Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 11:09

General

  • Target

    8404293a307335114cf80f4fd46cbb6c_JaffaCakes118.html

  • Size

    39KB

  • MD5

    8404293a307335114cf80f4fd46cbb6c

  • SHA1

    c87895c7a31d4dbc2492ad139bae4d4c43c27b9b

  • SHA256

    15b77ea895f8c8c60dbe29502b0a1a21aa8d4301fd3d2cc2d809f717d6c64df8

  • SHA512

    cae18b48f9813232154e908149a4ca935a70690794a9aaa76aed3058016d3c8264816fde0fbb6f41b2ea23ef79692db7c890c84607d188d7d8d2990d4ae90570

  • SSDEEP

    768:SET1h8vzC8C7C1C9CKCNCmugbBAaeAe2F7wqee0G6ZEnf1ynH9H7CUnFebM:SET1h8vzd4AO9wHugeAe2F7wqee0DZEc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8404293a307335114cf80f4fd46cbb6c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1780

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          914d49603fef8347aa37cd6c02340044

          SHA1

          0c65c2815e80889dcfb0815c8a9d138b2b27ebc3

          SHA256

          5ceb0f69479b17e9c3b836a020207fb6764b0e2c516d87aecda8827ce5efd03a

          SHA512

          462a2371c4e700efb5fbc4476c8d2c455209fcd0d95e224382089a5cdf19c81a559ad69fb94c330637126029378946e0a179259155236c26d2c9fb70902dc590

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ff9d0ad0b30a15595f5b1afb159a5e14

          SHA1

          92fc7c47f87395b160d9877e2da0c2c8944fdd7b

          SHA256

          125490c8f661605b9726ac2a25fa0ce5e671ccde69202f6370d32c1ade72cff5

          SHA512

          36cf15174858f4df8446fc404f52d43826fd19e553c7e1db969ff6ae47c2c9709972e24735daec0d5d05d856c23769a875db2f26fb34b5f2d6732f1ba3b43641

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f4292dcf5423262c25472a7cdc969960

          SHA1

          0f7721b57fa9ea206b041931f10e4eb8845b23ae

          SHA256

          21d667aef56a4578444f06f7fdb8c77f5762c6714fca5ba24677a46f26824e17

          SHA512

          0a7c367a7ce6fd4e0a3fe07d8662996636c2efec9d100dd9f5ddce59c4aead829f2908aa7875bedb1d72471f9a95e738aaa4879e83b06e8b19e4e3a99a1112dd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b23a18fe5fa7080c81ee156f2a992648

          SHA1

          680d951e9548b1a47e1f613bf1ebe3e8011fa277

          SHA256

          de9deabd5b23aa6ea4900f7f5d9cbcea2b82f3f52d065ee4d6edbab163884118

          SHA512

          33c2a36ad1b123f35def676e36c61bcaf0575a94467d89aff6649666b818170fb36938a4ebc87c60827b8820af7ee5a71b31f15af88e0d65f01d8552a7132c86

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          20a5b16bb05f601c8e8ad2fe8370287d

          SHA1

          16d67a2347fc368605a8b91f9d7b14e68f919b2a

          SHA256

          d740651359c37bc4179f649f27c5a23632be97f723d4bf8b468274e5caedc17c

          SHA512

          058c07c51cf65aa738f327da8a1db046f87ed4f395e09abb2da8be5e743c6e07c879295a05bba54ca42f9258bf391268a6367550f5136a8c4daac45831d435d5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46c9fc9395272a17566cf8e2b4de29f8

          SHA1

          731224cbfdf63e725e3bef6ae1f2b10ddf42ec8d

          SHA256

          397866ab886bce97868f749aa719b9532fbe9d682c963ace25b2151313110160

          SHA512

          23e917bc687b0dc308a5ee2e54d4953e4e4fbd5d620b86cb9cd141d6f0d0cec3e5fa63a674af1158d8123fc35660611e8588283dc2bf3159db3e674de749fa29

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0f4ac30ced464a83ae6a7f7533ff0900

          SHA1

          e1ae2c853ee029727419b6a7450b8a8384cec04a

          SHA256

          5722a4fcfacccfb0e961cab233e12ead3b7019ad6ae82d7098c1b6bd6b6dcbb5

          SHA512

          06ecca1741ee6884c555910c1bc29c396423f2d74858b73b9af06479e2e2b79e63ef0187eeed0f812e1aecde81632b8fe54412dbdb476b61bc3717bc251fbbb3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          358ea3b3bff35d204404b31d0479d901

          SHA1

          c668b6dc5ecaf171459831e1db28a7e9715297b2

          SHA256

          bf91521bdadf41ee17b8eb00d83def6b686f94fe1d983ce86c3c101c87682500

          SHA512

          1ad6dafcfe6f9020839bf2377ee6d537f3cac65bd8184fd18abde96331d69731775446182bc7b2e1daaccfca527d6a23bcd30519737acb6767af629b550b21d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          da95d535773161f50133b6b71cb0bafc

          SHA1

          2505ff82305d11f89090afc57b11c4f5ae430917

          SHA256

          90764686db5945e6b0ba1af0896fc3d96c832e0d54a5d800cb9b08fb2eb3ba1c

          SHA512

          ddccfb4d3fe7eef6642216c5b62174901880c07fe2a2da18cb05ab29193af23a46062ef6b3c980d08df1db2c504a4bbe45bb59ff26b6ae9a49d071c5f617540e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b880da5c9fb9ed8aa8013060f318a8dd

          SHA1

          1c598bba959faac2a673adfb7950ddf201a12f66

          SHA256

          52d9470fcf954ae8f605afc6ecbdab80d4f38d3183e5a756c12d0251866fc843

          SHA512

          6f58bc79b7963e549306bd7fb423862a1cdc6cfaf1c6db951447d07b19c03f206853f12acd6f4211e4cd45c3806e0188fe0a3176832e093a53c372d2e42b96db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d2d38359a6683c327f2fde2ad80067c4

          SHA1

          0fbd0317f118fd62d48fd8926b7e9c2c65cdd27a

          SHA256

          560a9a684681ecd9c13f35631f9f3238b603261686bd63c00285eb32530c6507

          SHA512

          fd031fac901a8b69066d79d023a41eb6e6ad40167ed671dc23324a3af0954e657623391a067ea0ed6c1686cd69813b1f88ce02c5b5f88e6689c9217f78624363

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dcb46f1e7816392291283d1bb2b9e498

          SHA1

          ac7e4fb067608e66c83e8f08d9f57586fc6fb4b5

          SHA256

          e8f4d1e6c3d3d2d0dd06ef7dcf34fa4e609838ce390fbb0e2625e65755d6d72b

          SHA512

          e0d67c504a504ced9b300a025e17d0dc27b5204112b5cbe2b02261cb3163ec90ce5f125c9721e8c64ff0a01fd4f7208a195629210d35d16d0eb4a255b0226ebb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4293c4511b1a78e78b3735861dfd62ad

          SHA1

          4114e8452cb050377273a705ed6db4651ed37010

          SHA256

          8bd226d215c5ead7701de2debf36422679652c07e7057be8ea2c45b6b614388a

          SHA512

          70b3c19f98e683a12db1898656355fb08573b1c5dd3b32836c15e8fea57dc8f7976375625ff4a25bd33f301706296cfa34a94e394867312d8b638a50ab090e0f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4157aee40ce485ff4ec3b1fd63074a9b

          SHA1

          7da7a9706bd98c406660365b5bc444dd1f52ec81

          SHA256

          0622e5727c9256f783cebc01336b0822c29d3dfda767788e570b6667c506e005

          SHA512

          e122d9e642c6e3eed47ccfd21554b4f3b5f6300ca7de0e6d25d19bd53dcbd51f12ae385e7c659d56d7b5a5577c5e90efe581899317ef8747ec54494762937b48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          909b2e08609ce856b612c637b9c066b9

          SHA1

          ec06810eab8586c876af8c19cdea6be54754f069

          SHA256

          0045b5d3b0facbafc2c0298de594a555d214e15b0ee72924cc75c07424fb23d9

          SHA512

          733a422c0e0cdaa49b011baaaa1c87879fc9aa7f42b6d13cedea152c22604d6ac39a779a2aeb45855cce501225cf88cb5d7ee954b90ecef034d90f8eafdef999

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f5330dbd8e90fedc3013a41bac383c40

          SHA1

          ef0843ec47acb50a80aaa155b46c4a5b73a7720d

          SHA256

          9051990d2037ac710b6e3240688beb81aa3c3e33896b3a819cb0e272a7de809a

          SHA512

          9d8b2a2e9f5473143ae80de74387552805f4baed5cf5f41c4aca82c9eb383eb2c39f1928c3be09c71ff323d9d33180eeb2be0b5732167671b60964ab8b861a58

        • C:\Users\Admin\AppData\Local\Temp\Cab2AC8.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar4CBB.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

        • C:\Users\Admin\AppData\Local\Temp\Tar5117.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b