Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 19:01

General

  • Target

    a1e137f958ca7a7a26f4f9bbba141bc2_JaffaCakes118.html

  • Size

    122KB

  • MD5

    a1e137f958ca7a7a26f4f9bbba141bc2

  • SHA1

    db61e72d6bb3be96429f208f900e09ed680d7e45

  • SHA256

    89341795eec06e9fee7c077c1479e18fdc184bb07fd54962000a0d39a61bdd97

  • SHA512

    9b6c0a90f5da371f56a408165d7f6c1e31853671446a5610427f52d04be8503afdd2044854590bae7f0eb46629a591eb99368bd0b97482dbaa0d284adbd9c651

  • SSDEEP

    1536:aVmt4yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:a/yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1e137f958ca7a7a26f4f9bbba141bc2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1940
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1940 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a79bf3930378d8c8d30b1ff5cb20ea6f

    SHA1

    683c9043e6c943752d99ff09edf2af24612a921c

    SHA256

    0058121694253a68caafb9df75267af74f0ffa63446e4b3aa890df3af9fe59e3

    SHA512

    98485a905e9d4d8ad2cd8f77b54d5887155fafb8a19d5c1376c0863338b7f5c82e329c9ba089c3d2a76793a29ad03cbf6448c697bd28bc634bf3f9875f256039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    108d4122ba249dbd22a742583020d6f3

    SHA1

    edbf15afb475f19e7b5c72c4e01be117bc73489a

    SHA256

    0116fc5a931147858c8fa28837f4dbc46b59e60a9560f75e16107b5cb90308e6

    SHA512

    2d549f67bbec1b690f6b7d4f705d9c985dcf1224adac370ee7dd59253ea76a9e4404b5eb6b9ca3204bef614c57b45939ad5ff6eb296cbec1a9c4f79779851ce7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28cabd4a2cda83aefe62e4aa5ecf03d6

    SHA1

    fa986d7a206d5ae93622d49ec6f656bc5928f0bc

    SHA256

    ef8a44893e8fba0857190a86c40a9deaadfb7f24ca7c711723bbe58929864c52

    SHA512

    656ac9b0fe243ff8b8883a3e41e381a6a8a66a5d6f1e9cf6f57dcab6f3a1dc4a75ccc012e7a867cbaf5feda6774bb20e16d90a82ae98b6b1d93175843b523733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b53b0e21232f857bb8d7bb96d2d4bf71

    SHA1

    6b031d5e59fb94e1467f417c389222cc713b5adc

    SHA256

    3555e1d250bfb36ea8e6100185c6341436ca2fb39722ffe113b9e4540538bc2a

    SHA512

    365671e49ba541811b8bd3e21d01ce349fd891ade31ecaf7d54824ce24242db2cd807114c69842bb4e1180b4867c99156b45d86d5df4eb39867479e9618dfdea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7abf715fa80d2b8aed98e553ddc7cd47

    SHA1

    aeaa6173c5286b41ea130f1c31fa2a63456e0c2e

    SHA256

    5a1eb3bb5a11992c4d2368fe53de1b8082865e4dca07c2cf2a25d5719893b854

    SHA512

    d0279895971889e0572de4ff4edfafd71ad535fb00ae25802a3679fe14dbcca35fe0964dae92a67f9a3ad6580155f8702be6bca8ecaa2612f7be899e854d225d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc3c1c68e08bb37776ee4b76d4fb423d

    SHA1

    014606cbf0a1b4a05dbd31c9183871ab4b1a59be

    SHA256

    39c0fbd0b003a00757ea483b27efc876f1d5effedf916c34594241016819c506

    SHA512

    d2d80607aa05bc780d0626dcc3399d6f543750dfdfe1132133a3f91e194ce7c23b84f8505b04d17b3e780a867105424e88b3dfe9a57bc3061c9fbffcf5295f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61bc14c122f8c5d3c7c37bc35c8a57f4

    SHA1

    dc1681cadf5e074cd7b36c9e6800a2f39102f88f

    SHA256

    2f07c648cb69f472b50942394dae773ed1f34a78bb67031512b808ed2e6ec4e2

    SHA512

    7843737d3b42e2f720480e1289f6016f40543d72abb742067afb25fb5e0f10eac8aa1699c377c88fa8590ea53a68c2b1b08ffd5d88670d272231d49db5631d6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ae7c356c09850b6dd01a3458c323619

    SHA1

    c7bac5827c20268d63fcaa00f5b2ee87ba877754

    SHA256

    33879fa6432da9600ca64a291147db4f34a02cc35222650ea685cf1dd00c2eeb

    SHA512

    13b9e3c7cacb8460f4fe7df68b7f390c393d1c159c5ab53279d6eaa8bdec6b19d99045992c555c25dc3a8e9cb0ea94203d1e9329b7c1733b071eff0c4c4bf4e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    954dc687a60555f324cf07a0728aa274

    SHA1

    dd7059e072bb45c9d22616fc755d3d07f0f07599

    SHA256

    39b92a74c5aad017f0f119c70eaa185f3dfcd26f9959ba1b2f7db8b800d31cd5

    SHA512

    75c0ef2e8e58838579ad7a37fb3c5796c98591a6b570eef55a5f002a8991d8cdda6780adf8890857fa5538a264468bf4cdc10866e433d5cf4ca1b9475aa8e493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4889b4dca9b2a53e7e0522e8f7264815

    SHA1

    f28ea0805068de9f7849e137481709905890ae3b

    SHA256

    2624e07d30bbd9d2595c8a7a54421295b98362828b8b1f564611b4942a661d45

    SHA512

    816b690f2311a751d8147ad759790c3b669e62e07c342e9ee4668f3f6492bc7e658c8d011c716d60ba598224e5f649f7e4b2f463e98c1872d204ce891f2ca92e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0eccd887608f10c8d5b9a659086708eb

    SHA1

    73ee9976f54b03ad79fa8a6ddb5c4a75c9b4274c

    SHA256

    21c6764adfab9a92a293838ee307f8d479f1ce6606d3ff3570b23f4290588fd1

    SHA512

    76dae28ecfd815ecca1cc10fa88329e23f2c67b88f431daa839ff2d8dc0b7ac87faf2a621a0b4a5c28647e6c2e6032066d0fd6df9923c1a587e0f856e9de5128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af5463ea186e7f2e909fe9df16b68b6b

    SHA1

    17dc472b7e80d9e2b4777d36b0b0477820914725

    SHA256

    2e0eeeced434f59b422e33a774aae9872bdc335b91a23fc2463c78b4e92827d4

    SHA512

    491dfa4e5409294711a4bbd81f2b99787c68119b39d5af57535de165c3006d7f7924c0e762c3a7c3d799e4f34bc2e1cc238164f530b4a98f7c1763ef07c85116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f719847076603f0ce0ab1a4b4537708b

    SHA1

    2dddd499f8b7b6f52c485abbfb947026c412cb6f

    SHA256

    8f8f50224ab175df6032d06be6ffea28caae1d89699ab9f550d17ca02684179b

    SHA512

    0044acc06ec5abd33563e6f9ef9e21cc65c9b84edfbd82c2891dfbc84b988fe2ed698b22d6b7030f00958a23e3cb0be060719b665d808b0b1d0250f4b188d1e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4a7a47256191004d981702fa03e2b5f

    SHA1

    a177079ddcdb4636753ee6a81ce366b6e8871970

    SHA256

    14b7b1f3be435fc96f908804501ddbda4d4cf41345e8349df14eee21f95df6cb

    SHA512

    9387205f978b0ea9c899ed83732efc186f13b7dadf5cb1f7f2aab2dc0e66fff2f716dd50d4b9ba0c36db8acaf246943c9c5c05233c6e53204ab82e7dc86bd78d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61491c7bb0c039ca4ae9ecdcf0dc1266

    SHA1

    1e507e49c77c55104c1acf73a951eeece3f2783b

    SHA256

    b3a437cf32995a2c4b9cc187bf6447cef052956513c6084cfca1e5f460812a1b

    SHA512

    1745f44e9a09e4d775a5b5c722571e94f87ae449de9a3c959bb6da22e690ac5948051fa2b576b7cdf0c6583328d5a2a1b691beff7f7559a2aab90bdaac754719

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebabca67b9a36b091842ef593cc30571

    SHA1

    5f802da56877db2480ce993659c9e1a4e5fe659a

    SHA256

    778f4719876e0823ca922d861333d4dd112ae5aa08ad5fc2b272b19dce5968e1

    SHA512

    7aeeae93f3acfd42e673e794b0264b1fff1019f6e4defa71b05e0f88a174eb782b6a8624b0bc08789dd77764ec8a08a8fe67c48b6589e7796a0b43e45f97986f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a65911ecb8fd2faa97f2c7c129cfc328

    SHA1

    4d015073c62982b812fb3691473676e236730639

    SHA256

    35c473d23214291b486f53ad8d49d3dd02200f7ca2799bb9d1408d9eb9dfacff

    SHA512

    dec3d47cf04324fb2a09666b2ba007e1329550da1040b04f21d5d3038aa35bb2aeed0cd0147fface2936ebe7bda55bc67ec52034d7b35cb30e40cbd2dc407095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a58e8591c652ce7a58adb6a97a07adcb

    SHA1

    b2379d559d8cc08adbffb12242bb838670670e43

    SHA256

    591bce7af3521061012bf874e3e94c4ee228dac1844efc41a1efd3a969feada9

    SHA512

    66878c2131b4411a8bee727ad550f9fcfec1db9ee667d7cb7c0282da2ca03aa5a97aeb848eead6de4f659c564a32328a962add14f9f1c531a6d112776bdbd71d

  • C:\Users\Admin\AppData\Local\Temp\CabE090.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE141.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b