Analysis

  • max time kernel
    138s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 01:03

General

  • Target

    8c66c8cd0c167fd83a1dfccb9fa31047_JaffaCakes118.html

  • Size

    150KB

  • MD5

    8c66c8cd0c167fd83a1dfccb9fa31047

  • SHA1

    d40b64af93446bb8ec1c69e414a6614f9872cb5a

  • SHA256

    6a2957cf343b65071df2dd9fed3bca33c5d11a98671c375c28b329b97a8fbf87

  • SHA512

    519be20e9ba1c22f8debe0bc855a41640fef941d8c11e53072173681250a612239c2a2a78169a6fe3690ca56c7996ffba9db058e91c32947d151113c0f9604de

  • SSDEEP

    1536:KB3sL2sTwY1YQYkNGFPt12OnQiQCNiL+OXGD93Hm11QuRZkusd1XpR1Ovn6CJHkM:MQuCs4Y4z5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c66c8cd0c167fd83a1dfccb9fa31047_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b5b8790fdc573567b66374a246df7916

          SHA1

          cc0cd7167f996b6367c600bd3d4d4d89763799ea

          SHA256

          38fb267a1de0546241a6caa41e18e8f8c097bc66ce8fdc785ef3d0e6fe19d775

          SHA512

          2a37f0e1b59eea3efa94fd214ffd1c044c946970fbe6e47173e86f3c41f384a582ded2e624c06acfac661f8aa6c2048827730b6a393638a02be6b65ec8b5ede5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c227f81c25c79e3bae0a49a612568109

          SHA1

          787cd4812abc25de7577b04e8405da04b30a7a0f

          SHA256

          be254dc1d5e3c470945c8fdcb001c45e8c8279c50ec24da7a2681fb5187c5fa4

          SHA512

          f4e8603014a9cd550023cf48d77309ea34c0122a759898951c2a7bf52ba285bb19fb72a79e6a48e4e43395c958147886eb73d49d630afab3a1d42d413df83916

        • C:\Users\Admin\AppData\Local\Temp\Tar31D2.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b