Analysis

  • max time kernel
    143s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 09:37

General

  • Target

    a0304aada2feb1245b383939395333fc_JaffaCakes118.html

  • Size

    139KB

  • MD5

    a0304aada2feb1245b383939395333fc

  • SHA1

    2269efc57bcb963e2afdfb1f0932d5a044ada927

  • SHA256

    b21e7ea95da58a1b687914f28005a6aa8b5029b0d34e30527d8d458b3ac94a13

  • SHA512

    ac1269558e1b5a12abf094c4ae681c5344be2fef3a32540c5156003fd458a83b1beb7a5e19e34531acf2667957253fed9bfe5de5e4959026b46ce6566257ca90

  • SSDEEP

    1536:SodXkRpVC1lAOO7yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:SoCLVhyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a0304aada2feb1245b383939395333fc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1152 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fcbd44d7824eaff16d3db88fc74e875

    SHA1

    bbe9597c9c25dbeae3bf86a7f0637fd0803e4010

    SHA256

    c17bad04792fdb9af084ba9d405a1b109ee706202b80a3cf4690ec65492925d8

    SHA512

    a0f56b9425a33860d6b29a85c605c599a62577f2615c308579a94a902e39cd9e43665235d3882fd8f1c361a5495aa294aed583c5b793a763603199e879366fc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    107e4a4ffe918842de09a8ce42607294

    SHA1

    a461a985bcbb4cd9fe60535251247790255e1fbc

    SHA256

    8d1c39dcd9429b237023f3b501115bed44608735ac98b09fdd51695bc9b90919

    SHA512

    7a7fdd43479f0693e2ccc6550ccade638a1d865a3faa1cf213b1141927e43a584ba3d31303d545da07214747885d6fad4e89cbf6c249585fac04d25ee3ec3ea6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f62d8b447cefc96fe3691a770d6b60d

    SHA1

    efc02ddd4cd9b2fcf27caeafc9e95fa3303ec7d8

    SHA256

    d0329b23a7cc09bffd530dca1544b14b8af37a4d6f850901303e94e18b39050f

    SHA512

    d4dc463e2b00ca602716edb75a68a52db02e4f7f0aca1d418c396d5e1faebfc0f835a14ff5fabc016645477b9adb53a2ef166db519e58a1bc7cbcc5d959c2067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f023761b453a0b18be6247928f016cf7

    SHA1

    91677bee20a5422e29a2e6a7d9a64cc1071547bd

    SHA256

    0b6cfb8588209db37366d23bd032b53160caff578f0058be4a5fd3425e0a4df1

    SHA512

    db4c34f27fc530705f9dabd22bec571188681aa3306e7c4b1588b71114ea21bf885114482193b8a8196815bbe9ccfa30778207ee9b1a0ba59332c5417d4811f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1748827f805d05fa9cc5e1978614d5c7

    SHA1

    591c780ba2174b868c664a1cefb9df851f4303bc

    SHA256

    e618f57cd6482a774f809c066ae9ae7a8c8ed460d29bcce63ce46072c0553c10

    SHA512

    e67c77b522ddf0231849b434c8a4ecc38df9d7fdc3c9d97ac7d87f6ca2ef0f6154d7b41052e3bb836df1be17b52c2c171c1006e082c0ee35948e7b76a5ef4fde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3716b2db26d7c08fcf18ef5fc38508c8

    SHA1

    af22e434cc441b9410f36b9a75e2f9c212ced90c

    SHA256

    da31282b2806343734ea82dc60f45eff021f0d813b89cd603a56725edcf05d91

    SHA512

    319d3a319e0c5a2542ac4f839ca8a5c71681c48e1884e8e8d6da9306711affe031500529acacbde05834ebb8eaf612d6ab8ffed87a438257eccae07e5754da34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5ce778e8f03219098d2d789179ded87

    SHA1

    874efd0df8fa778c1c459cc65af313f358f07522

    SHA256

    e3389885bebb1e183d3f345467de9353b8ec0c6b9ffe5dee18ffc4da0116b975

    SHA512

    5b9c192650724b26fb8d1aa5ee447aff2bba86af6ac4cd2b50c0ac071ae33d001d061406d6c97a05e5fed3a8ad2ea05f881dbb9af5a1016577c5c7e8102dfdc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d09bb27287e11e6a5056d4819080ba38

    SHA1

    1f6fd7231272223cc2315a76a5eada67fd07e9b8

    SHA256

    96f0091e61a71cc24431d189bf6938208bd02bb11eadb2de80d2d6d197789724

    SHA512

    ca9890f389527220b3178c13d2d164fa9e2532bfb3847450111aead64efaabf105d1904a8413d73a2c6876aee9ad195298a1e35d7a3d12656b2dc807971254e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edc284048d242d62230bda94625fdabe

    SHA1

    76d43fe26841b82c07ddec2ba051b632d22b014c

    SHA256

    377f3bc16faeddc4ea85781909cfd03ba2273d8810b5ce7ff52cfe8b4677f584

    SHA512

    7214fc49f24bbe6a674279df1cbe323e6624edbfcdfe3733f8b42d08a693634cacd952134ac30367b33a87fd09419e444f8adfb088ff6fee5d9b5dde2cb3db58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a65cca264c3bd757ea5e7610fa7cd85a

    SHA1

    83bd49ededc4622a974ad227e944570f994f81f2

    SHA256

    934d0764c28a703286ff2226dde70f1a7ad606ddafa6ae73d618a9dd4f11aee6

    SHA512

    cd794ce0eeedafc81e429d66ff9eaf54538fcf6f9d8ba9e4e232921223f72a57795d4e67b09dc923c9104fa9133d32d88bb0494d9d0cec94ba56d939f9127679

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4da6bdd375aca0ee7d7805f2766bb1a

    SHA1

    65fe1fa3868e217b6032e2d880d2e58e86560eb4

    SHA256

    e7d8407498d08e4ff451b63afb5b969947168081921d5884530d0b53f288ba1d

    SHA512

    2e6e7e9824ee9b9fd7872a7faeeea40c80731441590da0971407703fa20bdd866a48d3b53db90fcec51e3d2c32666ffb1416a4d09a2050cd7131e0e822e533d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c96ca8e0aefd2ef8ea85d645677f7d60

    SHA1

    7c89a67c65ddb0943e5ddbc7cd10b6c734467fb3

    SHA256

    533c7858e6d0223b0061f57ccdd9b1c4f5ed35d9d7210f36aea7421114fd3b62

    SHA512

    b475d5cc041c39799217a6dc551618e4f1a54a5ef65933041f2a79d67a44a2c805e0d4dca56efa798d784b39fe0760e0a70dc46438cce207887aee97aaa9b205

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f47200167a01d67f8abca15d27750f38

    SHA1

    5b0d296d1b30cc43c37e8fbd416bb532eef6e16a

    SHA256

    1334d1bbeb8064d3ce4e72e8f06e7d573e8192c217633e8e8a3725509079a1c0

    SHA512

    8fed5d6d2248aacee2c7f32afb19f0b2cb29995db7f24f38b02edf16cff39b6a069f3903e0d3fcebbb32325abfba009fc2ccc330932fb560dd7b93b97abe8b82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a20e090f88a4c62fc0c27370384f78c8

    SHA1

    c3b28f305a2e32e8cf8cf4ab2c0bbc2ad0c1faed

    SHA256

    4860557b8746ac0d4bd8116a3b03fb6a6b8e4455f51167e28ac0449f7606cba3

    SHA512

    545e669e646df0cabab6411739b649fe642ee8379202171d7c0f6be4187983412adef0456be4a37c435cb6f2a1d30d0bc16eb489a9e03f79017f65c26d48a184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    734e1a1e8b12bcd387cf39ea163f48cf

    SHA1

    6af705d7e5d3c2d7831e7e8855473ccef3abc9e4

    SHA256

    285cc5ddc918c91cee99d35cb33d6c45c5dd6a60e493dfda4912db3e33ad7f81

    SHA512

    91c8a640f8ac5e1decf2d900eba5e80e30ab1f14977dd1d49989c0fb2881c621fa5488c02cc89cc9e68664cc5b8725b330c82a177193644eb77c7c8d5685666b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b61aac352e03bb695ac2cbf8c87093d

    SHA1

    c87c9f0cf4c2201048df828519aa752668b12245

    SHA256

    aeeaaca0fddbe2ff2cc188e96bff8817026d41b8549331d7dc1b1a9960e46d89

    SHA512

    e65b07736be5ab07f7aa9d510fa312028d9011f3efc996c4c500f3a78e75632c74e014584406400c23757166280c6c25aa7b8758465300ad2dc9abdc8ade36a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d78b266852cd4fd2316b82a7156c803

    SHA1

    2d58f031c8a9c4810039da07d3a5cee81f9fb13b

    SHA256

    2c9eead169def53a4a950146740eb217470c3efc1be49ebb35c96799839a1837

    SHA512

    df65333058f53439cfe5e6c9c33c9ddc29c4d2ba088bc8667da24f7f9db440ac3acd86be31e8209cec69c50afb27910386c0405e1072b58eb4ece843e35a2297

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    661c9159db5f8b0416f5a8e0462b8e85

    SHA1

    26e48b9a1d7202098a80497a8807e54e3f4a7c61

    SHA256

    2a20bbebefffd3cca42a03351f825426b3b5f156ab84c7353378ef1c886a08f6

    SHA512

    51177ea591275edf8c09d27d9b02c95ef080c0c9b7802b68436f3b57403df6c5b39d420c7b98a79288d4ca25b8e5b1e49d49d0437daeffd3f7f5464a405d95ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cc4cfa392089e0bb390e7274d178567

    SHA1

    6e5f81d0fad5278238a0c2d88d80f91a9698b571

    SHA256

    ef1a39710841916052d9bdf15fc17fac2825e92968a495681f0b63e78eaf10ba

    SHA512

    f149fa50b7ea3a5478e29ee907c4e3f201733218a222470b6013d18ce222bafb442bd1ec92705fa67ae9306f7223c8cbabe20e173501724866fa2a7f0df37305

  • C:\Users\Admin\AppData\Local\Temp\Cab76A8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar77E3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b