Analysis

  • max time kernel
    150s
  • max time network
    157s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 20:03

General

  • Target

    8b9c8d88ec4e6f06d72e2e8feb399de5_JaffaCakes118.html

  • Size

    26KB

  • MD5

    8b9c8d88ec4e6f06d72e2e8feb399de5

  • SHA1

    cefaf38ccebc2568c03cfbc7f7993267b9bc6b3e

  • SHA256

    080d8149fc32a5c40bd70241ab12f6d4050d05fe43b6c059bcc125149ebed154

  • SHA512

    be7e69944f0a4a2406f25b96dfe04fc5d5ec4afd80733593d773badc81171c6db07ba842f55298e0611a902c8730fd2fc417f84074e7475e8b7530e69dcc8dcd

  • SSDEEP

    192:uqP/v3b5nNynQjxn5Q/onQieTNnknQOkEntECnQTbnNnQfCJVevo7NtuFo+NzQ41:nzQ/Mygcp9Z4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b9c8d88ec4e6f06d72e2e8feb399de5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          84d99be0514b84f1582c7ec5ac9dff28

          SHA1

          eb91f48bf23bddb07b8a26e0ac9d9174d30caa8d

          SHA256

          553446022ed9deb3abbe93a79156f1aa0ead891d49dad955748552e6f583067d

          SHA512

          120b7daaf9e4a72e8ef994a6b537aaa251e122976bef45d51899446ad195933c39f1d21d0dc24fd350f081f88931a99df4ab1824aab964531d0b7d138d9cc5fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          51a91f0d65ab6ba2065ba799a7dff2b8

          SHA1

          8fce848e6f18e1e89af07d79fc6dd2343729f520

          SHA256

          c8e7ab118a1b4106fbc1e8cfd40ab0a7883b8171322d64b6ae47e5a03c5f318a

          SHA512

          4474a169f270514e9bf44a1f39d2b16a0b13819a7d5537475246f023738a45bbcd3f6881d6cac029d17bcd66e8b5506666008221bad52a531fc5103519ca2955

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d0861514d6e0e635d31558597701f210

          SHA1

          1e5fec9f111d2bbabb66b0133fb99417f64ada78

          SHA256

          ae61dbdc2ac59310ea7364d92f74d13bd6569b023276a12a52462ab2090002ca

          SHA512

          603386f21e206103b4bf84aa6cdd2e7effde29a6c320fcb1aba33f35e2f4d5058774141824fd637bae087ca80da5c15754c1bcf428f2b2a022146de1d79dcb38

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          91b671cd02d25b82c6fd7c68734543fe

          SHA1

          2c472987ee880e5378f9ca12051451f71ff2420f

          SHA256

          ac4f45a41b75214f3a918b0b59ca9cb3fb568a63611524ba454810b6859b5335

          SHA512

          527e6322b1340d6ca733e5be5b317c905fe2174109c9ca0f8db0c8af033eeb9b331b3f2a947bd5f43d9e5329e9787c1ea5618cfa506c62b0366ed58fb4c907c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          51a0108bdad5ddf46a70592fa7b50849

          SHA1

          2ac38ca2199df4fdcf9b3c418875031fdc746dab

          SHA256

          581f30c6840d1c52e05c0b66a690b2bd2705e63a828b929d057eca0d48fa674d

          SHA512

          07d2be0309a6717d1ebe77fa1c6086a616c195cd8b85278a84f2e0d4ad1ee873953f3728c14a93c6c4d974b6512f65161e94e0c493405266f89095a16c031d3a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9f1f1b5df9a37c964fe87a22725ba3c1

          SHA1

          6dae8aa6de847bfde4cdf62ac9ce3f3c0460f69c

          SHA256

          d38d16cfda8f7ad4924b2dd2cf6be6e8ae69f4e02d8fa089afcb26c0cb610cac

          SHA512

          dd1ebb8e7c4a3a997947109807af63431b05f5f07e8b2e57d410359477e00692ec990c53dd474deb7e9ca31a491d32e6fda8f30c4c8ceb7b1c148f6b5572235a

        • C:\Users\Admin\AppData\Local\Temp\Cab8DFE.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar8F0F.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b