Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 17:14

General

  • Target

    3b3745c03cf8c9e23303a23aea70d614_JaffaCakes118.html

  • Size

    4KB

  • MD5

    3b3745c03cf8c9e23303a23aea70d614

  • SHA1

    53f4799ea248a083560c66f2c0ac1e3a00cc8540

  • SHA256

    a0daa542909675702d5a76065d0845bcf781f56ed2016f34278853fa896d7ae2

  • SHA512

    3bea6dde3a33b323edf2bf49939eee227970093dcb603e0891e5f32766ba4fb5ab19effa9412dca5d80265f2ec65110ebcfbc6affe7b0a1bdfefc9dc0b59987e

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8opFAUKzd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b3745c03cf8c9e23303a23aea70d614_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2264

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7310a427ca54f4d59c0bcba16438d423

    SHA1

    a406d13c99403f8512d392364670079dfaf6c446

    SHA256

    5eeca9aff71ae50e49aa459b946e98818545658f169d7c92ccd0c49093eb233e

    SHA512

    5ce27ae4cb8d1d592fe00f96d096d4783975105d2bc09a6eabb586a1d42c5bc9a9c80df81054bbfaaf843941b6d89f042597e0a972c0bc61896c6f4d89f352e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2628c414b624a513e0370e03ae5f4b21

    SHA1

    03fe4d9b0d45b7c80bf1895663d6c01420b4e401

    SHA256

    1001ae525de25c970568aa7992989c9a74e1fee26a67bb40909c2666c6156213

    SHA512

    6aa25f958de124a56dec5b841c20d12accb3da706a7bd75cb0287f7a72209e12af53b9f3e485f5da366e551fea949b020906ee348716d6d9cc10c400194a7f5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f213186a05f84f89b2e8ced33b8dae51

    SHA1

    d7dba1fc59cfbbd49b0c4207bb20f32f04390685

    SHA256

    4de7ca9617382334be6353e669ea3e969cbe33ea96daf57d70b30e64423fd1f1

    SHA512

    a977afb84b2c50f2a6fabe7572fe86c40e53e25fc66ba39856e8bd8878bc8f922e8f184126e00333a5c5748515dcb42afbaa15fb86885926745470c1274a2bf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d6c5cf0583c86bc68cca4ab19351b9c

    SHA1

    dd3b03b6402fffd58d7c3fc4df7bbafc1c6f97cb

    SHA256

    2c77145575788397ffa7f9efa3798ad4505243c705d34e426867a1c45d4d93e4

    SHA512

    28f256180934dd5c2d2a6562f1faa9ca91152e3c507a13ab1fcf88b59c9a14eef9df225584055a38cd88a4620fc82df25013fc030a0b3dec7ee9420de3705372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f16ef0784396222927b08d5dbbb1614c

    SHA1

    3244f07422e0c59ca565102fd0cf632256433055

    SHA256

    23a45da50e10154bfe99b12a32197803d0bc413afbc9b0176843ea7b789c05db

    SHA512

    ebe460c6132e20b15bffd3d160731671768fa6077357dd2f083a78b95eba95b5d6a326ef0bbf86a001b78c3a51e49241873f9daa5f6e1a87f9a964854c6dff61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b26e82823d434c0ff6467f63ec94c89

    SHA1

    5bb84b741909ac1bf7e7a1627d2d249a5144a80b

    SHA256

    3c31f53ca6618f0c14320d9ab7b7bb9629b7690c9a0cb9273684cbffd237959c

    SHA512

    dd9dafc0ba4e7478e1099c65d2a61f365f347bae4ef925bb7a1bb020dd70dac2ad7bc691a3df960acb4944b178349e909506fde3b4e4704274726b58e155d587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c0128f216f940538ba9d5cb75db8952

    SHA1

    2dec58ed46b4f2e98b6dddd594da1935946a5754

    SHA256

    803fd8490e50afd100f253500b36174cd4194fdb2dc9c5046bb4379afca2ae69

    SHA512

    602e9ff087cd157423abc7af13eff98fb98827e993df71a465c9e8f3514e9bf2add5ddf93dbd4be34430b84c67897cc38ea164eed360bc1125562867b3adcc2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd5ba4dcf0055c24d3ea2a3e3b245821

    SHA1

    43a8928c59b9c7fa10c21899a3513aeb90513265

    SHA256

    36a6ed2b9abefdb5ddac1ae998c11dd47c8dcecd629b29c15b740e4265f58fc4

    SHA512

    5757c11f543458aecb4dda821aaa7545a8346d7c75562f7d0c9e8399c567193cbdc5e94a2db5551b2849c41f180c34be8a6925eefa08910bc47ba3dee4613272

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f7efb7cab35c7c420ed476b118bddeb

    SHA1

    1072ef69a35080d5d217f6fd1917b55c29b1f4d1

    SHA256

    792f368221524c1223bbddd326cd6fe054de73cbda85b4c61cb8306258c6f8c7

    SHA512

    96f475059d0a187d60e09eb417cc112ab37bdda9da82f8a120153ea31359f3947246adb94aab1ee7c30efd715faf4e070775f86216c04c3e754b822fe5040db9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d4210bdc6f1d6da50359959ac83aea2

    SHA1

    6133887cdd71c3564b3e0c8b56ba0681620fa9f3

    SHA256

    cc2c3e53c150fa7b7eeee9af159a4bb8764806bd25dd409a338344f192ae9353

    SHA512

    11d8fd38d52abf2d94ca470ed4d5b42be5dacab4f6918068c8cd531d0773f1025d1000ee7778cafe9ae7baf9100e2298af066d0ec448fa75e2a418ba0247772f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1106043de57a0fab88900a8f98d24ea9

    SHA1

    e0351d84d7e98ac8b5659ffa9a54e5f450606643

    SHA256

    1f76d437954e399080b6e6d87f276e45fae20fd8ce45708d1f96872a3b44cec4

    SHA512

    3314b577a5daa25adc3e9bfca9e40f05e9b7afec0a59e0d453ed68cf48beae17a4eff2956d4f745ecc31536c94a760a2929968766c6bb557a4def035719aec98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3141cdc0bfd3587c9cc68c058c099a7

    SHA1

    d8436687fca5d4932ee89561d6172e4410cf5fac

    SHA256

    6824c366ab8394da865c8d7c46e132429e6fa6d12e229ae9f069dd82252be49a

    SHA512

    29718168a3fd6bf555e50cebd9a77251c02bf0a0bd91322a58c17cce7b5818d70391933d9417e14a18d554afa5c195bffdd59e3ffb478bd48b9776ffd0d9b030

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50b1902d31c5435f915e54826a91c020

    SHA1

    9292ae752523cbe566579f397d8affadf3a89476

    SHA256

    9eff52aee3dea2a2ee9ea60fdae0fb8737360570d5ebff40f001c699455e9cab

    SHA512

    c5f20f641bc5eca1491f93c59f2758fbd5ade9bed02956dfd55e5b060b74c892d4a0065b9396d605632b26713ab00f62c43d6f8799b060b6d238570fa4d05c26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92d8a70129a8101a547b72712d9ddbb1

    SHA1

    fed56273f27b8baa65a09f9e38a8c06b51729551

    SHA256

    4a6c18676d07d5ff64c853a877e2f47bdbb5824d920929b327ed36b57355e9e8

    SHA512

    e9bc06e63946a9b31b149d8a0977c3b2ed5e61991fcea72d57f9f99f7a394cd2ad73237bf5098993998e0dd1b0e5a5fb50f4e21ce6278071d70c6bb4872a2ad5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25b11678bb957bfeacc1db36d2cc1d88

    SHA1

    5bc18147ee81352577b4fea8f71746d03eab9503

    SHA256

    bbee69cfe32571b9f0b4b035116f8bf081f02e8267dabc54e059999b7693e8e6

    SHA512

    5059bae29eb227783f50481a640ac7d5cbf278a7af5a30cfb8e88b630dd3fb78b724aece89d439d951502a8d27865db31aa4567e24d423a35a5f4716229b88e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe3b63b874fe02b578da6a4e58511d4e

    SHA1

    536f4d56fb7497c82e819750a8875ac984cdf8c5

    SHA256

    4d8bc61794f90b11fda7bbf6348d6a2c3c9bd00b247f27921e5b6ee2261cc823

    SHA512

    afdb296bc9cd7195555e8f2acbb546df83b68722834146229a34193a3d7ba7530e3de5dd76a615ea0606912a76f643227de88a354e66742b9030b363aac4a285

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    560eb3ccbb31d64ffe0a87ec120c8abe

    SHA1

    263dc82e2dbd5b73be62dbe984cac9b160266255

    SHA256

    e29098b412d76f72642af4c714adf6b47d0537efad20fdd45d927092f8f342ac

    SHA512

    48aaa195503cb6165ca738f0f76bc3f34075a9dae621a6df3102ab48c12787f2ac7c365bdad1ea61e0cd531ea281f63e810572530a22de8b84e70bbd8a930714

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b898905ce6c233b195ab8984ca119ac

    SHA1

    af0857c1791aac46230932fdd86c3bb169301658

    SHA256

    0fa961450d4a6fc3f5bfcdc4c42c8ef67db2ff97e2ed9714852868ac91a05fe9

    SHA512

    6f635ad22639a104fa2a1743d0c95f9aa472b49d1eb732b403c8b70782d2d2bfcea0fe211f910e2a12fafdfdfa5d2fc8a9d154360ab1514c271dbcbe1c27bbfa

  • C:\Users\Admin\AppData\Local\Temp\Cab1DA1.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1E02.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a