Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 23:21

General

  • Target

    8540f154e45a035a6f76705820f89ea8_JaffaCakes118.html

  • Size

    120KB

  • MD5

    8540f154e45a035a6f76705820f89ea8

  • SHA1

    eb6fac7cc8a8c42c8fb387b82aef206b51cfa7e1

  • SHA256

    0c669b59e03d731b5d7a18100d1fa6511f43ada88c9d0b70bc825b684f4dd923

  • SHA512

    a105a85aede04f15e89816c4e598d5abbbc4b90a28195fe6955af351862db5e7841b8a6370483ddc8309bf121f24788f18b70a86c43a0832abe8cecc811f9e39

  • SSDEEP

    1536:Sg4yHbbRDyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:S6DyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8540f154e45a035a6f76705820f89ea8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2896

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6022edc5c2ba953fb33c7df435270fc

    SHA1

    54ac7775ab11fdcf488660961fb98882bd7a8b0a

    SHA256

    9dfdd0096a1bcb8501fa466a80c499445bdb9e9a136c5bc489a7269b34b2239a

    SHA512

    8e10ac7afbcbc1dce2653d811ce221ba23c7a68ba8e177ca45c257a6e30c5d46f4d9042469f4ea4f8d77c6da4d4da6f668c916ddf0d4ea9b7d370cd386aa20b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    294568bd7f43a0abcf400dabf78d22b9

    SHA1

    1b780da2d8f9e3e6fdce778c30b6975079d9dcaa

    SHA256

    2de02d6bbbc4797143d280b23ba0da661f6120d32c85ab83dd5ab941b51f2504

    SHA512

    c50efbda0646c0171de815b094f124ec1cf181cf0a082a8eb6c8440c80cd9e7be77dbe628beb517c79451f9261f6809ed849bfa161a3f5605bc91961a15b7a4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9374dcc93351f0c51899a4fb0b263946

    SHA1

    a41bd0b64b59d487749ad6e255e6e5ccf114beeb

    SHA256

    7e5d2f7ccb13aa1909531cfdc3956790a26dc1e3756ed4b9fe8ea153d9a9ccb9

    SHA512

    e85f3577de8f5a0c0e3e49fdca9ed94db8ce27cfa7be9c10e7d1b132a70c970e1aa19f15d92306849402dda13fbca9fdbc2c7eb5a9ba13860aa765846366c5ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a1745fff3a60a492d1e12e2b82126aa

    SHA1

    984547571bd2d3bbb2ca3237f240e1afb5c7dd18

    SHA256

    2a4ad182f4172dba5a7e79a1b092899ab019806969ec42bbc6c8d45c89bb5250

    SHA512

    d05cbc6547963fc612d3740776160fd6f9912758b9960d0fd14ea3eeab38ab116a9edbf8f3b1ed68e47dd8370c9897940a060569824b8e1b6ed5cfbcc5e8c41e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c531d0fc2e78afc8f4c19f5472b7339

    SHA1

    ac2ec961c0db88de9fd7289bf21d414456b71a2e

    SHA256

    edfb0beb6e05e08b9f8a1e05f598170e1c9629278a9c96ee657a30adbe30f593

    SHA512

    2ae813f00a89ac3897a52ae43af500c455efe4fa06044c63d4b07402ea8b90d32eb5d1bd859165e32aa59037a5973694d7a5eda277213aa8302a5a8aed22da00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    039109da501a3e2698f8435a1ce137d1

    SHA1

    438c1a7c76d4537eaba4827a9fbcb8389b6e17a9

    SHA256

    4c5f5b45dce3c9028bbc7976a42cc7b21f7e88bd07b047016167ce926fffd847

    SHA512

    6d10fb3ab8ae0ccfb62bd89bc2771fc3bb5d19c5872f10800498cb6068638550a4d3451b66b827e7e99e495b59f9f14b2d43718e52d091af6fdc09abc451d3eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b5c638efa471cd2573f846c5a835d24

    SHA1

    e9e3c33958ae3ade98f28bd2dec4b504c538e940

    SHA256

    6a362b0d117d41f6f6c9bd34650e566914af6cd4184be5142ce9145521923f3a

    SHA512

    367a5f1ee3aed5001c5f4842e5dc326ec5e01bd69bf4a4f8702503068d2fcaaa28ff9a19a0e53dba19a682e8c974784236a9992653ca52ad4ed224a3452d1215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24f343aff181f9487766bb78b909fbe2

    SHA1

    80d054780f96859d8f0902836a0cf42da7f60a03

    SHA256

    1488671b253692e58e57b70ac4fc7c448ce861ae8446554acc8542c32ed28147

    SHA512

    dc911c32e76deb0cf57ff3f37c8208889ce8481da9efb42e0041775c83c50f7d9e3ac49bbe72bad95343f85755321269fc7d31a360fb6a7a486efce3b48ff208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a9ad805aa5eaf212e8b4383abea009d

    SHA1

    3e1a9d2ea9da687d00ab687d461b37a42ab18f71

    SHA256

    badc669ed02db72378693a53fe4db4f6666270830b433b5c756bda1d3c1c5ed2

    SHA512

    96d5d074fa2350080acb8581e6196c50165bfa15cc79d80630e886938b52bad751b0498169581a7f1d96fd804884d8b810f0cda75ed7bca7a8de99d56d5b15c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f3d105bd8dba1cb93fc39a99702484d

    SHA1

    6c75262982c7cc2ac58540fc56ac4165e2cb1a4e

    SHA256

    bd13ecceb12ab8ad2823bbda22c3385758ed0dca7c73ec341e71f787416a455d

    SHA512

    175ea40dc51fd2dcd73fd202c1379982b2768f689169281dc2a98396cbe95bbc1234a4c48de9144b43967bfa076aa8d78d16d4feafb33db861eb916e9394b1e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2aae7b9d896012d35b76c0256d121679

    SHA1

    999d8924f3540c427acfad0c4ecc17c61069a596

    SHA256

    302eab8b333e404aed2d1314b78478a583b5fd8b7e805d1955f746d5b4f5a802

    SHA512

    2c2e1e0b43aee8fe13c4f271183b3c9ceda4d2b3997f571ee41c2df5beb3d82a3c437e90edcb7596e7295407459bead9c195e5a7587e9f431762a668d256883b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0be755e59a8399174ca499f9ea2faf67

    SHA1

    05a57d6b025b77a64ec9b48d88939d63d603527c

    SHA256

    a5ff53e10b2bb94a0c7b9eb8fce39f5079000089ea919f09b4bf274ef710e45d

    SHA512

    57ba640fe4d98e410184b6cd3469b919014d401ce7b6870fb776c11ed17c587670bd869c6bee66c49920b8479ad8ec23edb1fe5568a7d198ac44a740b5a69771

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7713dcf3b788474bc3f29b55831ba97

    SHA1

    aeabb74e9daad0cded719dc82ff308391a0155f9

    SHA256

    ff70fdfddcf1dffc7a99463c92215425efda316177efee073d0f3515fc7dab54

    SHA512

    f7e07884a466b5609ed92596bdbb7947ebd16a9694af4b70ae9a378844b40adbe8834461f73b4abb09daa41cb416708015359ef4ba311c60d4351badbcdda210

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    388749d2540fe050a57055478998ae22

    SHA1

    5f3852485d35e790f5ccc04db3245d670f701ba0

    SHA256

    d47801790d7d4ec47d4ea775450cd5a553094e9480adacc496d14d3dc726a01a

    SHA512

    4c9e0490b76b082100f26e8b22f9e15e2739c2387c098ae0386d6c4056d620efad2440382335cdfbee34c318ddd608d94de9c7a8defaa9423bc12de7ce8e36e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df28009bbdba17a53a7cc727ef922da7

    SHA1

    6f54f5b92be279ef7ab7000aaa657a61254fb67d

    SHA256

    fdedfe7f1e3d2c3d14f89b3de3aa9daa4459e50735247fe2391412ad4879c3a5

    SHA512

    730426f24992bcf9628f004e601916ce614b5742830385ba2a0c3cf3af9e282c63041196a810080afcc401b275c9a1edbb2b484a5b11e3dc5c76ac788a32fb13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0a587d952ddd7c7b5368522c414757f

    SHA1

    d7d859fd73746083e86f762163bee648e5e61bb7

    SHA256

    4a62f8cf285defdbe256b6d0f9a91a94dc197f00f39bb85964661c2a82e94aa7

    SHA512

    45737fea4043673227739f4727276e2ff8048cffe618b7defb759af84cb64135b8da5033e0efcf71df70b429559e4fd6986d009f57ba8b9515e779fc15e12c53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e82f41edd4a049ea87813171721d3e2c

    SHA1

    300974593f2d66cd2f0696212cb9d5b7f4377922

    SHA256

    87a39c6ac4d89dc9ceb5c83c89188b6b9f1983475dd6850e715c44f8ef4f2fc5

    SHA512

    200d912744f03d3bdaa0655cad4ba5fdc8d91572d697c3671f4e9ba9b8339ef740cf3f1af9c0bc4d75be749f45b1f0827f5c61a8523972c257d2e8e3ea7c007b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd46b604394cbc5734f5137b409a82ed

    SHA1

    ea1be7beaceee1953ad8a27d79ae0e8718fe5fca

    SHA256

    639de0ab03c2caf943650e0a4d6bc6792dcf060af370d3f032e7ea2216ce7d07

    SHA512

    c36514c14e99768ad8036cb5e91a400ae008acadc1993b617a2cf9ee4274de524b112f018ecb0bdb51aea3a121ebb00bfb03032706da39f1960b7cb4559a8938

  • C:\Users\Admin\AppData\Local\Temp\Cab318D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab324C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3260.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b