Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 14:35

General

  • Target

    67983c2fb4932494795c0e4a1407f0bf_JaffaCakes118.html

  • Size

    41KB

  • MD5

    67983c2fb4932494795c0e4a1407f0bf

  • SHA1

    bb137b12423eeb79c594d75dd107b750e454e6c6

  • SHA256

    3f1dce4abf40306a56beb721eefbab7e25f070403ca72cb196e33456939bb3c9

  • SHA512

    30a490f0caec6645eaae6f5dbedecdfef12ed86388e133a1a6ae596ab7737922c39b5a7bbccd29aee6ec3bddbbca90ab2004830dbac5f6cca0fb7de820193b31

  • SSDEEP

    192:uwPPb5nymnQjxn5Q/enQieFNnQnQOkEntKAnQTbn5nQmSQxismosnXjKs7KDeevb:QQ/v7xgueiN2Her

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\67983c2fb4932494795c0e4a1407f0bf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef4db71feb794e583aa6b2ce41aee653

    SHA1

    a285d74daaacdb1ec1c5ce1f889afd04628b0880

    SHA256

    3a7b1af1e6f1159f946a825f6914cba6903a08fce2bd439a521fd84cb384787c

    SHA512

    8803ba007571982add5944ee7c76ed8ebccff0706ec73280e5375629a4039997658c527d5614c74714b7d94648816975e538800d920efd392b28e9a20fd8e80a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f45a759d0bd352981dac44d828be01b2

    SHA1

    9feab4c83397ca716b29ac791fd8c60e912c957d

    SHA256

    f3a0704f0d27f66962949cf600bd4d27f8aeed3c0d9d5481da33d1e49930ad38

    SHA512

    04da359f77c2201081062fe86a0deba4f9f5edbd50254fd085b18f07afff437fb0341bce74e7d1017c97003f34456b6e615ee0f37a119b1e45bc8cb1f04213f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68b37279c349b023ac0ca63024eafe4e

    SHA1

    93feaf3c0c4b43b5ec6cf9c00d4c827307471cb1

    SHA256

    f849f08c312d1fb53d5778c9d75c74d99701130667b22116a5be03a18a418a69

    SHA512

    0fb3d28df540cb5277c1cf72f3704e3c4f57aea458dd71b1ed5178aaa6fdf73346a9739bac22e5ab05417eb6ea2118d611cc0cd85ae3987b161d21348a098a46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0495c02f8ead0376f002139f4ad1e3b5

    SHA1

    f51d7abe0a2227067cc7604b849cd9d52216e95e

    SHA256

    1f96495a76b7dbf023d964c0c294da773641acb1e42da43bf364d08812528891

    SHA512

    6fc4147e8ba8779803e8d1062039212d56dc3761824a63f77771cb9428b74467400c075e026807bfabc112f7968cc4113ce0b499a6cf8e02bc82a3557c43ae45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6189b0cf952c27f3961db2be15bf84e9

    SHA1

    c4de7534a957a238e3487aed1d60eb0bcb7b5d1c

    SHA256

    c8b035c4fab12b2f5a4a09c71e0ece698d9861261e37709fd51350f0fe43f2a4

    SHA512

    0976e60109ed0adb46d11c5087a5b61c3e851e96f69de887f00358802cef4f6947f1e39ce91d00ca288a733893551563e038c78b0bf0b9a04270ac64c9e3893b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a859ccfc88c33c43e2ce1f288607feb

    SHA1

    e48f835d638decb5ff99d973ab2991e12e23c079

    SHA256

    c3a80863d7f3b0ea31cbfee5361959e81686c8f334d7ca02e880b056d9c0da9c

    SHA512

    2c8f8334cbced6fa694956b8083d4eef08dec044db7c6a2128292494e27aa5febc0fff5f659c860448c1ed9838e249c0e2c0285faf6d01ee948fa60ddf277a4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    093f84d55aa15289ce4f10f785fd7b25

    SHA1

    307205dc1c323c6a6dad51617071496694b3a561

    SHA256

    5d42c128c0e95798d40eaac0e30095fbc4aeaa02104dade193a0de2f73e527eb

    SHA512

    1008f370633432bc51c2c932aabbdfd7ee928ba1e094f94aad974a79a312ff9829aa003047d2a47439a337760afd846a651cbee25a6c1646cd08d285b4b6b333

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a88f8b991464b7919966a403dad59ac

    SHA1

    ca091f8fb40632d93a717fb14404bd6f3a046b72

    SHA256

    5f261d41959d80b25e3bf4c68e005f12b0c6898abb4ec59e899ccce233d21547

    SHA512

    82ac990d1277e00345527a56f34b964b8d21539e4e884ab5a00b05943b9e0abbdd8fef84b58bad0e0eb3c56117a19ced1e9c87c12e91d477502324a43a5a8d04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72c68e484fd2271caa89cd4ee2fd8cc1

    SHA1

    2b7ce1494f4b8bc1def0b1dd4044586c0b6f094f

    SHA256

    b331a1476f19c4b7aeda19f0f6eed214b205f21e5afa396306f83896c884b66d

    SHA512

    228f06162005255ac7926551d979691576409ee2141f969b6ff20d6469bdd436ede3194294d5011f9986fba800a9ae408b065989a35bc6900634bdece78e8133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5055d418a30264d6a102a1bb92ac5b43

    SHA1

    41aad4fd59cdb109bf258517eb2205024db4e1c9

    SHA256

    6b74c4084bff434dcce0ef2f045bd238fc8fe1765cc28d39892581995a4f86d8

    SHA512

    8ea148f8da51dbb085a8afce6cb508d7e6e1c36cda7fa8fb86943a97d96c949cc6c1b1ff53c22eeaa7b67f3e5d839a74cef9e3fc2691570efc9c3246cc8b800e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b22d02f73d6fb5b1c27eb74b6a3ac858

    SHA1

    96a6e119c01d6fe41cc2835ef73ac8d64e8e7f0a

    SHA256

    0b23ed4f3116b21497632154e3df6da19a6fdacb10dc48c5d4febc6bfbb993bf

    SHA512

    b75fedf4e343d92b74b8e8512920a40b09def4b88d1f5cb46549fa89de5a601b2ba08204e7e80809cdfc9437e1d4e0d9e8da8b6ba2504e7b1ee483ee60b6fdc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8c57be617b331c2f057c2695088b255

    SHA1

    d87c0079a0493d69408101814c0fb9c13dd460ae

    SHA256

    154b70ece0cf3372622433d442058a434c4afd5feddb7b4e733bfcb8d974e7ab

    SHA512

    cdb6b879c923d6160381d221dbf0420bc9659a7927d5bd33c64ed4adc92e1dd12bd8fadb232f7be103f07d840ace6e6dfee10c6bf7499573501e43d0e9846b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f61b740e819f45619cd9d5f5b058ceb

    SHA1

    aa8f33814ffc16ea48823554c8ffaed85da8ec7a

    SHA256

    dc30f7875496114f32d755338f8c841c505ffc1b39ac759b56164ef1bd699a8b

    SHA512

    7a70b85f36e182b97afe9e7a9fc4427549f809d6acbd59e4106ce17e0c5a6cd38f3e1d05cecfdab289f36d057cf668a53478bae367db6662863d02ab380d8d00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20cb4e6f2e8fb753716334bc73d9d640

    SHA1

    b7fbc17ac1e3145e9fd2a6c2999b31228dd08827

    SHA256

    056adc9967b2ffd3f3e2344c8ec4b441ef34de1fb27a54d3f9ea759fa13f9d66

    SHA512

    7c9fea76d92e7939238ea9c4decfec396d0377575b321e8e0225a66c5eec3aa5f75768d7c08cbc4195e3297d949135099edbb7f876bac9c054566e1654b46d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5c9774bd585fe7f06e8eb6edb990ede

    SHA1

    8222fd7413312355ac1784c36ec16207850a7d4c

    SHA256

    d9d3de569cdc78de1ffd7bfe96b6965fb33cabec1b7e9de641fe8d983e36522e

    SHA512

    42c38470913ab5cce0613137f08bb6f8a3979a6902231e464bf1fd80809c1b3a5c0d44a6bed52fdb20d1f8e82888f57480c13a7dcad518a56ae70d052be2fe18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e266b93dfb50d9a2d821ab0339a59189

    SHA1

    437b349c042bffa1f5b39a36cfb13c82608ec8c4

    SHA256

    a7d20e3a492bbb5bba2a493d01704965e73f768f14451580a120d2308f7859f3

    SHA512

    6454110b4c3354770431a24dfb46cd2701d6d339182beacf567f1c3456bd129407cfcf155ce71a9bbe94d5b018f2bcd983cfb6c942cdf434259c6a05a035b713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f05bfccc55d9a09eb72c681ad286f47

    SHA1

    2931987360c998e9d25cc3239393606caf92b0c6

    SHA256

    172eb8950fa694fee1f67ecacdec4962103b1b93cedccd728f6ec2fdc1978c0f

    SHA512

    4f41e74a26ad057576bda58498f2fd7206f52e64dcc6c00e3c5bfe20657c0d0e4947790599bf02d1147cd1bf8528267fc7f536fafccaf8fd49919004ba2461b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c9f395244d37324289c7a176f41c361

    SHA1

    2bcbadf76b90421b6d9c8369ef969ec135f2200b

    SHA256

    a7d1e68c9c46dfeab71a470114e9becd63b0276bcaf4ef1b0704931c8098c90c

    SHA512

    f6374192b1118823044236755dacf52e6afe1fc726db9c6243817b75b4eff0b8d5ab180e2eac33d4b5562d9078b89c4e8da4c3d82b3b0c0073e2e6c3973cd6b2

  • C:\Users\Admin\AppData\Local\Temp\Cab3556.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar35B6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a