Analysis

  • max time kernel
    136s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 16:46

General

  • Target

    40719e4212b326e5c4904e27165ffa91_JaffaCakes118.html

  • Size

    14KB

  • MD5

    40719e4212b326e5c4904e27165ffa91

  • SHA1

    2005227281bf1f9aba5897fe3e304e6c64851531

  • SHA256

    f8dae3e068ce91526236b4acffcbf66d7152ea5f3a8a216aab67aa134884423c

  • SHA512

    b2e6e03ad982ecb6769e0a19a72f18a809972b7618508a24adb5fea67a82a9c21c0c5e7a1aea57ca6a6bcd4fd05e764cb80f78725c43b994c18218efe01c9665

  • SSDEEP

    384:ns9a0qYM0WFi3dfpgUcMosomXSPMjomXX9Nn0eru5/w:4COWcUSCP8Hv5r4/w

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\40719e4212b326e5c4904e27165ffa91_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ac132d218fbcca37c6530beedc438cb

    SHA1

    df0b9278aa3619a5152393cd06a6b1c402c3660c

    SHA256

    84975f753851ef5360199ebaff520f17a87086d458c318b7a673df3aea8acda3

    SHA512

    533e1aed8ca556562ae8a79538cc6b3a345b9c450be02529dfb88a608e88b436e9bb528677efaac78ff9cbeb69e8cc5cd678ff5632c9290059878eaed78c425b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ed8635f2b87e94d8cfcc2ade1047ab0

    SHA1

    a5804a120c81284e5f187e7426a8012e4faf58f3

    SHA256

    210660e765507478dfd9423104f594645ed11c3aadfa6c83d29a286d68770bd9

    SHA512

    fe90f04d1d3c0d39dedb4bc9099cf0b78a824a403618b20d8743aa919f52748ecfe9d0678ec7f67571a07412d924c2cb0cc5f9d6c7c2b8c206a480743edb1bc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6087a0526021f729d8a5f3eecd73a1e

    SHA1

    981a2d4f9969554d81728e269941aeef4ae7211d

    SHA256

    e6c72108f4eae6a6cec542f6a157ad0cb61d6d71fc02e4fe3d0621083e5980c3

    SHA512

    fd2bc00c6e37a932f6a1030c3faa6c072089ce202949ef66f3b3df628819806e8be6e09a15e8b5d7cf77e5d6b3bada5adec72402a8a5aab81ee0a950609de44c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fc87709a77e569197b32f0a9443d21e

    SHA1

    45dd38db7cb26373b0f077c5eaf09035d4b4a689

    SHA256

    986df221a13d484a896d8a061f862f4b043da72c5c1d9e239c746d1c67b6cc87

    SHA512

    7c6be34458b2befbfc5ca90ce7bfe1a93b7bb0d6f91c5d1acb2ccb0f62c254f66d1a79545c8ec537c26b3ef96884eb043628d11e5fd03e7c6845b5055c29d161

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0dfda620fd8f13f2cbbefc3985a1a63

    SHA1

    d080e64575ae3b2495326a2c81da4ab373917efe

    SHA256

    1c685a4eceb4b88168cf966923a632a3a2a1e24865ec63351db92adad29805d9

    SHA512

    6e8cc9290058c87f2604811af2ed25f45560bfabf49a609df77997164cd3294e2e56c2b2ee8f463d4c8c5239867cc475bf20a9cc9753487c1872da5e33ba4fa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddc1b4d9e2d84f8f2e46cd1d94815705

    SHA1

    feb771e9c588b869588c591329956c1144888b65

    SHA256

    acd8485cae78cf9404cb267180e5791cc92d0bea32eb28ea8cb606ad4b722e8d

    SHA512

    d09fc21bb06e446166577936605ee97e8af9b27f3a14ea30866d0bc9d4ddfbfe4d0f0db1bf6bdb536ddfbaf0b2329d50550b848ec935bb452c898be67877a2d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e90adc85ffeb33ce464f3b5113b7a25

    SHA1

    b1a881764ed94b2512be80179b92c81463046ba7

    SHA256

    9885c1e8bbfef11716ef229388cd8615e4a2230a2c80e117993ed14c049e08fb

    SHA512

    1d70f47ca16ac2dc8ce6ee0200a6bd19b484c6cf581b445c31808aedf2633a84955a6131cb26ddf697aa68674cc0e729af78d14265a9ce2baea1ce882947dfee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2db16dfeb682a71c0e0acef73cf7ca9

    SHA1

    71ee2a3b315552e43cbdace8ef5365ee18af2d2c

    SHA256

    6df109ec3e30fa72c6786f81c90143aa754d9a6bb90f5978ba1db9bba7e7c6a2

    SHA512

    3dca32d89122928a2edd179ae83c9c3dec33d82786f593bb6e15dd421e9594df583e1dfb78b8e23b0e68fbc91616f1dbc18eca6e2f7f667c4deae19ac9743ebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef81c910c71b1ad8e3a1de061c5a9089

    SHA1

    5ce142c48c9eebf63389573b66a13010745746f2

    SHA256

    bce0f2d45b3aa1a5016ed424f784eaa5acf8959e2c5216bd39b750713eee72f9

    SHA512

    f10261601f35666ad787f1da3f0bd0b9898e5f2f057ef1014346cd0e71e2d40b53c6c7f99051b2a533993bbcf75d89eea636a43147257347e0bf88e615adda3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfcd6a07a2975cd7fdc21f4aa840efd7

    SHA1

    4663b82015602ae45604461349395dfa16a52187

    SHA256

    1a6735e198e1f7f85ab6a651eeb71379609fc7b8c73674f3f87b39a0cd967ad8

    SHA512

    43de601cf246bc53fdd5b9b40c4b586d516d6b55f74b071b5cf4776d2931b2e9f0e2beca24832a2f29ec4a575e275b2c933c77316e11bc1fc3c1d6b5362b1412

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    655e1d556f6694f0e8575dfcb8a56a77

    SHA1

    f59ce7f22430e6d00bc07e0b9d9c4958083b2361

    SHA256

    2f4180b8a522cada3b28e5df50c3dbe9a8d3c38286928497757b7bdfaea2681b

    SHA512

    fb20950f76434d1165d46e37accedd28f199b0c53c5db0d4de61a16cf3faaf54584cca58bc2d7549a23247fd1c478ae21f5ec44fc0acc8ec1a23e57d976437d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0681cc286925abb88bbbb200ed0bfd85

    SHA1

    257940f98fe696d77432998a3a5312bdbc44fe3f

    SHA256

    8e7566f208f995084986445700cb69055c4555a9654d47aed2a7266336178c0d

    SHA512

    cbc70cb2ba744271275d6513f6247ce7cbdfb4c0268ab9d7f918b5eb04957dd280b058faeb4ce91cdab110892a04b31837de9b23e22a3ad3bd6d9220de3c8d35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a667cde98c9cbd06a6e47b90e9ff317a

    SHA1

    476c885805a3ceb3d95c847c8294e648e7a11e22

    SHA256

    2c12502c7014a05048f492f9b06a7d5e9e5867900f11af02b4ea4e5fdcf1fe88

    SHA512

    37a6a6c44bfa6a7df50125a621cc504365cb1c8c84ecf6f6c5a81ef75eb54cb99386e0e6992ecf8837885e94862abed06725a0e614c89595e5783620e3e77d6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67e672e01c5a66614fbe24ef062cb431

    SHA1

    6ba2da4ca67b4cedd6a5dd980665bb6f8af8592d

    SHA256

    dc6e66a3dad6a34372a10778d9eb7e9e0ce04636ee2a891487c57c781b53afe8

    SHA512

    83dcee94915fb5c56748dd14c6a536af873ca083b50ce71ab709166847ff5bd8267a16238eaf6bf2930b1848157fb29ef0308a016f01bbb1e083bc75f5ff8fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f07d5262a401bc5378b735bf082a20f

    SHA1

    afdebc5986e3534eb20cd4e16bd859553166f33d

    SHA256

    7163a30b3c7253001238733fbe95fbca047c951dcfc043e77379e9c385fa16f6

    SHA512

    77d39281b284b949e93954cbb39179503f1145e49e5712be5e1d086efcaac2e96bdd646dd5634b9ec6b246c30e9c68e71b5ae5a88893efba07ee6139fd71d98f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a3827a625adb46ed46f2867bb4071fb

    SHA1

    2adcd58e6815913e3b4f472bea19e170d6ddb34f

    SHA256

    e38d4e0261edaeff022d6c56aab7c49b3f97d831d27bbe696e92726f620ad10b

    SHA512

    a347615e143bade794b824dc6911be1583c9c96261c4a1cfb9b98a16e878c8e2f9bad1ea175739c90f0e9b1dd327284c36274be888382ca113d79d0190c5d6ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bf3d2e54c6bbdb93966ff7ed455ea48

    SHA1

    370d26fbef8cfdc12b39eb1c62c189677c1a768a

    SHA256

    dc38e56233304026f6cbed936391c3334299bfe8917ad7f731755b1a634e46b5

    SHA512

    ac72207173c425a46ed0d64762317c3055c018b24f60d4ef2a107cb0dcf8df9892c722de4a3e67501b5e3f118166d5dc6c359be31f2464c23ae5de512d2f743e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c9a5e9a95bda0cd48fa41e28e2d9bfe

    SHA1

    8842f0f0b4bfc2602da82e32206272c5c755ddb2

    SHA256

    7e0686457075138400e42556d23da9e9dc7c04c35fd340d99df9b64e3ab9c2af

    SHA512

    f159bee75cc2488b3adcd0c2efde7d1c647a1b24dc434ef413197732731fa6db2e997ed0239813db6c9fb382994e38c7a8a7ef0fc1d45d52c1583af5c9dc93b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecff7be5b6f873a002d7071946454d29

    SHA1

    e870e9af7b4808f196def54aafc70fce7dc8e38f

    SHA256

    c37fa6d858dc177573f844ff48b5387e7727cf80dd39cc641b9a6e27e2002ed0

    SHA512

    17dd4d525ee3a3d5a3780aed8472d06573f46c81cd7a981dce71cb8c84776ef787d5d5589679a2643c99c3915920c5e5f8fa28b3e863e61739bef000098e7896

  • C:\Users\Admin\AppData\Local\Temp\Cab25BB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar260C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a