Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 14:20

General

  • Target

    3a8dfcc9cf981f28ac1597ccd9631578_JaffaCakes118.html

  • Size

    43KB

  • MD5

    3a8dfcc9cf981f28ac1597ccd9631578

  • SHA1

    13c7dd11562499ac336300a30832336abd727e3d

  • SHA256

    2e67c4ac9eb5a0ad7ca25877428240cf5d87df740de524200babebaed59d3452

  • SHA512

    46fb1aa4d6d34b1bcca7ca98668f3541ef43f734f9a3af91af5ce2380ae053fb871a7660211f4faa7206bf641b0fda47c918d4c3686739bd837982bacd788579

  • SSDEEP

    768:fOESsSH5u026C8CFCFCRCRCCCCChChC9C9Cw+n6zsn1DxBif8V0lY5UhAwjKltzq:fOESsSZu01rUUuujjEEaa9+n6a1DxBiJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a8dfcc9cf981f28ac1597ccd9631578_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd9828f8197a483cf19cdff30e41f6d2

    SHA1

    c0f3deb26d62b6021050afd330ff137cd6a3f434

    SHA256

    ab0affc98e37915a6c31f1265cbe2d89188c9f37436f06d33ec85b159b9b1c90

    SHA512

    a1f4c6a611ace9ac953991f24cd4a320372c07f6352024deb5ea4cce9571b376af6324c7af1097e6a2110d5677efcd205e121c69c7f8284321ffc5abbc296acd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea47a978e3be3866ccbcd971fcedbd60

    SHA1

    8e7027ace1d2bf2ed317a76f09e35e49b16c4394

    SHA256

    84415cc159ee1e19f79dd6da6858e313da5df971baa98fbbe400a7f7bf0d2a3d

    SHA512

    815f4cd10e65c08df3f09fc03e8dcc630832488cb5edb7fa703ddffd0a1a0462bb34a5392735c745daf8f77b87bfa4252545ccaf6e25822c164826f7985e8d76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02cf6337f7cce06c5c888108dca68e8c

    SHA1

    dab3f9e133c768977466f4ebb130275446a890c7

    SHA256

    536293a8244605dc3c711c3afbac29e39ad33caf411b26c2907ec9148112deec

    SHA512

    02dd4f2ed1051432e75dbae63abda9cd0950acff57ae30dc0a737c5db773d49aa9544da7c8adf1f5243f32d3b9922dc1577feb43141500c1126550726b31b52b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd0bd67ae527784e87ac171ed2ae1922

    SHA1

    93ad4d28bdd02de11fa524f372e79fa9990c43e0

    SHA256

    fd25f85c4ff7fae2b27846b0a971398f5f2d68376aec9ad97f6f69a168d4447a

    SHA512

    a211d566ddd681fae76f8ccecf027671e7d96f2e2e15fe67434ff856f39892a195d36175f50d68618f776001d15810e4a67b12f32f25e050f41a69d40d98bdfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6385ea15997eaf6935000b0eba1fa295

    SHA1

    cfd7490f4dc002e13bfbb55c2e183775d3b72850

    SHA256

    4e599de68d19ba0e00884b78c489238262c54efec0593d520f377ea54463bf37

    SHA512

    d413aeb8c39fa10fb353bfc1b34c742a202323b073997d18fcbe8eb8ebd392e2e326f0e9442c17938501b65eee117dfa1ae55fd483171211260b71a208b4bd85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d184effba858a0bbe6a9f81a7ed10a1

    SHA1

    904660335a219e9be8bcd27686835cec8ff93f89

    SHA256

    f40ecd7a3b09360adaa15fc2789a7ad10a3b0c69b2f035486d99c387d363c91f

    SHA512

    8b1d0e199eb3d0d56eb422f7210c8f11ffb4ffec87fa9a78752df1361faa5e39e2a3d88970527fc87110513dd00524b6ac23b44e8636a69852c0b281aa1074c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9c90a06ed308e38c6f30eede7cb1f4b

    SHA1

    ddbf51f722bdd2d8087fa457f2f4bf609bd98860

    SHA256

    51ed5ca5d322812ab559107a439b55d56fc72de05759981ad4b4fe65da33ef56

    SHA512

    d8e327cfed1805c87efc8aa2fd894a1eaba1b5a4a9a47ed925c55271fdf675a81873ef006c52536cb8f16c8101542ec67130199db7ee4205db01dc2e5a8e5a8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b21aae3f1c7436a1e1db3571c0ca8571

    SHA1

    3e4ff279e6f87d51927d6b9739a065fa1c5ba3ea

    SHA256

    a17c5a5b886493db63e06cf8a326ce3ca97f344916f3bae7bf0391e53083b88c

    SHA512

    87b9850b8eecbcd62d62ddce9852eff420c1a572425a5953362a4d7ce23c63bd5829e3158007db0868726c44ba1cdab4453593bcb4725f85a142a91f42ff208c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    493b9816462bf664752d46902d6c9fdc

    SHA1

    b1fb45a748f60782bdb2c7eb7d5f2b82435329f9

    SHA256

    012f2dd3c65a1d912a3b24e6805ebaf5a6e37f294af4b87a7151262d198a4433

    SHA512

    8db62b3a763f266980aae9ca06e5234c26ab8b9ff849cda0f4c47005a17925a808ad82829344de4ab047e46789969f05834b4bc7025780a0c62a207619a956c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e8d63a6605af7bfcee8212c1eb28bc6

    SHA1

    7ccd0461622cfe12029ed3b9a650b0daa6231925

    SHA256

    0b5b114007dbf14bf833f1d55c89c3eef87b11253f43ad6dc229516889494887

    SHA512

    ccc81705f9873e6c291de2be379ab1703ab1f9573496c9ef27f66dc33f70c591284deb34b125fd66ef73f655b4980c2231bedd262d83033c84cd38fa37549931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3908ce55f4ad196ae4af5c46d012560

    SHA1

    7f0c3d0063c8b3f13939032939cb8b11692a7faf

    SHA256

    41edcbb95ddac49df7a6e7933016bac515b6b91134a3c7287f3997032153e35a

    SHA512

    2b5f07422c798258cdefd187e50fb8c2e14e68e35e17b6503b64ee4101c61df3dbfe6398dea4a8a40209efe7d73fbe06af303a6cc1236a5d04d877a6c404df2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5798a7b1be65074f9c4c3edfe371e91a

    SHA1

    7751962fac0572933a1c7da8d6f69f763941e63f

    SHA256

    6194f8ca344f131b52a1a8fa5108694138d9823f0e1c9b8e736bbdfd8a6f4e4f

    SHA512

    edb9726fcd2671d7ea4f56dc864535fd2fdc98041b9741b00d762cb8f364a978063d34a7d3b13c6b1d8262d38c373e255445555c3d35497cf9c6bc2b12004b2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    610c4a7546cfda0d9f697de9752ec500

    SHA1

    68fcf74a6a5804150e4decc8941c22d39492e018

    SHA256

    32dbace6798994f654ccf27336ec688a10994b11412e571b7e8cef90c389916b

    SHA512

    083a73882490bbdf44d8d0614a920d742299211dbb9a6d32fcdba727b6a80b0d3cf272394a89032d5896d8ff2de1481490063a2affc5a4495814d138ae9a1066

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34f8e2f39d9f43317b4a449f3b5044a9

    SHA1

    98f3480ee380172c121bb4fa874d30204858f4da

    SHA256

    52370135285bfa475786807cbed5e41a5bcc15be9fe57037fa2e8da0547d955f

    SHA512

    e1155c8820c1c132ae42f0ad9e965cab9d3245a0ae0df40ff42391fe1d1d2a38c1406d72955b80603b05894b3321c252bb4b3985c62b0357ad89231b9a4cd87e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b7b37a5c2717435910661b4170a3c64

    SHA1

    0f9483cdc18d61efabf39e715e1b2d630326b60c

    SHA256

    0edcae37769146c53779a203579c49a81c9f9f1ac3a71b7153184198324296f7

    SHA512

    b9ab31f510a58ce26243367fcd5b899b9951e1e35290f9809e3adfee93c2db661c0c92d7e7834fa1513df12eb93b1b497e7f0fd8e776df2e1afe505fa7a58e9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1359b142e920cb3af6dca0481560e2d5

    SHA1

    c7fab2f8f1b22647fb7186f041088c1e6ac58187

    SHA256

    44930ba664694bfb6d9cb94c35ecc8983ba14e4cf18a9e7fdb63de7a9e63d8d0

    SHA512

    1fff244b56913e6a6f02276a0308308345908bc5a85aa7292bbf38ac510effe87112f28402f5153d17fbc585481ee2e234ca007822c4814a91ad782ab3c56af5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f93762ccb91c55370e1dd0b313496427

    SHA1

    f6c06c1bf6c88e7fb03ab2debbc869b77c918ed5

    SHA256

    dfe711254a01a9660093fc55ee2ac373559161cec8c2b8721580183961b5ca2b

    SHA512

    57f1ab48a8313eb6fe4edc3533c5e11cb318fa84f6ff739fd6b14869afd002deaa2f4310253a91d9e83b11a047fa85a0227fd10eec3017184180f7d4dd5ee1dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aff3a272291c1ee18af0e45f093a263

    SHA1

    9e3378f4c97abae65aeb44c2752b5a6741688999

    SHA256

    e354130571be137519ff6d16095d540b045f159637d69eb5fd221cb3dcb3cae0

    SHA512

    a10cd1801c8b88a421e0068fbf5646fc3c6b4c65a87b36014777e42b7c6b04d2e9879dd9444ec2b08157476703358a8f2dae617c3f33ba2da59593f88ddb0e18

  • C:\Users\Admin\AppData\Local\Temp\Cab4849.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar48BA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a