Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 01:55

General

  • Target

    2cc6f9b134b79539c2f1a55c1ede1d10_JaffaCakes118.html

  • Size

    6KB

  • MD5

    2cc6f9b134b79539c2f1a55c1ede1d10

  • SHA1

    af33cad414ac6a0d683bbc8032b22a94650f2755

  • SHA256

    414fe290fc5174b80717c89be9dcd824033c26983cd0d19084799a5b3a9cc09c

  • SHA512

    a405ce28cfe936338a09f264dd37f4c0f6eaaa5bb6b344b85d3d11ec1d7f94c2a09af57b4d4527a8f09f4225c43503187518e68381c670c53562fc749f29442b

  • SSDEEP

    192:MUbmoNqxiMfU0fq0v017g010lFDkJUeIDAy+nUvlDOfDOQHn/fV1N5NMl+RP7RQE:dwUQq04ES1IcWqfq0n/d/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cc6f9b134b79539c2f1a55c1ede1d10_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3032
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3032 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5cea6cfef5046c6622f18e558606ada

    SHA1

    142f8297f920f0289dd13d512dddcaa08d8415b2

    SHA256

    f7fbf7251966138129fb6d76a973ba620a290cff85baeea95dd7fc9938c3f4cd

    SHA512

    0b052e3e045bad4f18339a57be72a516522606629636a35bbf4cab8cce73361a5c0f7ca5ec1f094fb343ac649084fbba2ae62c1579e541b3d8158fa56d702d13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e727b0a01fbddeb1567a9c2fe7c9fa3

    SHA1

    706717c9372c332c7f1cbeba486dc24de3a4872b

    SHA256

    42564d8e1f5f3dc317ed47c3bc6d0923217da66db1143f6b42afed23af7a4725

    SHA512

    f21d032ce830cc48fd3535aae5c0d1713fa51f334646caeea0e195bbbf481128c0049090c0feff663b546d53b298d3ee4ad67f62da796836149ef77c98fc5e93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2747ab3de364633e0a2f2184dae10bdf

    SHA1

    e29a8d6e6f03a61b5299ea0223498f251203f537

    SHA256

    8a177353072ec8e345b96a3092a79ebecb269dcc0468cffc7a911c26c57cacdb

    SHA512

    b9aa9f71ceb5ae97c1a5c149f787127f67cea0f4641c907f7bbbdc4ea086304345513a4d8b4ff1a06fd6b702291d150605fef3f5a7db781e5e54332bae4661ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4a4b43690b63902caa4a6428e10415c

    SHA1

    0743b43478b1306ccdda5841d6c368802fb83405

    SHA256

    0c130b078e30e843544fa5aecb64b4fbbc059e910d5d124a3a9d67f468804417

    SHA512

    80582c5ce2df072dc4577c16c5a2e723a654463e24492f813ec12670db6b79ad6881eb3ccde2c03ab8cbed9f0791692b81b2af4a0921fb1f2b7b8f23df300653

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cd66e8e8db7d67fb4a912c386c18501

    SHA1

    57516111b7eb7e00ccbe88c6a91196cf65fda11b

    SHA256

    0c93d4437b609d35edad178de2d49d8cd5b3eaac789288d91d0155c1679df270

    SHA512

    bddf19c4e43b66bf01da71f5579813d5ae981b8bf45ebef7f688d4ebd9189e32a6f1dd82bdd78ea194654b48f8a231a1f17df1c8607e3d017ceb12644aab1a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9949bd74808c19a4bb0f013e66638d1f

    SHA1

    95c208ae8c3267f5ec43732e42447dd95f4f970b

    SHA256

    4e03a1cf4865c4b72f44934c01210dd86e05b2e3591902af3675664813f3068a

    SHA512

    6d11fe9774ac9f5f40200faecd4ed0c11371cd17e9ca4f54bd61950285cdc53352a72011bd2c088d98923f0dfc9b74fdff38894a35060c7b996ee84b5298d109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66cc394a831532ec06b5c0b59c5a787a

    SHA1

    a25639ce56651f7984f6f8ce65742b5b6e2504fa

    SHA256

    5237a1d9f5e6139ad7ea6cbd4448a2b4f1b2b2585fc9ef0c9006755185c3b8d7

    SHA512

    f2d43d135b5b6bb98d5098b93797c860c913487bbe6588252430a107ed4b6b5b0135099f4c30a86f4f521caa6e2c80679a7c042fc72509515e47fc4922170d75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1f43a4247ec734f5997a6ee88bff83f

    SHA1

    87025058e9bdddbd6da1dbeca85c8c0489b53adb

    SHA256

    b1b45e2b00cb07cc5992a5b5b4da1d979830381adf2a400ef813f2cce9f23fb9

    SHA512

    3eb77787a9d177599ad5a89685f4eeb0a48e56831a0b095d085dc45e62d3525878a7aec315e11b5b194c1efa8eab8c73d0f45dedbeed85be186b9d45f224806e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87a1423a48a8282eb915c697b0868c40

    SHA1

    e71f8cf4b93fb9e9a41de21d718736ab49528c15

    SHA256

    dc902abcdce55679760c91cbe9df621612230c67e34fe0a41f7f7e117b04f3b5

    SHA512

    3af334ec31fe5c10607b5b6a33fa28881b05e4afa88a1a2a6cee1bbde178e33a321074e6b00149281e894f46ec9be608374e76858975f10751f3798bbda90b2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    836969f6ae7cf287dfc485b5cd23785d

    SHA1

    1e977849d9d1986d19319504a6e37416b52e0809

    SHA256

    1ffe5c97f95c9059c4215b9ae01f221f6d6ce619fd0186fe03b104a99c14a921

    SHA512

    daf82057a73c2f22fe3d47afe7edb7e614a583bb210b5c6cfd6d9b39647df5a41c91d8f0df654068f0329e595ec17d22d562b251ba8434c9c1a87f26e17e87e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3854094e8208cb8e1dfeb274e336afca

    SHA1

    16d130b7561acc651b1d88bc5d0558fef0195c8b

    SHA256

    a796d35a5cfcdc82a4f416b7dd29316455c806229d2fd538a51b23f2f37df72d

    SHA512

    d38377fef7ced5a1870eb2defc8dc83de058fb2d20ad8d1bd35d2c5765a53656a74d9bd7233e51abe614e6ea0fe6f0b6603d91d9b6a6da7258be60c3029f39b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4541a7d869289c599cacf4830e67567e

    SHA1

    bd258ccd8c2a25d4cafd15db61e659d86b5516f4

    SHA256

    faf5441e5b64564b793b3df270015dc1678db92c8b530768f4698791a6ab8680

    SHA512

    2dbb7103b245b5ee6064496bbd3cf003ecad2b2d479d208180cb63248df37b8433e64dde71517748668f612e7ad6df951791cdb6f525d870f83eaabf6299ed5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55c9890ec9ee48732b9cd61b38c4b604

    SHA1

    b2b0a651326d64c975edf548cfe30e4fa3e34227

    SHA256

    6419f305a4cf23970977c1d8de4093626d2eae35b05466f330d44c9a6d574075

    SHA512

    4cef9d587a8d04199aceccf945555a32a004cda52856a072ba9f1e562b3fb3924be1b8b737f30ff74b2043f53d1b6ffbc3e74b7729a877934d225bab449bcb10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8b15b2d42a6e497820556eaa787e4be

    SHA1

    ac528be7541e1ba8a93ea87a09c34ecd1dd8f2e8

    SHA256

    2271f70940ca10c3907172747f6d6b319bb4b4ea88ca9345441da1ef4ff291c3

    SHA512

    2656a274d8d61fa478c7f2bfd07b582225ad5e01863e6797b2a45281acb6344066cd0ecb05904f861a5af6eb0c1b9cb3dc9c2134ea88271b581c9e562f727c49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7324c7cec56f1e44140014b87396039e

    SHA1

    60095ad3176b0ed5c8e51cb76fca0398766e4f5b

    SHA256

    25729fb652320cdedd247e220afabb904dccbe5233d96cb598463730de530c7c

    SHA512

    b0b442afb6afe37130201a29e1f4217d0df709766d9b310d4cae4fae3fdbfcff3d8955354625407962954f0e4a9843dc12f9f1c2011a74822a78d43638265e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b1b1e9e735e1042dd33efee5916a0a3

    SHA1

    2963bb952c536e271f5dd8b50598aead2bbd89ce

    SHA256

    4ca419a07b27da1bdae714e91229f5b57f21cab7a98279e4bcfcff9016ba7e00

    SHA512

    56ebdcf9ca79a8bf12eadbb8ca9c4472555755049a75fcfbf1ea1cf59ac3d822931519f1715969967ce155cb77ff381c49704e8a202f2f3c32edc0ab67d41adc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2dc8c94f0b381b5cca4c475724ce6a0

    SHA1

    87cd75372b6be56d2dc81f3d28ac60cec98b775d

    SHA256

    09235695e379281a86d53ff3f07bb5bdfff429b87f83c8f177a42b9453aa9701

    SHA512

    18c2b3099e0117b691df5eca40e44cf21b4e730446f11528f8b15e13b1f0ed074995a84acb215817bc7f3058d43f501897132c3bb8af8f6a727093d9b7eab364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12dd3977f2511f929b1e64beb90c33dc

    SHA1

    20e8e71ced9144f1e61d7484aba440c07a099679

    SHA256

    577d4d3f044a9288d6c845082356e1da638a4340676f98228b90ac59db768ffe

    SHA512

    7b3026db13f5d98c5ba29eb9f9182e9ad19e8ffa0a49ba07b91941ba8ffc43484c69ece877e09a6dde1afc65e910e4102ac63b78838826834ec284059f219467

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee1922727bd694564f7aa1d207e5fde4

    SHA1

    6bb5c6a67a9a9e2a3e4514a5f7a02a6dda63108e

    SHA256

    d2dcaaeb541d140ddb05688835a2d442e407ef5f11f18ae94af7eef4b75ecd84

    SHA512

    5cad23b34747082ecc33abd3a8f01eaa8f8e7b85fba9a27a3e46732d5ade9ba15e3b30edc5cf587c320a6b71fa754ac7b06987461133794933121b4246339b56

  • C:\Users\Admin\AppData\Local\Temp\Cab35F1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar36B5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a