Analysis

  • max time kernel
    118s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 22:58

General

  • Target

    36feb825a9f147f0a33a6715150143e8_JaffaCakes118.html

  • Size

    70KB

  • MD5

    36feb825a9f147f0a33a6715150143e8

  • SHA1

    18227bb99bf09a664db4c585fd9ceba11487d30a

  • SHA256

    1f7753ceb82e9afcdc017d3642acf90b42a4042031db9c77ad8ba6e175348170

  • SHA512

    eeaef70d6f8cc53f68441bb0ef7c16241c0f13143dc47c44cd407961ffe50dea19eb8111027ec99d526cfa66b7b123e6ac842ba7582e94784e0b92361eadaa02

  • SSDEEP

    768:JijgcMWR3sI2PDDnd0g6CspboT2e1wCZkoTyMdtbBnfBgN8/lboiGhcRfQFVG8sM:JpxTTNen0tbrga90hc+NnhVJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36feb825a9f147f0a33a6715150143e8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1256

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4184d831b54d09a581b15573b0bf03fa

          SHA1

          5f568f178fb1487e812c85956ba97403bdfc85e4

          SHA256

          100302850399f861e704560bb82f36c400b1e727be50b0cee10456931b8ccf64

          SHA512

          05f9a6e70848997a33698976a4f264f06c73ed1c6dabc093027e1afde700b6ced4b9aa44b30534a3e0453c65eba0df6f64cc2e902fe045ecfdf949f5547fb15a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ce3ab2eeb1ef2eac44d428d99603e65f

          SHA1

          335c20335da57630dc99f310bb70022dd120a102

          SHA256

          cc904fcc297120bb14c73e8ca7b3df5fdae3679e31656743daa75a342be3793e

          SHA512

          6d56d8109302a98c4f57b65339190626338a88c3c3b11d4d4acb3f2813e91daa13fb9c09c7a3b43bb96567a041e3633e4c7ec5a2a2ac843c6f08e8eda6221ac1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          768f76460126a9ea670f5f9068d37dbd

          SHA1

          4a803363faa401996cb235a3eb25d0ad5917ceb5

          SHA256

          4bdc91674394e40e6b9159ca48898c7d4dabe019449a17333b50b7d136eeb502

          SHA512

          e85abaf49e9d08bd5f08e05e539f2b4503fdd4e053101f61e64b8f426af3af17c70f01c8dc678e1d3f8ea7f7a8e9499438615ef2da4a65aef918aacfe7528d8b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fde97742b110cb9aaf48d7c48c50a863

          SHA1

          44a1a548e7477e529845655a9063d69610ec0bca

          SHA256

          b42f476d881e1143316d6ba7053b0c4516ead3aea6277803d90ade5fd87dc50f

          SHA512

          e4b8b22af6f179c5e902de5140747d3b3505d988cfb04ace7bbbba337bf5d83408e4321a6e0a6e7017514ef9d546da90aa03cacf90796e212fd6e6ed23557873

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          02f6099aa0b3b69bd64e05dcdbf133ba

          SHA1

          178e1c6fa401e4ba3949a1f124cf2460359c691d

          SHA256

          6c856b6beba5f6fb0a0ad84b325304df26dc4bd33106ad045e24c7f5c7b0361d

          SHA512

          c731bad41e846fcd3a8799ba0363d578e516353f5a6d86fc7449b689ecd1d9e72af8e21117bf78255010c980f9a001776b6d3c28f00bfd4e6553a83d2d321392

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc3e7b6c53924e5763de9e548459fad8

          SHA1

          be2b2384b31307fe634b6a8eeee1a2e13eedbbeb

          SHA256

          666ac8e2aff5d6266a7e4ee75292f1d7ad925f029e8caa2db3969a78757431d6

          SHA512

          88b6518d0409e2d2e30220f0ae5ba7d743a5aa9f14494113573b9801a25de910ea22d405a08a66c2099b192302f457ec13051ae0dc91b07a186164647f312f8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          95785263dfe19c7e24a413bcbdeff0c8

          SHA1

          160538be646965afc61148c544a1e0f6e577bb38

          SHA256

          48cef82e63b02354cbb2807196b45f4ee98d80bcdc26fd52fed20deb5a8651c9

          SHA512

          3ef338001de65c854b400021457fd39a25473b7d20c8db3e2f450c7db45665ac1b5dee5fc6e27a94c6a2c69f35a7bef19e9ce4bee59724bffd056395875d08ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a9a22d79f60f1cf8cd8466aa2d15b78a

          SHA1

          b8d84a7f7b1109e138e3114ece4fb768e74c43c8

          SHA256

          13f7c06d3d8a6067f0830fe19b09bf5fdcfef1be622d8f17691d7fa351caaa42

          SHA512

          55983781a932879302737dd789896bac28e7247edcf613bdd53e96612902fc1619524f3122a0121919b5a6be7d5dd23b1a08d63e00c3675ac4e8f08302f7d423

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9294567e323c467d6c25fbec5cd779d0

          SHA1

          e4136c10968a94cbdd1c98a6fcecdb2436d67519

          SHA256

          0782361d6bb4160ac57e905a8877739c16fd36aa4c2f9125cb55d04beabfcfd0

          SHA512

          8044df7b823ed7fce66fea8ba93a140b47aaf454a4ba1fe6ba1fd3deec81c23479959655c7daff2136ef468aa708549bb5b82c36d62637742054c323cd9e6cbb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          02d9aebefdaf694160ebfecd76883880

          SHA1

          c162a6b3a268c21cc5a7290676cd340885c496ee

          SHA256

          e3f2c42439aefc06aab639a654467f3ee8225ee2ef221e70ef39e409d5059e7d

          SHA512

          a033e9924cbca6741e84a48954dbdaba91367cb836840f6a5edf74171a927077eaa315674d183dfb16429a2a81e0302e370a8e5b5800667ed2218de7b0d9914f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          664af73161867de1abfe95313b7535a3

          SHA1

          575bd2609ef933f7ba2cdc5984e2904f7b953100

          SHA256

          59301d644e6196dc5cbf5088e2c3bebd10f29a0733bcba321575f61cb7e10443

          SHA512

          6ca9ebc5c52e09d2d552de6b57da898622380b8effabd2123ab5bcbb2daafd45454f7541889f983ce95bb558408236f1a8640034bbbd991ecd9b96fd84a17bef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8f117110f72f8f3b3f2174e2e2749ff6

          SHA1

          c1e2b835cbfcf588e826c4fcb6e9f0ab826a2bc0

          SHA256

          8b0a572f9c91aaac1cf0e3eb3c6afd1d5d89ccd921341d650a682ac56558c2f3

          SHA512

          1a4c1732a8dfc91248866c93bbe58e6fbce92bf142b85ddb99d65e206896e7f7d17424862a215458dfcbecdded79c682ec67f8f31e9d492a15e358f9dbb721ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eddbd319a9229a767200faca4b55366d

          SHA1

          76a3469b8f04bd25ce67241529b049e3bb1b4b4b

          SHA256

          41def6750549c812bd7ebdf802cc7528e8edf3138cde0befa547ffacb8d77947

          SHA512

          c67f65414bab186f11b186e2ba1c23c043439b800e9b17e44b2529949c816749e48c51219f0533f6e856310c50b82c40045212a380e97d8961ffbc8c0d629df2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3fd5bc1e1dffd60c35ab63feeee90e87

          SHA1

          62dfd1adfbe3e645c86793fe5e02cae3ae74c373

          SHA256

          6f56be731b778a262d80ea194dfc73418b18f2a94f03250dbb514865d23558ad

          SHA512

          257ae8584f322df108f328b600626845887b879212e7d449e8f8628a5a6283e1d9c7b8794c7ba7adef754731e7215ce17865cb1b4f056ca557e6f2ef9bf30297

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          300fdb8a5b7f7d187e7325839eea31da

          SHA1

          e42b0cc7ad5e2ec7799163e1e43e29116e1bb00e

          SHA256

          95d98a7ed55ca7daa93ebbf4a6a0b9fa381e8b5801942c32db35b3dcf20bbfac

          SHA512

          2059ce8bbde70598bf99a44e85789d20e13e49641a56c8e903df3ad2a0b5d2d463937e6ecdd1f04bb4506e1cf04c0a0898dec1ce242852da65f7166df46d845d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          556c5ccff83469c4191132754f2cf98b

          SHA1

          6c86fc42ea9fed4cb4e0d00744ed0d75e4233034

          SHA256

          dd4d4ae3ccf7010e5f58eaa9501a50b1c7f0a655917b5606310e1813ff19d6b4

          SHA512

          af1ca9e7dabecff1535e207b0ed84d8a95eb12f6906a7f7875cb97ded7fbb4c44b1bd72e1d22c4c8f05882cd10acc8d75784aff2995d6084e832918a67fc3c17

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          264e6a436bac74a1602fcefdde9b25b8

          SHA1

          e08cb3d9c024822ff8c35b01a6ec50e6ba463dac

          SHA256

          bbdd816f190f14bc5fc26fb18ae4bf61ac73df8a8f13676f192b1962fd8065cf

          SHA512

          903400879a9448884925de83ca3767db1bf2b11dc372a21f0070c08d62e62df5b6b625d70b6b3ba52303d3a598cca64732e78a0dcbc0b6d39ff093fd17d1808f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f38d6ac5b88e100ca8e3a43025312c6a

          SHA1

          5da422fd255d8575c91d9662eb4282daab82fb19

          SHA256

          04df99cd18362f7f6f640ae69d2d46911dbd10803569d58efb05c17fef3d98a4

          SHA512

          c560f79a1194f9c60472c51316274587e1bc6918055968f6dc2dcfc662265cc7c119ae268569e10c6a36ddec0304c1751cc9609d1f5713f1ea306efa3b37a2f3

        • C:\Users\Admin\AppData\Local\Temp\Cab2629.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar270B.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a