41e6580b3982e1a7303efc659e38318105db2ea0cdf6c7435c798d1

          SHA512

          b5ca8a8de717b953173309fddd1c7a13da85c5b0b4648d36b845397428347b51b7dc58d2f5fed3beb0bd6dbec2641c465540ef56c0c9175644661cda4358f4fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          faab2ae16529cbbc9622d35e2775e357

          SHA1

          a368e8217c3d0f704b9520b85685718474d2de40

          SHA256

          db1d8c0e035b414399519b1604a4b6770ec63daad21c1c037b45cc34f8c4ff43

          SHA512

          8f06a01b88b4a1b3bde06098af9683f34de050dc91613d00af41de5c66ee7f08ba1a2cdc65a4f4592aaba7e92a64437fe99728845e86e47008922573654f5b7a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          73aee6c2c4f38017b1c0aefa8df4ab3e

          SHA1

          e417703bd68c47b57cba76f4d32e079fefb2d95d

          SHA256

          ffb0eb29bb634da94a3bcf134d7fc23ad7af44c3979ae124c17916da313646c8

          SHA512

          d972c66708336005d8709ab7a9d7d278d5857e0345a9f75dcdcaff251c118b8c70ac29fd4a534eee7fbc65bf32eb6b8b91c03487980f1f73aa8112ba6e0799b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f2c19c8bd26e9e7f89504d61586c78f7

          SHA1

          606c689f8d139bdb2989f4e2fecbf08dce6df44d

          SHA256

          684864327e41fb3d14c8273ccf7dc01dafe979c0a458a795fcab4dc09cf814c0

          SHA512

          970becb65eada4749e3d899df40298c45544dafd2990a30cd66230c034d60fee4195c555171f6791d575d1dec2b8534c40a04cb3225daa5b069dd17c227a56bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78a3d4d5064ee201e1b5c33c6c5186a2

          SHA1

          26729286d4983a194c0dc5105f0df3de37591284

          SHA256

          df406704c8d5d64287995fc10ed03851205e51af917ed99292e380101a17363d

          SHA512

          4bdb82c1d023dd64a87f6139da1ab96bbd3a3c1754cb689edd075d2839edebab225d714e1ddebf9fead6a6f1cea807b7c138e8be03458b4a2479e324953f755b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b954a8c7116c32295c8b57032f01be37

          SHA1

          d0c76ffc00033598693a0e9f19f66ab9e01f7a98

          SHA256

          828500b2dc4f70c4758cb6348144ba79dcfbeaa0d5e9c0c541093edff752d43d

          SHA512

          9e39bf55133dd1c5fdbf6a93fb4834d9b7339412b2574f9d87f6dbb2b1a546c1373e73f3f82137f3294daae4af3f2ec09a5ab3dd18adfb6b2c5cc50d777819e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          07ec158ac09bc9947ab54c45760e0fbc

          SHA1

          7f28cf07ed9b6883b3d1a695ccdf4487879966d7

          SHA256

          b9f7a69a5a39e894c9c7840b85bff10627bc5ec032c170d29374afbf0ba697ba

          SHA512

          64fe3e351f1070189635382a7f70b0ce87d2881810a94800b5d9baae6ddf16b4f1930a8b19d6da6014321e76eb568304f6f77d1362c7d6925a9987f612bdd001

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          668bccfc16e4097c0a15ee53a56af9ff

          SHA1

          de2f9b83c6ed38dd847bef224a0c81133bcd3da2

          SHA256

          a4ed84f7cc190f64a2e7d24695d3000db6c383ef9995435c07cd6da4d92b4e7e

          SHA512

          f2f525630141b35bfd55c9032ab638ffa76d670e29185ed54e11b475ea3d690988bff7344e851954d132a01ff966ae65ffc1d2329c900c2663332a75e377c9b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          493b81d6a6c1c26db61df156c18d1478

          SHA1

          312f5e5f4a680f12fc04433470882e098e5fe771

          SHA256

          0f9cd99139d3f9cbe07c9c2b0cce7c4dd9c23b64d7d10d41e64ccc45f2dc2dae

          SHA512

          6a334bf336ce1169914a2727e3a182a1288c3bd9c84f64893c8151065ae5533a965ffe64028be90bd0702a503061193ecc904ac4a06dc9debdec7c4f84f932dc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bf8d680224cee610b618bebdb2d086f0

          SHA1

          5161a092f709424b093d987306d679654c111616

          SHA256

          b91905ba05d03975ba5cb192071d790bdaadf935c09abde91c1d54ab42a6888e

          SHA512

          9dfa55c0ff95ba665364351414a9903d9bce50ac55f006c17900dd0bca676e78f88957336b77e59e11ab1c433a4feeba0b6e07de8f23f13c4b037a659eceeda8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          01d0073a5515029f4aa8fb82d9390ae0

          SHA1

          556c859cd830f8db1be5b2d3e964b5c685601f35

          SHA256

          dbeed5df430260425d23d0c41627900de6c7141c01a2cd9ed76b2e03279a583e

          SHA512

          f02d519ca85689b7c1eb086e25a110f6814d954a331ba7c063b5641f6aa4d7bfe404c1fc93740765d2c4c0e9fdcdf33b473e599f76a60cf48f3430630c6e5124

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          34e2cea83806c2dffe67b3f41ccabf93

          SHA1

          a81537f452d1cce65172b4fdeece184eeacc43da

          SHA256

          e07e6b8130af06a62f1b6cd3a8a02bfe305428bce2c86ec085a108d300f4197d

          SHA512

          13e8de64373379a8b6ebb31420e8cd68c61adc5f349a299a525a40c11b093ae78aa9deb990f83659cd25d9ee72fdff6ffe6980dd26ece2cfd78a47cc07214363

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          177cf7ba5e64d5b3287a5307e5a99c90

          SHA1

          c8eeea909b16eb8a00e7d258a2dbc60933a1e87f

          SHA256

          73e3eff0ad5e43d6553df4348cbedb3c07622153dffef6c0d4787ac9c8a1e29a

          SHA512

          27dd53d1dc49b69a1a6664c4c331df2df6e9530b7ff78a030f4f9c2954fe5731356326e3b5da018b0afd3f94e62fe0c032cffa54cade27fb155717e20bdb07b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          503299f700fa4476304310fa04339a8f

          SHA1

          8b2f1db0763be5853988ea46b05ee83239ba8f4c

          SHA256

          b008868f0102e64d7fe662faa90d1394362336bff622656c735b15ca68a7e165

          SHA512

          f45aa1009f28f5965fcad841526249c3ffc44bbdf2537e72e028c4915b817075e3ac48c07fd5c126119aa51f955d25639cf87f1a4d55f428892fdd68e74eb5b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64b318c7122454ab1ea91eec5ed22ef9

          SHA1

          d6140ac0227cb4e8bdc89143dac60a55d9b53f64

          SHA256

          3d7a5e99d7bbfbfcadfab374ffec76e2a9ba862308ad29f703c523a6d171dee3

          SHA512

          2bc7395865fca7b1986e294eac2f352355cd210071afdf5b583daa7843aecbe3b21ab9383649c88648788ce670f4bee07fb122887d90e79c9ad9d708671b72d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2355cc4462ec7bac6e63bcebb5b73468

          SHA1

          4665b7123261439b5d8d7de1dac8880feaecba8e

          SHA256

          5d26a7fea99efb3a2aacb4bdc32efc8ab179d0e8f067074d738047cef5fb29c0

          SHA512

          2a49b77d1f607e054e876eefac559cee0207732bdfe2ce7ef8fa78db81501d15354c334cfd8b5f1a2adfcab6dfe089c9ddc43cd78c9000c234500bf33503f118

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2f9586eb7ffbf90fbd68b663275b7456

          SHA1

          e2812cbf3242e38a26c82daee6d47993c64d2f01

          SHA256

          fe20739521c161b16246ad093dbd50c48fd90be00691528b97a2bd4c202d3068

          SHA512

          58e0ea215dc220d1cc8ea37184b6fb19868c9ddcc5de6228f2b9123e3708a221ae0c81815121fb80648ea82db8cb0ae81ede5df7d071731a065b86a1b1404a36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb2c388f19544320cc2f65cd530adc5a

          SHA1

          2aaf95fecde33e17e49b4ff8b06fbfa3700249de

          SHA256

          9d6d144d5ec234d7db83378e8c45d78242d63dbecb3011516b7da400b4e1e77b

          SHA512

          db0f8ec040d5ab349f1063733d1fae78c97a96b74536cbe726da3266d8c62ae4f4cddc54b782bca35ca47ecc4654efa4b0cfedf92efd137b8a13aadde115d6c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          498379b86c4d253f5dea566bb7e981e3

          SHA1

          18e686ed2505c056606a5cab9bef223914dd327d

          SHA256

          6d3af6ee39e668e1b4cdc182dd6d3cec9a997703debc76df6af33943a782c6e7

          SHA512

          a70bd9bb402373678609c8d91ab3abc55a374317d01fb97fd7caa71866aceccddea76a5d9332b7c76cd0abef32ba7a11618be79d5b2cd12ab2c55568209bc26b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f264e9c99ad7e202d1ff7d687cb0158e

          SHA1

          f7053370d13e1482591830508498f60a167fe8d8

          SHA256

          ee1031203ef2ef8dcbe3682f7decd1a1dc617e1516ce83d0160e1920ee3473c2

          SHA512

          7430b995887d0dcd1eec4d86163f79b9eb9e7f337ccba4bd27928d34b61945fba082f4de098f7474b53bbaf2a9b5f735b5ec12dcce793e7e127424a20c0ac7a0

        • C:\Users\Admin\AppData\Local\Temp\Cab1C68.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar1C9A.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a