Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 09:04

General

  • Target

    24225ef2f98fbe55e2e5ba0e66c6ee5c_JaffaCakes118.html

  • Size

    23KB

  • MD5

    24225ef2f98fbe55e2e5ba0e66c6ee5c

  • SHA1

    a7e0bfb4516572ea9a2c810b7fabf6df54338ac1

  • SHA256

    6a33347181a3f96a2077cf169b56e23eabef66d9a4eae240ddc1f17a4e6f09e1

  • SHA512

    4fd28b053afcf19ddefcb1ed504bd9e364c8529bad91b726116b53a9bd860b2c6c2e59133882c6a2172ab602ec7557b071b7f7c1ef3273a46b949392b84b1801

  • SSDEEP

    192:uwrGb5njCnQjxn5Q/SnQie5NnLnQOkEntaMnQTbnVnQKdjVvMBZqnYnQ7tn8Ymn5:oQ/Ye3D

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\24225ef2f98fbe55e2e5ba0e66c6ee5c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e33fb99fb94a189a95c084f1dae7dc79

          SHA1

          e8b80da7ca142e8e2709bf856f241cd0fb4d71d1

          SHA256

          d0c61b8275c0d0c1adcb693eaf63e2829e5c2df35fd8f0113e5b0a84e19471ba

          SHA512

          8454250656c42c34c8d5bb8c90d825fd194eac5d00d6fe1646da7381ce370e5ee0047fd7ec0c2069dc83fb3be4331f5f340646b79cbcffe8d39564610c2133df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8a1143134a8c9960c2c301e741060518

          SHA1

          11ead9c15c405713023de2fdf3c3c75e9717fe6b

          SHA256

          c1e66b1a0ed64e89430817b1dbedb5c005be1fcccdfe5602f415385d123f536f

          SHA512

          8062b8802cc73ebce5cd00e89b401eb45b438a3fd87e4869d7ddb74dd1850759c4bc98900507c139d11d57d18785c5f285f3760e4f767e7ed9ad5d8b57b061a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d6fff0b6bdb82b82410f1534485ac8a2

          SHA1

          ee21988750133b8aa8207fc960d28f13c5694170

          SHA256

          8a1975376536ff731b3061be9416b7243aeebbaa9b3dd72af37160824c3757f3

          SHA512

          f235dd3c87f4a362a7a60eab292bdbb35c08c6fa41b675adebdae50da0b6c26d87b98b28cc64ddf43c3e242ccd1c8e5fc160c99b2d94a2695b33eeec6852a2f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc4c6a9cbdc843729de35d08bfa124d0

          SHA1

          796daaec71642eda17d52634595acc4beb46753b

          SHA256

          0cd1b015ed941b21e6cff82f4c0d9b5ffc2fb19cc15a8a84bd5e3cc551caba5c

          SHA512

          0256129011bcd59217291e10aaca00217427ec165f8a50dba62b00a71efdf77ba8d3f0f99e5f96756a1aed05938e03474b9568a1531ab7ab4a6d3f346c69a45f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cb839b46efa4c7bd304a1112bb39e52e

          SHA1

          78b48a6f5dd5dc46420e885682da702d50b70e1b

          SHA256

          4a78a52be1ae770551af1bd207cc6c7aa80e3005df61f95d834a07cac904baba

          SHA512

          cc2d078c6f014096c29658cf026dedb51cb149e79fa829ac3fa1169859845709a19514811c881ec861ee043e4e5b78257ccf37ca6fdd549ab052c5f84175e66a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          649764bde701311a8d081771b67a7414

          SHA1

          7a5f2b676d4409abce29d228b5148e90e857e1e8

          SHA256

          31064431d28bec9cea56cda50a1d004522a1f246d66cb65acaa53530e4f2ffd0

          SHA512

          8c9f4cd971ecd04e160cd0e68cd7f4d28b7831497fe0f1eb6847cb8fdeaab7b595c39cf7863d42d89d2cc200ad8a202be7e22d70cd6265ce50c559768f50fd33

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dc7c2b2a99a81f1cd21c208b9bde924a

          SHA1

          e77871d4a0af997561c02cf4478f3cb8a09f87e4

          SHA256

          ed9480a00473f152061793238a514f596241201c415923334d9cb23167e4b866

          SHA512

          f279ba5780efee36458fcf573388501a3762e348a74cab309983332230b09e26bc9be8489e0732502816c197a78426dbe1e57b01420c6034516b5882610a4f5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a96dc9d19e0fbb72dd896b74889c7cd0

          SHA1

          6416481cb49e4f3f310db84d81f0fcf54843a746

          SHA256

          fa0a49f91e1fc44202c9ddf447ced2189943756af5e425980679835eabcb9d35

          SHA512

          961cc170ccdd67165689b7f92830475f92b81da4182869de5a7fe562173d98d42a33c001f57dd813773a18d6c73c8a6ace4d40eb3492f9eed42fb7efb3af02ed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          72e1052108aa193eb7af1f23a2e1a09c

          SHA1

          0f9182c82387a3509ffe961f64a3586abafaf7ff

          SHA256

          6946ab7f2f44eafd80cca562f1941e626bae0942f81faa557515b5258457ec62

          SHA512

          de5f39833a8cf11b52c54182c3a3a462c66e7e75df92722d4efafd6c28b25295120639ae19c31ad218957c4918c4c734c767788d6b2c69a08ec682cb538cc2d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b2d6acef53b4bf6321101ef9f5ff2f07

          SHA1

          3d94b248ee82f50d22215d3bd7421cc52ffba71a

          SHA256

          f615a36029939b4ea3f456125186686d39bd4c13dcc0df1a92ddbe190984dc02

          SHA512

          3836d46b7e929381c205b4162491ba40acf4ba5634ef858550eba0fe8782381a4b76b815e28480395b38f3d62f66b28ca973e4e5d0cfca39a5e7e20d16e3fb76

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cc15216f2eab84b46d2aef8a5b4eee1e

          SHA1

          e3db37fef2de0f2b60e6b1207e05b5ac07877c10

          SHA256

          0f82fa805a3bb83d1396b4502aa548358409a8141bf0cba7330270fef3b3c578

          SHA512

          8f63c285e7e12c0bb4badfaef58a73f087afbbe7b4a81211139b6570bf00361c9073807b3d411f756d99833344d1387030274c63f777321c80e7491f048bc18f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2ce17aa846735482f475011a680da944

          SHA1

          bb51f4bd9512518ee331c4a26695975d61434040

          SHA256

          c189feea3b4fab2f34641c80db6f4b2e2e7a67be1a2f998832e021feee3d47f6

          SHA512

          cc2b3b92cb51d1cff83d92a42e5f3134a16cca6093ffc9836671ed02cb13d53c809a55022836e8978664ec9eed492e5bc7875f0ee176564f9d72880e67495c5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e8b093f6a02ed95d76ebd2584abe6161

          SHA1

          9e42b2c42faf9259af2eda0367afdcd709fa74ba

          SHA256

          cd2c51c2c5bfa83c77ddf11b6163f2998d4e5b01efde18fca1bbd4ae8a2d51c3

          SHA512

          0c2db4c42b8f6e13cd682fcdff49b4b38de8d472a22139ee1e312ccd9515c272c13251212235105204ee13577d67a0f208f32bea954dfccaa63eb37ab4c6063f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          744e3f4c8714fa078061f93a5570a23f

          SHA1

          bd2795e44ee3af4b947e0cb73a3e7180add1dec0

          SHA256

          cf6a7218c8a857673d94bd45387312aa706a0215c9be16a28714c3f6d5b2a51b

          SHA512

          e87271a87ead270686cf319f2486e2f9a451b563686834135c8bfd1227ad4b5fb9610c781894ef781267576ece8cade3dc15eda3ca97645cc9ddc4bd9bb041f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          148dd60edde534ec818c6855c6e17c69

          SHA1

          22c45d584c0775aa9c546e905ca6b1dc5390bba4

          SHA256

          782fe9cb832230d416d9193a219d40411fc69a10f3a32baa9a379cc57c563dbe

          SHA512

          7b5db02ed9c7a16aa92b0bd9ac8f461e4caee9d074080250d18157d3034d638da41ecffa0d01c331d766201d7945aa8e05448d5d9f9533722a2c5a310fd7dbe3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0dda29b4339c1ba6e8062ab569f381aa

          SHA1

          3ceacc007a424855ce2f54902e9eab35b62b58df

          SHA256

          d814283dd2f95ce535e11477cc12616b5e561c49c291a2160ae03d2866c09d60

          SHA512

          e4f3b5b0c8a47428a82c7c88f2fd39bdb53eb5b0eeabe9d584abf977eba29b7873f8f7e6807bd52242a9ef21037bc2ea533024e89a3926da13ab3f436879fe65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a154e0262a19283a8704fc7011fa2c22

          SHA1

          2d0630418da125c8f2197cf5c2d21243722995b6

          SHA256

          f6e49d74dd660801b8b3cee548ec30873080cc277b5ee6608a0ed1e32455209f

          SHA512

          d49fefa7ddef43f280628ba5de328e9940808b3a2bf33f49962348b496194301deb52aafe12a3daad7b491e1dd3b29a8bcbbe854005a0ab9eb5256f16ede54a3

        • C:\Users\Admin\AppData\Local\Temp\Cab2AFA.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2BCC.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a