Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 03:32

General

  • Target

    3809f3714e3e16192c79e68b4a7f5bef_JaffaCakes118.html

  • Size

    130KB

  • MD5

    3809f3714e3e16192c79e68b4a7f5bef

  • SHA1

    1fa1dc132a814f889e6a17dcc3217e67820109b4

  • SHA256

    7ac9e9106b23b95a4c63a29eb550f0af2b190ce697ec4bd4cb39a1ad588e0490

  • SHA512

    55a6d682dac842df5ad1280c9be332f5f16830aef234b1612c7de9dd1de55bb25f4fc583cb6471a165d75ae083a7eb8432d263a10e532afff0c758bfd899a397

  • SSDEEP

    1536:SrJ7ku0TykJm0PzKQGyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:SUKQGyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3809f3714e3e16192c79e68b4a7f5bef_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddff7c3b4b8a05add71e522592540279

    SHA1

    9b8cb86df335cb88b0fa321b18f31ee5ee96d88f

    SHA256

    b91426619d73a765f5a6c9a4bb89d6366963c9ce922cf1ed3ca426aa3d91669a

    SHA512

    54e3d729cd3765a03102a27ffdb0ab0f52378c5a084e64dfd9d5fc6d7f4406cd634c86c02afd06c883559ce99d2e67b0902083885c182aa393ab75d9745eacca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37db8c0ddadf6d3aa4a01e440f8a66e2

    SHA1

    58274e1d38016ff8ce82badc299ea67475ebd70d

    SHA256

    1f1673009d5264284ab012848cad1a13457d4355284e29eee7c00c9837b143c4

    SHA512

    6f49c29f3ec6eeca5e3424ca76bbbf37dc5dc404334c11b90a944b236bf62cb2d9f84d67cff66379d584b60014983f7571d030769ed1a88250ba5698fe0fc5ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63f72b3caf10cf1ff7281f09be0b1f61

    SHA1

    06558b2db59a4b20626eb9d5afd4f6bc3ec1fce2

    SHA256

    88cc93e10727d7544069034f3430193e2b2e571622a90949edf44aa69cdb541c

    SHA512

    7a4ef12429b7c1c544d495a6c606e505f56d991d2f95fc6379d855bb93da52e0d83dc70b15e44653c726ba653e4c66ee204f02c5d6fedd01c943637c7bab4c21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f491f328c81c662ee6e5b9cfe12faba

    SHA1

    4ea180d0dd963062bd1992bf4bd80665882a2e11

    SHA256

    5984cf59c3397cc7fc4ceaba9694f6f7be11ee931831baa264bebe59867af69a

    SHA512

    198a513504901c8115627dfa1a10b35847e7be7de85f4b9c96a00340fa30904778434f81ffe17b0c8bb02149b47e00e01038ef25a59c47ead1e7301c4a23b48b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b963c32da155a1246442a6adcccdd1e0

    SHA1

    0a27e6d333025976628be34401f1e26835d141b8

    SHA256

    a76adc1084184242742b075e2638addbc5238d0f8b70cae7aeb503274accfa7d

    SHA512

    ddf4dcfc5d52621c086bcd9db232b088a3c8da89dba74af9a2128a50eb57739b02fb603453bb4257f94b4ef2ca9eaf518b44450f99f3149ec228d09b2b6e1eec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a83775b5b52e168e7756d2eac8f0296

    SHA1

    5c365ff896df121d6ab2b24bdbd8995055d5b2dd

    SHA256

    bfda2bed756d119a78a031715d2561d96b70f1be74e304df3154c04fdaf0f219

    SHA512

    1d56189838f59251645f78289be5a50b339917120ed5c8387217bdaf10951197e9e13e585639e39bf5522fab4fb0967c07ffaf01dfd9d546a0b7a5a2b50ea9b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c49c7817012b25ff69bfb316b8fa235a

    SHA1

    249566c0f42238e23e3f80da68b230a68fab3375

    SHA256

    35ac43c9fc1108c0a6a3a6167f52a8086fd342214b2be9edef0d0b8d7ede8548

    SHA512

    871b9163fc186b02b56b983408d21d258b334dcf919755288099e9759f53862f6bd9fdb6ec0c345cedbe098063a81fc19fe9fc4fa0153ab7d4428fd79db896d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6d37d1fa36d3a8e84fb3f85367d3737

    SHA1

    a26cd6ee8e496d23bf986785c995deb22fd206dc

    SHA256

    e294ceadb801dc57e6fbd7d1536bc76c7e55fd1e7298191ff75fab117c34d770

    SHA512

    258390a4c474605e93609fcdcf700dcc0f7ca155e90dd6340e3cd0d03cda7e39adffacec2b68e3a96332f9a78c27096b59d2d153e4c188ccc4dd99a26420fb1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cae6ce9bfbfdfe1498764cccfc842492

    SHA1

    08d18b361db2af886aac92cad67774cfa5e8294d

    SHA256

    3f27b7a465aec53fd746df2988a67ee475cab2e8a8eca93c6ecfd3285e435b6b

    SHA512

    c1f56b7bdfbb68363bf76f6703f510dd3796f0bb55eedc42bd6d65fb05ef58e558ead754abb98dc77dec09d4490404d4c3dee0f5c931b8e2242fc5af9f6de3b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d54afc992c1cc0a96585ea676c7441f0

    SHA1

    8d45b5b59674e6494993e0adda51e6e207f89452

    SHA256

    123b4858a20c94d987bfa77f43335b9f3668b2ac657e53aefa996d27c364bcdd

    SHA512

    8c25f05cea1fafba51a1bfc43ce3540d8f92384b975bd5af25e8b6f2ffcb106dbd7986050f1de5fca798ad4837b3dadb77300e367376d23d44ef84bfca23e781

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12c17da2501b745f35eb8200e1da4ebc

    SHA1

    d44c0f62dd56fa3db4e7a0c05594992acd7128e2

    SHA256

    f13ab3c09c9fa0ec6bd2b874413bef17728bb3091eb5ae439d1b535d48fe6df1

    SHA512

    69fcf19911dd1a4a963c58d6db3864b446304d1b973fa524bf52e87029146e3beb6e7e36f93c1efad698c2e620f56a8137db503a0071999bbb4c63734b1592bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a2662a6953411520f7308b8d9d95414

    SHA1

    c3063e4f2c17dfc08f79a017aacafc79169679ee

    SHA256

    ae5228b360b9bbb8c54e206bdeee9ea8451324b5ad7d5e6c8c526485d044c2a2

    SHA512

    c76a5399497de7e6baea895907f4acd8cd83771185d2bf8801bdb71531431b9e68a9a2487e4b11d5a30b080fe8bbc4398927bc7c4f6e441d6b6a2bcefdae5aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79502b00ba4766d69ecedcaea01a8eee

    SHA1

    e12b644c97679a839d2282e4e11bc5adb43fac16

    SHA256

    dba23f0e665d9c0dae045f4b4921ca502b275f30dd40b52bdbbf773836c3bb2c

    SHA512

    77a67b327c0e84d08d6525ea757bdda756f51039d494cb64a2b7ca0116c86b6a098707b41234c374631c83d9adb7d22047c8100973eb12461199c2ffe23a7f46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    054278ff00a3e92e725a6be1459d5882

    SHA1

    0a7ce02f97794b67dc26feca4b6aa270e4ad198f

    SHA256

    6c0e9dd8595589dc58def12f6ab682fa733ca85f819b38f603e119ee98fd42fb

    SHA512

    1c819d3f9329feabd3b699c5333f91fa95d0add6e284b3588b898d6c24d4ee9445ae946527d4c056b19653f46449463f7b8946d6f00afb40ac04e7b2cf847913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b18cca9dbc00b7187d3b0cae9175478

    SHA1

    342ac72975455c116cdc77bfee46c36c962e8602

    SHA256

    121aab51fff912f1fbb6e479e8dd5f5a175451c010fb7ab0635650552ca25ffb

    SHA512

    c902517c31f1a03bef1aef5ecb237a956acc9ecd57a96dd346fd3600f67dbf56d7b9cb9568ea8592d06e1e7d89f99d4fbc0e5c402e8eaebb752076877b01b1d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2847bf41ac35df058b07010c9aadf7fb

    SHA1

    8618e92a9cb290b9c511e91d5c5136741d7904e1

    SHA256

    c628a3e46a3509866b0e5a6b6a25dbe479ed94ef73dfd14d57faeea572958691

    SHA512

    eb51bd234a69cf4a34445fa5dfbceb5e6ef159efb166dc904aef639b5b08f4b16b80b73edeaef9659ad732c1a7fd6ac404e59c5f96f890adc5328669755cd3ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b48add8da9597c300a42b51f4e0a916

    SHA1

    14cfbe42b2a710d1b6985a7328cc0aa0dfc70c16

    SHA256

    6e2f3650ea586390fdca5fc6a1c039f2b42e986c25895990180a2f01744f7a5b

    SHA512

    d2ed7445fd82eecfb1b6e337de5872c88881cd4189aed3c37fcee14010427626169e83c976251a071db2cf68d099cbb509ee94acf40afb0633274b6838c88be1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b91fc24dec2425e765cfb9f662dd283

    SHA1

    485c2bcb19be49fd93e6584cc538628770e6c2a3

    SHA256

    7c8ddc6a7ef8dfcb36e62a2993448dab660c1fd9257fced109448bbd6c1bb2cb

    SHA512

    b405ae2b37bc4f2e1cf8dbe94a11a89285872b8a7eec82b463177c487b659b64a61bd04e45fbc61684e3f0587294ec0acff98281bce68d1b6d44c2db8eb0cf88

  • C:\Users\Admin\AppData\Local\Temp\Cab3160.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar31B1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a