Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 08:19

General

  • Target

    2e3117ad3a3c5c9c8436d6598d81c3e6_JaffaCakes118.html

  • Size

    222KB

  • MD5

    2e3117ad3a3c5c9c8436d6598d81c3e6

  • SHA1

    f84f89e544c487dbdd5bbecc8bffb384e2b31fd3

  • SHA256

    1ca5eb4f0b40ee7a4bd47e024ab24a0343e6273d52d2d20ff5830a4b09685e16

  • SHA512

    5eb4449c5f6b88d5e3aea8facf819c74ca682dd2aaddfffee219240288094cfbfb6e92c0739ca7da1e636c2ddc22ecee6a01c86e38da58ee725ee4223006339f

  • SSDEEP

    6144:daU4kvefyBsILAehBShqjJ2w8IIQrQAPFTAUaiRkggoqFD2WvUmelx5OPpcC+lNt:b4kGfyBsILAehBShqjJ2w8IICQAPFsZg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2e3117ad3a3c5c9c8436d6598d81c3e6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2612

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0c4cc7c8f2c34cf2bb15cab2d1ee46e1

          SHA1

          bde3a4cc0a95d1d059cbb8ddbacd5a52894d06dd

          SHA256

          e4c01684f493e2022f4ec6398c67ee84c46104500082dcd06e77f6ccb21c2f70

          SHA512

          76eeb5a7e4e9ea4d75370fca67dd3a36cbfb88015fd1d2a971a42e24c5270cd1a8b55ee2cb79f83153bc0291da8bba24970ea46b93a3da089012c5dd513e526d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          43e4a4dd184654fc76d85dd5a41abcdc

          SHA1

          bd3a87bb1c0af8f8475f617f83beafd728c37782

          SHA256

          54849d7bd6b370fd5cbbd734510c68b4ee654cb6a47e07a168c3bda9d8d95ed5

          SHA512

          e6edf3e370fead3f475fc350a78205536bdcd6d4f208450a8ae75fbf24bb871eee4baad291de0a8474dd57676eb6bd9d96acf773219e68bb2f673b04186ee144

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          612c07b5c77587a796217ca7de223781

          SHA1

          f6bcf30590e6266b2adf3903e4126ab139658f6c

          SHA256

          a07794cef29fcb5e06dbf070ddd2899ccac92ff2f29ce20e1d4fb9153cccf9c4

          SHA512

          6833a200bc7591aea376b18fa6a5e35fa2988c60a88a2040783e868d057a8b03ee1aa449fc4e9ca01b55da72467beaebe8fbf4099137d26dc48f960cd009c41f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          02bd6b378fd44e29c93dfe4a1d717980

          SHA1

          8650f00806d8b37f80e2c4694d779da5856b8df8

          SHA256

          3bb32100310fd8fa4499ab9e20aa1b65bb02eb24d87d0fe318b8adc723987046

          SHA512

          9124170d7612d280034f4503f3f6eb9429a8124dee531cf8131e9e153612943b0ed669f50f5325e31ece9910be1bcc21076ba83b5b91ae40de3c7c06db459653

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          be10a9e4dd3dedd53246098c2df613bf

          SHA1

          6a99f1e7209e6f830e405bd810bfff077e448be6

          SHA256

          054f1290a0771316a0f6c80618b2b5ef3123e67d3fc41285df1043f3629e355f

          SHA512

          8a37034bf522e1673055c430a0074f5e2401504bb38428054b33ed9d40222e495a239883411ed49698c12d9f9d9c3106243f0fd4ff61b7b39b6f1a1fa0f3105a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          77a51692b53ed13405c20bc8a943c3c3

          SHA1

          28592cf7f9c8f9d4b1fc46c41043b04413075b8c

          SHA256

          3d82683c16d94384805eb45a8a2f9ffb69f61ee0a12f4566d2530e447f5d8f00

          SHA512

          4721b1ddf33a7c7ea9cd688a82b2133c8fda351a8d01c27df3f61155de4909483152eec662d88f75d08bdae216c36a43d4477daba3d1f591236c02159fd90b05

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5a07c0aff65ebad332b87a121541bb89

          SHA1

          e84d5cf405cf29380bb447508b6c8a8944ec2c31

          SHA256

          c8f6cf1637518f9970a76b2775a54ba72df99b78ea4c2ab4176c16e9f37e3770

          SHA512

          ba612b87c62e7c197c1ac0792a0874cf620ebf01259c05fb325a05eaa222f39b982663888bdf9890f74c9dcacdd342954e5da61b9de93a1ae3de9015209b761b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cb3f5c26a8acd5287f64cd9ea2291e5c

          SHA1

          110811441c7a60178b2a3e4a33d4e6b3cd22f920

          SHA256

          8b355734f3ace35b6f0d8949c1f69a1761c45577408fbb8c4861f0fbba565e9d

          SHA512

          0c6162514e8af5e5f3fca280e36dc8faab0501fb9fb3f8c0b2fa15c75a5cc67dbbe309c9e28415c50dd5cd187e903993c2b95d3c3a4854a375820828d78f9d8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          74e022e341140ec1b0a95c6806df1955

          SHA1

          0bc9a823e42e8a024cb8bdb6ec83c518e0dd346f

          SHA256

          d8b8b58248ba4548410e204808521ca66f5170a0603d634cb1d4f043b2b6db54

          SHA512

          4ef896f9b4e542da3be0db9b81804e7cbd1066d6dd2a5d73509e2d2ae2b6dfa2d663b3db5b983f0b3013381dbd0eb5e72b8a06c581ca1f4b99695454763ded33

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f67800f8c4fb0d24160ae8119df750d6

          SHA1

          27bdb6a397321c64540eab4417ca8280405f5870

          SHA256

          30e0ca41f2d78182fa0a61d99a85cff16a732c52f7c07df3217f776990448c65

          SHA512

          a487528d05e7a0b95d6ce5962b42069a2c6779065a5781fcf272946f4728344fbd8276a94aea6837bb583be4cb108ca66deec612141d62d8f7d1ef7fa6c931d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2dfdf0cd04288c6253cab7c12e5bcbbf

          SHA1

          f51295f153f79dd45ebde153d2c386159ceca644

          SHA256

          3b36d006eed0f6395902c544429bed5ec6176b5b585bd88e15713aa2365fe852

          SHA512

          c3daaedfa5098e89811f39a8d1d3386c2b5ccac18f6251149d44489564bebb58e22babd49a86f56c02d8c1d32878f7d27dbdab1b929c7ea190513975525a068d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1508bb2e398e1228844da7d1e23cc9b7

          SHA1

          8f0de0bdf2643209e10c4213510c1e711b6ce24b

          SHA256

          1807fcfe70e8a6360e2f627b95932384b4beaf26342411cd5377f7cd58313eb8

          SHA512

          85e6c3bbc8a8f12b1eeac7b0307f8f9ba7f1f2d85d571b58f13028e5180c773b13145ffef6b315f596805d3c34530544e31e6e55b002bbf749008987f9abcec4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb84abf6338501e9e004ef6e004da005

          SHA1

          2204248043e839f9789a6469e9a6ddcf4a833319

          SHA256

          d69d2b3fd47006bde0b8803a563b7d5d6f1fcb402ee2f6dd64cba253310dc61e

          SHA512

          83a4bdd17e33482e288e2beb148a5a1dd761843084820cdaf8a9d093249620f0e87b264129310e01ccd2d85d375b838af30eb85b83e4a21aaedc31cfd3e696b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          70ac0f07b98b081797a17e26318100f6

          SHA1

          dc0dcda629ed39be49952fa70434e6539b3243bf

          SHA256

          a1dfd1e56c50c6533c00de1da851d4cf557e678879f6536d00b1bae563295de8

          SHA512

          12f845545c195a719fb2e76575d28bc818cf19be91e18e88789ddd754617a430975849b2d077659ab7dfd5957d3ecbc15d032f477aaa0dae6cacb5294b4d7e16

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d1a2710afdb499c919953834f913f476

          SHA1

          5695ef56cb35ff14a3e9ef9481bc3aae6708d3a3

          SHA256

          bf3c4dc60ecbefa70f32a88efb0ace8db11c3f578c2fe3beac3bea95800fcea6

          SHA512

          9afce49b0470b5289d0b0a05d734a2e8d2ece38d654778167c820d736c4f3c1a334f9807ceedebe2544118526608150784a2f9ebe279750fc5c2eab3df05bb65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aed32f8dc44b1409370190b311feaa03

          SHA1

          a72bfcacdc50539f5b360cb122b520bbeb3bc0bb

          SHA256

          7f65eeab5eaeae8521aa4483958337fb9452bbbb4dfe27a10a51bfb90945f7f4

          SHA512

          84e3aa2496caf5d931a9c03030efc7bb47392ddaa9b5bb7142c6bd4ba6ef6fa8a0d06bc47a3b1b7c57167a15a1f388fb0f7b567ce4afc6b50754da47d85edcff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8c52a84d45989d7799a26813978638b6

          SHA1

          9c69ed078ba735f14d629b996513186bb6987138

          SHA256

          66b574f82a0f87c8cf6cdc087e48443a85a31a3e41d8fe5fbdd508ffad4862f4

          SHA512

          6aaa762a849afa3e52bfa381e419fe0df72a9060bcf83f1cc2ed0a4f62694c281ec48cfec291f169d2cd2f6bed2506460cb1147abb48f360954194ee2571f9f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8800d230dbd3341c978e50501a706034

          SHA1

          aa7a44ea292984937015865f30748515f0e6e252

          SHA256

          55a7ffed99323e42af5ab0f1e3dfc4e0b53fc096000898520ce841665c88d5cc

          SHA512

          a0ec0782ed4fe458da96253b213e130784a1bbe7cbeccd7c9c793a8c48df6da2b75354d31e2d816604464030070bbf3032790f51904526ca560555e5f58e5223

        • C:\Users\Admin\AppData\Local\Temp\Cab2D88.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2DDA.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a