Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 04:34

General

  • Target

    3847619ffa46b05956ff540937db77d9_JaffaCakes118.html

  • Size

    346KB

  • MD5

    3847619ffa46b05956ff540937db77d9

  • SHA1

    0e8d3a53e52ae7be879192b7eceaaf23beb1cfa9

  • SHA256

    4d3d3431933bdee8983715afdf9b6b7e85b7f6e724dae0e4eb742a57bd17f945

  • SHA512

    2212c80884cc1ebdc3da60ee69ec0cf54834c99ac26dc2f9802c3cc4a7e63d463104ea4d49780819fffff84e1e31ca6616a79eb19676ab88a72991ad5645b3c6

  • SSDEEP

    6144:asMYod+X3oI+YkMF1sMYod+X3oI+Y6sMYod+X3oI+YQ:45d+X3mMFh5d+X3u5d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3847619ffa46b05956ff540937db77d9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2604

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c2b0526a789f8d1d3dddb696e24b92a

          SHA1

          2ded9f73ac774b22f0b98d9b270661b7b8743761

          SHA256

          eab101188b3af77853e2b3795aa2f8b2ba2d9211fa3dadfaa6c87edc844d5ab6

          SHA512

          65f1d75dc4fd8fcc77fb6facae7833bf39cf0c2ecf508f394da0c2b456fc3a5c2703f6b1cde75acd24437df88cbcc697f1602bf94440d79c82d1d911d8d6d121

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d1f67fc3d49d071c6489e1eb9a4603b0

          SHA1

          79d581774a6eeec8b67ce9f373103c746c1301cc

          SHA256

          3b2080b0134e1a246c818bb110d66f8c089ddd6afac64751ef45de7ed3b9346f

          SHA512

          4d1539d1b541a35285337501129d4ce59e21e577cc473dec7ee7fe4b3fff20f1728d38ba54ee588f03ac05cea6e4463a2f910196dc803c51df55ad14bc226fdb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6f8c335b87cb848103c46a1263c37817

          SHA1

          3faa4775523c1db6677cab708df7924262442076

          SHA256

          a0f9a45de48a66e29f6b2fbdff3321573865528f6e663bd169658c35b427d587

          SHA512

          759b8dfef4ecd472c33e8e2a4eb356c1c48a578395b911644305025f352f4b5d0f83860ceb3f40867ce0c74e3afe751c335367aa7fdf46f021343f34bf825c8c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dae05b2508f757d7d75a2cf8f8ea9c21

          SHA1

          deefefb4101c6e13c0045f1620d875abad65f7b4

          SHA256

          a6b1d297bafa16fe6a84f975f6b12aac5cfe03b294dd44b82468664ad2621204

          SHA512

          b1d1c3a3f7b499407e2a38c737c8e6539ae0bcedb27f4402c08903c6fc887e66813f2a8a71bfa775f306d619e010a4482c1354f65325d4ad043905fcd34c6d23

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b98b197afb06ddf694f160ac116cacd1

          SHA1

          76f5ef665b307116d0dbd9cd644c76beb8710941

          SHA256

          10d20889aaed0fad103ec52a77021e8f1c54efd7651ce80cca527a7cdfcb87ce

          SHA512

          e52862033244f644c8149cca57ac638a3763bb6114e2d438f5fd2b91d260335711417d8626e433c73967ef315451ace5a92ebcad2186cb29fed0ebc022f8cb5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3af2e7b7ea11eaaacd422e93d677f65e

          SHA1

          14f9f7fb277f67b3a43576d0c665508619d88e19

          SHA256

          c0ba76fffc00a4b3cc8acc403a02b48102edb3096ea09f76911edcf008849e27

          SHA512

          6b1898b31f42b0952a90f876a1f2b4152051bd5faf921ee082412e00bcec77c7231bf41b8cd30e866f527eba939c764ce863f606393a1b2994d4795f3e8e2df9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          42c5347ba9268cef02b3231102565dbf

          SHA1

          8181528b684e708dbf18d5144a376540225291c7

          SHA256

          ba25785f12c1a7e82d676a273f93cf7616020815e9a22e67ac5e57a83e98e50c

          SHA512

          eba64a5ed2e0b4478571345da1eed350b62d542596413b0b902f63167e3b7220a3ee2248ee73c15d41ecfc1c8d9499f7c18c74c718010d9d5e4a647e0cf382f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6cc786b68181743ab03d65e963a5716a

          SHA1

          78f8972610f359f2cb2792fbcacccdb85b749e59

          SHA256

          e1e906db6fb4bea84e0574f15a1a35bc00ffa5e7ec0a6b932502cbf42e3cf622

          SHA512

          419a3fe5cfe363d9b2264b2db9fd1ecf5666108ecc096c85689cf7efff24d1ada3e4eba64620b5977fd7664debb42bdca679a346d9a5ec2601d2517a87489a23

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b7f6adbb7191dfdddad29cff905d0683

          SHA1

          54eb662d6fae9d69084ae4f39fe254b17675724e

          SHA256

          3bd5fd8d2fab9b15c31aab861eb493063d1d3760e4df69f5261c9e1977556643

          SHA512

          d108ece70febd53522bbc3d5a7c9ba1dbd954aa2ebb76b83fc0c3a3099071bc6e5d5b6d6c7bfc30ced18c76cfaace6c8d043197781f6d4f79873f8f64bcda7a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b737ae00f1d7b08c881aa1168a64d6bf

          SHA1

          9a20ec8831ed9d913579bd8746435352d0ed1413

          SHA256

          34b24325dee9e29a10354b187a1f4355215c9531c72e1b5f1b2e6385f94a19b4

          SHA512

          392211d07dd61af62e42d1ace707b815c6e90cdf7fcacd11c5181ce1f7690d43ab9c68b51e8397efb02b855688b6f8dee6e645cda99385096c3541eb4133dc13

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          faa5d368603a1f11c857cd59e283ce03

          SHA1

          2f80b4d13a237e8e80a3ee1362455c5f8d246c53

          SHA256

          41dcc16db0d9d01df82a14d9bd31f3323d3a84dc094f98c29337ae6e93e585d4

          SHA512

          11307843f83d6f6ad34905ba23e5b64f64c7fe44033a2bb50f1b156bfe7f60a6606d46f6f0c031a7b87b4c556da52c3e14f1fb8df1796533fa57207f926bc110

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          09b7412e53cc7770f04e9bddbd7b3ad6

          SHA1

          2cfbe498dee19cf3438eae34ccbf96d23fbc8e9b

          SHA256

          3a359adc4f68976961449843d7e3c146b6f49f502bdb996835a59dc0811b55be

          SHA512

          96f27471878abac6087e27270859627f34b8c33bd6b2b21c27e2a3e4d9ad19cd8d728256dbb250b724e822cfe617ee11e1806f993840345ba242685c0aa53d10

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5e05d7fb193d1f1d4846147aa1ccd5fb

          SHA1

          f71816afb677eaee6dd02dc3b898965be71c185a

          SHA256

          23e4944364d6ab93b6a3fe5385e536164d70ad417903a5acf149abf54920f424

          SHA512

          d3673c7fea1c060a69c506d2570c2ea39e1d719d6928b7f8b04af355c6ba413b74e3e77f17a74500406eb92278c46fba10837be95a75b98236e47ca6dae0578a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5060a6044ccb3606b5ac963ae4f4842e

          SHA1

          a568778097dc9b92ad347bcba91c7493e3648ae9

          SHA256

          00ac2054b642c18ca26225ff7d706cd4df0089d654927b37920f9490749a015f

          SHA512

          6f32d58dc996573b769b9cf42d8752cc23f354f2a125f2df883762eed9d33afcb7b23ee5a05ea7f64a63d6af97d06905f42f250ecb6357498d050036a69b48cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71827dbef7bc0d99b3cce80b33efadf0

          SHA1

          4314fd102476d639c35498cd2d0cffe5810be0ab

          SHA256

          83aff8550e0b2ccdc2312439d92dbd4e73f19d2d715ef04d37d157c4147f2805

          SHA512

          25b7c8c0b2ee34ebe560c8ed2607a2a8d83168fe3cdde88aa99d7659f0280353c3c413a12b2b90cbb824ccc0e0eb3640f7a5af87b3f5c1205e0d6856b1022d7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4a9372c7cd863232ed76d7440863dd00

          SHA1

          8b9062b1062f5535c108ba4d20328f23e904927f

          SHA256

          5699074cedcd957f277e5857974ed8fbeb5b95db8a9ba4c88b497ef25d835761

          SHA512

          87cc334953908983417dbc6bb957dca8cf87000813f48614feaba0b8f8838aee44401768b738245152795d0e03e372d812b4fb52688db99226af1c4955b60ce9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8d832344b4ee7ee3b08d86570c0cd817

          SHA1

          0ebb13b36583141c986582a8e34dfdbd0bdf9983

          SHA256

          94a45daa1067b217570f12e91107c1df5989aea3603efe882e45bce69662e0ca

          SHA512

          f6d9234dddc15af2b37192aa0d1bce1e05974442486000abfc3065006ccf5a4f07842af149985706978a49dc30fac924f0deabe7c25da1b4781da2a1e76ac087

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          159b8bad8b0d89760c40f343e9a8cbe6

          SHA1

          6e5621e241c2ae478df809319f7f0ca9443549ac

          SHA256

          2ab3eda2be8515ebc282f60b57c278362c8802caf20a21890dfd4fdde8242ba6

          SHA512

          6af13c8532f755378c710f3900857e9c43f60640d2506a58dfc30889fb86aba860592fccc376cdc15ef535b7cf2f5ea214b611aafe66d32d701f86e8971d58f9

        • C:\Users\Admin\AppData\Local\Temp\Cab3DFB.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar3E5E.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a