Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 07:36

General

  • Target

    74c2eb1b726509a34ec5d2745917ff1d_JaffaCakes118.html

  • Size

    461KB

  • MD5

    74c2eb1b726509a34ec5d2745917ff1d

  • SHA1

    e4ae90e6c00ffa1889b9b99bf5892ed655d75155

  • SHA256

    6d1594a6b6c730d4c0765cbd0f12a5a4dc8e92226fde95901696a85548bc81b9

  • SHA512

    b6e2ea09c84f341b481e712e90e90acefa2bfe0da9d6513ae565e7dad52960068305ebe85b6493002004c881338e70262b4f7676bbb7b566d0723807c4d62608

  • SSDEEP

    6144:SOsMYod+X3oI+YdsMYod+X3oI+YFsMYod+X3oI+YLsMYod+X3oI+YQ:d5d+X3b5d+X3T5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\74c2eb1b726509a34ec5d2745917ff1d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1540
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1540 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4b0a1158e87bba63cd6fab0e67d73352

          SHA1

          58717f09cc944d1ef6d0ab57fb6aa661edf5c134

          SHA256

          3a719fdfdb664774ab073e673541239db4528ab66aa296ef2a45fb37d9adcdb7

          SHA512

          09fee4c7bd7a53925d8e256a78ace8ffe311c0d437782c1b86d3ab07e72007cc65071368b48596dd6b658d1d6e54ed65b7c69507a0864f8dc753507058ce88b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          691dec617b11a701e0e3483e2a4cb321

          SHA1

          d44d2a3027701115230d7b4aebe8e42a38c183fb

          SHA256

          dd3bd6744d7737b11e4d2780f4985c99820dc4c2d3b14a354e4f12b7cd213d51

          SHA512

          ea27ceacae6f0c9fa170d3d54fa343a23d99ab9d0070376e0bd185974d22e26fd53df2793d86f10e0dfb11becd72c9e3b6951618d4632614caa4905b7804ea31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9ac0e6169b6449960271be39dd2ae2b3

          SHA1

          7554412b42cfe0d745f040b03d6154f2af00909e

          SHA256

          2f8173c318c83ca11b9b0be968392eb4145f4bdc8c22b38f7e0f17616c0e81fd

          SHA512

          16944d370176b28f9aea3dd64aa6caf5a4a1349d81a74e76d99ce5e9d9c3ff0b77bcf56ea67e59e8524ec534a8130128fcb8e6ed9a1b324c0f60f4a50af6f11a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          323f349bf30e01cc3ff44708009becb9

          SHA1

          d19050496ed8d15d78a439a9b64f243f3872c8c9

          SHA256

          deb656e8326b45d8b4c89fa39f0e2b9753916530666cb801b6c49df92f29d551

          SHA512

          17784bff8527cd0ad5255bf34a6fc140f1ec6fbe08a685defd6a89ad0069ee7ca57bf83e856788ab8762d4e9a11200abb54b4eedf11a901a401f9f0e2c8f4430

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8508bd498b88585776a4dc5abf7c3282

          SHA1

          90e7214f9eef117a8774831009b133f077045b34

          SHA256

          a6c980a6b16638d596c2f5023ec40cbeff75647b6f1555939bd7f742c6aa7032

          SHA512

          703d981338c3ae39bcac7a8c3ed7f3ad4dffa3aa4f903fd3bcb8b59872e62143d3c6398e52b0f85d8051d372d160ee6fe0f90fd8e13dc096425d0469bb187ebd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d0dd936aa6a0bfeb72b30ac14a056654

          SHA1

          b108b7be1722a375241b171e14b0d790190a4a4a

          SHA256

          d94a645c931670664f255691c8ecb07ad28f9731564f1024c4e598b54666de14

          SHA512

          e662ff135c16effa19fb3410741286c674a6aac9fc6ebf97854a4eec367a619573b62c8ec184d243c5be9b353989125fa434ca8219281dc143f95a8fcdd4dd89

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          36edbd43fe1bbc55c9c3baba91018744

          SHA1

          ca1232b67f37b171a38218077ab85682e532f3f8

          SHA256

          d7e67536a4d458bd689666be2b71218f604fe1351a81bca47238728fe146b42e

          SHA512

          3183a7b8477635dc959a434d616274d49790334a29d51dc99557af47d937b8941a9b42b9c15df6f964ec5d4aeb4637fcb0947c0a3769df2566bfcaa56ebf130e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6dbf57c42c5d7fa693be7ba59b573d19

          SHA1

          bf277c76cd4fa5a94d5af05594d702dd396d902f

          SHA256

          8ebc1f7009078ce3254cb0f3ef3030beddbc625935ebf3c6106d45c303b086c3

          SHA512

          8165dbb0e51ee9fa286baa2eaf04cc7443ec9e7cc2226d8cd1ed2109cbfc232b20c345876b7ef2df74e0d20f96d3ee416da9ed15352b7a25a6a023fe8d904765

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          50d803499362fa9a2a3060877bb7b8d4

          SHA1

          c15841fe60070e8b804adebff605a89f01ee1fb7

          SHA256

          50d88d907428e6fc849f4fbde2c6707ab2c07b8f1af00ddc5e5f2a5fbc92e233

          SHA512

          dad7c75c4ce13a3abdacbff0de408e393ec527138cbc6ec680583f4b11def71dea12893bb8a22d7fc787fbb9be942acd42d95641b282aa4f9e4cc6cae8d5a633

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ad6fbb44e3f865d0f2147328a9045511

          SHA1

          fd8f11d4b6a2ae90686144676a236f9cc6097bf4

          SHA256

          726594a2746fc5350c3c53ca50e6cd35d09d4a415c17a30b3bea4dc0f0d7861e

          SHA512

          b053a356a40738aa6a005996e80b27f97d64f4591544a361b181c291244323743eae416ac330ea07c2aca91f33d505dad5c4c6ca9b12401de18eaa0e30fde88f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          617478d06b03c8d028dbda2d7bbe6c45

          SHA1

          52734ed97adecf7622f04b5ca15a9444ce4025ed

          SHA256

          f2a1d750469d87376b1c76c6eaa8c19588be26305d5334e3a57cf82154393906

          SHA512

          b681e822e46c10c05edb269fcc573521b741939a1b6b1b1b3faf746b24c5e9f48a6af55fd63cdb6722287d1cb9432ab7e7b1d9b0695c69aeef9fabd3088299fa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bf327ee6edf4a90c3c0744c0c0677465

          SHA1

          72324eb5d89d74585e9d6ad2282145d18e7d20db

          SHA256

          570e1413ebc0bcc9622f44bf502b649cd27c9aa9b1da8e64ab077eaf0143389a

          SHA512

          da0dc7d329d01077f492bdb10346a4f418d3d063de357cb71e1e5b14702ca6f97886fdc83237ca445eeae4e5a5542ca7b914a8cd744812b62d02e93a464f8e9e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          81041cba18088aaa1a07a877327eac5a

          SHA1

          5e1119773fe1f53e3b0ae4caf6d847c2ea58a5cc

          SHA256

          4aead6622f99e502a52d692af58de5d7fc095e503a4a779f1e87a3c26d4e027f

          SHA512

          e4262964278b208d8548580eb118fabafdff32e38176a2db45904168a8ba5cb87a8f7d216de83df2c0b61233159d3fea73b9acc58717d5c603e2cd2f5cf0dd7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c9f3683a9b2b0d566f2b19ea149afc42

          SHA1

          d364a2c306a08c809ecd5a949a9e92dbaaf0402c

          SHA256

          916d062070ae3698264a79cd782a88ad3e5860643976567c8ad10bf515a63567

          SHA512

          b3ad9fcf43ea8d5c0ba7e525c4c146d3496595eeec52459be5b1a87ac9e7715ca43c28ad88d0d7a051ed866d9e88479c869212fff3d4a8d5074c5279a0015ef9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c109f6e68134ce1ab9e8bb24cb853434

          SHA1

          071d4e09e16efc46ad80e0dcd75077643d91a7f9

          SHA256

          f292be6ce30a858f1c725843b52342272320fa62d80b495409f0cbb3b18d4f2b

          SHA512

          307dacfe35e87b8e6396ed387861789015a786e5cbaa583f695e6621a023f70a0b2de5ad4256f24e2b5cc5ae5fb313b411298ae2957f6a1b87f32e2acfa1d30e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dce88d6a7d37785707013e3eb7a08b4d

          SHA1

          239ba437327ffd27aa6ce4f2af8cb9f05f2d026a

          SHA256

          b8e512cdcc2c1153ec82c7e5f8f76693a18a9ba77680e9965b01b8118be80408

          SHA512

          abf90adf6d22272b3aeee070e1b8aacd593c145b71152546ed634fb9a9c4b5f1027094acee3b62c04ebf37cdb6a2f4d1cd7bba642e5bc3bab69f244dbcd41186

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb61b59405d4b1cd76c4a550ccfadeb6

          SHA1

          7c325242d66f4d7df7c69115f73f0de4cda9b059

          SHA256

          68506a20eeadd812cfd8db11f1dbb1f15fd9dc4e53ed0ca940cc896a4682c8da

          SHA512

          25ef84f4fecbb22dbe536256ff65a1b6a0a6fd0e58d66359c25073103e46854ff25e92f1e6b28cc1637e288bddf6a6643556b2267b8a079b24d6b5338323d70f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1cec0f333c1d743050591904913ca3b4

          SHA1

          893ec150af274726b899573c8b879191a29d4f5c

          SHA256

          28fdf8b65d89b8f76bbc8bb887c61fc5f2342da54ce0423d0e7f2bbf23121429

          SHA512

          3674069aaa26b8237bee31378164d5bc48dca87a3b2440e7dc5d4ef6d805fb93918eeb3d03629b32eb88537cced6e81855e663442c693c886d60564bcabb9664

        • C:\Users\Admin\AppData\Local\Temp\Cab4DB5.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4EA7.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a