Analysis

  • max time kernel
    141s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    27-05-2024 10:03

General

  • Target

    78c76b29146aa8eb4eaa6feec6b20d50_JaffaCakes118.html

  • Size

    139KB

  • MD5

    78c76b29146aa8eb4eaa6feec6b20d50

  • SHA1

    230b562d6b5ab656f3187c15cb7c01ef97ed2612

  • SHA256

    a0ce96014301400e71f3645cd4038703d2cf04a267030846ab76fd33aa89eb51

  • SHA512

    c6c5f97f8dc08907964e16c3c4a2e83c8002e3fd9388a6ece7175d414881e9269782be65f9b697ee87c2b90c8c28801d1ca8c38e4b62b91e7bbc2c829d41588e

  • SSDEEP

    1536:SbdWeBOy5luuyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SbZBOyauyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\78c76b29146aa8eb4eaa6feec6b20d50_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92ee54e2135240c18f5375e91866b3b1

    SHA1

    2c641c185fac649cee25dde7d5e057d9b40c2a7f

    SHA256

    68a426a98237ad7e87f66cc37ca41aa136ee95c77d090da7aff5b5f003ec7d63

    SHA512

    eacb96a14e5522597a491047e8a778d1928556b3c434638702c57176b0137ffd6f9c1862a3e7b5372f1e25c4c8b21c703fbdc78b33bdedb3f20b6ea166fcd5ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb4a2eb0252ba9157ead351960fc0667

    SHA1

    309f2b3da0c4e49a7b8c0e965160eb5e7fc90f7b

    SHA256

    4bf831679a1618b67e31bba45efe158e29f8540cb28af974457c7bfe64428d9f

    SHA512

    1ce17167d7af92f10afea555653ca363be801076e5c08f03373fd02bed7ca2658d4152ebe1172b9da3fa2f5c07d453eac971a100200453ab73e4cc9684fb2757

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d231205b21cde8827c5e6fc3ccbfdd38

    SHA1

    ed8edeac4f683908ebea5fb2da923585805c1ec6

    SHA256

    e1de53eca31cb144399bc96c0b7b5c2e9a22c897b7cf9d9c937efc598a979a4b

    SHA512

    3847ba6a947b973df22aef159a0306ad28c95e55e0127a16017e43f4d3333d40e55108a97f87c3409aae1ba750fcc1ebe5a587b51d89cbf19e9038c12cc2ee95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20cdb5d27c37d293f12a7905779dda01

    SHA1

    9b5ea97fad9871a9d433d9c47a8c85b7c03c76a5

    SHA256

    663631ed9eafffdfec17176e4598619affce253aa16aa4d24cf3014d80b1bf6c

    SHA512

    1db0bdfcc5dbd545df7146db577802b193742ce4c29a331fd294564eb502ba3a276e1789fa5f43ba753b89ec0768f93396282b56a97e54b48de3c2f832174ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5ecb37f79f29d70861976bc70390e40

    SHA1

    36509f8b9a8c00e8102b620e98a97d309ac82c2d

    SHA256

    4862579ffde9f5cb563a1cc2d9125b17099f356a37142033dc9f884aa24a6990

    SHA512

    72c845b25f92d13d5fadc04e79445667c3a8b832c08a0c6a5773bba4fcc5447e13f72c7eb78c5333b79b681822f311222d7f0c088e25d5133ecd36ef352c3671

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3de3410746851865ec1562114625b31d

    SHA1

    62563d8e82385cd740c3ba1f0f86c4d33946f3e8

    SHA256

    1277980b15e51c5b33d12cdd3e7763a290bebba68afc623a9771a72358100ba7

    SHA512

    f8fc2acf48a883c64918b7936fc3185ad5cb0b9e603a3d134023d3778d2666f07069db8f00613762396e03a10efba6f351c09b944858f64e98f9d54aa3723298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3658aa3b492c5630b76a7eb53c703a4

    SHA1

    14569225197df152ecd89fc64ef4eccacb311ed1

    SHA256

    dc45cd01e35b8c579babfb3b63a2b6aab96eb71aa9e5b2e5854aa18b1066f111

    SHA512

    bcc6571eacf496a4e3c771f610908a61052702ef4c6ebe2b230a2804c05f4cb8d4c5a2cb65be12dddbcafe46734c7e2470e8bbf6136c2fbfb5e0ad396410e2b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5bbc7b21e1addc1c0b8448eb6d71f53

    SHA1

    e4c7a154572a0752e477b187fa661313b2f319d7

    SHA256

    b3ac06145b0f06d476d0444f4c901c39475ebdbb84436a92bf74730bc4980d0e

    SHA512

    5255fd486f9cd3bf5900ddba91949f1a1216f7b2dabd3c949ab9f7299f175bd82e2998a2d1fa215ba59946c4df342d77efa837fcfc0b46056260bda9158f7af2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    615da16b40a276f5f5251534e102faf2

    SHA1

    cc09efb64d0991511f74e0e50ef890ad72169f35

    SHA256

    328cf931c0d157b9eeb20c5bedbf6a26728fcf7e19f749abdbc8ab8ebb64719c

    SHA512

    9b026c9eaea8474f61ff1e22aeac5190123e5ac039f20cf41301dd3fc7ec24f9610b21cfbad111ab65261676ed88adcb1a97710846a3d2467fb4ff0b49b604ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49dd2920bde86a04aa2e30dd6127f445

    SHA1

    48098ba282e9bfdf6fc4add1224347167a671d00

    SHA256

    0182dc5d6a9f7d7eddfdfdaa83f7c3c628c0035c10ab42489e3ec8f2f5e78923

    SHA512

    2ab7e8fb4c83f653cd9b4998836cc23c8ac05bf91a7ddd1aabae79a67e86e0fbae688c9167f2ff4265633162e871064bc63cd693aaec007211574f13a40378e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c6f8df0545b30f19ff9bb2e2e493c98

    SHA1

    aef8805564bc55708bb6663e48e4964828161437

    SHA256

    12fa0839b79dc2e5497128ecefb67346a4d3f867b54b84de30f6e268c0c5ff40

    SHA512

    c5628e80e8aa496bf4e9cc73fc89ac3b8be024d4e6713b0107e03862b490a9b67bba9727d8e05fc299fb3225a20ddfdd4d0529fe0b21f3b157ab3874e801d3ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cd33e555408df4cade4e448e6105f83

    SHA1

    0644ad38100eb651cb9ba0757ad294a7d0c3f0f0

    SHA256

    ffba0d9118ede4fdc9ca306616026006963b1115c6596d91fc4bec567ea07acb

    SHA512

    776e27a9b58cc53320f9cfcbfc09968308cc234a2959c0a5f8dfe6d1a612afa7543ac02ac7a8d1a5a719eace6532409e41eb28a1515b19727b6f454c1409d641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e96c826b2aa7da47071b4d54bb54659d

    SHA1

    7790c8d4b898b2e60755abc1bc1db3c4ec2573a6

    SHA256

    4a2d5a5e605ca430fcb6557e962b2f523ae2bdb6c232fb1f6de9597ebf3fd8ec

    SHA512

    564943355d6dec0e7638a4028828e797e4cf70848128ba1d71457e731003fdf8d41232165585f022480de726afc3c813d1acd0374d5985c0f31ec848eaf139b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e68a612ba5e8324e97f507be2525ada

    SHA1

    f667aaba410585f4686c25853529ce4ed376286a

    SHA256

    11abdb9e5e969916d018f62e04558a4da9671fe91b1609a999d36238515e402e

    SHA512

    9c7e4be25de2eaf912d79d2beb408edf90550f36d248e5907e757ef924e0e9dd9c1bada4b1c0af6260f67e5985141de51376408745217a3d1c630c032f284b64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65c60fed5ef62b7e5fc7443e4a5c6c13

    SHA1

    d7553252b85bda9b7a25c74b0b60f4b43f185542

    SHA256

    b3adb08af54fa52d4623e4969dbdfb02bfcf29c9b7af9c7220cae7b8c366d4d7

    SHA512

    c1711c9914969bd3ca4f18f3ea3db8d00d142405ccbb8e8f9f5350b924a6fa9bd6d886d3a7ea5d66fbe68af0cabbd1c28340cb13bb4d455121e5640dc26bb7fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aa10721be98f289ec5f5655fd5ee204

    SHA1

    d534be4d078e62fa813b0760f89463f33b4e9801

    SHA256

    ee9224a0bcb4fbf1352f5692e5ff9deb0e86197a1bfe723bddf694dcb5885c8d

    SHA512

    2e0e527272ee2094fde58e24cc5d673362ce48bdceda5897217d87bd45c163b4db5fad2bbe4de4dc38f36effd14777b6a51af1d34c27280f6b24d178e075a747

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84c4f2c9b4a1edbf61ed943391af668c

    SHA1

    09f9f54f218aa41720974a9918a60e771161e710

    SHA256

    36ad779241f7cd5a67b2785b160d402191612da6bd93341804c4005e90395748

    SHA512

    8959836c30f715e43bc83d30decef2246b70f13661223cabc12ca911b2e3f99c66013ef3e04c5c2e138273480643c78ea18fde81f83840b7e2c178e68ee08654

  • C:\Users\Admin\AppData\Local\Temp\Cab37C.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3EC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a