Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 13:32

General

  • Target

    5f55292e72a16c02b2d2e5d41066f513_JaffaCakes118.html

  • Size

    19KB

  • MD5

    5f55292e72a16c02b2d2e5d41066f513

  • SHA1

    26eff29079896d57439a7df7f9efeed753f95d50

  • SHA256

    df0aeb51c4d92b57878e8a16782e768d4c19e1be900cf7123c2aa409fcadb1a4

  • SHA512

    ff2ebd6ffceb60b7c323bb0f09f669e8a6d06cd7f977cdf261a16cb8a129ac9e863050c70aa03da6f94ec31123c7b968d85d21397a46cce25e625419c72489cf

  • SSDEEP

    192:uwbpb5nW5g3nQjxn5Q/MnQiefNncnQOkEntQ6nQTbnpnQmSgHMB/qnYnQ5ONnlnk:8Q/zqxLI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f55292e72a16c02b2d2e5d41066f513_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1484

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de7faaad636bc9732ab62ebd3e7cae6d

    SHA1

    2ed0e7b4694718db5b4047dc2d76d047616e4177

    SHA256

    46948f57f76f4e1a46efd162b4dd1e6bf4599dd6ecaaef98e3c751d27ef343d2

    SHA512

    1bfc2763e77bedd71b43ce9a45414e7c7ad067b31a2e5b3247bbc3ff3d23c6e3a075c4e259c4c536006fbf667f5bc1602a25ccbf10eb50c2b7d3979ce89465b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34ccc6a4a901c1d2f6131a4b8ee1b911

    SHA1

    78acb79063d5804f0226b600107ef8ec4dc8c5eb

    SHA256

    7f7bacdeb86f348a9f3870b2e518ea04d9324dc0150837e0bd9d5675ac13e4fd

    SHA512

    828a5264dbd409faf456db5d6c108b90499d78b0276908090aa14b404cfc1ade0c491fc0cc56302ef81571c898f63cce096eafda2b824e698abaae734900ed9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24f2d17eddf7f7787fae51988a7950a7

    SHA1

    cad864035efc8ec4a59b52183911bdc3d5450356

    SHA256

    cbbbf35a1cf2deb41a1f14c18728b2b905cab8df587e5a7256bf297b052ae10f

    SHA512

    06873391bdf7be53ea7dfee2eccea426a97f28fcc650698baf965a27cfa08142b3cb4b736eac3e4351ed1b54ba531e33e881b87a3437e41f6151251ee36dc3a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    902142d21651be1d848632bb49dcff70

    SHA1

    c13d8a97134d90246867f87f1d062a18010618ad

    SHA256

    934ec3b0f5f85e94c3862d9b4a4708b720f872686a2078e8b8eed7712bf6b411

    SHA512

    525714c51550b47cefc595df366f9d5b8c24e68a9da8ff0216765bd74925471520e3ecf49bb49c8ba937e2635114d7238ac656589895675bada86e756570ebee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a21bbbdc393d65ff4a7aed6ecc11e7c

    SHA1

    38b6009b01b24da0a43974372e5bf3d82e0fecfe

    SHA256

    c313c30e908e8c91ec624c3b4efe8607f506fa00b32e3ec36a1c0ef134f98811

    SHA512

    cc124069843d9c0ad4fa8a15e5b40f413f3181f602d2100bf9282d4065a07a3b6846c351c6e355aabee89660c7a6f6024f1c54002b8dbc4b6bdb6abbc48d508d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    772246537f2955d71de428bbff6ce2f5

    SHA1

    85e14c045879b9e3da8876c91cfa5cad2418109f

    SHA256

    ad714a9cbf08497b89d7c57b7fefd72dd26cfe4523b6505bd30c99506df10b52

    SHA512

    87657ebdf5c13f4397ccbaaa9fbf164c64002ab95e24de8d7ee84f78f246934105c05930b65ba5cc034af2e67d4ed6ea6f06da41af5595221cf412fff1b14665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56545a4d870fc283cc1b1038d8ecb480

    SHA1

    6535f93f4593d3db115a99a441c4e743ecd5d586

    SHA256

    5955d6c3cbaab1cbc071135ef0ab67d12b18277b7a9c1c7adc7a7473295c3e05

    SHA512

    89c2d0031b73356109dcd68563a7db619306e117f1df93adb00e8ce2e65d3acc49de0f8f2f8157fba19f1e455b4dbd740d3266c91d92082a2060b0180976186e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5265db946ddc63a1f447bb5a83ab500

    SHA1

    6aa422f924dd3a9f28fe7822cd70760b82ba8ca8

    SHA256

    59a0454b2cf9a952eb55f443f7c2d469e8b8bf195ac3de9de21f8f13b509f665

    SHA512

    15f4ecf8b4fb1f7eff3c524b2b5e31c243ae4cfa6231d1523e93d3da648a167c33119ea8f9ef3d19eae3a733fe2956a5fabd85864804c1544740175dc4b9fd5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f542b317fc6ebdd0b094c6bdf9a74f45

    SHA1

    a4942b70cdf0b8663cdc072470943cdcc7e20daa

    SHA256

    f8fe8e972eec18eeedf4285581f1fd65d89d6fbda60a83986c94d67385d03a36

    SHA512

    28be004944e7f45554a5a9aa11c8a01fb91179e59b2c6dafa7eeb98f92857801b77f5b38bb947e7208945c0ed08a229896359b1438e1556bff40a0e959db9c4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83a3d6400f992a208fdd48aae744fdea

    SHA1

    0baeaa50605bdd7b6febf72df350c66e839488ac

    SHA256

    cd2cf41efc6866c1fdd86d3453ae3a4ed90a4a6785949de9c8690797238d240e

    SHA512

    3663baf051e3e3dbb25f9e6463e1c4fb59bc5b9323764bccd214963a97f2e7c7da5a3de6890c8b3b099fcb22b542adbe0f93cf67bc70d2c1801cf167917eefa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5285300f4e74e17cb3b3ac4f4e5837d

    SHA1

    c9df2500ad5d8794e21a1d3330669c90234457d6

    SHA256

    14e522d71165cfb4498d23e6b005c3dd6bbc4ca5983d3afe2886a8435a1b4541

    SHA512

    538ecbbcd8cf377677cebd1c9c9a46f6ff2c2328dafc2f82257b17cb4ea6461623bb11208bbc9925db01c7b493ceb41d71d7769a50b4f8df308965f2882088d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cc53a7b30547056c4ac5e3d101ecbf9

    SHA1

    1b5cbbcce3fe10bb2fbe83a1b10c1ee2dcfec70d

    SHA256

    72838dddd4dc411cb99b5307d95536e6b0696e5796d1a3dd324b36548f49a43c

    SHA512

    cb26dbed559af6b7ee0aa05d9b0554a8be435387f448d2c2ac72c12eaba0fa1802ca724cd5115313ace0d5bf977fa23c515a03845ced5a648da6b70552c7c601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0613a9f103979844b3d1c6f3e9791e9

    SHA1

    21bda9410de56af4142586ecb648b4a5a8e1c1ad

    SHA256

    35a46b39dba8b578343216c67f1f4a4043c127463cfae164b28c3e7668cb85a9

    SHA512

    fe1bf9e2a65a1a0a494409965e5f095b81952a4f61f38a7c95eebd180789b6465ecb127b978d35d884f473c05fc480b86c74b3d29f7cbc44b18c6907055f0337

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da7fe07dc6a704df434888864f98caba

    SHA1

    f93efa446c773a3f39c77ca7f9e58c5815573daa

    SHA256

    c1e0e171b80bd3fc29712db921ac086a398e6bdc51e70c73da6334eabe41c126

    SHA512

    3ee6edebf2cdd61596fa1347b1c186ce3cf039aae7f91200c421384749e89a3891fb764f32decfe951ea9fe5259834fa39d8bf6a38ec2f8012ed98011d15b250

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    264387b7dc27ce066cec641112478b13

    SHA1

    3ec55387f065371232bc2f5cdecb6447c4e2fea2

    SHA256

    5c50f1b4ae894683e336d86388bbc5fa2dbb9a72711583d689056f132d2f88b5

    SHA512

    a0bdb6ae8b42021e967dcf03f7c59edb23979b4939c31795831d922aa766d3e1b9a95891e23c6199d9fd69fd56a2a6d3ac48951e749ba2ce23f2cb02616a7ed8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba5a053ab3324ac7e29b23a8cee98f57

    SHA1

    82d8dde379a89373b4c71182b638c1f9ea5d4cb1

    SHA256

    815351fabe45b7282ef0f73eb972dd5871b403c2ba6428943c347adab1e6cd99

    SHA512

    9607f83f9611caaada9431d15d63a1c4f67f1136680c2f094b119039b3ca7e0885682090a4769ede4c6a4ff33e5bfcc51cae967e70adc6f7fde4f653c345aa65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    634530f23221d009b0eae606e73ffb61

    SHA1

    b8b2e6b182a312748b3ffded309732c74e9f855a

    SHA256

    1ad8ac858a17eb4ddb588d82605bdc07af3a801bd6873e5f6f4cee4593340fc6

    SHA512

    3feb2c7fa387d7b1ce1573779f83e83bc60cc2b300ecfbd296d041a50dbdecf4bdb6d6e6ce3a0e7684b5ff1b5111e507f82fc6cb5403b8a01809505591a8c6be

  • C:\Users\Admin\AppData\Local\Temp\Cab429E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar42F0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a