Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 01:46

General

  • Target

    379bda70ee24a5c8d61e5a3913a03b25_JaffaCakes118.html

  • Size

    23KB

  • MD5

    379bda70ee24a5c8d61e5a3913a03b25

  • SHA1

    9b6dda6e471804afd12d8fde63b89ce716820aec

  • SHA256

    58a6082df4c33f3eb4ec50385aa70c1c36719d95b39527fcefed2c8cb3970534

  • SHA512

    064c72d0561b4908bf5b205a4b2476a721f84e663cc3a3ce850baef725e6514c824d39d14e39fd86322d105ae94408efc3ed76b5b9ae528177a15a8341bfd342

  • SSDEEP

    192:uWP4b5nuGenQjxn5Q/WnQie9NnlnQOkEnteknQTbnpnQ3CnQtRwMBdqnYnQ7tnQE:SQ/zfE

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\379bda70ee24a5c8d61e5a3913a03b25_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5e8e50f2c1c074498647cc1a2b5026f4

          SHA1

          f98570cbf5351e5c405e7fec42765c8b849413b5

          SHA256

          981f07108dac8885dc217f51368a725f9d79be99a1e834ea4472f649dc0c5f3a

          SHA512

          a218c83dce73a325f0faf0ea9ce0ed9190487b29b7cc8530897833768eb9f202f5aa5d553fae7cfcdb1d3ddbee5b4ba93a2631b769aee9bc8104ab4535c735df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71531d3bbcd120c027b9997e092bd22c

          SHA1

          9df515d9bbbf0f39917c4971fa4dc27497f3e801

          SHA256

          dc97e64ff0a39557c0968ea1b57697095b6ea5ae1eb15a698ed78f1c9e9f647b

          SHA512

          6c96f845b6e635770f3b5a6695612f851bfd27cb19ffcb0f01bcc4fd51950b52f63b15cc44424a3f9e72c5e34e8b4b774bd360487f50c96d62d53e6fc58bbc74

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          73fc1ab7efb3de2f3046d4b2890710ee

          SHA1

          15dba9d8d353196f6cc49436a10aeb67785166e5

          SHA256

          6323ca873a8104a7c9e31236d0c4dd655eb30650b1e78166ced80ffdcf1addad

          SHA512

          45b904155c8bb670432767f46d8d3df09d6e3668a9bff85e4ea9c07e6a355a4277cdeb2790bda0ce73b43a0a925b01f501fd67aa5a44de64d00a42060505afc7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46a3ffadbbd07e49c6f42e7b3a2df68c

          SHA1

          f6402bcf3d51569072341e19ddc46aee362bf9ef

          SHA256

          a73155d71337eff7e8c9929ae14700335b3757ee7806f3a07e0fe5df4663c903

          SHA512

          0c3363a276d033021812c363530dcefd49525eac5fe09ebdbb08abc750b1e922368655774ae7f0fa20178248a42c92c198d5f535d5c1c3798379499f74339d46

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4b54cbe567aa58a3acde470e649a7187

          SHA1

          ef3eaa43ba09992473c7da5313bde0af15bd4d35

          SHA256

          33678b53786bb220701284d8a485c409cb1e06cbe43ae30225628948c6fb4aa3

          SHA512

          fdcc5bb5fea9955393455cce62d91b1740a6076db458f109baf4322713e2df1d0121de97557dc63ab47ece22386bc2769743d6f9815f2967945089746d27a9b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          91ae14b23ecbaa0f51a4bad4fc1b57bc

          SHA1

          44ddea807f1a5b8658a07974a18f4814c25a039f

          SHA256

          93b643a6788f4b7125c91e0445db1c273841145cc1119b04ed92ba48ae8874cd

          SHA512

          4df473b296f8071330c3f6e8bd57b2a003e36d0337f6b28d978a0991dd43b0b7539c0f95fe44071b7585dd43068accb821f38b2c46ca9fbb4079b424a420cb9b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cd04de7fd00b3ebf0d4d4e4a957b9d65

          SHA1

          6736b4d2aeb92668e6d7a100db779f6a01568db1

          SHA256

          5290942aac07c88444c96c14dd7ef41122ef3de53b7cfd8c713facbc7011123d

          SHA512

          5070cb51713d618b4efd038785cee5b34c4b7d1474ed7c242c84b61d4d198e7cc51d37a5cbb542635857445b58101e20cd2e93501782ecdfeaaa15f09e4619d9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          26b396511f996cee0f3be720b8b15dd0

          SHA1

          64031b6016deaa8b549b12231a95d0573b4f4cbb

          SHA256

          e7f698169d88ddbda82ec748aa02371e6c36bd40b7ea421b7279c0b70ff11d5d

          SHA512

          30360b85e79a54532991f810190299cbde40a6eccb6d6c1aced7e5fefd9425cf5cb1c60764a40bbeba0e3e7675a0b33a08aa9fc47b8d3db50611024678a187de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0c8ba78b5d10faefa979fc9400961eda

          SHA1

          a697cf391a204653d26aac85d237ed182584ba6f

          SHA256

          29f4cdac8416858513d2cb1659a42765dee8498e59d849435c0ba40db8de44b3

          SHA512

          89859394156db535201aaa8df98f7f1a11fbd6a2b7b60f90c463d524a69b0dcd6e69dea5119c2937798e18e62476eb61f44615922d5a577c1791d4078bc987ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2477c327369244c6b37292c3e376f73f

          SHA1

          9e7e3b90ff41d443c6d7715067181c2f9043c2b4

          SHA256

          b8eb9d68208246edc0d6702176662596a824f5f764c971068f54fb16bcc51029

          SHA512

          eb15d1f955d0ec6c89b7abde96f6fe3a5b750d859a27aa32ed8534577e880533c17b3084cbd469db498837f115437c706cfbe0da946260e3b8bdc5c471b0f222

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f128adff72db6b5b3f3e3d3650d80078

          SHA1

          3d3e54c69b9866534dc724d05050ea20f29945e7

          SHA256

          b4749868b4e360526c44e9005676e965def41391556ddfe06dc96727d741e55c

          SHA512

          c3e108493784d628c5a1e12fe8e91ab068c1e11dd25afa544d3ba82aabb1c1c914f051a5788f46c11017a43753cca280c9d0fc5d34eb1e26837d80a169afb1a6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          72a79950c14cf3dec62b2aba9bd74cac

          SHA1

          aafa30795f2e9eddbde80affc1f0c304c99f8582

          SHA256

          2e2bf8640310e7722937587ddf40b051b332535f05596872b2f60ccdf35b3ca3

          SHA512

          71d2ddee14e23184a7c8964fc7277697edfedb6934ad6dd1d6fd314ee7056199293056596c1dd29d8cc7c0c80406b62122b02609518b8aa7a0783445f12f1ab6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          65866310e15160b61d59605954c11992

          SHA1

          2ecccf81d7e72baef4deac63fd74ffc601514162

          SHA256

          0b0a7e91a8a1e33ba58d81ee73d3516bb3832983b3bc3f3e689c93befb6863d2

          SHA512

          ee17873eeb621a595f712f7bd353b5dac9c50de8ea9d0f888e0ad1c4e5af441daf997dee7172c8112ab2132f7b642a9420791a179669dd911866f61ace843cfb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dfe2d72a39d17ee1daeffc2499b6f96a

          SHA1

          f447dbdf1c4d2177d61aa2678004e7556e36de60

          SHA256

          c88513ea14c856e2df83f25c38e0acd7746914e61f285556ab1ddfa137c39c47

          SHA512

          301ef0f52dfffe9e0744ef67126358120e27eb8ca60834452553fb5a4aa426f2632ab26d17d67b39b4f883a96b5fd0e4b632ed77833e5f032cd6cf3b00cea0b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          82211e5ee9211aaa564190f1f3a96c8a

          SHA1

          e05cf2fadb85c6925acce33b833003f0faf8e55b

          SHA256

          2f4e36e39af870ef92bf39f2172aff2dec39961f7e7fa72e7bd2533b9a32b609

          SHA512

          bb4b3bdc60ad0d2451e42e8bad875f19d2809ba9538b0ffbe071f88ceaebf5b4e91eb8206a424f6d691255ada228bddc785f1e1716d029e46bb321182ec714a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ff972dc03724d9242a85ed4cfc810984

          SHA1

          3ee789efce3f6e09dfad70c8dc1d465a65925387

          SHA256

          b4ed7ff70cc77f35027273d70b2e5ef1055252fac2039a9322cf2e8d241e1472

          SHA512

          4931a7a7fc97ee869b589d1b58d9aa36e8203acd25a390621ad037f49c340b7bb97142e895c90d78f40588afb165e40f30d9c3e458d7f4e8b02a0096ee6cfe59

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7cd8b66f4cb11fbeee6ca2cda89b35ec

          SHA1

          901a42076d29a7b4dacb6c14b10f982e07e02c58

          SHA256

          b2c42682b68326c1e15d86e35ac853ce7d4e9d055c57c2fdbb30ac69004250ab

          SHA512

          fea053ee02bd677fd4f27888e0456b4234aa07a1616daa38355f5b9fd2f21728c948f7dc420167479e9c312cd2d8f473a3331f6cb0fe1e3aff18b4c5ff12ba14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb8c870a78b5d2f46e360aa770225a14

          SHA1

          8cd3534d4f64fcdcefc5cacc555d10781180d46c

          SHA256

          7f8ffccbdc25692a7e99877b691c7d41ec7a26951d0870ab8a8f7150fe2d9cca

          SHA512

          b282a4ff8804a960da513e5cac9fea6577ecd1c754a441e2b322e0411146c61f7a4ab4ba6f532fee2ac0fdee922e8024e06ad33ff642d33509bc067a64b158f8

        • C:\Users\Admin\AppData\Local\Temp\Cab2899.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar28FA.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a