Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27-05-2024 18:11

General

  • Target

    7a0b57dc78ac266794ea1fe5d524916f_JaffaCakes118.html

  • Size

    565KB

  • MD5

    7a0b57dc78ac266794ea1fe5d524916f

  • SHA1

    a208da6793eff0f02c40baf6945e0cfb0ebd691c

  • SHA256

    b6d24999956a2c1c54ddae25228d930995a9321fbb2f2b417d9e7a6e6495560d

  • SHA512

    230ecbcf34534c3b4157fb4cd485893db6caf3d9d730876f3cfbb1fb755a05ed592fc1997420053ab96378551ebe5ddfd3f9d74443799748bd555a4b131f9ff9

  • SSDEEP

    6144:SOsMYod+X3oI+YusMYod+X3oI+YBsMYod+X3oI+YssMYod+X3oI+YpWsMYod+X3o:j5d+X365d+X3b5d+X3Q5d+X3r05d+X3o

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a0b57dc78ac266794ea1fe5d524916f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c97ee39852629c8f256de77ef5adf46

    SHA1

    3347c7e375ae5374775e6fbe1e5f52d34f8ee958

    SHA256

    c227d30751b1b0322635d7e0f9b6be9febce921ca71cc0b6d41c4f5ed52f0f96

    SHA512

    6f82b5390b4b5b2fe3cb9c80c75903e669f938eba765400c7c579516011de5d3828e1f6d283a019d380fc37a6ddceb3bd499d3d01eb09736c8a4eb2f2611e232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    757ec9be110ac3a15838f79f2c05f7b3

    SHA1

    a0217c167f821dacd3d10dd4353856952ad53df2

    SHA256

    cfd8c440f107ac073924fa8a7fcc20f7e9eb7cbd529340a0b7c6d0f972008560

    SHA512

    5fb4b6ed3a832ae74ac2734c8591febed2dbe06a376264dccc5f55d5b7cb0f1a51e8b0ab3bb33dd693a943d369fb440b1c5c5fbdf72a655833827ce48f279385

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a2a9e899dd597770b3f6087c32af636

    SHA1

    deac7adcf039cc58fd400a6e3c355e53a8d54d70

    SHA256

    2171ad89f5954086bcbbd9901bb8efc21401434be55e1aa8035c6e82f0be267e

    SHA512

    92f41c1348cdce589830490f153c1c73098df8f246da9fbb633ad88e4c166ce510101cf2baac0ff861b9093454e85211b2acb53a47f9ca8fb1bc66a0dbe6f7fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96af09afd1f374498068a7f8b5ab8138

    SHA1

    9bc73576f85b250937dfd2f2b0ca393cd8682c9c

    SHA256

    c510df28fbb7bc02952cdd76f128324e01f130f743779ea79de02e00fe4f55a6

    SHA512

    08111ff7a2b4367ae5ccecce53161a8abc8104951e17a58d4f729b04d9da95883a0439b40d215734f89c21ac40b524e1a1923940cff098dece4a71efacd85dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    131f36727a814256c5d3db32fd3eb492

    SHA1

    f431647a5f7f7e9ffd4b38ae68f35e8687dedb24

    SHA256

    9e8ebf7b636b2b8bf1cf47ae7d46b20d72c48b227ba3b5cf572c49798cc86831

    SHA512

    baf1e64279c4952e9c149fe9bd5f6fa20f1269476e7a903cdb359cdd495a2169c924a2c34886da265c7ac46c35c454ff10fadead48a9cd5db76165ace78b1416

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    668daf64d66d14470d952e6bc85de3cc

    SHA1

    d974ae1b63c49d26ef803a233eeb4dabfcd9941a

    SHA256

    e079e719adbe8fafad0350e92e39f03813318997116575f6619045d37dafc10d

    SHA512

    f3c294f7fb537851f3e5ba9224a8e47013561c9b2fe1b5a27b1961c343005db00c775548d6b3db665d2872521db2c37677e7c02990c8668e4799bed87753a938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1719c4ac9af0b9efa4db457de5916aff

    SHA1

    84fcb48ef2f03a724746c9fe24248b0847ef06c9

    SHA256

    e65fb904f968df0a150a6bdccc926637d912d14b4f9e7d07f502467b86e44b19

    SHA512

    a34cd84fa2c7a26a36781778c9cc3f863cbb6fd2b6bda15feccf389fff0002177a656585ae227ef9b23b55e41c510d46b821ea59cb44fa8252f2d71c544f1dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cc6561128b1dde9ae7e4644c6666da1

    SHA1

    4bd5be28c2df946c9127ea343061a5a2f0194994

    SHA256

    aaf2653c7c00d3aa8368bb4b479adb23e6f7a807c5f5cc99f281bba6c597ad14

    SHA512

    80fb52e07de62d51b8c464649200a22b553d8f4e72373545fd502452d31b0bc04dfc127c887fc50b8574662ef6ab6b799dcddcc118473f798c6f2274447fd142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a54dec2b6a72697eb89eeedf5cd4cb4

    SHA1

    69c09e141359301087b771d5daf37dd044e37158

    SHA256

    55e8b1c30f47d07bd13cb9647ef3d6203bc00bad58def420ef9914e1e9f22047

    SHA512

    523d9774d47f340aa7c57ed2b4ce8a89bd507b949847425e8237cf4d436b3c6fd0c57105295fd117c0d82a757afc7166552f85af7d11b5643f67b1ac31f49daf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2b92e6e00d8f1574a2ad66266aef8e9

    SHA1

    e2b569a337e684b21425a2881f75a96adc0f8d08

    SHA256

    116f4e97c059c0f980a28c85d9de2936b991943675657ed87c4b6f7028315e76

    SHA512

    c99bd51f325d5b760fabf6dd825b56dfdfaa79fc7be71e88ec1cb819c2ad5f9e991234d973d21bee6ef258173edfe0a84d59565bca6e876de32daeecff61f311

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c68f8936f7131ba3b02bda9d9afce045

    SHA1

    7f52accc661769302f76f74d270f5d17ff63f070

    SHA256

    780ef86eb1e83c850cc1f52d9c3fff37e4c429b11491fabfb3f6849b21a4744e

    SHA512

    742674e89132fdbfd8a688b2054f187cbf82000f7504e9e84366cddee25f868d9c47af9fae0472e017af12e1d19eb7068a8b510fcb79a8af19ab7d7febf6b68c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27c18780dacf8d3a9b8df2269e2c7277

    SHA1

    7081eb814a78ef5d73e4c03425cdba5f4b7e4db1

    SHA256

    5bf73d85cf25f44979ff67e2442707328e0c8d85fd189c42ced14b73ee86c870

    SHA512

    14035583ebad372d9c7739e7c298414ea0983f19e842fde2ef7c3348f22da41676585f6bbb2d2ea739dfdb8f44420865014bd48a73c3c47992659a8341b1bf49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a147e3feefe2296e2d2d63dbec76b52

    SHA1

    8fc7b478736b31d4470d7b24ec8b4dce37dc6040

    SHA256

    5e78d345576e09274cefb6b1aa1fc35880d3de94fe56306057ff4b1ff4a7c876

    SHA512

    228bf39848c9b8198771b36591b04ac8c679877373f26f78571aa4863615d875106e94147aea509d12582b1a53557395c2387fdc18225463a406552d3eceb2d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc76d9cd3c15663158e6bda51002c8e3

    SHA1

    5cf727ce4f5ba669275b576af4c4528b0dcac370

    SHA256

    3aa664bf324ec9a182e767b378b136e3b6975914ffdda52e41cdf9b8fcf2aa84

    SHA512

    02becdb1b1626d2e01cae59f777f480eb38756b6bf2614076934d693f0010f908e516599e515e70b0aa22d84854beaca2432d43ce34a8dc089ea2b85de3f9355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db7d9a982ca467e62476619e42c977eb

    SHA1

    4ce9263c04054aff70d2fae934bbab573a373b94

    SHA256

    cf6f6732d4d76e7e82b200d58d40418118351389c5edb7e7a589958a4a7938a9

    SHA512

    6a9cf87463cec22ad549d6d059de76bb1fa09f5ce217388457583157fe79801c620967306b3fbced05630acb39f31799df0cbb3af696f5eb6004bcc989b597c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    584072ce2a9d1f93813efc3ac7c4ea67

    SHA1

    95544acca9ab8cf11178270fca12f98e481d7331

    SHA256

    2f7a4acf3b451037db4cd5b8470097e18a24509b3376293b5f21ded0f2c01772

    SHA512

    d7b247900260511ee33f05a4277d54d2418c3776d54bda798b7c347643fc2599614eb643ee8221ec6fa23045916281c180138a44b85406304efa4188d709fe82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6b6e119d9259801602e69c3cc908f05

    SHA1

    f345840aa0feacffb68d95d79867257e97d4e5d8

    SHA256

    eae241cdca8aff7554e12b762fcbd37803f9a4c7166eb7be551f3ce92b60a7ed

    SHA512

    7ffb5314321b03738c8453fb88aa9868559e029af64f1e69f1bfd876d72a723e5dd742b994369fc0268c62cacf7fadd1a9dc5413e61f67943d85b20c1d45dbd8

  • C:\Users\Admin\AppData\Local\Temp\Cab3E0D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3E5E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a