Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 21:32

General

  • Target

    36a56d5b75242f7a18eb7b5a540d8b0d_JaffaCakes118.html

  • Size

    114KB

  • MD5

    36a56d5b75242f7a18eb7b5a540d8b0d

  • SHA1

    8e066c76b9831da1874519e7bfd81bad07addc3b

  • SHA256

    7841bb16be21cdc9a2072a84fdcea2cfb387a5d71833322163854691885812da

  • SHA512

    4bd3b571a00cbdae8f90297efa018f69c47664bcf3e478c253512fa245184f5f94f1050941604bb37cc0b91bb71194eca0e690fc45c9107ea299810a3ed011d9

  • SSDEEP

    1536:piCGyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCW:fGyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36a56d5b75242f7a18eb7b5a540d8b0d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1784 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea0c5a25dc7a2789d86676b34a22788e

    SHA1

    4f20dec320d0532b3bda616726e54ee5d880b050

    SHA256

    52de5e6426a0a26cb63f3faa209e6644ac7bafe1537fef76ce5e17085efcbae4

    SHA512

    64830de17932006d5ce5f884ad5bc9b275f9006a2805372e82fd4c04c6afd9dac6c2403b6fbc8a154dfb77194cdb7598e616a68c4919d46a2734f7f3704339fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c8c7346f0282ceb8a3e7918631b1295

    SHA1

    5292bd5cc5a53d12bcd572805989a7b0d1efe681

    SHA256

    412cd3636b6561be69f1e2d0e62d8974c4eea912992b5b0ed1bfe399e907cc31

    SHA512

    d45dd470dd05ad8900d9eefb5cd5ceb6b1f32ac5e9df3c989bded3b2cb74ad7a727151ace8b006a337eea2dd135682a1ad619cf9cd5d3f57f463f9b5316d4bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a736d70c1ff0edd4b5a9ca79d1073a1c

    SHA1

    a128bf819414ef94725ac295fbba3931d1a7ba9c

    SHA256

    55e057f1d9957c67441a7087f7a60ee4b90cbf817156e7006c35416d14093922

    SHA512

    5f5db453f92ab0dc4d47919b179863078f121fbadcb31b6666fba3b6918b0a7f63088f449a1864d18f112621473f307660f9978e380a849df6d6a053fc7e1617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc15ac72dab87a6d7f3a4f9f46a5fb7b

    SHA1

    6d0a38a05b771208fd6f4b5f71ddcd12200ee714

    SHA256

    dd90370e92c1cb575048bbba7267356ec2082c3e82a11431e52efece9ff15a34

    SHA512

    954642f8b38bd92090048faa3ca21a10334626d3fb919ca260563368d38d2d08459efc2464f7eae2774b605505548652ad87f2ac88bff4dd3482c05793db71d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d7f0531577a39bdbfcce52a501d0468

    SHA1

    5c104450b6050eb10a1951f86239908445d5855e

    SHA256

    ccc13c73c68ea66647df85fbd9874991b31e8201aef415bc0d17f0968bd9b39c

    SHA512

    f9027fcaa3f43ce9bbac89e39a15ef7016915648782584f66874db2467d51f17bbd443d079d324ae534654ab85f84e64476cae55b77de0854ba4516958c0215e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee05540f52cba7d779928d9ecb575020

    SHA1

    e26961272ee606de89d0c35dbb7c90a32d96a680

    SHA256

    605e08892476a2661bc36a1b64b8c9b3d5d3ece573120f05edf59c2656c01a6d

    SHA512

    36ea542d2fd6f75960b88885f1a1091b27f7a0e7e8275aac461b852fd1578e895c73d403853ad8aa737f8dff60c7a5f08da770e2daf8640884889d30224323e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3cd7d5a01b49a136e04a1322635a1f0

    SHA1

    08decab2431469f4797f7b311a21dbc4f3cfa1f0

    SHA256

    2ae3ccdcc18c4c120fb83f6d8e0301a1c178c0c149a30b4d11c3989a5c87edb6

    SHA512

    e3f1eec4c60d35d07ffb17eaba825621e66bffa000a406f6e9e706b78ec956db3359a15e9d0366e84e478d978c553f343e7d306f4f8444415416776516daf7da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a86aed3223e83e80b44ce39b07287e55

    SHA1

    7bdab753db61760a282a1a626f800763dfad2b0e

    SHA256

    86394d0b7f78912f6e316ada37f097f5646e5e2698c686b5c6891c07d22c9711

    SHA512

    bb5701ed69bb9fcf889475aafe14dc74dc6a2ae6ae6eeec0cd7ae503d18de00350a4f28d3a2e01359bce2bb2c8e7c3865d22ad2d7167108b80f4204d9ce12212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9921a32a32dbe45f4c1b34f30133bf6c

    SHA1

    ef2a294489bda413266abe0a61d04f13ea75e4b1

    SHA256

    70f257af0bb9e66a87cf6a5172e3075c8543be889031916981d4a4083eebeeba

    SHA512

    5cacd3758454c555902f62102b7517f5e36567c1cbda3b80f4136ddb83a7a43563c7f4eb92bb43ab2b98d71deda335deb82c61d3bb8d56bc7e2dd36697e62a85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c34a95fc34e2969814fedec9d33d8c9

    SHA1

    84ef5651169e95d326b7ae9f303d2004f4f8133b

    SHA256

    2e2f444b108cc883343f3530d572c7bf15d0106ea634b25a36eb8f5eb996cf91

    SHA512

    83844106bbb915a839f2108be110f2fd24470ff839dc31b11a2242865f1ed5a1691243bb2cf7f600628f23a78761b007e7aa7f704ee197812df8bec5aeaeb17c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a939a946e3bc97b35f3b4094d034cd4e

    SHA1

    f8a7082583456ab561872b1d90f368aa4543558b

    SHA256

    b4fb04a5b83bc700631637a65a655953e8caf9e90305eaa9692a61af44ff49f4

    SHA512

    75c05040ddc66f3113d02d435527a6a03e1eebee4da6939bb71b2110dcbf7c4947ffe8e9220652a5d0740c9070f1c0fcc6b6b712882edb9ca3c32569c4257268

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ddfcd7677137abdf1fc0730fdab4ff7

    SHA1

    f147dac80285619fc98db70b4c03354e96a3a702

    SHA256

    6cd73a6b653dc655f5f412dcdef2141da3cf591c2c6dbef303a874dfa117497f

    SHA512

    8d896d20693e73403422930700b7eb2b85d927c76fbabcdd9da89dd4c0ada96bed611267bcfe82b38d71e252704ec238fa51acda09a7abc490238a3c16683d21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9a22878b0576fbb6c4b7557608ef8a2

    SHA1

    e80990fdc88988d54c88e4a34d2748ccb5b88cca

    SHA256

    7d7f512978f8dd69a542fb30cf76ed9df2b9714fb99ad23bc1de1b40f93c2554

    SHA512

    f6a89115703c19af30f7b3bfa3dd2bc5fb3b26f4e22113e4b2c8d51287d3c7adfca1db8b1f694708392fc4443c421781f27f9d356979e906d2df382783a02ea1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aed165df5c26ac073ab9f488d7c52c7e

    SHA1

    630b8d9d21ea0ad01986bde1936c9f58945bab04

    SHA256

    4edc2312b0a9ba332a92849fbda34f3024dab11bf5580c63b0a46600a739c161

    SHA512

    81c25e030822f59d01f4fd400b624e97c6300c25b1d12b36cc4399e60875b7aa12bb689750a8d00c7fc99de7c5c2659206817db2c7fc875eda9f8f3e3c3c4f94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91c546ef82e586b03b1094821e0f9d6f

    SHA1

    dd0fd9224751e195cbe2fc834c2faade09e7f843

    SHA256

    29790ff2f2dfea353a35f1670921cd72105ce91640416ccee9f76ef48be0b13b

    SHA512

    537cfc3f12160a523ae00dccab26bc870c925101728689479897225cb8b21d0c6a14a41879479ed7b49af7508d453da5e88af9b2116a388858e22596191b7cd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1d6f0b988fa16fe182582aebc80593f

    SHA1

    75c791705a0fc97de89cd7d42fd60067d06805c2

    SHA256

    0d20915f228d52fa87b8c927fc4b8eb5d82cf2cecfec17ffbe0aa46ec6261f85

    SHA512

    4ed14940145ed9cf74fda7219b76b9459a89efd64ee20791decd5970f4edb7410edd85b47a8353ad104fb26cce337d34d1f2af1c4a60b4cda001c9ef47e35002

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c42c0d7150e7044e1d49fe436547792c

    SHA1

    d452dcd6e6081b9b560a4200f7e682a3b7d32fd6

    SHA256

    44431b1e00f807cec2c1cad0c99a2c7f03d3a5355eec00f673e5c3bc3bf4b373

    SHA512

    b0bcb8c3479801ec6c8b3a317eec6096e3a4f358a93d241aba549efe3c17b475c1ab8a8df20bb35659aff5e61e93d81b04e05129d75f2ef8c6f8f48e436c2b33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78f8c654b58d5180d443fc9ad603f3c8

    SHA1

    3dab396ebf6fee5cabd2c969e876ef173fe81f84

    SHA256

    4022ce18111b94cb9a56985ae6b41e6394b9abef3ce56fbfa6fe4b742e660f1e

    SHA512

    9fd8d07ef8c62abec8dba8b72b0ff55c2c072b06fee2379efdd13fb60e9ddda7417d9ab65af948e130d228d4bde522d663859917b596fe51122cfbf47011a02c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92e18f635d35d7b462c29ddac4aa3b53

    SHA1

    9c7c9a801bd3dda7a04122de18dbad78cf6b8886

    SHA256

    0fe3ed69196b14a728f9d45f5a7029f76d6d08390934b8b4d051652cd4357cce

    SHA512

    5cac65f2b2d5f85db3e9a4e742a34b4bd275b0c342204e81ae09c4bbed6d35415fceccdfb75189930bf3c43f38382d27b372eb9dd4754f7c86a4bb61741b6d10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88cb4fc5f6f81d7a3978be07bc5e87ae

    SHA1

    b191c7f0d4953b47b5fc39d860655db30813d62b

    SHA256

    895c209a81ddeef0a70bbc3a763c30b44cddc9e31cfbdabbcd75d6d292b75bf1

    SHA512

    42c7bce5e83b24609bcd28ab5eca233bd0ec03544e434c9251d782c02fd3aafe019d667c065b29382d0518bef6f2bd235b6b2b440e5692ee60df5a18abc1670c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c072c9d78f87a96ee1423163278f9bd8

    SHA1

    8bb48e8bfc9011d31e4667fef58421803066132a

    SHA256

    117a104a6def8c66a76aa3591fa853574c22bf5f3b79f70b24e7d8bd2f67dbb9

    SHA512

    b7b85a2ddcc4c17ba940af6240e68132fc4cca4425fac8edf0fb3f0217d47de6035f12833c0ba3ba8be472f685ee899c6cdee3bdb0d7d6c1b5f1d820af23fec4

  • C:\Users\Admin\AppData\Local\Temp\Cab205F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar20B0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a