Analysis

  • max time kernel
    140s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 00:52

General

  • Target

    8c6050573c64088bcb9dd79f3889cce8_JaffaCakes118.html

  • Size

    16KB

  • MD5

    8c6050573c64088bcb9dd79f3889cce8

  • SHA1

    441bb2d986427e1966c37ddcd8712f55d6c0aba4

  • SHA256

    7a2130c6a961310620e4eac01e6102c8887c733f248be086e0be4e18a3c735b2

  • SHA512

    3d18faaaf5ee7e583f2f834234d8dd5113d479b0aa232abc881c319177078260fdebec865e04df17b7edb274e094245b3e1ba9f592d82de33f804b9eb191d5ab

  • SSDEEP

    384:UqYDLY9XYmquF54788r/M5r3WadQS3VpMzCgq8154O1aRgc19Or1USIkCXYyoTKg:U1Y9XYm9F54788r/M5r3WadQS3VpMzCc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c6050573c64088bcb9dd79f3889cce8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2812

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          696a6fb062a256737e111dec6238b85f

          SHA1

          cf394b735516355b41b147a6c12297a70373d3e8

          SHA256

          d9fe99f5199a8bf5aff2c609495a56ebc74425d56e11a9e2cfaae29a38471859

          SHA512

          d14e4fefd4bba6aa8b74aadd77113426090b0870d86f2e112796f969269094037d9caa405bb29b0d5db102b37fe34108a3680abfc8f756dfe0bd5bfcbf850bb4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e954cb1f3bfd849723256c626dc603d4

          SHA1

          55d98771ba881e96caeef4bab6f581a7a35031f3

          SHA256

          378f92f62d92261a2f88c59c5e1b12ea643105a53fab71cbfcb64408b761d96c

          SHA512

          cb1507ad9f50c7c0fb3e1d9218a2db978d594a7578b5d5c183a6fc99231e636c8d0ba35179fe71a110019c8a44e50d23de274b41cd71df66e1ede6449a717821

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ab968e3a4715d8d2365ed2141274b14a

          SHA1

          b96921e26532d07238185411d5d4690a048f84f4

          SHA256

          7489c5a070bbcf475d988792be2ff61bc503c1f9fabce11c314731c0c9bbe059

          SHA512

          80b81ab64186fc5679bbad3275f717b151c1ad64e5a9d5c6376f4678fdcff0680829691a3db84f16615306643fe128f390a04b4980a6f98da7c47d8d2bc6c7a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ba373905287175a347480d8efc8255c2

          SHA1

          76581c34e3bf2135582bdc3e5ca26e8aaaf5bdd4

          SHA256

          691943513b6a3da3e3bddc049cd57e89f8055a0177dd49e23e79a33116d066e0

          SHA512

          5b2d1318dee18db57b8b41ea763a861ff5090fb2adaeafda8ec97a16f5e4053acf9ac8545fb8f7c97acd2909db26d50e61039551ff527c1a49391f74cc75eebe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0a3ca5a3f0e2ea4c587894d5d83fae72

          SHA1

          cbbe36eec8eaea8df2faebba35873e6e548fdd16

          SHA256

          8567d83b518ce852c14ceffb3a12647334ccc6c437f0d0803f05b86bac8be6d9

          SHA512

          08fe0494c6e965ad924b6f4193ae84cb9d1bd0ceab09ade6d0c54ac5d4ba3525f5da244844296a9df3a77f3af8746a6253502c21f65dad84661c569f4803a372

        • C:\Users\Admin\AppData\Local\Temp\Cab3A07.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar4A82.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b