Analysis

  • max time kernel
    145s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 18:20

General

  • Target

    7664486cf623b56efdd1edf1ad7f417a_JaffaCakes118.html

  • Size

    78KB

  • MD5

    7664486cf623b56efdd1edf1ad7f417a

  • SHA1

    7eec781798fa35719e7b0daf2ec77c08f8776964

  • SHA256

    c4942eae2c34bd3f8d92a2972ce0ba8f928c127a9daf2cd1cf13fa6da61b772c

  • SHA512

    479848f1d2b9c0ac9ac1803430b746530db8e3ea23be5ca6483cb0bfa1e9c98eb952bbaa321c2fd3943641d91e059d46bef3cee22972e0c0a7aa4ee1bdd3c862

  • SSDEEP

    1536:b+UqVAhbfu7DVr7eDWN+c+clpWpM56wko1Q:UAhUr7eDW81y6Jo1Q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7664486cf623b56efdd1edf1ad7f417a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2360 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2324

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    728672b638b162b05df8c13175d45afa

    SHA1

    5208eb726e47434b8f194eaac992ac5cf49c7cce

    SHA256

    d27ab9d97b2dd91c839e70012e0c785fc9df85a551417dd4892ad1c32b959e1a

    SHA512

    6e6434335c88edfd743aad4c60a7f7148527869beee32004925aaa794ec1387feac35cb210027583b1a3584652b06ed1f0f4da23845a51c1a6046ff98b3aee62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    897455219a715f134302cbbf2e512e79

    SHA1

    8522a0718842c922a1ed9e9a44f20d755e0b816f

    SHA256

    36c84275ebeb76bed5166b1a6eaa6f8f7d512ab0f906fc2aa785a693b059402c

    SHA512

    0fee5916ceaf1c03bbd306df1d1a9986948a0818ea3eb360ee7282626f1a3aea2c8ff26f11acd7b725c7b3e9e6d01497be1b142ac01f338c741b1680ccee2346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91c917509b8005ffba92edcb653aa0ac

    SHA1

    0953a1154b238dda7533efbe7e839788d5738a38

    SHA256

    b3e356f8d713621fcff117b5117f320c89380a404f36bc73e58a77df20f473cd

    SHA512

    9898f0adfa4a3843f7cf1834b403b57a6eeed1654b8e32ae5363cf725d477ee406be2f793d7a6f245e0257a149dd2380f02f0664db787c8cd920599894901c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87b4c25f5edd266900ad9c8b97838dc8

    SHA1

    c79ea388ef32666707901468d33196951c064faa

    SHA256

    f15f2c02a0521de30e8fe83acf7771ff18f6bd75aa89723e377f9020d88433e1

    SHA512

    cc03db5d60a443f0c47146008c99970c50a9fd27c33181d0124e35d54d781e5d514892127b42ae459840074df01889a0b034c54b22fd3a3dee643ebcf286f85b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e24ef738aab894b7ce88a8599600ebbe

    SHA1

    d21cfafcf9256058dc8de60880811d4d678f470f

    SHA256

    08afbcf355a373e1a513bc1ff063d464e0f146c70f34be3c73e1115d7fbbe25a

    SHA512

    c6aa9aec0303796f2733a52816401461204b7386b76d39195e6309d00bc2e8cceb07cfb602912f254899ad4d9be31b14c02a7db487696526bc78b51ce01aabbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db38b67086e5b30053b03b43fa9d1cfe

    SHA1

    3919cf7e3fb5f4303daa94fc497895c5d8bd7ec4

    SHA256

    20d5097e57fda6a604b1cf0da70ea6bc9159646319f5622132a6f13583582f3f

    SHA512

    effca7214bdae4aa68c8b1c9d05c55b2a8f9740cd358787d6d4aab9400b45425d5317f1c09fbf3565df9f00fe8f8ec4eab48fe27190aff2337edc7fc155e2f58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    272ebb870ae81af83ff6031e91a5f697

    SHA1

    79274564df240199b8ab584798ca0b5ecda5b86a

    SHA256

    44c1495484ad8cc526d8c1d086fc9a5abfcfd2aea14ee2867124be0ee61e5a3b

    SHA512

    0103a99ab8a0d297d72cccaccbe03fffe7dfa685b36d296658d0661895c0f607154a01f7e60c6e6601d73841b725db84979814b8f58b4d117287b62f8e7d141e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8905d879d2357646f6a9d6019fa328b5

    SHA1

    d3a5ac20b8f28444cbb08d1f0763e6d273c687de

    SHA256

    dccb3e39a8af752619bd327aca903c6bd5cea36ea4b1f5a0395bd4093f9542cd

    SHA512

    b40412552e71fa02c41ff753588d72946164e637e330b6f3a9bbdc3b85d7e1f4712fe200eec3e247195e7f285340ee7e9642efd72060103e0f6199d22856271a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3620468392eff1b5030601a013f9e9d3

    SHA1

    4cc0c477cfa6888f2e7321b4c4beecefbc6394fe

    SHA256

    50dc54b03c097418dcadd75377f655c89aa2cd7d7730889f6e2a4953f913b653

    SHA512

    44472adeff5d72b1aacaa826f093f13fe7998bc134cd405031fdd76345635e392a6565e5a570d97785a2288d9d0ce591f1f9afab6dd79e38fadd752b1d696dd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3df9a0a6d778aa72416d2fcf31e1ffb4

    SHA1

    6538b9c693553c3e56ab279fb3850826c0d2e907

    SHA256

    ab7a642fc1a5fb9db7e09260a372b2c3dba3887ce20f58bf1eb647ef74ea74b5

    SHA512

    edba80ac5f68be86d348711eb37433747c44c656af07aea42ced1aa98856bdb449500fc2d64ed0940199f740e84d5cab9da797a5ef804bbffcb3633fc8ae42e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cb70015d44fee1f2e390163db50418a

    SHA1

    8eb663883987abb34a1eed57cf1d025cceea4a69

    SHA256

    77835fe0e907d85b75213ac1461efe8cb5765e2ea6f951d5eec23d71f8f1ed0f

    SHA512

    602aadf14edcb17a99299414e0e179718f334a1e48265a63062a14aa05c0c8e75b485fba821f8bb45e14d7335e0183e71b83025ec07cbd28eda338406bbb3789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adbf15b2ab8c65b0fe0fd020c6376b48

    SHA1

    6a495bad6e6b102cbaaae4e5a280a7bdc3391d5d

    SHA256

    8617407d814be10504e73176bd72af27d096c8ec34e68b4fb66bc61083f673ef

    SHA512

    b724169e8eff6b163236d1070163535104ee02785f25804d5052c8ae4c7446846f92c16377db0fb26cdb167000746d2857a496bae9fed5a9cb3b671560b88bfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef20857bae30d34ee6a5dcc4cfbc77fb

    SHA1

    0de6d7a9beaa0fe5d8ed68236319b08fc27b42b3

    SHA256

    3b08f2ab71b87486cf65a0ecc126dcccc1fd12f8be2602b14d7e89703a36ee9d

    SHA512

    941513e2cb77a4a82caed20f85df4dc4fbc4f69626ee8ab74fd743e3612719c54de8aa1bb3752f32b579354796a62d8931ec4121dcdaba52e15608eb1293f7c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10418f40660239fcdabd00223a697a4a

    SHA1

    6bcc4da2908c14af1426c67e05d61eb21f121d0b

    SHA256

    fdbcc50792acbad07b81368eb63a846eb4dde213cdd671d112a48b90f678ce6e

    SHA512

    a4680eeea0a70ef17da772d3e0729221eb95e0e4db9bf108dbd0b1f9f6243b924245a43749b4c47cac8a5dc01f5db18472ceefbe5faddb7be481f2c4b9ab229e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eeea87358b4070e371d51108be51f174

    SHA1

    28bc1e9a7461c88ccdc6bb9564c5b9f555edf6a2

    SHA256

    9a0fcfff82aa850d05997e2de33dbde6afb4444dd6942c7537056677c3c24aad

    SHA512

    f3235849e26f97a8c37f117f490e3606dd9ccd74f9aaca70c059407ddb93fd0aaaaedeb9b39dfea99a964522b0972d3ff54c96c3a9f8ab8887ea06cfbbf43387

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc7c0aa84721848834509568abdfd799

    SHA1

    d15a9f80137042b223133e1540f0a503dd0ae3c6

    SHA256

    10a28aadd408cd445999179be500f7250373a933dae5734ed1d18d3e8ca05099

    SHA512

    d3187a01380b07369c5ab6b96abb0688cea99de902c9dcdda648fabbe1835cd5f958935435e4b98e6f8d0208eb0e024ffb2942d90bdc11d36cb04716a94d182c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d747e7e0b7d0abfcd88676c344e6548

    SHA1

    0a8ff10adb3c14a4d4bde3b628a4f1c9fd5bf2a7

    SHA256

    0ecbcc1e538ee748eccf3bb8811331c49fe2f65e59815001734d6116cf5ae3f1

    SHA512

    3357a10b0ef6c8247a9359d9c11da01eda8e8a13f3ba505da9aec23ec3c02edf011555c9d6aa103e0be144fd0f6c26352191db3aaf4528d6c18eac83a4ccf9d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    db3a7149c40ff0fbfff6a79550b8951e

    SHA1

    2fe19f478fceb5a3dfa27707c7527e4770a7e1ac

    SHA256

    320cb58acc1f0bb2255e70cf5dcc8f3c8b78fbdec1dc9311b92ef1288b69b9f7

    SHA512

    896e1c40a57b1c13af68d0c1c0688a835062e29d01698be48e57470573a2a5a68dc1a80b9cd7f4ddb9b36a569c4f808e372a03b781ba5b0431efb9b37f7babe1

  • C:\Users\Admin\AppData\Local\Temp\Cab2906.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2957.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a