Analysis

  • max time kernel
    119s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 15:30

General

  • Target

    877c1eff0406f3aa3fc14c8293ab9f83_JaffaCakes118.html

  • Size

    4KB

  • MD5

    877c1eff0406f3aa3fc14c8293ab9f83

  • SHA1

    cdc7bf00e2c3dc94408ac97593377be4fb95cdd1

  • SHA256

    9ab7cebd7ad2bf013d90e3851ee8d49622e3c9347cc0037abd36f4bc592c0773

  • SHA512

    0bad08e21c5b803f5bdec38463c951bbe97d7c63c244d3a4b435a0f836c2fea5a6fc4a496e7e642773d2d196ae0693d661a0b14ce7983d1142c895d2ae638640

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8opJqoO0d:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\877c1eff0406f3aa3fc14c8293ab9f83_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1764
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1764 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2228

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5d529f6466eb71a6f35fbf642eb45b11

          SHA1

          b89d01921626d2af01454975ba97845fe16c9c77

          SHA256

          2f005bf39a35b266048eb15b1b039f2821b8fc28936ac4f5b2f7b29fbc520e18

          SHA512

          1c6578ac14faa770d2fca42de73ceb43ee18c91dbc7aa3e52830ac3c112a83ba70ff4206422a1c3cdd36f116339b20656c1561846dc5b993e691eeb121f9bdfc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          085faa04e471dcc0615875201476906c

          SHA1

          5fa10c0e7760e67382db73395a286d9e039e40f6

          SHA256

          4b7d77cdbf907b678f5a28098ef50cfd4b5ad5fdd8055a17c74b47132c3a6116

          SHA512

          35a2034f7f9e7ca4c6b4301830fe67eb31a9af2350250c207c56452cd9005e8d6f5c5a0077216ed06ce360339366ef84907f961d3175f328d63a652a740d9f1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          71c397e868054ec6cb784c94226a736b

          SHA1

          a21079e06301c075c7b35c4e6fb1e91d4de2ca7a

          SHA256

          c867590792b15c821966c94812efd0e09e82b5fa81029c6ca5d72c1966f224e7

          SHA512

          ea3a3c160e01e74f1af9cd70c45404daed6dcd3f4414c5843cc27db455f3561946e469b5affc3dcab09668fa79b4220f263d576bfd55dc9c5c6660ff7e6d313b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a48e6d1cb5700bb4c746c721e5bdcaf9

          SHA1

          dc052e4adf8b96c3e0b3ed378283b8a73536ea08

          SHA256

          5261732e6c76242ffe6e7b085c7a1b6ecffbd344b0cbe539289789e4eb033ddd

          SHA512

          55af66ec1f464b7f748d3d83b814bd1fb345d5a43d3240d12345f5d0256f48774a115eb94949071f214988d30d2739a4477df8bfb437e404c1e9a337b63ef8a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          69e8232a6a00f36ce49c42fb64bbf489

          SHA1

          f47bd745ca33d1e08a965288c2ad564431b8de5c

          SHA256

          1124cb8d53d4c0529ec5d75c7635f075ab723d4ee91f48a085ff80721cc1a5e4

          SHA512

          bbe3cbadef005cf137e155bece6062e8e905ed4f88f3d14071f9b09ca363a31d9182c48847c48ea9a2cbbf8b8e538698f7b8ad53282e0c63a51e5ee865b6a47d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e9d4283f6f645a5faba66b24339867fd

          SHA1

          c987c27daf1931103fe7518dacffe1c07f13f1bb

          SHA256

          1d2b6c0af286ca80359da9b498b86721e9eef96bd708c4b637e96746f62e68ac

          SHA512

          fec629c72efa277ce44e19146cbad49696bbc2fc95c08d2e496562101fad295554458b0405a7a57b5c653a8d573a1df99f32e11c293606c6ee0664e469c449c0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bc0dfe612ea66cec905cfc11d3dfc17b

          SHA1

          794d6196ed4e2e8a6fe24babd63727041820964f

          SHA256

          cf80fae42087253aa6568f687b9f80071c2fc70c2bfaa58d5e825dcd829a3fc4

          SHA512

          8e5219e7a1d183a1cbec967524306d2a855f86c4afa0232e65e4a1a541f6cde4570140bcb530c0f7a4aa7dcc8b9f62bf0c2f0f8f9cba0bd970de142d60d34478

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5e87203c075e55c613251aa02019cb50

          SHA1

          187aae8bafb40339b0b35cab1325414f843f4d3f

          SHA256

          afc2559e25301df855b5e61ac163caebbbe86e475770cccf074459e2643cc023

          SHA512

          fe3ffa4bf28bb342f769360963a88dcc8182b603eba44658711f27ea8989c12a859d498429b152ab2a73725f6dedfbdcef5d1c8e59240b190802ed923acdaf9e

        • C:\Users\Admin\AppData\Local\Temp\Cab1C69.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2594.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b