Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 18:25

General

  • Target

    87eaac7a389e30ef0955389fe27e1c7a_JaffaCakes118.html

  • Size

    460KB

  • MD5

    87eaac7a389e30ef0955389fe27e1c7a

  • SHA1

    4a04dc190d310b6f6efc45185a6e094b0cf207a6

  • SHA256

    d66022a83cc8c288ce41eee6a3c39e9179190178f8ae33ee3a993e3d9e7eeb56

  • SHA512

    8d2f8c6fab16ef307bfd5576d0073e6fb7d4caa78e29aab5d101b616b3bae0cb8e7f293dd69bafef744bd9ead94d1617e44aa49348c79d566a8a835491914223

  • SSDEEP

    6144:SCsMYod+X3oI+YUsMYod+X3oI+YqsMYod+X3oI+YLsMYod+X3oI+YQ:75d+X3U5d+X3q5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\87eaac7a389e30ef0955389fe27e1c7a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1964
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1964 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2956

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          582d32902d12c98672fd0e16dfbb258b

          SHA1

          63c3fd86c1cdad584b2c16954cf2ff25fd210d9d

          SHA256

          d85ade06775c5ac40827b6f78004ee5500bfc8315e9d71d8798c4b994ca2f9f4

          SHA512

          33dea46cac441c4c53b8053c2891902b293e1e3d87343e9e2fd2fed448ff1da2f6c9883f8ecaaa8bb9145d5603dc744fd4aa2a4c433f75adba10c981ffcf1c15

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6e2cf52855d070c85869039f7ac85be5

          SHA1

          6cfbabbb0d329b289d82788877cf7653dea5d595

          SHA256

          c381d3874f06c57ece9897153bb7cd2aa0e05474e82d9a0a3b59a7d2fc5ec0bf

          SHA512

          8a3f2ae3cb5762e1b5c6ffe62b7bdf8e0d545b088e75410689d7d60597bef1a28ad4c11c48598c62c013fd08b153f287ff3f44d20405a3aa1c088225790a55ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          91af6be28b6c5a8907a0130e180c2972

          SHA1

          d511265ff6c72132be498499ae000b55526d0c72

          SHA256

          d86fb3541435bac606c4452c6a3596fd1c05ee770706db8c89635105bdb36f61

          SHA512

          18333e2367a679d4f64722750552e853c0465b6ff6fb62b8f6249c247685f17d47ecdefd1e3d0d9e51081ecd210576be96af9cd928c3366c477c4e7a331f7852

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          66ce9b71c98818548baee117cfb2a912

          SHA1

          05f77d719f3e6b799c93fa5b2f61b45508355af1

          SHA256

          2e570d1636ca8ac5311431b895602da8ece56b08a1b0e06fc69aff52a0929630

          SHA512

          8b4370799ba0a41cf12c001a80739b1a4c7b52183149f1deac9f905684c6486816d1dbea8e62a51ada35961c194c13a0ad8dcaeddec7a26151816b7b7efe9160

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          66db2dad0a46b2eeb34e1e7270f50a0d

          SHA1

          109bcc419f9d9e6bcd5eb6103d4eabef8447db74

          SHA256

          6032fe1402dfa93010a91e100866782af610dc8578587f4f36b16cd10eedd292

          SHA512

          7043cb3ae3faf2e5136b258c765cada2da1c9c09e8ffe8ee890fb5fd0ef890a3fbfaac30d422610461a2676b9feb61167159c23407c5298d088530d9aa82c5d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cac0a6464f21bde0a11ca55f2eb38e8e

          SHA1

          df3eae265da797cef440ad2e10c363ccea0902d4

          SHA256

          b2b15f69004a4455aad8eab7928e2e6336c860506e9a6542dc5148f4d697be73

          SHA512

          eee06cc4098cef005ba0be3a105b7bde5dfadea5c782b367de138f7ac99fa46d7a08c32e26b56fffc95b535eb9340ecba2448cc6f0d64962a9ec927c04912beb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7f68d0b1664929fa3c06033fccf24171

          SHA1

          ddf3e07831f8a0cfbe92b3792e937b6a8326dac7

          SHA256

          deadb4b7223b0e25c66c9ca861c8a7849c661e0492ac5eb8de52b8a8f42c1c4f

          SHA512

          932fb81a26d9c14323cb0afceabf46e00691e08fad704b6da1bad008a8bd7b8eb1070749e960581a4fe0db2003c2b3c9e766e4b6e853ed91f1dd892ef08f2a4b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a10e393684be1cb7254f9a3fc441d470

          SHA1

          06a25577a314022fa0f6b700da0518468f79e5e4

          SHA256

          138b329c03e1d376b1db535a0c11b1c3e90325449e7965a6e5d3726a91d6d9ba

          SHA512

          418c2b03b705983bbb36284d71eb85cbbdfbc86adb1e26c17b773ef98bcd3128b51e87fd8909bef05c224b14f1712c22b74edd4206ed8b69a16dd7a3130aa8b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f9ee206ac68afaeb1100648535119785

          SHA1

          366b8112cc9f0bdbed8bb0a279f064872d48c9a8

          SHA256

          46efe2f22fe00d197e3790345b1d7e32125273dacc47bcead8694640c668a04d

          SHA512

          87367c6dd715f62cbede25b23be4c1edbc8bd8d399f556821595c6fe2eeecc757fa071016361e45ebac5867d8217ca87a99c3644c1fc1abdc4d71020adec9e8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4f15aaec6e09f9497f0111a953298081

          SHA1

          4fb3aeef190450f78b4a7dc112abc997e9c673ca

          SHA256

          21d11b98bf84809b2523966d6f347c5075533c0cfc8eab106bab1293b5ee5d15

          SHA512

          39e8f18491be112675c009f6cca4811626c404969856405477ad29abc422cb42b7752151a63f6865ddedb89af406744fa51b0a8898e4bc7f11a67db7122ca4ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1eb33377b78c2912444a468e44f48bd3

          SHA1

          2d1a00af6b7fc16ad0685bfd3eda00b959f0453a

          SHA256

          a45b6ef139dea38fedce3bb01db367f519ac1af7aa9eff1ce2d7c63be0e18133

          SHA512

          9aca9aa3ee5333bd073f2db0d07641339a82d61feb03fb1ac5b5220ebcde67f7c90b8693b5311af23a4a7793a9b05eed9f0cc506d32703ff5bcce5502b46e320

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a18836cbd75c113749845d415f9ab970

          SHA1

          69dfb84071fc34899f15822bf1d4fc9e94c58242

          SHA256

          1f4c0990b1caed2c60537c72bd0622307e1c9f2152bab8d8801478db6f5afc9f

          SHA512

          7797eb5504cd21bd4d6af9281d3b4218ceee1fb25ac0011bb13082b33802b1366946b473a3174bf699b00bcaac9e7e4c7826761bb40168f9ac0d867c7388d8e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f0d60b31ea2b00e7722ffdda993f94ed

          SHA1

          7e1ab0ecba291da8bcbdabafb296da9f0934fb6c

          SHA256

          5961a9269854d5ef2bb586f60ae733f977098dc85339648d2b389a0d06afeae7

          SHA512

          857295edd372f8f8dfce5564335f6f41a634a00701f4a56892be804d4ae452315813add979df09c50e1e97152c7ff8a9cf7ed06bf75705dc40f027fee83a5813

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ea167f92d81aa63df69165d403d106fe

          SHA1

          0ab6fe1325753cbec04e705c0a6c4e0f7ec80f14

          SHA256

          5a4e3a8b824fb2c2ef6df403f21acf1efd2ac5107aaf78ddebb766d0797d0b1f

          SHA512

          3b902dfe64293b47eeae645a63dd039862e55318f9055d610aa0bf3b77acc9b70e70bea57e7cbedb1c9cebb6571d072ac0dceabdb5cb979ad86a81bfc9b8736c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          50b506da5c4f101a0a98351df2b13065

          SHA1

          4ae61fd3f1d0efc735d85af1c2e4cb96cc0bde95

          SHA256

          37db9a8b4a538aab1c6b13638126b8e1a8e96600aec01e8b04745406ba0e80a6

          SHA512

          83852f6c120d636b03b2f9d3060fdae352a417d861382d9b5ce0e3d8d557f7f7a82c9c43c620996c4247fea052334d9e9efc5b3e20cda6832f4da30e1bb4064e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          90255588b093248e5f16f5d32bec625e

          SHA1

          b37f060f251c9e80873bbec8f3552770d9fe78c5

          SHA256

          2d889adfc84cf448ceae7eec59d4ba8bd8ebf93eeb2bd27c5b66ad6bf837e093

          SHA512

          848b2f9588edc02f9b4f9055667f37ad0317e172743a770c490513e084d763a7f5a013976117146785237d5d258350d16d3333be5dfcbd0207a578f733c04bdb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a966855126c69da07c89831037fd0cdb

          SHA1

          9bd6d9aff97e965a7e5a0f0569fd70f29b669ea6

          SHA256

          1c359d81d16102f6dacf7419ded20977f3ccba09bd89d809a2d86b93ce99956b

          SHA512

          8bd3aeef160c8af3f2d69f69c916f84477d15b92459fd786071c2424e9726542cd014e3cec8334d3719b0543f8585419c43df974e9170df3c641b645b68cfae2

        • C:\Users\Admin\AppData\Local\Temp\Cab57D2.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar58B5.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b