Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 09:14

General

  • Target

    2e66c12ce896962f0c76e79b3bbd94f3_JaffaCakes118.html

  • Size

    4KB

  • MD5

    2e66c12ce896962f0c76e79b3bbd94f3

  • SHA1

    f1247e2d40c7013d5ef097bb1b2f12c1e98aee03

  • SHA256

    ba7d12696b2bdf3b6c086ddd71aece4bc40fddff0cd20e48a92ea964059c707b

  • SHA512

    c81e8fa257c569aaf1337a43ff5245e661bc2863ee7d14cfe82d1ed5821ca44c4f029a0eb0466b1f54e149ffda848e7587d545d87be87fdb38333a0a49de4cc3

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oQMsw3d:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2e66c12ce896962f0c76e79b3bbd94f3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aef60f41808e6d8d425e26bd03cd3c9a

          SHA1

          865d9211580644f82463a5553b15d1d109ccfbf0

          SHA256

          cc3285e8c3b6917e4c59246bd525c2a4232614dd726720f7f419a8f86e505532

          SHA512

          3a464a63220134ea7d206bdc871d0b3dbfc6d0da5498e04c9196872f47b7e6cb93d61f4d318e341234d3a207a8d7f8c625595c25a5650b5916a8a86322edf7cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a828b01bdb4606ebff4a0563655587bf

          SHA1

          4d28797de7a64264ef5f9003c6e865dd29155eed

          SHA256

          550a7c86a77e1b11a945218ba9541b8542e1511061978aa8932a02aaf9eb134b

          SHA512

          8023b1bbaff583fe3cec49e3f885cc23728ddc8dd43cec111281d46f2fb006de843156f9ae309cffa5ebd380a0810cc99b6093552a0cf23d6c1ea793ff6dbb27

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          445d4c31c7f4d9cbac6863ec6648eece

          SHA1

          554ebe599c9d10674a8eddd27d818b6505f8304e

          SHA256

          f6c24026524e4647423cf3bcfa8b621dd2f6ddf6bd7164d76ff35b6da91bf18a

          SHA512

          6efe24099de706219f17b521200816e2ccffbfde65e06bf7bcd9b87af1d72d28617444e1d93f559f1a2a25494cba57d1ed9a6c7817bf57e372579f38dcf6a47b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1252aa9a1c3155924ce05995071b2286

          SHA1

          d547e86fd4d8d6482aae69c55d97c5b1a022b489

          SHA256

          4407c2a3ea9fd06f93e41228647fda7e005492ab93b78bc5f203c3c55a3e39de

          SHA512

          cd5081e93704db925fc40cfd87324eed81220c2c578cacfec4970427ebc38650bb5204725b40060bf02591ec0252a15fb0a966dfcc9718200870b627d0e3da99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1a643043ec771d64cdd81f64bb12f001

          SHA1

          098916b6744ff4276c3f975d067db57b3d93b672

          SHA256

          657a5cc9af265b3f24ca085c74cf9bb1fea1ac1c2b5b30d68564efdb4dab74e3

          SHA512

          bd2d7977421e7f749a18e0676337c0ce0145e967dc879c399edf22fd15e430691c3cf9b3dde4f14780bc9d55a6d7fb0eb31e4da30bcf5598335785d35888e7c6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          43f5aac1b98d0bdc9ad321b33ebd52f2

          SHA1

          367ea5e3e21948e115eedbe81a594bb44405152d

          SHA256

          a3233c3ffa28672c2a0754a6098e33c0dd9ebef25380fd331f5502105cd74b58

          SHA512

          21ebe09db150484d1c1594e534f696f9638c7c7d6683708a4b490851a02e6fb5c6bb797045a3fd1406b58a1a833c9e8cc0d3c3715edac01dbfe5d388b5ba8da5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          52cdb41bcf4f43a6f9c318a00d59c3d8

          SHA1

          0676b65bba220881d3b2a706d80511a7744299d8

          SHA256

          37ec7535ec9ccd651385ce1af5954f309be41dfa251d8ff1da5f2358dfa42cde

          SHA512

          446edd6ed1f3a0a4acc97d08ce04bb72f9b3c194f97bf0b148c6c9968a95867b0531ea6601c3d46d764a0f2e484ccba502c93353dbc61f07b487b85ee03e26e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          01d60206d54cb3567a3d5674b8c1403a

          SHA1

          fea99705a65c187616b76523e0c9718a5cda4598

          SHA256

          1bd319bc12cb801dc0c3d9df5ff59580fad829e3a070d67a74ed8eb1c4c1de39

          SHA512

          cf2aded8f8494b72af231fb3eb9e1f702876db156be9a330ffaebab2b3b84c9f2f3875e364039989f3686bbe2b2b7723b228103ee1a69a526e1f3343dc5656db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3212a1fc32cc725f63c9dd7b3ce120c0

          SHA1

          742a2ac3d9f569a9ac0eecfc670c0fb5659b3010

          SHA256

          cf539d846848905a62e8e2e281d4bd7e07f56b7b6d1756a7b869beaf90462e71

          SHA512

          2a59c5fb6d6a0296b20420e47411095518ccf7b88ab061a4f43d7d77350eaaf5e3f0eaddda6d9622c722d020c10bea40f2bf0655f093023b61c1ba2a4ecc5f2e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8e569f8c270e7c488ad0722ae7bc0e23

          SHA1

          67fb728fbd3859747b47afd1d7751dd1b35ca1a3

          SHA256

          36903c8e237d2425dc7f235f2ae3e0d6ba4a54aad4d82086d0c1ed4c8ff27d81

          SHA512

          e3c9b60b343f81e692a9b64cf28f6f5a5b2456934d279b6f79142953d27470aa2bc448560025f765156c05693c67f8148914e60925b8226f7a310ba9f7358b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d3ae06680cf28fd45233c5cb795ac330

          SHA1

          175750bfd6ba6308fedbd748ebdefa726ea03196

          SHA256

          f7406d433880d92ecac9847868d66224db38e9f480660910dc4bb5d8872df99a

          SHA512

          c91882b2d7f437e31904210b5f238fba4b7fa2fc4421b9327bde34b55a4f6fe2e8d909f8543fce246ebb0e1300803b719999c193aba946e1a7b4507776a8713c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          991aaad5f858aa062ba94d0499208f8e

          SHA1

          e0dd9718298e0bc312ab42522056b8d401b794e0

          SHA256

          a3189a75930f9e0ca7e59d142185c9afab4ea7c60ab185259a43afc2cdc6de4c

          SHA512

          4317758938b1dda85de0ff15e2f74994e6bc78dd04155b5a63de293bcbcd5361e5ed8dfa6196100fcf7d2a60f8112ff66c5fe608d55ae73f4061b350be40bbcf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d557b0727c5d6e3066a96eb301e1ffc0

          SHA1

          c8beefcd95743f9966a9b201d546833c9e07bdfe

          SHA256

          979b9d94698e24be0f479cc9599eec13bedcf7673c0247db716a50cd7528d1a2

          SHA512

          13225349c9aad55b0492a0a7117e0f7c7f37f7e18710c4ee5e23f148b9e1618984d642c9f4bbee729dbdc3e80162f48bc96294d14e9415131a754f76e8aa2ed2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          235386d01b3f450f70f095411ab38a30

          SHA1

          14ed2f963bf1a3fece9e8b9ff508595fb03fd9ba

          SHA256

          d96f7e6b9017ef069affe7bfd3af90f5f92d486831fd6b921e56abfc8aa913ec

          SHA512

          b941fac4ba5678cceeb3fcb1a7350cd0d991b9feb57deaec33f3a06fe9d1c2e1c706aa0735aa7fce91b67f6e85f200d33845f9d4017bb7ca3153834c2b222e12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46be27fcc102af7a45ffb25a9228eb53

          SHA1

          7027c1363fd15298222635034c1f8f66c83e6f06

          SHA256

          2efb869123e14c7a603a283325b6d33f98a5e2c90f49e8194859ba00aca8a0c1

          SHA512

          f9f7a3a773f467b73527e6d981215d4d616ee1feeb528b15457d72c3d972d61cfa1656d7d779ccf681accb6618fbc98252639e70973e1a33159ac484482abdd9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c28b3aa0b70984010c66cc365af08127

          SHA1

          701077aae1947fdd1eb8579c46e788e37969aa38

          SHA256

          6ae3d9ceb3e975960d590fc3a2881c461de6b59f8e80d98d36216ae30445f72d

          SHA512

          18903d3d757cdb548a7966b42e9bc2753fd26c9bbdbc41f212a6c7e632c3652bbf7722b7e4ee43d9011d2228beecd6ab59597eefcb34a9f3291eab5695eac092

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bdb6b1477589d5087f882c27f41e7f3d

          SHA1

          258118ae7e5194da59f421d71fa26a2cfae145f6

          SHA256

          36720a55e71be97f3fb15da8c4d08bb5a740c08026cb07d85613f1b0e7ebc61c

          SHA512

          2b6316ec56a30012fea9db81748b0b9bf19cf59ee1ebf47e1c77665e10587820ccf255d510fd900a6f3d69041e49c44b581658b7961d26f3927fdbb19e621db5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7c364b034e6570b7c3255c1db9f8c623

          SHA1

          ceff5548631841ad3fe5dd859a8b87502360893a

          SHA256

          b0f83a795e0a3d6f3f5af6aa27bdec433dd417244f5d07dc12a1d141a5aee03e

          SHA512

          4823953808b1f2be5b9a48c52db6c19e50ee2303a244c9ef478e768f3184cd366b96ed44054acf9e8341067cbb8c81f52c14a6c8152802fe13acc3e0377b573f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          de679a8cd6bcf7e9ab18bed21245c4ed

          SHA1

          5d581d9112f84083e9085c80953015c32138054e

          SHA256

          f60247e4ec89d42ad8980964967e7582973be34c505980e161d4106799a63bf1

          SHA512

          96d8859a359751651d77d3f8e40268aeca93458351cd368d7085e5cf5efcdd97b0293a7fbe5ccda8a8c0ecee16b523b7733cdb389131d479e72baa317f251271

        • C:\Users\Admin\AppData\Local\Temp\Cab96E4.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab97A3.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar97C7.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a