Analysis

  • max time kernel
    133s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 11:20

General

  • Target

    71c7958310a01b507486aa4a6434b674_JaffaCakes118.html

  • Size

    119KB

  • MD5

    71c7958310a01b507486aa4a6434b674

  • SHA1

    543b22eb08dd609a543bbe6a36985ac204bbc704

  • SHA256

    b3855372680cd3eae95a3fac4ffe939366d9c48f6ebe7af744e0e82082c01098

  • SHA512

    5d305c257f2803ec99fe8bc4f744c2316e1987b98821047113415cf8b0ce829697532dba6f4f778740fb2025ca5e45298265e491b23295d669d5849e944aec90

  • SSDEEP

    1536:SYj2lyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:SY6lyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\71c7958310a01b507486aa4a6434b674_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2424
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee1e2dabef68eca1fd86249267ddf552

    SHA1

    12c90fbd7661249e4cd14a1409557292fbdbfb3c

    SHA256

    e204d635eac1a9ac8715c108f4a2e7c270771443fa9cf054c99d8a90ca12fa46

    SHA512

    b372415ef3d197b74b37c6b61a2b3ec0297089ec3b2160a226308e5504f17ff73e43059b3bf3914ac3977844b817132eb4afec6766871851612b3ffab48f832a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    916253bf88294c83148f95d9ec76e07f

    SHA1

    296f59034641953eb9e9d4d4a83c15981b09e0b5

    SHA256

    018ee39b44221dcd7253e2e07f1dacbdf28c8351d4e90e4e7aad501c4660a11b

    SHA512

    417035993dda419b76b1ca7b4a2aee8b153b075ffc6b383762c26b72fad4e037b41cde1b5b074201c937ce2a0433a750079055d2b4b52ea67976eb391c4c1d3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c20f907c35c6e8a2c42e7b2ca9efeed2

    SHA1

    48df1f961e7fdd7c5d6bc291029b29c5fb0c53cc

    SHA256

    129bf842d460600d4e471ac6b8e138813e2593ce7c8196a4f910ded3dd95a1c7

    SHA512

    b8f2ab04fab9e67fda6100164dbed124cfbdaa6e2bfa3ecf234babfa3a57fcc6da62ed12370857a18b6b0449500b05146ea5a2eeeb0d9e963f778caf25686237

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    174986e081b316d773358b02d6b8a05b

    SHA1

    5cda225bd126b112d9a307e5de91be592bbf6daf

    SHA256

    d69005cc00cc727418713fa1f609df58436bcdd38022cc8cdbe223fb554224a4

    SHA512

    b11dc4d98b56ea59921acdb20199ffeebf3c7621f389468fc1b921bb4fc4ebf2168e0e2ecd1da9ff31036759ce6feb5434d28fbb71835764208214cbe3df1a26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    173e686e4365158bdb1f09bc8fad636b

    SHA1

    bbd564651887f91239d6235670df214f43b814e0

    SHA256

    cc33c15b7b6b46c5a8c691435b8fea5427b73e61fc139a7614c53aec5fa17762

    SHA512

    05b61fbfa23e5eccc4bb36ea4064c9d0da04991b23af583dda4c4d2c57622ad0e519d05c5079f98b4aad51c587ed896a711d10edaa54d7ecf7924ea8b7ab23ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9205e4279f1366f462b896c34f65f6ad

    SHA1

    dff7eafdb92038d28b3b6b5ac4c2b68bd8b0b2ae

    SHA256

    04a5cdb778555b008b694342ee49ab9f77e688134227aca8d38777b1b0239cf4

    SHA512

    f35d0c094cbb070b169545e0f21a45eb68c0c91b122101c15e247cd35c472b5f3c075c9bc5ab5d1656e5eab8bd39b13a33beca8912bc3a8f361986d311ae1b76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff2ac2ac25ab23a4619e304db0c8d646

    SHA1

    76feb637c16c5bc66f7aee71c86708c4ca233acd

    SHA256

    c3ad18c889731258f2165c5a867fc7783916187a5b05bcb49406997521790bb9

    SHA512

    f346c67b26abd25a4f35f92aa29d80008201fd29b9396b88c375b0f061c67b8f52e94bb515d59594a659bc7491f721ab9b87344a4b26aaba332d70c793adad80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    555cd909c448680f8b0a72440ce34c0f

    SHA1

    b94277e25c095c19fcdc68c2fcbe262e19e2b6e4

    SHA256

    012e6dc9b9d48a3d606c19f6e4a17ece11b877ecc4a2874b9fc8e50783e8f9ad

    SHA512

    c00bb52147efdccc13518598f9d3afcf2969d274bc32b18d1f7d705ecef94b8d5500a4ba9ad7cb9028053ff28d5df17033f746baa4341f10495baae110b5c2cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1b785198579d642f43e1bbf78ac9f66

    SHA1

    8ea8be57fb497015009dad58bd0bf081bd4cbf64

    SHA256

    599f6d370572128d006124ff5dd124b29688df9513f1199d79f75d49f5850c21

    SHA512

    da7472a94ac3f6e551d7ce9127c4218961c95df872684a596fe47df886ae9098feab11e65d022b9bea23d973d1abd608424118494c4349fcf42c10dbd837e2b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25012fd6b0e739b8054ea18aad08872f

    SHA1

    1fb911316097cbc5ed06ab359723eb2bb95ceb17

    SHA256

    be5744646da0c5852cb76d00a4e77ffd0c45762b4c02938cdfe89118fbff53b5

    SHA512

    de2c34d5d0bc638f90d3bb17b66b4939c8bbe99857778e8ffbfae5688e8c6fe42e22ed4b8ec9613a15465c80b13385cc29f59d840495ddad3f460bdf8197f76e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd43b20dc30a757815e8393c6390e6ec

    SHA1

    00f6d52cec0b73ca820aafb38e78b42a59d83520

    SHA256

    02c419e3c3bdc7ace08aaa8cfff47b2b9b31da8cc55acdc928034dbf7187092a

    SHA512

    2886836d3e11955e1cb688c805b4c07329abc0ebbbc7f1fff02a870baefc13fc57618f6bfb140d6f6679b1dad933a4f3e5a08756bc0a1c3e40e8f8f632573eac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b922d3ebc435afacf33ec260b7daa38e

    SHA1

    4ed35c073d48e551a74f96d03f20d7e521d93455

    SHA256

    11e76c1bb99fc7e628e056760a98dd7443619f01dcd3810e234ea1127c0c12cf

    SHA512

    142237ee42c9efa1a3e555212aea6c029ed5cf69d1ac10a95be6d2b621f3aa2bc057a0d0f3868da8c5ec77951264ac28e2fbde07ee044325b8266aeda0ea0bab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e132e7e9ad91f94c6f6d9283d94ab1fe

    SHA1

    905e5aa39b2427687786dcde59f0e319d81edfeb

    SHA256

    85663282743deef4ef61d8e38c062ea11ee54aa571a1b4268557f90deca692fc

    SHA512

    f4930734e53fac422f9e6c0a309a2ccd082973c332672ec1e2fa60a12ba8ed93c27d87fc3536a80cb9c293dc161370d450011789963044477ac1482b73644ef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe444e8e4c2e97b87ffafda884c1df8b

    SHA1

    2edfc996076b54ea3ccf7243093242d2bef15163

    SHA256

    1c2c891548752dc86fcbe6c37fe9d5300a91ed2871539924b1319317bd8387d0

    SHA512

    abc7f91c778145f6ca872626b974bcb0877edef59e59a6ff10d57cdb118c4adbbe67183022bcb51ea61c886d53c11cb14c92cfe474847e6720634864bda314f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39a52f2496513c4d777e5d494a6c2188

    SHA1

    bcc672ebb77d2dc9db4840a99f5ace7377348ae1

    SHA256

    4d0045d367b079f6fc89fe27db1fa82d2ca65e7e0f16fb7fa4e5968f8b43070f

    SHA512

    9e10ac1034ca537c6f6cf88eb1a63d0a1cce80169b785b8009832f9f10d44114ebfdf29702f393dfcbcdf7a6046bac7d4d5f796b6b977a8c2fa47d5e8be93a59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7a14b8d0e5914736a17dfc38eb79130

    SHA1

    29b500afe8f33eedf84404daa9424b8fdc0835f5

    SHA256

    dde907c843bf97607965f185ba3b4ff6f1adcf458b159d16ff6c1c1642a2c68d

    SHA512

    0680b75ec103acd50c5b8c4e0f7d412f2271c67d66c3b409e1ceee605cda69513f43f59d0483d059ea2897e5394c5cbd5f9e4c76d3f35e25e10d4acfc29a9dfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ff9619c37ff49cb5812e31b51f24015

    SHA1

    ad644eb7844aee37c6a27f6b12546528c2bc2bcc

    SHA256

    8254be752c3f9d2fc1bf07a1e449f69c7378e95c54dc1b09b1229fcee3609240

    SHA512

    84b7aeafa768c8f2479a7a653d0ce768b9d82ff190448bf1e89613e9764b3c86e1ae106586a4d21ac17942ce61ddd555b4bdabbb9c7d8725bf428f3c52a3894f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0ed1011d7d7130bec3f23a3c10be7a3

    SHA1

    d031190bcf2a2e4a8925db280bfee42459395f52

    SHA256

    d9b15089dd4c02f16b2ce0ed0fc52d9e5507a2f2f72e4ac17b70ec5d1a87bf47

    SHA512

    ae089bec72f9578e950af07afe1b321aa33faa086818844178f10832f66c0c02f8275cbeb1926df820df29383708c3e484c0718afc57ade30b9ceafd775b323a

  • C:\Users\Admin\AppData\Local\Temp\Cab27FB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar286E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a