Analysis

  • max time kernel
    136s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 08:28

General

  • Target

    392deb2f0cfaa8873ff5ef5ed3b1623e_JaffaCakes118.html

  • Size

    15KB

  • MD5

    392deb2f0cfaa8873ff5ef5ed3b1623e

  • SHA1

    da1e4312f269d3447ab468590dc9313ee09e33ee

  • SHA256

    d5953b69cb69cee5b40fbfa97a7377843b44338b8d62f059d9fe276dbbd8a39e

  • SHA512

    059ee68bb431892c006d58b5b7b74e8957aad59c3ef623182a54efc2c409b69e4f6553bee2e0d24ffdd8fe56c508e22bc61cdc66333b90aa76240227cd4ff251

  • SSDEEP

    384:SI/uYhVpfhB5clEIojRml/zvdLc/ocATE7ulAcfmvuiaty+2DF9jf4KmUR3NR:SZEVpfhB5ceIo8lbdLc/LAT8Vqm2iatQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\392deb2f0cfaa8873ff5ef5ed3b1623e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ef8e5e82f43100b177963687d403c80

    SHA1

    a52af002e863453cc5ca3a1f10f6695069ed1a14

    SHA256

    42fd61072d2360f858cc9acf83f1943a55b745e9c11e06278ee8a0c82c83bd4f

    SHA512

    d3638156ef543c6e526fa2d1579e788087b007cdca1895590144482299fba001ae0cc8f961e07b3eda02bc747f8e00de7e1caa85f42d8e2425f6e621433024a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    365247ce96391d036703dab97136ab39

    SHA1

    16c36707ec7615dd4eb82b08100c33f70dfa57b4

    SHA256

    f0c2ae391f47847497b367a8ec384a9b6f468cd1fdd874e4ce9e52c1f997c171

    SHA512

    728e283328e11672280dbed55d2b980137104a30bda72fac884558018b293fb9ded31d397f72dbae0babb6ed856834f533aca37d92d9c5294026d220ebc96ac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e916261269a7156703083711bb09338b

    SHA1

    635dcecdc326a99e0887fb5c3b620232beca4785

    SHA256

    dfc730f1ee75d53449440d29cf100e4e7b86c0893f38bc8c3afbcf6ce27a31ea

    SHA512

    cca399678d8dabf75402eb14f9fc4052394841d5730581a64711fa48346482270d5a759708fbfc133f2a08d90906680edb55bb154857a36412a2b27a3db8cb5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65a95605fc8bf5d20da79e8c7459d1e0

    SHA1

    5ef433c9d647563a04ce9c88becd0c445bc3c023

    SHA256

    21e238389eaeadd60024f8f28914f71576e54dd6aac60cd35fb455815f564276

    SHA512

    0ff87a6b903888fb6c524ea04748d2b2ea394c6f2ef7a01cca76f428fcc9e964d8fe94486bd6eb93499efa6d12a5acdaf9bdea1e203322d81ef22e5906256d1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03ba5ebd690e468e0f79c68fcc9a78c2

    SHA1

    279dcb0028c682307131e74fcc062fc6bd16a0c6

    SHA256

    77797e207d7ea61ebfcb6b7cb842cab58664a897fe129e588bc684dde9eb1c52

    SHA512

    1566a8502cbf40f3e79ed864a94fe5bcf137f93bb68b5fc9cd37215404f32fc80d8ad88af383f9e64eb276b924f9cee72183b28c2207df243161a4ec8b59dbb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f2cd4ef226a17934090158925b72508

    SHA1

    470c88248511e08eca64ece0a6c3bcd14b3b2c6c

    SHA256

    1ab0f9f0dac8a12e50d70f32976e7125f6d7ecef35281c9de47a8f3a8eeddacb

    SHA512

    ad844f2d113883f356fbd991b0e100f4cf0ba9b1567c640d5cc18ce04120a20922d5573fbfdf66e6dc95e914805e10daa24f1f04cef69f49ef419868a821d572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4afa3732a99548a195c6361069bcf23d

    SHA1

    360c3f902cd9118e8dc3633afbd3330d14c8c5ba

    SHA256

    4f6c9c3a45c989ba3b294a7d01b283fb0ee16cbf6e2e5213dc8818b5c587811b

    SHA512

    b58d252126da5af5d90d46c070d04805573b9ed761b4b40219bba7b7e015180b9bb8422592eaac64dcb5a6941c36947de2f8d06b6e2a17c086fc774c98741f49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    754d531a5de372eb8b9e7d59c3c88388

    SHA1

    948ee089f90768bea46976e59ed6426c875ebc14

    SHA256

    598911856936a3bb20cb58d53344a9b0cbb668d66d69edd537405347088b3f5d

    SHA512

    f5ab352be2713e0c325d026ff686c2809e1a40cad7f6c72209e0631f16098cf694d09a3c1dde6936790d3dcea9a25f74713fe084a877d50e81853f30573827e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2b203a07481f8bc44e3735eb1c0a1ee

    SHA1

    895595bf8380368f7f533572267c350b8224057d

    SHA256

    bd773515489297fdc605295d358a0ff0d88262e62d76e45e16d3870ddafb09c0

    SHA512

    7cac6951b02e1aa3b296e4182f13c335d9b38bb8417a64af4f9044d21ca9cdebed9d700e1978f7abbd2e30c2bf18f1c9c226de1ea4a0bcc33b795015b2432029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d05877fd4f45e8502ba9c7a8710be4d3

    SHA1

    9ac06ddb3ecb0a5c2459a39b5463e92e24afc925

    SHA256

    c03bd3526b281d5b90d2ee379f3623255f1550648fda7394f2d0cb8cdaf730cd

    SHA512

    9b9fb6de15c9717d572e3c073706a07fe3e6cec8cee9bb6466a10ebff91b349918aeca5e06a8f902b9d2ae3081a1a13d1449cdd0ec913b4b303c3e170ec34488

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fab091873ab79805d6dabeff87823638

    SHA1

    93c2c2dc2681526067cfe4969d56115413c1cf02

    SHA256

    eec09addd754a77504fb06f08f3c0da3a7c8174f4f0848b4833e7cc7062464e3

    SHA512

    6a6c4d662eb1efac6ed77506dd0ca3a025296c4c4af24ea344465da354f1fd5697978b8acdecc776c54859faeae53b82d9cc9a20c1174c57cfbd60c95192d77a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd3963f31c11abfb2ffdbb8ba20dc18

    SHA1

    0d0b47ef41805f25207cf8cfafd143f53d98937a

    SHA256

    032286cdf090f099beb00b11ac51685602e7604b9a3c50512ea62e8efa92bc79

    SHA512

    db1843bdc3bc5785dd321faddf978f10609026557b77eaff0ec328891bcf7dc779622d07c9b35f5a88ff457621169c986a5fa93636fc01d552ccedafbb67733a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db3f3e0fd777ae3a9a0650995ef71c7d

    SHA1

    c8468556a4dc0054b8e4b7685285952c2d9455d7

    SHA256

    b5e1c64d885b8c77ef5d8d11ceb1a0a2f6bfc88bcaeeea2a78a31d3c7e9d165a

    SHA512

    978759710afbd8b2918dbe4bf03a58d5b0871ac82e94fcd71d285407bc67a5ce97eb9bd34684d3394b80f428e508a05d3cc4761a8724765216217e4da79c3495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea0972f96ec8a012edfeaf5864201cae

    SHA1

    cc0ee914bc8b5d479e7ca07d347758dce64d3b65

    SHA256

    f610259d66c11c711ea68ccfe63de605b0c70da1e2f5bef9920af0ab373b0ef9

    SHA512

    274c66eaa7a511c0108602b9469a18cc343c1e42474bc5d4bf3d4bc3b8a026c93b6123e4b6eec520fc7710b8a99eb14ee85136bc67b736385f1d2243a1b1f65f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4753d93e53d3132278d4adfb9175b035

    SHA1

    d1b6efb160ac0e20f5aa917cbc3caf7471f26b78

    SHA256

    1bbcd54f37f6afdc7f761f41e381814fedce95cf5844310266b7f30651385b79

    SHA512

    e7a4deaffa204ad4baaa2808d8d2dd9880a8e177c69f5612a1e8338cf4707c891a2dbd6e9d5cda538b02e50db64f0822e7abea17a1dc82cc38ac6ecb1b153ef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5854ef5ac7f3acd39bb9fad2d641d397

    SHA1

    4fac148442dd36227a266c1adce12b20770892cd

    SHA256

    98c0bece3fe0101428ceaeb4ecc93ec73616358ab00a203813f55439da564f7b

    SHA512

    ff5d9c662766ade6af9514d7e4eb7667e2f9e001ba846edca1d6460339806696c3524cf2aa4eed4d43e58d179a34b73d66400635530e868becf00a388eb5f8ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcff87491892aa45dae8b14f92c79ae7

    SHA1

    6a6825ce4de4f5aaff67fddd884400462c196a03

    SHA256

    76f5d73e2b2102d357f2d84746221b4faa87981ee9131584cc6f772ac1977407

    SHA512

    c6f20e38d3bb2323fc8439a707ee33cafc2d4735bdccb219ae307aa0fd6abab37de62e5d884e6650b11d6eb1b7de0d6258e4d8d2adebaa4658d51779bcd0c282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    153c1917150b04ee25aadcc8d96568d0

    SHA1

    08be0b68bbc9ac74647fb9a2fcf6b12d4fac170d

    SHA256

    4c0720741e8a6ed5559eb1b8486ac017f0426f64adde07963092faac801e4d2f

    SHA512

    43c6d7b32b783c9c08d38e6ae979bd3734a98fa81242b641583c13045e2d9633494efe73de6645e30b77e1ec74a41dd100f4a49a3bdbe076a89d3dea32d6b12f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efff7ffb5a16280832c6aa4d6410ac2b

    SHA1

    e4352260ff3062c86958b0c0b75e042a5f6c2a58

    SHA256

    83d358d59d416fc014025f1194ab7a605f3c4c32c7d2d9ebcc15c4dae0e5db60

    SHA512

    d88a99e44914da76ad69460af64a150d330f6c51485a94e38abc8e45e9b206131d605b33e2dd566510727abb6a515bcdcaddf2dc06e9ae59ab01a0d46e13ac75

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\style[1].htm

    Filesize

    627B

    MD5

    37461cefd8568a89021507444e7b1abd

    SHA1

    3ab507c40316abd18981f9928999a2d70e869275

    SHA256

    3c26dd3bf556419b4e7ea7086d830c2b8c84b10aaaef60a3a3eb493b48a6ac60

    SHA512

    9d4321503a12967d8eaae8487961a383a58475962fa107e8ec825de2e4276793e612c8985bdf816f8b06da0a7e9cb7e2ee7d169eccef129f1c8a9ed0a381abd4

  • C:\Users\Admin\AppData\Local\Temp\Cab1A94.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar26A8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a