Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 16:00

General

  • Target

    7603e43f8a509a81f1631ed53c2a9dbb_JaffaCakes118.html

  • Size

    118KB

  • MD5

    7603e43f8a509a81f1631ed53c2a9dbb

  • SHA1

    cacbdb053f10d3b3dd5f628829cc91f485b17945

  • SHA256

    dda9803b67b273748290a88f254fecd23978c14bc8f75a3adc812cdd37b5c5af

  • SHA512

    dac1fcbbd9fe10659236d57b00f3d6bb183baac57555ae394d0bb08d8c9fb239a8416eee71b47219a52ed259c37328bbc8ea7e7dd6b7ab5e94e1974328c8358f

  • SSDEEP

    1536:S/0eK5c/yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:S/WMyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7603e43f8a509a81f1631ed53c2a9dbb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6777bb682741a492af32c57d7032dd90

    SHA1

    9b5c285a749af9c652bc94889ee5673421c9e355

    SHA256

    9364d79ae941c820a77999903bb073bea67a6e92f8e2e1c945c2c729f7196849

    SHA512

    90bae0ab5055e3100de993dcfa5b9bee203b3034e0500c64220748aebffb9d6a68035e7c0ee5799b403e930156c8cf7c99824a132a604ff3179b101a1a1a6d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d4bff22b3b154c77b0672152d71a805

    SHA1

    868c47cdf5283d5ec078c6417b50842edaf843b1

    SHA256

    e2c4440a813b2a3d3898b5dc74e6f0c98e01967933fdadf749df90a6b5c4e387

    SHA512

    6673c0368edb1cb9b329b214249ddc37f893f001aa2fd9a9adfe6ff26debeaf58007a68cb7690a0dfc0ce9fc819804291443547bf5a3fd2b4c782d4aab1dba78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3ec586ac7a8411ceeb42b8f1e0555cb

    SHA1

    e56d9e367442bddc59497d1be7f0f123fae9fb9f

    SHA256

    2c5e7ab038d6e69295fc4ff86048f098e51810e53f717542fd4179bdc0202375

    SHA512

    e5350862dc8268ccfa58d7e9269148f9400f8996d3bdc6f95a25624ab3f0c7826094eed34453416ecbde5f261767587644eb748b8c6592bdb10af6e3f7d81b42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b717e1f30e1552588c1f96500093d3b6

    SHA1

    df1349f393a2fe105ef379edb665f1baddc7b4ab

    SHA256

    ac83fecdab18aec162c9c9a62184704389cb186e51186929f4f479a196a34f7c

    SHA512

    6e43d1d03634ce521a3c54d77330cdce54b28e6f8ad9588eb20eba4c4b5a528e3069e72ca67079b194e11fb1d7897573b723441e71ef09805fb83cd3b53807de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d93869b5dd332afc8fd3db49cec72dbc

    SHA1

    d04e308e6af20906b7fda1c24f156a53f8e926f3

    SHA256

    4315f22d9c9a4ff9b93206e89bd7fd3ce3946e6922af2fbe4c6dcf45f8fbe60e

    SHA512

    6c20c9c3e43a099b02a7ecd9e81873987ca17ce210cdfa62f4acdb0d1309553a0a374304f55de4508f7ce03b8e29c5f3fbf843b810bc5c809e0762cd16e9d3b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82a76b95822fa691aa69d2bbb7db96fa

    SHA1

    823299d77c734a9e0583f9b5419a86d137263ddd

    SHA256

    596af9a3579be9e726c136bd1c64244b329c4912000c7d07613b9d761b79c00b

    SHA512

    155daafdf9759d670ae2adb8a6d7f1c828196d7e43b64e32b0204bbf8f66255a1c6a17a113d33bfd8d2ae6b9ae08bca8061fa5d0dac2436c3ee195d713d58b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a301e6528d08de5051f2f7a2b682846f

    SHA1

    d62959e444cacf556f19a3e873ce638fc4c53f95

    SHA256

    4663d9b5673e33bcd10a96005d8616dcf06802cf0effecdbbaf17e91b1b39518

    SHA512

    bbd326b77ada282c4276fcaef9139cc2db262010ccab292bb49daee6d42063f48b3e1b104bbe27bbe0f2417aa2d43c57633a454c2b770a75bc67967712fe7264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5285d178d9397a9e9fbbab5681667e2e

    SHA1

    c08d1503616676fc6a509ace665297aaba40ddf5

    SHA256

    4db35ec64ae133d115b13e895d6120d0df650effc2b4370bb5842275fcd04f07

    SHA512

    036a1bf90135b7dd97ad1161f6292b0ce5d1985ac6978b890fb5d1bed3e0fadca8d581a41469a4fe6421c8aefca67ed2ba3d08e93db8f05fc65154acbad85b16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    640a3fcadbd2d35fcdf50feffa7b9474

    SHA1

    5bed63ed2f46d84a9e17d6178a8af213b4ced796

    SHA256

    736a63a6039767cb029a500ffc72eed05817ed4cd0cd4a4facef0f63ad9c4497

    SHA512

    e4fd4f514232cb8304c6a73f6ce3d7c783c3b30752d315f64aac317baf19e23248782e59ca5adab12ab2d14a5ae1a39055407f788436e9adfcf9790d7b6d19bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a916278a56358d02e4fc61509d0b3cd

    SHA1

    a378a482951f8fc6d98a675f383241e0e524ede1

    SHA256

    effac50d9ae02950c56cab157e823cf8f6c3708dd52c00f8b21cfc5004748f9f

    SHA512

    0bc58b1da25353f62b700e5a384a7fb9ae7a486a10437f29899047e3ee7a8238a33619b9c0e7e9684f131a38919951cccc00ee2e9983f751730c76c3dd7bc62e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c57c52fc9c96f068197d1f0d3c052e1a

    SHA1

    71c7ccf210b0ffaa4fa4be4c92d4e6af47ae9f3e

    SHA256

    2d03e5f03a2c98724c34501cd9b1244962100eead39ed55827cfb6c6e048b73a

    SHA512

    2c7a6ffe850eb2eaec2ca8777084be43e87a276ff2cb59f4ce9cfff4caacca9a829e981ddec5051fc3a5de468bb7ac9677947607bddf9937c1e560c31d5de45f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d3d10e617a56dba054acb6be5703624

    SHA1

    372a074c97a9f2a6ab95528f14078c142ab5780d

    SHA256

    f39dc8362348c9c4d6cb3ec67e5aa8626308911c14c651c1028dc4e435a47527

    SHA512

    464c63ebcb3b26236dc651892896cc4b08edc003dbb612bf2161124ccf7c430ba7c96b7806c903cf665e3a8d65566d28fa152c60484ac5a63fbf5da17e0d655c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8719b25edc5751d2cd68a94e5ddeed21

    SHA1

    ab8a77ea308b678c3e7c6a99b6cfe8f673c1c15e

    SHA256

    317dd509c4eade4442331cc73aa822b7d1ccf010453a88bb10e01323b8116e9f

    SHA512

    0817fe3f94a2bd9a927d6c16cc56a27b6ca6d77f075ea71019200b852d998c3b0468604c09fa18cb480e4d490f21073c2e10ea660a23dac3ef3c5d4acca90b76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    354f0878be81da82dfb27c654121c991

    SHA1

    75686d1969716e710574892c5ef95b46f0acf45a

    SHA256

    593aab7cef168990cae3284e9f733df04357c555c6993ede8ecd0101a685aecf

    SHA512

    193b4133aed0733870d40160a052e8c2ca1f352ce16230779825ea58b13671c0fffc67383ef66f00d3a56090d82ff91517e191fa8156282916bacbc927d17079

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5e5a6e9083eccf75ebdf483e757ba57

    SHA1

    fa6848932e5eec739f5776c54775db97e5b5460b

    SHA256

    12b7a00980b03256ac873b574a85f2e7dcf9766e72f2e7e164433775153008b6

    SHA512

    fea6d59b279d0baf7c84f7144fdf1e1aee24e555faa14d67c668009dad6e1d4576dfca65d53145ec337fa59b120b9570e53565a53c0ed4b5736c2d7e05b8cacc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d1aa4e46ba0a8aa89d1e57d8bdb7786

    SHA1

    dcc1b8a299e61925ed8a2ecb9b745e61bb655463

    SHA256

    fcdf0666d5dcb4ec74f327dfe89e2ca4e8098e94b7eb33271490f267f979ef3a

    SHA512

    ae72007f221a099c422bf6169a40e884f4d7916cba47d9891625765ed0d80d219f67eea9312c43e3ab78bfdd4d9e0a54134a602d6d269cec12721f6f4ef3746e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04c547353b5969373d62f95e2b7dc5dc

    SHA1

    bde0ed50e8564c5ee2da58ffa0e0451ec5c0c882

    SHA256

    073992fbfda95b981a913813243b227424724fe7b874d50b199500885690388d

    SHA512

    76897146ce219a396d21924011e8be4e2bf7b48877d272a55ecd2111988fddd63e08dd1af30d6a86509e35d7a2a6d4f8689f30e7820190f2253a498ea7e37d4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dffae8805b2d3a27fc4e5007c8863487

    SHA1

    514a935b25a96231f519e08d0a3afa48214080ed

    SHA256

    576cb445c41b08289e68db0e2e59c614b1a37ae13f744c8dadfc92d765ea70e1

    SHA512

    cf4610fbf1490ccca3b44af7ef9354c946bc317438f824ffc06c3cea6ab929c5602279a2e603dcd1f51d6cbeebf6ae4b56641b50cb5f49427b294c0232d5a48c

  • C:\Users\Admin\AppData\Local\Temp\Cab3759.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar37B9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a