Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 21:24

General

  • Target

    9f9252810fb02c46c9662ec5f6c93ad1_JaffaCakes118.html

  • Size

    116KB

  • MD5

    9f9252810fb02c46c9662ec5f6c93ad1

  • SHA1

    cf9562f1108af544b978d2ed311f14de41618b7c

  • SHA256

    31419f8b667606561cddad1a70c832bc0a6eb2716b9022fd0f63c4163e21c8ce

  • SHA512

    12ffe8c074dbd5c0797e88953dc1d4b28709edd13e9c4eed33705ed8e74a6226d5e5576ef291951b9b5d2c30f31143666e4e72ed855febbfa4c42afc7ba98474

  • SSDEEP

    1536:SgUyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:SgUyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9f9252810fb02c46c9662ec5f6c93ad1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          edfed085422c7b50456de0c4f0ec5dc9

          SHA1

          409c2bacadc4c975c2fa9f3e075961240169f102

          SHA256

          0bf43b657f257305c5f653b2b1724a174506542644afddea623f268252bbadf7

          SHA512

          b3117dde59ace60805b8d15a4ebe385c7a243567a9cab108a2ba542af3aaf066443e400930a60171483afff47ef0c2dc5d7686368a8277a8539c106d1f2e1e8f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e619a3196c533e85572099b35e669bb3

          SHA1

          44dd7d2a9dffb38c4012032181b6773c3440d425

          SHA256

          feae28424b372dc7703f9c378dafcad4f6d012340769dd638d17b8f4a9d73d87

          SHA512

          7b83a5267be1057e8e424adc3f0be5ab4bfed087cab017eb12e806f98f04cf219d5d23a9527d924ab71b6294a2f230a11e27e981ec0344c0d2aecd82fec72110

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e498bf9ba8a23a3c6f38708eeb225215

          SHA1

          9415339925d0fa5425fb54b876f093607fcfb011

          SHA256

          0259cb34ba7de6918c296a0e362c770e26546ae4d5846fff1cf4772fb09ed705

          SHA512

          c62613f1011623c6e1061870af8b9561332fa2c0e78f91f26a1651af66518ca6173ae70756320193a4c050779a1c9b262eb791114b6618ebf09dcc0916358da5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          27a393189e6bc016a20f45bbc7329b5e

          SHA1

          1ba054a8ad8585fedfc74dc6ec41d3827722d2bc

          SHA256

          80325332bb7b96c2699abeb76d4032b4de47dc1162dcf7e15acfe84c787afb50

          SHA512

          cca9e2abe95492647ae590cae38336bde8341eb5bc29e09aa5612f0ff12fdbf84e7d8621af535ab51c0a97ea0ac9f40ff0f56ef5f9fe7a62798ff190ba1e87f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          48b139a6c2a838c85efb779e329b4e7f

          SHA1

          6a71dfc13763eb00ef26ae588433d3a692650d38

          SHA256

          be6c24e0af5cdba6e957aae0b2e5c768d39f4f21230dc0c5d193c5617d88059d

          SHA512

          4120acb2e8ac1388975bb2fbd9eb00b1a57881d743002c5bcf007ef77db5c70053277348b480237221e08871ae5d5cdbecae461031c88ee0e3074d72aa326414

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          20d85768ad4e96ffdcaeec86108034fc

          SHA1

          c7699d4c494e874cced4e899acf34f5e434d37c3

          SHA256

          870b4adfb729b5123a6805dec3bf008765165e256bbe29ce5196ae092d899f0f

          SHA512

          dde3bd6f13a38b832e0621153eb5cb5d9fab77d62f3aa15f29951a6de99c4736cc9ccc5ba59176cb04e8afc98af96fd7966a5fd1dacba537acfa8d30e538b707

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f20fbc312c8054246b2240f1611060fa

          SHA1

          a86f18f41ee4a1ab99e5a1172e2bd128e1d70532

          SHA256

          e078593ec0d6419720bbd0b7b9ab3efd737f69dab7c3b92211fc1d7f989a2cae

          SHA512

          74ed639b467f59a6666c7666f3a80244de4fc8f03911144360e9d637b148521d0d304c5b77a1fb89f5c96336b72afeab9d20720e1f7bc0ba8f40a22aed553205

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7aa7754582e4070e362864a92f03c55d

          SHA1

          e550d5487ebd53a30d44f510a233669f688349dc

          SHA256

          77c213e03a8f67be2f817c4e685ae73589d97fa6ef19c6cd31da96e45ddf588e

          SHA512

          9bd7b441c6f9957ab041ee637ed10db8eea23009727a6007bd657b6d28a58fd9e47ade994ba9e188deadd34ccd973fa56451c4373cc9dfbec869ffcb61ca4948

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7cc79b28a1328d1af96259547d5edd85

          SHA1

          f9ca11a9fdd8d5b8c4e1cfa9318f6513a607cd54

          SHA256

          a01d3ccad61322263658dcb41cc176d966419c078df2947544caf4cfb7efadf5

          SHA512

          9000296aa80e5cad04ce43b8a1d76cf31a726e6a7a36646d242bc86e662397c47ade7c9b6261833b78156832f1c698d77676023587ca7325b1bb36e926299246

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1cf1fdd4ddbb7001c657d559449b3d78

          SHA1

          e2a941683008a32984081beab085affdcacbbb7a

          SHA256

          5f518a9b789d05dbe8d5db4a0ccf8708bcd6c9bbf7c7a093cdea9b02c09c4aeb

          SHA512

          d6b2bffad9b9099d747a3ed9814c61d24aa591b0035a24a9436090de6f427774f7d1483ce935c837fc2105d3e97bf2520e2d4b0cac6609047f1cb2ff37188c5d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1b19977674fdc37b02553e55920690d0

          SHA1

          9a254bb3e231bc02667e0954dd7f710fd2416f16

          SHA256

          3b435c577cf991cfc83f8588621e08c8e9b20808fd015e5b2b75d84584f91a65

          SHA512

          4ccdf90cc925d48fff7e50730acc9e089424ace1bf0dfb5440369d17ebb5f0cf5ad44fd2e494965e116872b2319acbb3febffc9106fce492764d0d1bbadb4328

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c35db06a2751dcacc45d9dbea0314e05

          SHA1

          f979e4b7a47f950a066abb63ccd25c11dd8e2fc4

          SHA256

          d6d4dade346379cafbaa92f3cfa43fe00dac542347bf96fad14933fbe3ee879d

          SHA512

          206c1b790179acf2728b1a21a7a2fade27bb1cbf30d0e376f8517f761c403e24e2b791abcaeb6f559afb65a39cb301f31c523dbbe400b1b0efa0e475977e6a46

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          142c86d75480c48694980860a97605f2

          SHA1

          9f9dc353a17937c23b4899cfbcbf5cb3e0f47539

          SHA256

          9cb1dac1eb008a4f94e1bcbd6726199a407fbad3d884c2be8b4ab05521bd53bf

          SHA512

          383ca73aadede91aa5a34116e85dc467a301888f93b1d39f079d1743c5d084d038d88fe06a4125ddfb2b70ff4d0fde5810b261834e8e3ef613d33bc6d56435e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1e3063de3477f9c1a2c34f6b193d720b

          SHA1

          69fba18d2fdc5a518cba2a1c3632c50109879210

          SHA256

          f624c606421007e5905d65b6d6a4cfe6a36fe5b8d86f953a12e31979fb6fad4a

          SHA512

          2ea101927a0dd069f955ea84637bd97dc1ee0af5aaa73bcc88aae0c04ef228f694a930dfb0198298fcad4ac6873cbe4d460bc2f9e54d0c35849ca89cb45fcff0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          29dac9f882f3fe2c924ff3840ee57c25

          SHA1

          f5a082537e2cb3004f3ccec1d7631062a8cee738

          SHA256

          b63c09c9c32a24d92670cdc7c9b8a5f87f54b4f99d9a01e67008b11947a5e019

          SHA512

          ba6c1a33fb84cccd54b2e975405b0c76bc6cb90a295897f01747e537912d2b8d21cba1768420fe5f03f1998261965c169ff423c441203091f4fa7b34a3707009

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8e01057ed0f7c2ebeaac8eb850e8284d

          SHA1

          c9d1a518632ef662b95e124c8747314d249b2a63

          SHA256

          62ea0d6adce32308a69ef42124f1c10464903e316b6c58b8be10d97365f68344

          SHA512

          dff5e2a90bca899873d9deea0d8acd4e162f92ea77f59f039c261b74dc5380d5abd635c16f48c53b9d3a4c6a28b914e4145935999eef988b40052090a69392b8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4a625a1f6af0ac15023a92018239335b

          SHA1

          ab691099129fe8a7469d2143b4057fb02229ad97

          SHA256

          82b0a428f1f8f1e8e577535d69a17dcd79ed08467c5baa66e72682440f112efd

          SHA512

          b92fadf7ceeca35449babd77c5696b965fca5afa7d759aa4b4a7cec5e81c7aa7f3957a34421bfa027e1123f1071339585a234bb886c483b9a2d9f41968063c07

        • C:\Users\Admin\AppData\Local\Temp\Cab3BCB.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3CEB.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b