Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 18:59

General

  • Target

    36112e980639fa76ece55f67ba9d980c_JaffaCakes118.html

  • Size

    18KB

  • MD5

    36112e980639fa76ece55f67ba9d980c

  • SHA1

    921d68ee849e245a6ce68f2d631cd86c6f7c658a

  • SHA256

    fa41d45f54c39a8e6974e0b2dcd3413570d06801bd13c20c7530afce0f6ed2bf

  • SHA512

    8ec1cc050750682d56f2d55e3d5daff101d2ebbab9ba001ac266573c0ac21784f087da26b3e373d8d2d90e54955d5712f20f2a3e9353a9bd2af914bcc9a5f84f

  • SSDEEP

    384:nf6lRNHFSXI8VSrLVnVRlkysngiQPE4AJO5jl9at9pzMfa9LXcr+kuo:nORNHFSXXVSrZnVMysn1QPErJO5k+yIr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36112e980639fa76ece55f67ba9d980c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1432
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1432 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f24b7d17b4f0831768820ca95fd12913

    SHA1

    07106b45e9ffab3dc5dfb477a97950435b75a475

    SHA256

    46e3a1471cfc45524da4eab6f08f36e30dbd3d820775ec1264136e8fdd82a1a9

    SHA512

    2433f93f475ee383c916d264d8bd9259acfe2ac492b0e9a91c579e3884f382501cf2f88d58b7c96b6ab062b8bc56e1024df3417e535cb9528a1672d5b34043a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    634215dc14f69f5e5942dc6ecccad025

    SHA1

    d8be8b87c3ce97eee06261262683a0268cfe6ab0

    SHA256

    0b9bdf238f175e47eb3fa3980457543a5b079389199cf2527a0e18763f97e3a2

    SHA512

    37e2abaf2ea95df61a985252c8b9cc4233b99d01a99dae118f234ef16d28b6c1ba822ddbcae953d35deaba5d03ca1be5e5da49f8f0f18642273cf56caaa6a241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15e5e9c77517527bc376192f646e5f8c

    SHA1

    0eebca34f707703c754fd39a447349046e7adced

    SHA256

    161af7fb30367e39377ee58d06ab133824f50f73d4d42a0e9f2445694d7ab43c

    SHA512

    b8fdea032b635f6fdc8ed6d20d55fc775cfa423df600c19795e0b6ea88685b1c76650db7951b1088d5a7d898a99b10ff9d16a309f6aaab5617f8d2d69be9bc92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f23ddf557b46c7f7a6575aae511f35c9

    SHA1

    3d5780a143a2bb29ac4315dd7aeaa0cd28c5808f

    SHA256

    803485d41edb09e799f4a9f4a4cd0323c1276002f685aa9a14a5b36a28faa567

    SHA512

    8d861cf1a9b807105a141432fa99e6a5adf6e45b287832ee2b045e446f77dbf1bb569b73788e0a8b15045b1a7adcafcffe5054f9d5463029c325edfed6d72713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e834233c81339f55c6b8ffa15aba5818

    SHA1

    3fed8477700e51c99199cb8328665e1aebb6bb06

    SHA256

    d55dfdce43467760c2b826dfc4d62f8136b6b626693a391b7038971673a53f0f

    SHA512

    d95d93e11613516cbf3e3b89a90ffa424907b555d258c3c25c7d577adc3a613723da9f5a9fa493311e0d8bcd9d2cf75f14434f7216cf4891886e80c1882d4456

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1db13dcf385dd743705c904a59f8a249

    SHA1

    75d4425e70dfd6c5f2e9d45920a5aaf58011476e

    SHA256

    09f03597fc9650a475898f007ecbe78dbd5227bd393a7a1f3735513d6a7f0116

    SHA512

    85e9134e3b90f44c183aebd5c84872110c511e47ed2e0daf9d986e53e2fe29232659dfc6da1b0af5a044b67f08706c0fb3e6b53abdd1fef83761577ed82dabb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8193466c64835ab1671391331162a7cb

    SHA1

    a468f0a6b6fb80d7bf2a2ef8baed24dc460d0021

    SHA256

    85f3fd956c1110b9d697eb245250bdf8068ea399f75b3301e1d95531a7281a49

    SHA512

    17ff8fb39ed2b6bc471c99efb1fa09b529b4a2e264c45b7b9d31ce62b928370ac5593ae2f34611275a4273030fcab4bb806a01731de1a17768f75868b060bf8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c766d98b6a9d11e053df8a0e0f38872

    SHA1

    e4eb57c582c9968987e081c6bab6e309275adac9

    SHA256

    f12840554e1f4e482c5b1a6d29870bca034604208fc7fca61968175947b0e257

    SHA512

    1f2fb50a5d5f57f3a9076c0ffcdec1c24654b5ce77130d2adc794a8bc09260ad122510ef0e2e31fdbe5c0d05cc80da148991405c2574908f3f1c664f8c7c621a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee0b96d88e2a6cf4b5e3dc8059a63ffa

    SHA1

    76df23c75e5b0db3273932c4e8e7eaeb8c8f66b8

    SHA256

    2b4de76c407c79421e9bd7ab5331dd28d7a0b2b370792d10f83687b254c6097b

    SHA512

    72c7f35f085dd213c3fc4a1dfb711348248517b33128d9d6b47ee3eece9b63cb42649efe0f4aebd9b238111e383355e7bca4cacdc60882113e3eca4fcf3d6ad8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c9a81f7bfc0e944a68877f3cceb5453

    SHA1

    5097c9e7f4c998d77fd718a6effd9836099cd880

    SHA256

    dc742f5c9556f57e96dfb79df7990a772a8fef9e6f485b73ff5be8fcfe378927

    SHA512

    2fcfa48864333f7dba7b012f8be828f82f9c1f474032c4d373f3f3b31cfcea7f6d12b5220285de6337ba9e62f4f823d016a65baa9281e5cca039cd1d02355e9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a8427e21e2dd4d66e6d70467d190c11

    SHA1

    6d781b8d0c9ba33cbeab5dc704fea585b9566f0c

    SHA256

    4b67d5f42bdb9caff2f81e455c2eeff20aa12e7e5de486332849be7e6c9adce8

    SHA512

    fa69e3f6dc6ef697c41b9628ac2e9fdeba0a5f25649b26da072ce2f94bc89b40d3fe057dcb626d62154a797338e9c57370b1b4a9755501788fc40b136ab8cabd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    184460fa235536e3d092ed53957d3028

    SHA1

    d8da0a4ee13318f1e7c025188d3eae2c157a5d73

    SHA256

    21e184a449fa3b24613e433d5aac39244e1a5c13fd883c1012c10c625502719f

    SHA512

    a73579ca921c7d53f283631a11e383423749ec06be8cbc5a6cdf79b2d543d9f8337bedf8b50d2ec06194009d76e828842ef51fc170be64f813e39342942a6e17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdf54443ecc8b9d815cb4e2602c0ce77

    SHA1

    a05ad88db123a421d39af3681e1f7849bc1cd73f

    SHA256

    d8d718249c5f1fe374f585ad9784a582e7baf4ff216cb4c884e6f54a0dd19c03

    SHA512

    97622dfe669eeb58f326c58b22ce2a3ebe0ebd62385ad948de44740d9023e16b3bd5cc3a363b902168c2927d514dbc2cdc2da9a2920a770451f45ba5c36e264c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51543e34dca044fdb49ac7b1a5684453

    SHA1

    6b08234cc6d198da77fcbbb1ee447863412c30fa

    SHA256

    ff08d3a7e8de3217185128556c06b82370dbb4a9c64d97897c41f62080e5f883

    SHA512

    8cd2bbb1934256ac7f0acf369774b06d8135f2919c9b2d1a8eea78d78a702939f244fc7a874906eea7c7f52f86cc54f94b4f5594f12f82c6b523e65619ca8679

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    969861b6710e41b64176872de632ce46

    SHA1

    d14e8737588f5800f9b6c07fc7deefbaf5e22234

    SHA256

    04ddc3d7bafb4797434beaf0e5a7ca21408ef97a5d46a2690a69cf36d7a4deb7

    SHA512

    23be119d8031f95e5138730b6677ca20efd9c9b10bfae5d10f4c05fdc9e29c34dd722289f4a748273e29f57ec43c0a6fb1edd983b29ba8d5ac5a581093075203

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    232e448c5d8182ace378c9747aa74389

    SHA1

    e937f355d856a3ab466469767b30e0ed516e9e49

    SHA256

    4dd434c982645f7115b2e616d09b8f2e04a3c4ca8268a3b2cb6972fff72d4f98

    SHA512

    8633b8d41a78598261240b19a5515dcb0f989d985b211edccf57944940af320b98df491b4d206e85c3ef263c34193f2057522831c78ca79ce4fb37022566638c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bbb39b7e24a00f9b66bcac5399c2b92

    SHA1

    6f73c31d812b9bd0d03ba6621034cdd9f311d0e9

    SHA256

    3b53eb7b33844027d8e46fab7a831bbb0636b6ac31af7c4617b556a9373e3ecb

    SHA512

    0fe882f0d3f3b65a919b8394dd46832edada922fdb2122a6b30c46a96bd48f85be792520043ae593a3e771126fb6b7f57ca50fc146a178c23195307a5aaaefd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7321b3311b2f32816d81fb52d63e4b7

    SHA1

    4f37bc3ace1a6befb7e167096c9bef3ad9122c35

    SHA256

    997f86a964e73da7896474d5541a17b12e53f1041f4d7c81a5edf9aa57e35c0c

    SHA512

    86799134506f98c3ebdd7fd869b38dd068291ff075c23f0c02e67ba2fa292987391988684d202387eeb162b370cdb07c61167a71eb3b3c2cb8ec16e9467c8e52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59e75ba37fdec0d508d15f2cc2760079

    SHA1

    1c7d0d7c5313add235e7687f85abfeccd584bedf

    SHA256

    0d47e7333d13e8788512725c8dcbdbea3d9e059c0163e176b720748c3292ae36

    SHA512

    b7674693fcd76ace70f8676af02438f8b5534ec37d515a487cb10a3ce3ba9fab8c1cf497ed9f12eee92093e864aff5104345e8a11af86e01913303900dca3423

  • C:\Users\Admin\AppData\Local\Temp\Cab4241.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar42A2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a