Analysis

  • max time kernel
    117s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 08:24

General

  • Target

    7880e3144960db5715fac6728c0a31c1_JaffaCakes118.html

  • Size

    12KB

  • MD5

    7880e3144960db5715fac6728c0a31c1

  • SHA1

    8a5fe1eec1466cb2e92cdb43a55886179a92383a

  • SHA256

    cf5f2916beee93ee8eaa4dde2dc9f52c64fd710df5a3fdb5bf340e60dfbecc48

  • SHA512

    2c3d0796eae4f8966d992c851f2ef7024f2ea982ab60ecfe7534904be72e558ab98300dd0436481183197944ccde016a0e23479bd9f0200f98988083c9204ff3

  • SSDEEP

    192:Hl7vFZ7viLDgasJdboxqVL3sbfcMH4ySSKUcMtg4yQGUcMl4yJbwUcMC4yL8nt/I:ZfqXwdj3oSS5CQDEgne4a1nL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7880e3144960db5715fac6728c0a31c1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2092

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          85ce8ec2bddbe67cbd1e18633c010131

          SHA1

          312125cbc1828d8eb4c8b7a0c154a8834c297bd7

          SHA256

          1adecc66fb5eeacef21aadfd5cd865ba0124fe77750df05002dc45f43f88d11c

          SHA512

          e8424a33653d8c51bdb0c4b63733a64f61579ac019aac21ef091c521356b82cfbb4454921d9848bc169c9f535140a69f438e774eb5416548c4ccea1963624bdf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c2e84676f5ed6bd9ed4af9d20a382033

          SHA1

          2fdbd74c0159f7b933b6e727ad68adf583ff2d3d

          SHA256

          bef602a9e616442efd641e42e3c82345dfe529543d611ec19c3b2c29a9273def

          SHA512

          e303649c4a3e673bf27e890b6ec40e9af43c822631ed4ab0291332ff7147b203ae3013de30c8b1f074dccbebcdee5fd132ffda4ca73d8c80cea5d2a5ae027ec3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4078574996ddaa147aed821d059ede9f

          SHA1

          b0789aa3e503b638fd0f32e89fbed30a90012e48

          SHA256

          5ca9a51e72c9b0791dfd4fa01980c4c267036ee1fafb86ce010f3046dbf6b20e

          SHA512

          1eae9e9cb3eee69a73c8bd11c758b66bad95140673a890a6b85540c8a5eb4ac523a5838a2e55fe66c8b0f30c014817b88321ca3f140ede2112bfb6467d772dce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3ac126a72f038b501539cdef740e5c99

          SHA1

          2fc472aef82c631d38f4ebf4237ed4bebbc5ec42

          SHA256

          9dcbb29b63fb64ffe41b557296f26b6b1626cd5e37a14b4d9bc230439a161154

          SHA512

          d8ce76e64efa7c2f4382f9d14067257464e7bdc990360f71a998d4aa7ef9ceeabcf2afdea285155a0283f9ab570646337f2146b40b5285fd5d779783c363ef7e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dcbd8ff0ea61bdebdbe120bc03329d11

          SHA1

          f510e07ea0d22b3fcb703fd3e49857c0a2390a80

          SHA256

          0bb33244c3d0f81e2316fc4c9a5a5b7af40f732c9fcdeca9293f9e858bac2a93

          SHA512

          398b061c678a441bbf1b32389f38b854acd483323ba57ea6bd146f1505adf1155617fe14e26c42de80bd76451fef7e8aa0f67bf71062cfac52842b3c4aed145c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          13a303e89cd0dd6bd9e6b0bb58095aac

          SHA1

          5bb814cd7abdd5c1495514dd56a567184f427d37

          SHA256

          3188fa307e8dacea0072b9411eef248b8ebc79dabc1ff4372e0d996a62ee06ea

          SHA512

          b3ce2dda5cf19a051348404a8e46911fc7a9c878a4949ddf295f18169ddd67ddeb37c5ba59786a1d32607678401e8b52b333aac6c0b318cac9533bf38d65a0df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee15ff3c7f883fa133ec1c982bab56b8

          SHA1

          a811f484cf0a981fc40be4f946600115380006bd

          SHA256

          af5842db7db3ad7669d35a41b966f79b526f3516411d97120da361857248260c

          SHA512

          ed2bdde499502c480e69045cfc29e9595e384915ddad858a8444721ac40fa8aa04ca627b8f3b052a32e06de0ce1fc7503c8b5170d6aef55c653ecbb63e06339e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1064aeb0da5e0cce629d1c047080229d

          SHA1

          bee9587ddc11dc6aaa99e61e2a60fdcb3c2fa58f

          SHA256

          25803463d97436ec3c57262ab1ef764e2d27177dfafbf9927c2ecf1a64db17e8

          SHA512

          4c60b08750997b3c11a63fd30bf91e2272300e5030e7ea58aa931ab18ca4abcd88eb6149607aca8d63b9f4b0fcdcf8e5c467fe6755ca192d0d2f2bb3457fe335

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          402c1c975a1a00556d9be563b34de028

          SHA1

          4f51049dba53133da14a84df94b121985ded756f

          SHA256

          716272812a2bd54942cfe672ad84e203c5721e35a0db4a12a3cf90eaec88b93d

          SHA512

          9c3d65130885a976a6f7d2550688a2e141b060b86ccf2698a68339e6a7c2478bc58329374712acdf1da4562e1a075268840cf8ae0f582ceca335446e9d915af4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6a74af999e5c84d156e323f9afa93d91

          SHA1

          1e34e9b30ac6cb64faf5d14170a7943c7ff03b8c

          SHA256

          6a9847071a8a0cf95b258da95ac8d4a45d9110e5499b2da7119665e8da6e10a1

          SHA512

          7e9c5dedd0961df933a9e7f9de5450f82844fdd84fb7fc0d7b8863b088accdfd4492b7c7e33eea299691e0b77f6e6879d13076dc0827e479cd2941aec31c43b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9adcdfdebf514494cf66b907d3578024

          SHA1

          024d29782be6da7bac1f41c951255a4be8efeec2

          SHA256

          e690bc74696a793ce22bfcfab56bde4df2ebfb25eafc2ae552d1c5c7b42c235c

          SHA512

          cd3c7ab16aac3aecd60b7dbd0777c4ee8270bd7716c5e8042bf0f1af0c3afdf351ef7ed70e09a119f9d64951a06c23290e7e6e6141710034f15a0446c466b50c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2309ffbc094afe1ef5e19d8bc0608207

          SHA1

          f4298636187f255a068596e541f5cc26d67be6e2

          SHA256

          49cf41a95f6c461fb541067b39369bebb02fafd981bb4cf6d144b66c6cfa5ce9

          SHA512

          358e3ef741178105975065a0c8db9fabe17ca527e95225a2aa7764fd7167bcd5a05f7f7069cd43f72b86720f64410d2230e86a8e30987ba52f10c6b44c164676

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5754dfe6098aab330e070f7560cb4efa

          SHA1

          8af252ee3ce0f418235c62bd91da747b021871e2

          SHA256

          556eb3bf2d2238f0712abedf260faa74514bc610cca7e563f22e83cb1983f5a6

          SHA512

          8ada12151e02409b03786c5c8e3137424692aad3bb2a8633fe434165b897976a55c09e9147c3e94c482e504d0d546f855563274eb1ead99146379cc3db35b860

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4063b77dcc7c5219fedf54d0f394286b

          SHA1

          92920c37431e5373faf97f139cb83938b12b72d5

          SHA256

          829feeeb7a797d35b308f54a0fb93e0f792e58a976c96fc648551f3d351e5033

          SHA512

          cce6e6b63d4ce3dcfc6231a4c4be700e61bf9a7eed785386dbb428809440488ced6ff6d92845e67dc8ae14643715cd2d8843256fc09483640283dd32fc4c3b93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3df03c10cfa7bac85ef4a3e25a2cadbd

          SHA1

          870b65042504c5cfe9f94e6e866a1fcdf62753fa

          SHA256

          5332a510eb371c89abdf3f8d0b9e9571f03f2b94174a30a48a21247e5db89313

          SHA512

          a3df1d6a03440c30b8841d81410147f4b28d0a73f466e376e5361baec7d93be3e9cd6ef1408d239f3264f21f39c65e07c655e2221dfb1f5de6a4e9123fdab56d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          202e8d19e08c134f008158a10f6e6e67

          SHA1

          dac586bc8790ba037e959a41c4082a78683447a2

          SHA256

          ef00a14f7e3ccde4ed00259b2ff11df0161c79668b49e2a58b90b8f4b4ea12f1

          SHA512

          68e0985b1ddf248cd7421ce4bf4150476bbd1588db21cebd167202958df7661274fa4d2327c49e6d5e1542249d154fe4486c0e90a71c682d647ac3f2ffce3c9e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          44d96a5ae23a4cb4c577170543c971e8

          SHA1

          d55dda2e617c7aa62ddb692e64ed6905fbad7fae

          SHA256

          5b64b0053fbcb8744b53140220cb34b70b09a66b7c4d85f8bcbaa265b75f44fa

          SHA512

          96683f1bfc4aac92eb4b43587510b0dbd2df790ad18211c1c523db773c38f038f1c21e5725d15acab0bfe23993ad82f0e59e36368bb27af298f46ec57d42d8e2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cb3721a9fd0c6477ca6c5226f3000475

          SHA1

          25caf460182b5e53660a2d28498d8bc31386dbb0

          SHA256

          691c7f63c730d17b422c0067fb543d2259d18d900c7f5ab374a0a8096acf997e

          SHA512

          a4e262ff4e5e1eaab9d09ff139d3c303f17eec910352285452b4aedafca90c8e87a4d16624e9c3f20911bd5f6965070bd4098a1da6a9b811268c9ad7273b7096

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b6ea0e5ff501e548d890b0284f18cf2d

          SHA1

          72da4bf74508b7906fac751234af8f3fb6c6c3b1

          SHA256

          ba3846af1de77dcf5a40fb3ff9bc4a1b6ab0b23c99bf6438b7df8419449b59d8

          SHA512

          b894a512c1460c80747e0237026d83f85ce85aab5482dba16bd9625ce61d618c68e54b920287919c9e0cdede340ba5c1bb93237e10d8576062d7702251e4520a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          99c0c8eed00b9da54c6ed1014e5518ec

          SHA1

          1bc8570d243fb7c480c93cf8cec1e91177432ae0

          SHA256

          5899b7c06c70cd0a98d7f5aef10e5c1fcf615ba7b810bcf1f08186991b0f2252

          SHA512

          cb238bdda7b4074704785c338210cffe1d0808b879871c1b687c994e770522b6efd5775a2530dbd177587a25b2a521e932f3ca0e92cfde62e50f8ae209af910f

        • C:\Users\Admin\AppData\Local\Temp\Cab45F9.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar464A.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a