Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 04:36

General

  • Target

    2d5fd943d5ae065585cc4289f2a1b716_JaffaCakes118.html

  • Size

    72KB

  • MD5

    2d5fd943d5ae065585cc4289f2a1b716

  • SHA1

    6c5e4958591bfa8cb6bc3a84c20129396d2ef7c1

  • SHA256

    9db5030e01042f77954e6987fbed1a6678259c7c25b82fbed3c723085915c1f0

  • SHA512

    e2bcda966bc76b7798b4520b6571ab7754358d5d0fda304bbec4a3cb285144a3f6837dd2f83a7fc08efc24106054ff98e6db8aeb78cf3d0999880bbdf590b2a6

  • SSDEEP

    768:JiigcMYRdsI+mInDD5BLd0gGezBp8L2SF4rOkroT2jwC2aZZGMdtbBnfBgN8/lbi:JYv8erOkkT42F0tbrga9nhc8nhVW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d5fd943d5ae065585cc4289f2a1b716_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1872
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1872 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6a3ef6f27349191acfd888623069036

    SHA1

    c0e9bcd8828e7e27b9d8a6fabe6a600e9c0a061a

    SHA256

    37b82af4f316692eb063e96b8cbf4f754db9937ed68f59810864fa2423cf053e

    SHA512

    642c06ac7773f36c35b2eedbaadd14ddf2e29290e0a30c8d6986ab7e0f81291ad4074b24679c0394e8c9f1c6b6a3852d5e215ab908491048154006f6539b7403

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc07193f279f6acfa74863142e43477b

    SHA1

    a8cb2e3827ab53fc799061da86a34069303cb2d6

    SHA256

    2450c7b54413c21da4dd5f4c9c5a9ca07122141f0f1446c0ac1799b572635c85

    SHA512

    555359ff2a32dbb584111c22c0a868890a405046bdd047d64e7dfe68bcb674cb7c4a6106c6d2239308ff61b6a0e841225c2e4b7bcb450b7a81a0a76482cbc323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60140d40bf6f7f9bf224929be01b2c30

    SHA1

    4e86c18cbe00dd998c02c20f20c26144690b2754

    SHA256

    fc3c08cbbdd02138c3dd8f39a4dae354910676e0315d69cb4c9273c5d29a3d58

    SHA512

    84cd495060e8dfa7bba1f7d8de75efd1fec4a4ce3e09481a7fa237c1398874587a3766e5d3bf1825078ffee5eb9e5e852acfe7ec277ef8b81fb85d1671811b3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fe4e27a45e3b68e6f914e97db59d273

    SHA1

    1087c782cef4f15e9116701dfad574ac1dfb9200

    SHA256

    75787003a28bf443c32604a87cfa75d175d5ceac064f98a5fcf9451932e508ca

    SHA512

    6ab2c76030057dda54485d43858d044e183b6a099b9d9e5a4e74d112fb9e699ff6c81b7a6166da061d06cfcfdba66d0bd15ba422473b8397885fa32947f22d2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    891542efdc666e2721f12d4191bdbae5

    SHA1

    5a4ad1893901dedef847e666cfd861f1298aec19

    SHA256

    e7820349597a79ac646fe2421181a03d776f7f6ae3f32badd0508539aaa42ef7

    SHA512

    af0a4340005bf252460924076fd31144fee9f7e470d71eb5771bf1d22a7123488b971128e9b6bab051be6dbbbd881366c022ab5de01cc74670b3a7b44965391a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9b3f43a8420ce0cf1c7d9afc7d7fef3

    SHA1

    d4b925a7cd6bcba9efa1487723ed160016d9c3f8

    SHA256

    a96e084fe42f7ed83947a79dd203f67e837c8e0fb3caf365803e1641e72720fc

    SHA512

    34ba1b57dd91d9f1291e25c77d92c5beb5e47eabc80d77a5701466d6d06a1a481f31338002e84955f6124d9a56d0102d625eccedb6c2fae4910a6279d22cbdca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fe26be27e74f12fce460d5279e62a38

    SHA1

    81914fd241a1c832b894a827580894d8a937a1be

    SHA256

    7ff552be18408400c2ecc27e748cf2aeb893872abf0440ba0cf19b52c039483b

    SHA512

    7455a31be0bdcc6179fbaf6a85721c4704e92b63cd775e6866217333da12f4cb077ebbab23a0273890f21e5cbca603b20791cfb520094c7b04321298fbcbbffb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf182ce5e5b9e50ef5c4048c543cf303

    SHA1

    5e2de244d8bbc5aac9395397fee724477226d253

    SHA256

    129590181b590aec24e50744b5445b4a41ffd643e207d200ebc52f0c67ae80b7

    SHA512

    7755d795b9f885f90ba6f17b4894066785389cd70a349446274e9d3e08369ed66aad1eb9cf1eb0352739af4a4f0e8bae1276acc341beff52e3b56efbceec0a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da4bfe81d5801b304f44aa079c10a506

    SHA1

    401c7e5650bf5f11ba2ea6ae8c6737a243addad0

    SHA256

    aceb04af725be2cd459fcd90a6dc1b5ac0ad6024774827f537686a8e5f2ffbe3

    SHA512

    87ab4a7bd37898f67ecf6a3d09803df7d857bd6a374b6259ef770808bfd22d1ab0aa46bd6f08fe327af2396c2368ab47a298a2dbdd455bb6f29df21d5497f4d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aa4b0638ea7115e37a3d582bd14d349

    SHA1

    d3c0c76dc03c85ee92384efe742a182c508565c4

    SHA256

    bf0115477b6f1d0e740c4f6587cea8fb92c37044eee5d90fe0da70062509fc24

    SHA512

    552f6322016a93801c3ffc42b1b37c7d94aec941c2e9100338e5360710e9fa77cf5b0a97b8188fc812003b3c90cb5b36f29f6a48d9386c03ffe6afb11b6933ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0ea23241a9823402b53549628282d4c

    SHA1

    03acc6c803140edc55d9a9f8d27367c6173da7cc

    SHA256

    5b1e06b111bc9a8f59b12af454fe655df2666d2a4cc0044b5833832f14f47195

    SHA512

    28bfbe7217b20c6d52e1fc14e2748e92840c5db8488a9b48b0301468fc755e5d2013b1db783f7962a5102217ec0d8d236e6a8b33baf92178a2ea877dc65e8b04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64fba2a880443f1c2bb361d83d03b32d

    SHA1

    c61d30308517ba3f4f1cd86e1e2ea9060b7cda3d

    SHA256

    404a119b693a9ee16bee5b2e8c46b2918b5d1e6b96b01cf7ae8c8d487eee3fdd

    SHA512

    b847ee3af000887889c88df29ce12f01e6815c15bcd4f856b9c7ebdd8a83a31fce592271fc3d35a17f03b1168b5495d3fbe099145859b246827f9f10b15a862c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4004e894894141846d4b6f6cdbf66882

    SHA1

    0101d87d349af9aa919411b46f3cb20198278332

    SHA256

    b4eda6706c992eac909daea0b5e17042bc5556b994852fb4afd9c7d2d9170969

    SHA512

    82589f371714b7f1df2a4ae7f16a63e11b07a71d776de50bad21f9d3794bf7ef3953380960ee36b8334c44b5f9432b60b6978dcf632266f0950b2c689dc66d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cac03363ba1f3b554cbf55932f672b43

    SHA1

    8c55d5147f25c87d240334970034760208b0f400

    SHA256

    d8db2f0be7775dea3e6cee03ec9f8596ac107ab0a97d174631329f3c52087980

    SHA512

    c9514876b07c00a72ba3b9ec80ce0272902d5d48899236321f97f9e858b150b5c7421deafd0a8a48b1a842d95a989acfd8b1f65691d204d767437ba7625e3173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13cae5751db0f448b09d4f5ba9381b22

    SHA1

    1d150adf03c98fabfd4b1ed60107f34965e47ac1

    SHA256

    5ce46cae33b96266f389d1665879087c9e874d898fad953549dff51e71e73188

    SHA512

    7f8de15a26dd8a7ee00298efbcd26de2b4986d1ae80d1a5df20f628698962b391fb72b9f33619470d1a0255f57f6be0bc1faa5daf5d39ee3ce9100e8feb0a067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f66e852b3e8c3284c24474a5e8d183d

    SHA1

    b8bf167e35e65188bb193fafe3f259127a41ac84

    SHA256

    5c32e18446f9667a4f71784c455731985008481a8077949133d1cc8adc5c0c07

    SHA512

    d861c7511ecbc857711f37910506ef09d3cff8ea5f879668af9704bffe2ecbf9186f08668e0a8f673af714d1a1471f21e6b7eef6134dbe020cf8fff33965ab56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4da4434066d799ecd525178df5d00d9e

    SHA1

    2464cbc4d6e9820a37d20683eafdd1475c7dd005

    SHA256

    a408363b0b34e6d7a7eed24a1a5ddfe3418f070e110e01f8df7a85b33bc9fa39

    SHA512

    1bbb8bf3a9d45b203a496f0c53c46769d103c63b8eb844aa99bc46724aa1f760639796a9b7eaf655462bcb60d2c468c56ee039f9714401148fc06f2b3fa89be7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0207f3a0ea3ba507c50ce589f688b21c

    SHA1

    7f7a6f34f4d18ce5e746c5c92f759526c5f54ce2

    SHA256

    d52af6688ed0c9895c9a3cb054b26a1b5a6e688f313fcdf7f761e058ec5be913

    SHA512

    97b56e2e95887c90460e66eb543108e4110fe9aca8557305da4c73c396111ebdb604df886ef018f227d58073f19a9c5288612c818922156d2a84aa9baeb5f65f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64a921a334fff87c3ac4ca8584c38fb2

    SHA1

    447ece339af6d3b2f6f3123fab90a7d290717816

    SHA256

    3bdea2769fefb55ade14737540b8d8bedc21eeaab0e0befc6062e2bee0162a8b

    SHA512

    ce28329ccaf591ccbba3921122ade3eeba080fb1b09991fa19c97e9cda3dd366063d842fcf32f6fb8712da1563cfc66c2014c1bf657bedc36c53436978460b41

  • C:\Users\Admin\AppData\Local\Temp\Cab2D3A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2D9E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a