Analysis

  • max time kernel
    137s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27-05-2024 00:59

General

  • Target

    776527c4fa856a9c2a225f0ce7fbd50c_JaffaCakes118.html

  • Size

    140KB

  • MD5

    776527c4fa856a9c2a225f0ce7fbd50c

  • SHA1

    a6ebe7bf852d55fae17e0a6b95f6df8056510792

  • SHA256

    68b6ca7f175565ec649ad7725215495c0aab47ba67d37de42d16ae57b64d6c9e

  • SHA512

    4939999d150b744b425618fb37761e0517b8280c135fd0bcd041f98996184cbcd51fa73c6daf95b74e5088bf55ab3f42fc5c564c14075c7ef855d349027a5989

  • SSDEEP

    1536:SUpP6zt6K6ZlIHyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:SU1mtc8HyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\776527c4fa856a9c2a225f0ce7fbd50c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd598e705438e8723f565ec061a2429f

    SHA1

    4ff70ae950a54fdbe1da7394fb1dd880d408cf25

    SHA256

    0f50d1b68390b66c736c84247590f57095288afc18f1032ab76ae2e4b27cb8bc

    SHA512

    772aa5bc6023c488b229d30f4da8d9a7190e5cf6caaf4335d3ca616f922d8b517ab583b215af8dbde55164f2c44de59dec292535fa1d1af8268cfc937654ec48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f43b99bc03ee9af26ab44d3d8facfd15

    SHA1

    449dfc5a9c5cd377d6971b66be5e05ac79f47901

    SHA256

    325ce08c8583923f9f1fe78a1f7bf12cbedee472d8aaf6643ba8af0fbd48781d

    SHA512

    6efa09028ecf36a231e45bd9aaf91f385cb8ac32afa309ecc440497ebdf80155746d88d4891658852f0666d6a40e271ccf2be44dece17eef531db9551fd963d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f1075a23e3ed9628a1a2c0c29ea1e0d

    SHA1

    04dcd20f828d7147941c21bef505bae00417bbdf

    SHA256

    b0107129ede7fc2985649228d74742c738c0708bdd706ce4c8085070dd56fbc6

    SHA512

    91f0705be42397e0407f2a7fab8540ef29bac3aedc195875bea0bd65860c4d83754c7d78cf23582f8cd8689ce24806cb5c19a4c80bcab637453d2f907784f514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea4ee483caf3b67d73fb0b53907f3445

    SHA1

    a5d2d3d0b604907fa956ba6f2debfa8bfd201d1e

    SHA256

    1bf1fba33c4ae05e53eb45e052d33bd3d4bde7ccf786792d47181f680b928ae0

    SHA512

    fa8758f49fbd989444ac4481f4fdba538ee72de3755235c6ecb93bf6107f6f979c56225cc9927f4e3e212ed34fd39dffe7c52e0e5a24ce45a86404b7dc616984

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de869e8792439d944ca65b6ed836d294

    SHA1

    f52e99321196d93d3a4eb716bc0526bcdc817926

    SHA256

    3c2e6d479f7e56f092d053c0336f29bc2e1c1d1c375ab8fa944522db4e484bea

    SHA512

    9094c3a473a7688eb3b76f90d4f514cf17750ab965546861cf82721151f29e6b3073b10e29370e121dd0c7b1208985bfb4e9d0b1d145f1d3c985a1c1ef3acd69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41c5b99824dad50f2847cbde18e46713

    SHA1

    d944b6b6781facb6adec3fc5a40a61ab446da00d

    SHA256

    d2cf0e200f571ad38b9aa6383127ab86262399dcb22bb1b4adb8544aa9db1b71

    SHA512

    6969b1462e8412ea9b3c160c80bf7ee64958d690782d13e2dfd782025dff0eb4f877367410022f83a4d7a89264c89b40e4258acf4d5735f8fb0a521207eb7268

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11d58770f93ae2ea2ed1a3d0bd9c1c64

    SHA1

    98de4e20ddf81f70777462ef1cdf4626c8978a9f

    SHA256

    34938da23e214a774dcbdba933ea9ee60fe19be4124a3cdde7af6447bfd37f96

    SHA512

    54698c269572be856867885aefa7fdac44a25f9bd4403a9910e1576ea68c9059ab8f0c4e56a0cfda885887f9c8ae280e24fcf3eca6f29a5616af59401645ddf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    828547d0d25aa55412497612bdd301f1

    SHA1

    ea774341a5ddf658e915220f127bbdc6f4990453

    SHA256

    206f8f67bb7801e650aedf59042910f1608019f52fcdedac8c16ea1fa1c44efc

    SHA512

    b032f657a8cef1131d197b2c204dcba069f4b74402a9440e38881257d3d368121657551c0cf53e989caf27a8394492656434637a7b94b0648a638f3b918c6935

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5ef1380bd5477ec05f1ea8de4ea5bac

    SHA1

    0cbdccf41a5170eb47a616666f0f6d8c5d142387

    SHA256

    97356cc157bab42713e5f52faedf7e0ea9a487ac5fde833392cc8b6e1e868abb

    SHA512

    f71b617d5f90aaf27a1f22120b2bd3018af11162e5849c462b37ec017692ce85d034dac0ecbfbfcb451aa6b63ba7f8cf55867f6a9858dae84ab4ce31b9693a99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f661b511325a0240d6ddefb485a4e015

    SHA1

    f89ee36075198a0c4b76b5ef47b6777d1d2dca6c

    SHA256

    113b1b423a0b71c6dbab7f9d690c149378a7d2de4e882431c7677f59a5d73e31

    SHA512

    2eee10ac0339eeac2621ae430911e7976ea70855c7db4bcc653295f71087db326602d11b7c7e3c657ef26d1116940bc4acff70891e48a3e2ab23824da632ffea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05cb2df7c05d9224b19609062f938108

    SHA1

    8b6ad5c37560ea938502e3ba2f271473367fa0ea

    SHA256

    af9bf11ee7470b1e862ffed443506c591181f6bfaf1d2d25e7c9265558c4d486

    SHA512

    14740ade043107f394232cccc3f7f797757770663bc98a92e604025db91bf81eaec83b8f755fc49752ce13277e282473da493938cd07f9e9bc200f974e54927b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    704636a0bb5359a90499227fd41835af

    SHA1

    952dbce2994bc83d286950d45a5c6b2834ee5436

    SHA256

    dbc8dccd16b77510ceb540011535d552fe8fc420363c1f2cbd43f2d3d1333c50

    SHA512

    794ba438b57216f89d3157389a174f39b090b62ae53ce8afbae21f7a1f99a7f6f06d403e2ba3c3a7eb99c71c1341489b601773ef4426eaa65c3986914cd99006

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b05ddd38cfab3cc9157527b80b2f457

    SHA1

    27cf2497c41ef7f789f8bf45ddc454f2182336b2

    SHA256

    0e6511358d3851d9579ae2ab62cee0d88f88e304bf7d72d60bf0ef9db8033455

    SHA512

    a71653cd55b38f49418c3de09099eedccc7d54b93eff7da416959b4d69661cd19f6b3d79d0b2f13300417539a65dbe182a00c0f0f227335bd5e63d2bccd3d2db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94a910f2d1c956d0c8f52f9ab473c778

    SHA1

    65b45a9a25f4913dfd0120b689e58e097d6a8a7d

    SHA256

    4cf69669f4e1348dd78cd19935c938660846cbb7b240cde849a182a77eac6136

    SHA512

    cc9c49be2dd1108075023e8eec9c74cf9f306c049eb463f1f9d24eb2c6ec13bc13179ff857a171584dd5d5dc6a2d29a381b94aed68d459928fd4d03757ec22db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67abd4ffa66787b15f59f9f16f82cd57

    SHA1

    bc68a9e3901532a319378587b452dfc7cb59917d

    SHA256

    f021223a4d0c3681a3b61ef9f35b2e14099775bbe1e8a874f8451020fc8afa09

    SHA512

    717fd046de11e2f6b4e33d5968ad3161a36ba8898c0aec56dc6f0b54eb7c7ea0904faeb11a3043b30cda22128697109e94a7d290a55e7d70932ff4a082979f3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    455f2c0aa2f74076f05e6b52664c31d8

    SHA1

    5091a9c9ae9e0670cf2b4d58b673e148389af246

    SHA256

    8511a1960301cc6484e2454d4845f9283c5a9a9e15dfd538bd8fa44ac66d0f22

    SHA512

    c7239e9dc657d113b0751d4c8bfc6bc44ccf3a5e5a2a295721a0c2b0da59adcbe9142c058b841bb2834a9fd8658c634478fc4c14f0cec78943bb298dda2826cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2deb13150450334f6f4274e7cc38fcac

    SHA1

    2869d9a5bf989a851112cdc61404496fc35a7321

    SHA256

    c8edb31fd55d57ede4b74f4104441df340b27be27bc61bb8da81abb9fc765726

    SHA512

    5a7e3ebeec632f882fe2156e366681d5d2dcd48193de84bab4377d7245d4ea2c5df4317de367b6a6f018c263d24f485a317bbcb1e5c55fdc5fff70a46913ca0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a37eb98fde010942f12c1501e06c4a62

    SHA1

    7de52f30e69d7127979cc9caf9688592cf852828

    SHA256

    46558c9d9fbded3fe7937be64a7b6a277205e6309a81969100fc260ed0e990e0

    SHA512

    c52c69c500ec8fb1fdb4f0bad8d47cd1ef4e10ac1d59d013bdef530831089a9d054c5c6571d30d4c202ca4fae947480839a909f0d83362a642578a7d138e1ce7

  • C:\Users\Admin\AppData\Local\Temp\Cab1788.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar17E9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a