Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 03:04

General

  • Target

    2d076aa742e40b8a246b74f55cdcab8b_JaffaCakes118.html

  • Size

    68KB

  • MD5

    2d076aa742e40b8a246b74f55cdcab8b

  • SHA1

    3c038a75f207eae98725ce981bd964235c3378fe

  • SHA256

    8ebd64cc7a35c5497cf489ce29c07ecca1a67430f2a4b040861e74b89034b48f

  • SHA512

    edba4b65d7f01b9faa4e4393cb72229011e3027b54e01eaf2b4d8fd45d802cc195bfe0ef67417ac4e9f0ead3d8b81323763c7f9983926f74b5c577b93aa3e33d

  • SSDEEP

    768:Jix3gcMiR3sI2PDDnX0g614yLEZ4oTyv1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVh:J6QELi1TcNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d076aa742e40b8a246b74f55cdcab8b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1700 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c1d536016feba9e84711c8195d9c4fd

    SHA1

    e371e741c2f815b2643451fc492c9a137003a323

    SHA256

    b8898ebc05abe0e2ac16b1200b3ec7d2c798e5feec732023d2b550c923a5e89b

    SHA512

    bff3bc817199b3d62725a36b24568907bd81970e18bd4a565f3f528c8b0d29e5b0f828a5080d2089f2f6ae60e77269cda0a49330a9f23e66456c40b3b6e53153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9409632e432679b0b183ef9c5a48d38

    SHA1

    5b65cb5d98fdd4e8498bb6b8671f24361c38b239

    SHA256

    f57bdf7ab6684b2914a19b22a2052b2a33b2778818b93fd603b5976a22c02c39

    SHA512

    2fa215b667bd43d69f4c16893fcd7cc7dd5ef9751c2154db2907fdd3e25c77bec846bede30f251d59da7179581a55c7842b76a43e436b9d9ff706118ef1c19c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3411a491dff47da64e3bab4d93b486f

    SHA1

    948def7903bce6e49fc0fd4d36e5e542edb6cafc

    SHA256

    a17c5b4ea435267623469da86e98635343750817d25c583967ff7219ad6c1c1c

    SHA512

    392649f511d2b4e97c7057fb3bf14bfb26944c75f9846b627d5b4bdbc9b8e3442f32ca202f59b17ddaba1c61700d7f8c105ea5d9573b47b2fb68178f2a7e5f5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef40ab93b8be0cb45264bfb3351a4128

    SHA1

    5c1f3b3d029cc3a9d0aa3fdb1c664088f1f31d89

    SHA256

    7de2b422c75da418be384726095cf304dbcd17f52d12ac1c2507c8b5da70230f

    SHA512

    77b51111184cf1fbd1665925f743159480c966b55b9571cc1d805f71fc908743350b7025ad39919180d1010af1134d9f03106ca7d50d5d3559457108b6d6f2ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    863036e77c1cff3587a36611a5f770f7

    SHA1

    af837422402669bdec5f5980eac95170e49e3631

    SHA256

    200404f8477e672a3769a5dc2bfd0bde39681b8f7de3c6ce47121721b51410ba

    SHA512

    0236d1ed20495b2c0c6ddcda4ea14fdc80952c05a450f20b1ef4ed865f2d7893e9cebee25aaf7adcd6c099c424b5632f14cd9c845acd279ebdc490d2da6289b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01bba556c39df14618707b8e722ccc50

    SHA1

    6d47e717435f25cb48ebea0b6e4bc1d76a5faf87

    SHA256

    b7372bec9f0c4fa5fc01b341f14e9ee1a6dc4eda7c1dab2eb0f31c5e2d3e7b51

    SHA512

    f13ccc8a2263c5c636ad5c751eec1e4568c0fc2d219e26a77b3a23d22119a229de0e744883295ca47c5ec04c2963e317fe0dedca24bdcfae664425cf7f992b7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    970b9264d19b22519cd29a4a64b9006c

    SHA1

    d847a24210bb8243577f11c820f621244ca84bd8

    SHA256

    bfd352579fc169b8cdb6520298274ff613c0f02e892a48868d9c981d9a0b2c0c

    SHA512

    dec8e948b62bcca91e842b076179d871a88c6a7b87bd4488c08acb35ed990f9ba889c2e4eb3df44fd76786cc7e2348ebaf055d2a9b45e1f5a45059b622ea8994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1edd8e7dff9eb5f3a104f001368967d

    SHA1

    e26bb12a05297eb72fcf09d3910916ac9b8fc8d6

    SHA256

    b7d2c32113553551e5507268fc67f533bed456f3c7f0f8e177c1f88f5d39ee10

    SHA512

    307f035cee5ac508206febd79952c715dc19814045be8b0ab9d02a3974d748ed91bfb7c68251421e115abd00a2aef8059c52031ac4185d50ad13de2e9dd9e886

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ca04d34d9dcd55360c90b9061a2447c

    SHA1

    751b2cb867a780257763e016c6e1d6f9eeaf8b17

    SHA256

    9159aec427bc511511ea11c652ce3410b60e66f63ccebbaba441ed30a8e2ba21

    SHA512

    86689b965526f824ab4a4f52948dda07646f9a985deb37a9b18080aa4d63970694a557069168bc6a4156782b178a24cbfc8f117890174651c256a40e479aabf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8391c56b28b9c42003d101c9d91667b

    SHA1

    562d186625ef73236188c2badd947fa43ade3e20

    SHA256

    3807da58ea594d0b4eb9842c429084110e3426b11cc653a93a23c958a505d409

    SHA512

    352e7014955d80df7efce5a0c20394a0055195de04b00eaeb80cde0a5312ccddf0df19fb3742ff4cce04fe55282aafa91b93a72bb576fbb1598f75da22f8f4fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dd7fe4ec7f0a17d54424375b6a79b50

    SHA1

    44a83d04ba2479399726586c05710f4bcd9f1f4e

    SHA256

    865e2f2177321b460d57c1d1c496ba8f7555b64bae662f4f51bb87fdb2750e94

    SHA512

    55fa66f17bc2ed1077e2fab4df0acbbd136ca7e637e410e058223b950d850ea06f9f52cadf03186191c5cf6c20882204dfb71908e0805603a3a328ad30a7c555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b16fc8cb2119e1977c4ba13fb81697bf

    SHA1

    7b062216ebdf62090642382038352eb2e30e2767

    SHA256

    e91a96c837ffbc7a08e7eb96c9120678fa98d982277bb82a3abd893488fdb661

    SHA512

    ddf65d6ef194273558aa7e856fe3d8d76cc2e5ae6062a3c452f8b66b95dec2170fa9c53cfb13f13aaadc15b3bc4a4219b911f124c76e3b4a839f2b74021364b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fec6fcb768dcae6e836efcd57d931b54

    SHA1

    62ee7f5067178a3d3a99c1bdf353246fcc5aa6ab

    SHA256

    0cca0b7139404b269075e8cf7c2e807ca25e64c9e58274a42642c8085d80d8c6

    SHA512

    04b9cf6e209efeb479fb5290bf81ac1267eff0b71045b032d9b60b7b3c9c076510dd00806407c519b3bf353f58fbfb012661d76d4e150e11a323130aee94db5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4805f496416e69df208ea2273bc6c6f7

    SHA1

    fd2496af7bcac9882b5f1c79236f49c13df27a6a

    SHA256

    43a3d81412c804cca09f1582270a75b492bf05d29bb4efe0d658d707be096bb9

    SHA512

    42aa2b82051ac5612e282cd3b7469c42228e8c9497abf68ca446d230dbdd0170cb8ec07e98e9bdbd0121e294d312466027f3459f3051c6b88add0d38707fdc72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c220e8f1c172236b668df2d17311f572

    SHA1

    0129bdf6aeb6df9f02be6ed3a578dc0c63d06da6

    SHA256

    5e90f61d513faa6da47d518678aafd0463949a9f2fdc8b9335e555fcaebcd1b7

    SHA512

    7bf499120768a0caa3db98a4210de3e691c5dbc45bf9bdc3c6dc20c24aae14aec44d2c5735bd7131a7995bdc86bb9ae30aca0dfc9b61e53e05365132e7d92ea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c501303c077d4cffdb5271f7bc3e392d

    SHA1

    93d9fe0a6f6b8c0aaad69af61f2baf64771b1fbb

    SHA256

    ae1cb3ce4e85b1a36315c33ff16df1f6d979877ce00b96e6db4e975edd7faeae

    SHA512

    846c9d55cb2e3c0b98ab784076fb2791dc43c0b4cfc43383a44a9bfbfccca15705f5d38405f22d6ab9c2e3146d2738ebc62aa5b14de8f3ef21b2654252d1dae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a36682e49fcbb2eb92f79c0ff20441ba

    SHA1

    fbdff003e1e33fa0d96eda1a3f0d8de2a5da87fc

    SHA256

    6ae375bd7276270980aa122d4523a15de08bfd33692ba79b52126d98c330ca5a

    SHA512

    7543fc1879a7182d04bcd463cc677c726ad69f6ce863d362cf170f40c086199579ada9738f0fd9c95087e6dea923bee379c7b4bf81838af232359deffb0f4a76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cc79162cc6ef77a38e793fb1f085a5e

    SHA1

    954015c8b1c38dc2be7aafbaaef5fb6a01a8a9cf

    SHA256

    cd3130384e9aff4d4766d0c19c6606b2cf58d076f40aed31f53c4e8564e9d586

    SHA512

    f643749eaeade053330e971c76eaa0eb9c5281f47413c2ad37e65c9a5c843badb99dec6deb996f009118db22b118a094ba9e34eee486e08aa9da32898329e279

  • C:\Users\Admin\AppData\Local\Temp\Cab1C79.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1CCA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a