Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 22:41

General

  • Target

    2c11f8a4d536f68f038402ea0dd6d51f_JaffaCakes118.html

  • Size

    23KB

  • MD5

    2c11f8a4d536f68f038402ea0dd6d51f

  • SHA1

    db6fd8b3ed50551830b33e1f12da47cacc95e910

  • SHA256

    8fba23910a266fa5459d5ee44789bd9abb4da8f79eb0405ae24add7690c5332e

  • SHA512

    53988eaf7fbd8355a0c09f8a106340836204bf91cbcfac9c99d18aac7cb6504bc20c46414d085d76080845908e551c343a75c2ce30957777c7146062c633a214

  • SSDEEP

    384:LaExhu5TUQ4ekw46x5kYgAQ/ETtmvoh768JSQdSuDqvx4qVQnpiF:hD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c11f8a4d536f68f038402ea0dd6d51f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2976

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          639194668cf509065b1f7ec27446a6cb

          SHA1

          b4184e804a95e79178aefc0e5ab3caafc8e38a1d

          SHA256

          1a04ff76964e84ed5a06abc88e15f7437db08dda976c25248686cbd49e092f70

          SHA512

          1fc811be367e111611e736c686b0fc310bb78ccc62311bc9f8a8e25836cfc9f0b2d82a9808987d63a083c1c4f62d89fb113e7fa0d1b9890ba67d705586ef3d2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bdc2485cb3fadd1483d7e1bf9ed97d7a

          SHA1

          8e38041738ed24efe376e27e6864323cc2cad37a

          SHA256

          18acfa15684ee898b6ec8dfa186021f543d42482e429dc1ad643b2b7e2b2c4ad

          SHA512

          908cc73eb84df9903506c6adbd59e221c73de223cf0d6b9f43dbf5688f10682ec88ae042c08e6bd9583b8582437c0949f151ffd7f0cc11a0a3e1a65caec09257

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          15d328f74a22d38753f3af25d4a5a29c

          SHA1

          ff82c0229b58ff3d98b30cee2a4536ab742b1348

          SHA256

          416c9388432b6647f5f2dd989c9230cd3c52be7fba76eefe8120cd831db56980

          SHA512

          8f45eb6a9b387e4580c5e01d6a2f61567d178d23f5c06bfae1aaf09c884f00c64b7e343be03ac4d2d1756abd0e48c51c2bf77dd6f6e235c41beb2fabe88b4e2d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dc1e8db0069e4f8159f10f61cb418ab0

          SHA1

          bc23d8188f0690bdcf30c86430a07947e5246daf

          SHA256

          d12694d1834070e35bdad258c215c254adc9f3a31192879a20c38b995a2767dd

          SHA512

          b17e405b1b98607d73775d25937e2a887caef117c6704858f228690514d3e5206405ae794aa01e1e803a56eb1d601a21d7a870f9ce2dda2655e1b1cb02497ad2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ac341cd0afe95cff0b818b891933070c

          SHA1

          93cf6611d5ab6b8939e958822389e3f03cd109ea

          SHA256

          85d1169b92d4cfb0cb60f5620303fe77277de4e8114235eda36e8304e34ed732

          SHA512

          24d4bde19be12b2df7667377a0c3e02c3e2abfc8812be0862c03fe3e04a9ab8f173121d381adfb263667a89b1b779b562bc096ae5d25d576cf04caf752ecbd4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          87147524b91a3944b63730a34037f73a

          SHA1

          7f287535a22c6176bf537e1618edc3d38e23028c

          SHA256

          d3503e7e6cc4a239e3bf6eb3a0253de672405112d1301114edbf0ef498c23966

          SHA512

          af6e097be6913bff18ad91e9c9871417438f71c1815702a699f8fc2f6b309d60e7971546efbe42ad191425c730a1cf650b1b3f6dc493fe3cb6b6bfcc41ee3c19

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fcdbdcc5ef46f84d3ac875e71c88ad96

          SHA1

          5899913476e2ee3c6a4dfaa91ea9a026a7f2ff52

          SHA256

          84fb38471916dd1dc9a53701a44b8e316723b77157a52601ee47cc1ef1528d23

          SHA512

          5167a222a5272136193d4d515a272a330ef7f4ab3a6670a1089d04bad3513de3e3b895fc346345e09f9aba7b288af1914f90afa6ddbc0214e10554ae0dfa13b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          15a818d725e80e7775c2a966458dac7a

          SHA1

          2b718015a02e016c2eca7946455272369358dcdf

          SHA256

          3897d14aebe53b0d99a3fabc6a8f06e16a16f8bf1b7cf20aa297b21dacce6fc5

          SHA512

          d011ef0a2124484830210d9c8dde39bd6f6b75fbbf3fef77c17aebc572cf6dadeb81060848419bdade8bf2957bc7f6767ccf81fbd5c38c55f97d21b528649ca6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bfc69558cd756a0ca874508496fcc69d

          SHA1

          f8e76b0595f97ea4609abf88729d3537bf032634

          SHA256

          fc7bf3ef7eef64d970df3b6054d431606b6ceb8bbe896f7e1b9664dd385f3645

          SHA512

          c4ac0964ebf82032217f7032aa580b9773d8af46987c524867b24b9061babf65d4067f9a264094ce30f950e2a567764102a6ec51a7836242ba0dc867988331cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8aa8f122142693be2e2eea04de7ee6c1

          SHA1

          36228b025cf3028c3d361b4c7ce69d1a13f1586c

          SHA256

          c8a34e07c8843b582509505fa1e748ac8eb8b7afe9aa05e80d8be40805e6b21c

          SHA512

          eb07aa7f5f7d8c3c73cc87a149abb896497a908c44f8a1aaa3ed1f60e37717dd903106c8d76caa0309051fd03cf41cdefb918a43cce06800b0b28b9056a535f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2a0496eb5193337e29c8d49f0d09785e

          SHA1

          797effd30926cb533511c8594ef70dec52f77820

          SHA256

          fba2485d5a1fe0ea3d049c745163b99feab59c853a3a61572437d862f4762f32

          SHA512

          e96cf50a007df02853393735b68d8c01b00572692d2061992c79967480d447a57ef821cd35f662291f39dd68c0568b9c64670d8fc3255636f76656ac9de5b3e2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c15a41dabc41a6530f1c3251c509f2a9

          SHA1

          b47810c6fa1a74845f0cf368132cb6b5c8fb1eca

          SHA256

          e711f28b2a437cb277faa1f545d9e92d7597ececdcd31c4f3c84112ab44a9c58

          SHA512

          87bf4135b4c5c32a160cef7276006dd9898f1cbb78697390316af1f1273bbddde32a88111ead2484740f587ea67070c60e91566d8e61d38fe3f91a5e21735b3e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          abd0b5a92d1c518790b104b7e3d3dc44

          SHA1

          7043eba80e8e10e1d496c480c72776b5b074b079

          SHA256

          80f02d19df251a771ac2eafd71faab4d646a15f0e89dd1e5891895e41bfd9a03

          SHA512

          aa7d64aef0b14817bc546c342800a456ed48b0104799ef462162fe48c6b28bc51b428ce3a484b6fbe99e4317758d0d501e7e9dbfad58bdc5a303eb2f28b2f6f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c9a3f3b1c434b1a06641a2d3a8dfe2bf

          SHA1

          d36ed9f22eed715422035d57432f3edac8008f31

          SHA256

          77e67142cd5769a6e4a6fb12079be8ad0a60b7e0a68e3b2c24c476352b9ed339

          SHA512

          793f2ca3b52950f9135cd284ff70a2a62febd813130d2f4cfee23dfc0a0715ec570ac60c53032815eef84cd909129309e0b68213563b3b01d86844eec1e7dc1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          af94a6e4ceeafc038bb6f86619a0f39c

          SHA1

          c8a07f748a6f3aa378447cc8023ef57f036c7ce2

          SHA256

          6c060da9c9aae37afc5f63792974ffcb8221f7a02f882c4b99cf7ce38e283a51

          SHA512

          4c5febab3e60629ad4c883fca5dc16d58b8d29a661b14954c4b323121df3b7e3e9122ac51a28df74230ff720684e0a8d8159a9dd68f85ddcb299fb9126c7c6f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ef8b97ae68be6919bb99467614d3f5e

          SHA1

          49e78577cf6f6344b5a940b8c6d301434feadd48

          SHA256

          6e5d876b558f3d148637a360166765c38306847d960e8e84bd984200e9eddc76

          SHA512

          20db59930c4e1c8e41ff64f5cd17859496ae0c18ee1a2e11dc3d23a86310cdeb736b5cd828ea81b608c5280a58a935f8b90d4abb9495bb4fefdd58cdf40635c7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e7da7a9a6d59e307391a3c8411ee0757

          SHA1

          ca7313007598e385ec052b821522aae96638e667

          SHA256

          e57526467b727d705f6a5e73c39eed1907aba3a6d22a37edaed098db22910924

          SHA512

          d4cd570cf1dfdf6fac3f5230b149cbf830ba6006ac4b4074c94e7e825263344455c7d3f01728a26ccb405f275df474197a39ffb82fd2e322eee4452abd535b2c

        • C:\Users\Admin\AppData\Local\Temp\Cab22FE.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar235F.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a