Analysis

  • max time kernel
    142s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 01:18

General

  • Target

    320026a93e6c6ee66bd4eab1e303e17d_JaffaCakes118.html

  • Size

    12KB

  • MD5

    320026a93e6c6ee66bd4eab1e303e17d

  • SHA1

    de67f38f5504c04c03986bb101ff4469608b54be

  • SHA256

    f638850b6feade9cc441f0b15bfb1a8c213b7c671e02bdd58f6175752f912990

  • SHA512

    0d5a44cc55a33e8d4eb2fe7a4437cc53834f883137aa518d81ba29dc75108889e48f0692a7e0eee3764d0daf619de11861c1ff97ede501543b20b2bf70913faa

  • SSDEEP

    384:HkiOTCkZnViVoYp9+olNbI3+mkDv/SGOA6:4mkZn4eYp9+cbI3+mkTuA6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\320026a93e6c6ee66bd4eab1e303e17d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1260
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1260 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f80e8616d79339e491390e1313ff005

    SHA1

    a9f8cc3d88fe25b81cd2afbd9be125a16a9f0932

    SHA256

    19ac5b1f8ed454a416164f6c8590dd79e713b2eb8686c7fd8d80f40cabc85d26

    SHA512

    9ed8568d8306dbbea1a597a33924e80aead117c296fe72a3d48aa6dac354545883d1dbb3619b793bffa04dc45e4703ce1b0f5569b6504571af60c804515af521

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a0e7a6d68d8811094e5cad967fd9fd5

    SHA1

    62ee7e33b708bd822b6bde33c76b54e5758e49e8

    SHA256

    c05f16cfc218cbbfa6bdd5bfb9365f62064392852503c966dad65a20b0a61c3b

    SHA512

    61269d7ebc1800bc5c994b109cb98e27f4f93d44471d092d67d6c3bfe4c89db364e3e40c20a7897f45078652e0c773e6cf2cb47e426a3291b0a5bb51f3a25c19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d557decc76d32c0eff383c9c0a56fd3

    SHA1

    3ffb9539902273a4bdc9d169d77eed9d2297ce51

    SHA256

    e4d0391acb67df128b3142844c72a533cff4b57eb89e9138e4458be32c9dd515

    SHA512

    58aa1f50f52c80ce03b3edde31997d18d1b2ce70f5cbaaf15162c8e6de857dc5e751535637166cc581bad32f4d7361b0f276d9a7e7862c36e096f1a33c443098

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63abdb4dfac1f8a2ea0f9ed03c7aa065

    SHA1

    e13344224c9c052a98a4223b89afcb37983f4735

    SHA256

    00550cfe065741c9087df81130c57958f569b71c021a65b81b1ccadcc64e412e

    SHA512

    18694c09e217749d3f31f8c9a9013e9688c0869b35d83f7a845ccd7c310e7f035369d554de3216ec40a30e2c19514f164474da618972e0cc26703cb702a5d121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    360bde289445e4d6d82444185678d5bb

    SHA1

    1a4634b97b4c20a3053b4cb1099d2c5b64e8524d

    SHA256

    61f713286965a2715348e044aef9ac5dfb6ef935e1c0115e854e561d41c3b923

    SHA512

    769b6ace2ced5fc54ed11547e5b38e13785e4e1f9060e4b157453a571dbab1261ed2c6625afd5deb4224ba3613e5db93e3070bbae39859c4ecde2373fbcc43df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0553b6cb4e912a2b259bf26a23628714

    SHA1

    77062c34c4ecaf62b282ba0d1ca3aac782825fa4

    SHA256

    6fd90743f11fc93e80410e70eea497c3c47a30cdfe0088b211165bb8d0489506

    SHA512

    8ca93462278dcb44c5fbc85493618e47f30aebb0676903253462c2c3aa09b0497b2da8ba305844f447c3cbb4bf9e812de5efaa38f4e013ffbf64c46e400cfff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e965e0dfe7a5ca2e00c7196fa025993

    SHA1

    bcd00dc9beeee93deb401ba55fbb142dfe15c5cb

    SHA256

    6be3a03a308e11846439b6ae399a2408d5e3a945113952d3d90e38ed67ec9657

    SHA512

    a0672ff5454814b48729d837e9db3936708dc8b8230525cd2ba55ff7f9513c93af832d304588eda65b404ecf7233221cebfffdcee29a8498c2b5ee01c35b3a30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9007b4ab796c6f4d53a1fae0f3fd21d7

    SHA1

    bd434f9d8c9c5c8fa9e48b17fd3f41b30e3cfe6d

    SHA256

    01884cf93875c7be572068ff1c88e537493b489d0944630f448ac23273baf75c

    SHA512

    afdcd5166a7baf4635d1b7c814758dec8a2dc537b97c0b8f5d3a60e026aae603a319d851bdaba3ece34dd279c2458f3a03fd243835e7be33d80ce050512ed871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc3d2603b9a4386bceae83e0c126145a

    SHA1

    0da61570782c85c467aaf0dc6a83eba10054d76c

    SHA256

    74ad57436b00f51c6b523207d953ba8cae9b08488e4f9486bb8a50a1476a829d

    SHA512

    5829be33f39d9c1506aa35759cfd735e18829422ea45151c5c64b30bc21f86a2612abdd11e2519f5d6409dae99972c72398b7579b81efc34116b983760a6bf8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    808feff5b6218b2c0c9bb1d81911657f

    SHA1

    06ca162f643e8654519b3669a460a1a03a24d54a

    SHA256

    ce25e7131bf27931d29bc6740c5fe3d198f3e597ba2484ced0a07b40926db042

    SHA512

    fbca965d52791f06b168eef31daf3e364def038139fac9df62d1f92a2a0c59ecf743cb35429c7283d9eb3dbf93a9eb2efd970b045798c4933d8ae661239c4926

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    710f575327024ba3768d5d3eafa5f177

    SHA1

    d4610a605dc7d8cae00066cd61e31aa09bc3e051

    SHA256

    b403fe714ec26ee62bb09c480e5a392c95da0496ecd7d5c15eb278217a5a6f10

    SHA512

    407170396d66bc87aa438dd6c5929863d4f0825e7702c8f7ce5ef47344e073563f2ff0d38cd89b26aa42b093bb2ab096dc29fb2e0630586629bcefed575bfdcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    864767ea61bb0c1bd86bd42ecc87327a

    SHA1

    42a8fa2b08e8b4e819ba2f39732e2d9deee8a289

    SHA256

    87961df22ea2a5eabc8d15a86c29a39621d4be39c5c09fc7c63d0b8cc3292484

    SHA512

    cccbf2798117ca684a6a6cb67814af2e74267d593eccfc90f2393f2656ed980c1a83c9600a33e35ac6a287066d6c573dc44bdf3932064efd825600e5b32c2094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abc9bcee4347296d1ab690e3bde5f0a9

    SHA1

    f42a1d2c6bd8a37490e6bd2457af50e2d1e7d085

    SHA256

    86f37d49508f7a473b3cb57f1cc74bbbdef8f96c98793eafb30fbdde05234634

    SHA512

    04132623f19dbce98be290247a41ba80865d7baf91733881bd1a2e046a85d62c86f1f6d709f6a86bd0c286808fbb5674ad60e41dbd161856fb97dbc849d2d617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c354f24ea691848d42e55b2730486e07

    SHA1

    64e4804220b828ab49f17f4bf1673db17693ec9f

    SHA256

    b255a0e3b61eaf12af1d9f52f2ea89fcef4b6c816e22a3dabbc71ad9fcdb4fc3

    SHA512

    a0b35d8667af48c7bd1ec100ce89810a51edce0f8e1c078ff8249af7eeb7fb22798f109b55eace22617278f75d620a50dc58ea4c6961cde0ed99fa1e9d2ff194

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fd375ab0a8472b217c8bb2a00b1b308

    SHA1

    5ae04f70c8f5d49faca02803cf4de7a57ba4537b

    SHA256

    214164c0335e79412da9c75427244a4600d726c5c84947656e5a5919c6346334

    SHA512

    05beb3768a01085403d1e516a9538df4ef4653e8ca680fecb682839599e2d21771c90e4864b3dfa9b60cc8813ff1b1f6372e7ce84b5659bef390f36d39b7feb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c246a02a862ff1b4a4533fa327c11cc

    SHA1

    c701458a5fb72f660575483e3437b3ca6c22df16

    SHA256

    6c510038d39e3a596151c2822ac94a7413de34d01e50375ccf07885faacc962d

    SHA512

    afb2ec27be08a24b0ab265921ccb085f4a2a2c4156f33b1824e391599c7e397fa53b40f064c85332c8dd25b9adccaf53f016cbb94503d366da939d0c9a755f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37e793cff1ebfa867ee4535020179d2e

    SHA1

    5ffcff6039299a530e2892e4ee7a8349e03c0a26

    SHA256

    23bcc894bc9816a18e7a7ce3543b821f000fdc9892b5c09d34bc99e99f6fe4c8

    SHA512

    87422bdddd618033f59c29ca5a5c1751ba24453622dd0006d0334a0ecba5bd9bdd6c6500686699539c73619850c1a76366bd6ba6889ea1b73663b0fd055acd81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69fb11e72b4f0744e0fa3993afdd87b3

    SHA1

    1b72a9d453e60befbbc5f6059aac9b0e2a174077

    SHA256

    b68f2f4501446623e84b277d0fbec0e4fdcb0775d8a33996a75b44875f743849

    SHA512

    fab490ddb1741dfb49c5a83f75d27ac60895d46e4a24fb7dac3fcb467fe757f30c4772811f03c578fa369ef9da48e41ea61bf2f8b3c207633315448caff1e1ba

  • C:\Users\Admin\AppData\Local\Temp\Cab396B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar39CC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a