Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 09:32

General

  • Target

    62d0a52795b78fee2dcee9147f0c3322_JaffaCakes118.gif

  • Size

    56KB

  • MD5

    62d0a52795b78fee2dcee9147f0c3322

  • SHA1

    c2a772524a89169d523fcf5bf65e7acdbd1cc3ed

  • SHA256

    bfcc944128c10054184d8fbdfa3e7b2b02c572fc4089faaf90ccab35abaa7460

  • SHA512

    614e34edcb347cebf6f3051dace0a279874c2a0cb99c8e6d8020db08879004313747f9d2afc0c315b9ab8785d245d360463730c64a82921231d5d31d9f54a8e6

  • SSDEEP

    384:sMiqpafVrmbIO8NdMAULghgwn7dwtK57CMQ2RRyyVM2KiIHS37wr5NPQo:riqpIUQo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\62d0a52795b78fee2dcee9147f0c3322_JaffaCakes118.gif
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3000

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c4e957bbc602728f9c63f785c1813f2f

          SHA1

          63fef8b96c0dd87b8611ad1feb9e7b0b58c793cd

          SHA256

          6c2bb8aca01db5759c6fd406a3f2089213f834ccb7d5cc4e33f871b8620e9b6c

          SHA512

          c732d117c69e1da3d9a54895a8d33c1f8974a0c95d08e6055f9d09a2bb4cf9b5a5c2922cd659c9a7221a8315f18248965a5ae90c0cf40478d5f296016e989e69

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cf06db3e7efcf348b771a16379688ae9

          SHA1

          100d3ddffc8b7832a6c4257079ec0025d934b14b

          SHA256

          9f9a78c443e580bc32f496c262ca57888e5b5e68c227fbf53c39eb48edb0367f

          SHA512

          0b5bae577d0054aefb627fe09b4e2d79b14578ab5863a1c37f6544abb4ce51c6c85e57ac53572ccbf1669c2158e3647cd0ab550cfb6b9e7d59e93384995838c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          be1c25706311744034fc23bc675ab8af

          SHA1

          e6ecc10db441fbe9608c71e5693861499b44b6ff

          SHA256

          a08d096e438642905aa9644ac5e488fb75030c25177664ffa4578d7ba9984aaa

          SHA512

          3f807f9bb19656e3448221457b1f18083bb716607f84cafcfea92d4a10f014e4e2d47239d79fdedf77ebfc72787cb6abab1c45e314b2cb8f0e441e9fcf23bbe1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9aa63c4d9877fe8b94ecebe7ad411fef

          SHA1

          8be4a88db65614b6a4f940e9b6ac87ed94833509

          SHA256

          cdc5a8e01eafe7375c61f7bb846bef1942fa383710e3968d1195f91d7e05638f

          SHA512

          6919e62c7751fc5ddeab589d4031d2589f08fe29c159895f763811d4a13a2f8e85f10a81daff0e4b34b1a2d3edc7a7fdef06361ffff5aa67441f48a4542efe57

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b47145a803f0463c8f223c4f45629df

          SHA1

          fe460c80cebe61d1405c0f369596a0d7476c4038

          SHA256

          a8ba5c6dc5513ae595159e8ff2cf8074220824947579dcda435c076dabda662b

          SHA512

          fd689f7d3edac416049eb4a84cfabec93edf4976073d1b15f47e418a5c0c05d230a7abc84f8c69bd0106063a419257b1be04dda948346ca6a858171e86e1d055

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8fa456a9717e0ae265d4368a3955d7ea

          SHA1

          25ddd8d72d92e282006a4d670a322401227a9148

          SHA256

          5f191dbc6a091be9a7cfcd1b27e3aa97d0383e1e7ec87d662e464f64cbe8ef54

          SHA512

          c9326960a6f92e5317004ee3735d4475ee09c26a66be5695bce2b10a4f8ab3c9539dda8cb660857f984ccc8d6753a942a3172cc399cac6f73a36294296960630

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          00acb565582ef74dc28037c54c070d6e

          SHA1

          480094e61a29be4090b0b82ade90ce4de55e640d

          SHA256

          1b16165741f3e80ebd218804826c0641c179196f64cc0d3ee29cd499ebf575ce

          SHA512

          1e0787e39c40eb7b0abc442d5160735906111a0d9686379e9be20817753299a1a6f729d59c1b3737fef9b8bbf25003daa54c969bc05df4cb9974628510af9ef8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          16805a62a3863a72a8f5602b2c28283e

          SHA1

          e70b5108bceea7db67c1804ca990ceabfe19b0ea

          SHA256

          47b53f08115fc0c06289ffbe298453b18210e7e555209ff80585b2050d16cb43

          SHA512

          d1a3c8d47c1ad7f92cf0c568d48f323b91ca9df4d8e2fee05db7a6627450e3249d812a3ae6862c03269d090e811bb34197ad720cf0d90d7b8569eaaa0802cc70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          404cd1ff527a12ecacad4dac2dc892a8

          SHA1

          5efbd19d4bda7f488d416edff7ef5d5f68ae99fc

          SHA256

          cd082c71a952428ec0302a7a4aa278d1e59cf841e2feed9e5159aa4660e2fbfb

          SHA512

          c95e396d1ca2ff1acea62c1f5c74a71bb9b00f06179c062c637a0331770e03f52340af22a54c5f2fdfe6f5fff05d6f2228fc68c29fdedd0cf2f54fb59101c407

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          26752ff0ef70751dd47d2d3421603c9d

          SHA1

          2ab1f86aa5f72c56b310145b008316e59bcf24e9

          SHA256

          67e117cde800ed9dc0bedaa8ee519edb540ad7cb84165682630f0f813d3eb813

          SHA512

          f36e07697932f92471c56b31de1511bf71b38e6e6c40a314e0b3f9b2fec4a2378af9286b08ffa9fc4f5f52b12af978ee7b889b0b5cacbae56b88674ade0a85a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fed4e74b40ceef1a775089d937dc6ca0

          SHA1

          1d3fdca8aa26862f5eddc71b29668b7a3b9cd991

          SHA256

          5c60cd3f7e98194204f62bc67fc1e6cd4de4f1ae730819e095efe7cfb567a476

          SHA512

          e0ecc6181008ee39a452594af1e69be8ef75d7403bf610c17beb8443243d4e85854e52da33516a5d50d6f4f444b6ed0977d51f8213a3456ee96b94b319c2f71a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8a1ff76207d8f494e1a84dabb9778cd4

          SHA1

          2f56038a44ae40f86f6c8e219329193e325b278c

          SHA256

          2a3c448e94e465ba782b154f9d22a496f8443b3e34a11800a03bbfd655b49d48

          SHA512

          1a80a68f24a558f56d973f56d0aeef4ce717b0590f566a66b8faa3281d84e9c1e9fb9b9033bffbbee8bf7014923cefd267af94c82ff01d192062b08c90de06b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          923488e4dc6a6ac903319e7f0155f05f

          SHA1

          cc1ece95f71cb894b5badc0a0a8c97b260a29738

          SHA256

          63cb3deb64046242e79864274ec347921fb2a4123cd75aa5461af3c16dfd1321

          SHA512

          8194fc63ef456fa0a6d1fd904c53090baa03f15740b0a2f29e8fa082f15315d8805feec61b95fc91cef03211f4b507ffd14b5d37d243993400ed198b4610ad4a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fbcb3ab58f728f66fba55f2634384520

          SHA1

          37c996366fcc238da3f36dc38a551b9b5a139e9c

          SHA256

          fe9ae90abfbaad78ff60d4e2b0204e83d8b93fc24ab122a04f7f3dc40281211e

          SHA512

          2022f1d9ab97dfbb494963c7530411eb6eac884a456c792e88a5067ca0c3b9fdb907b5950fe28356eddfe1b0f583eb56424726a97709e793d82981354a9fb9b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0cac3001e87d352f4ba7d3b0acd876fd

          SHA1

          82c8fb5d52528e13ed46c206d65bdd6712f13a52

          SHA256

          509daed89c0b7bcc612c44ea5966ffbd20bdec48a59153c1a12adba58d96552f

          SHA512

          93949d09c6175c1ca2dd411827de3cf35d03a6395ee06c1666ba0e57884aaf929d8a7a74203ea614d0430b909cb2c1df96c0cf507dfa63aa1886d983d54e4307

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          10b41ae71a97010bddceeeeac1567feb

          SHA1

          f31f2ff0a68b5d7ca4a21b935e1286edeff33fb4

          SHA256

          717312ab2fbae7383cfb2defb0f8fe06fe68a36bbd3b63cde3d6181f1711c019

          SHA512

          933e8bd1ad217aae04bde72de065556ddc5692c0676068f647e03abdceb4b7ce3af1a248954f61f103f215bb85b19f4de969dd5ca482edd4f1c53d810e7a1812

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9df6aafa7521307fb673bd72795b121c

          SHA1

          ac3f40b1c7bd25cbce18696d987fec10c3a13db3

          SHA256

          3d0857735bd6bc5b9258032c2e06bcc2c6a1e10ba5da43145704f5f77b2760ef

          SHA512

          22ec2b6a62b28f5cd920b5e3839d3e8830129fa6eb231f324aee95db2bc4c389d729b11026277f9a903c997710f9f96ff4ba2547bb5bc2eb282960c016c2c5f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          44bfef451eb8684f35ac32e0855a13f3

          SHA1

          136a50fd9bd26e2f4fdd9aa0bda68bd9c2c28767

          SHA256

          def88e28ca2b169f96a567736615541f35e3fe5d3ed3ca79f89ce7556559c341

          SHA512

          ac372a272cb3f5c4e95349e36d77d4b682ccd0eed10e31111cd067e821a083ae474d0f66e8581f9f1787a977dd34c2b51fbe59e74a2acaac7dabf72af95c8e50

        • C:\Users\Admin\AppData\Local\Temp\Cab1BAE.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar1C90.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a