Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 20:19

General

  • Target

    a22d30df9b512720b8088ee2ffaece64_JaffaCakes118.html

  • Size

    139KB

  • MD5

    a22d30df9b512720b8088ee2ffaece64

  • SHA1

    f6a6d2665221453bdd2e6a7da62852f33f838b65

  • SHA256

    ae2ef8419e29972c193a085b3dbc5668023d1126bb5ff809ae6db567b9c139ba

  • SHA512

    b33ef4969d297a8c1bae3bf9c9b62f861cb4b1f3571a737a22125c83207839d24ef6a7cdc548288a22c21c16342a6db7ef4860574bdf4dc324dc355e8cb4d067

  • SSDEEP

    1536:S8zrBHlftyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:S8ZyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a22d30df9b512720b8088ee2ffaece64_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2148
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2148 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c87b4795399666f71be142e613c50371

    SHA1

    9a35e6031f825c9a2c85e526b067f23d25922bf0

    SHA256

    bacc14e87d295ae08ebf0d376055aa770cf81ebe7dd9c05630ed4886df7a5b62

    SHA512

    f0bd2af266b75c90033269144aa682ed1b15cd432d1e659b078e94a3e74be9d913f5af67d4e2e782e207118bde9c2a8473c012b842d95b0becff61f48c0a76bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    955f333b6628fc1d3b03467ea1417e18

    SHA1

    f9a965e496eb32a4dbc86bdbf2975b8b72450d89

    SHA256

    e54494d4cbcc5b3d7213f319f468a518ebd7c8dd8eb0a9e0b480d335c412d2d1

    SHA512

    4fb5cd9ae6d2e3fb200c6ec6182140a06ee3e48a3fb3939401ee024baba24fe7dda442364d1c8b45bd88e87fb1bd43f5e71ef04584431b49fa135bf6523be234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    580dc0b80a157820bf7915f637521962

    SHA1

    770689afd8626e72e1ae1631e460c55189502237

    SHA256

    acb9cc0b77873aecda095b001dca94fd5d374ccab45cd01e04e1d6ea63578252

    SHA512

    aec872bc7dcc6f32327ec8245fc160dcc83aea4703713730cc83e346ca8566582f8f0598e377bf6dd3cb3d2cf482c3f34d6d7f6be098bea830e469f0bf128fa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b89bdaddda243233baa9bd46fafd86c4

    SHA1

    1610eef9126fdb4f5f39fb0a124dbe5985f89060

    SHA256

    44a0fe4039525e7200d12238bfe07aec4b46e8a1545fbb8773e1891efc6f0a9a

    SHA512

    91e19a3fc90d124ec2c95dcfb1acfa9893d0bcbb9faa544276999292f01344e717c63596ebea0c1e960f5725a8066a21f83efc68d81bcc7a295221570ffa2f87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5570153f6433928398e2900a1ae82541

    SHA1

    5069030026f06cf547f6feb34fe3f8877604c999

    SHA256

    23799d3c23f2de8b15db3bb21bf3d8173dca1887ac1db5f4352afd903e17599c

    SHA512

    11f2f7d8d5a2fae6837dfa33adda167f32b85cacb9728248d1fc4af0c1208f97b11c47fd94b187d3e35cc4400edb540201cfddace76de74e0017657b7ad61547

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    971cc7a1c512dc9e85e8f3175ad73d3f

    SHA1

    32d322936bb89d691941778c444b65bb13229f5d

    SHA256

    e7ee624aaf07c2d7915946ca0d2c2c4275a2e7debaf19de579ef9580283d44e7

    SHA512

    02722598462bc45f8ec3c4dcf1961df04b2d6b6ff7907dce51702489f3dda36943ca2a4ade331d676d80dd1821a0e09574e8c60ccb3f88696966b5543db4f994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04c1dcf30e72fef6005e97f28a642728

    SHA1

    349db4616a5b4fd8b1cb22833c847ac1fb10ab20

    SHA256

    568edc1a20a8e8bbdaf9575c72ab45de55cb06203de33463da5c071e198939a0

    SHA512

    27f678fdfc882fe4048a992ef1cc20f1c401a778587f93c3fa28708f5411e8a3a29dd1d351a688601dac850569955e48daec9c958a6990e5c956d3fceba2b1c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce232a2315e57ca78ceb780237563af4

    SHA1

    931d0e1b92d104b29f9ac99f0971779664869050

    SHA256

    d54040536ffa681508f74d055b36695cbb74d7f63ad3a797fc2c8fc6085f8bc6

    SHA512

    46e92ee82a79c1ce71cab4e69cb569236d8eba9c6fe843c0b3e3f94da769144115c7a3590d7c30fb7a59ea3be417919ea82a5418fd2829518b84a78d5b0d82ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f58c1652fae49daa91600c86a539bfe7

    SHA1

    c78d33130118186dd0b04770760a542a86f11c40

    SHA256

    a56dc0dec31935361b50af1c602f82b8b85d156126a3951a62fce9b4be03ea82

    SHA512

    30e022ca34a280bf15066ea9de79aae33c918dec0406791d9b6a765f92e7e7469e2a416d194c4097ec1bc8c6ffe7d67ccf1639ffdca9174007a80e88864fa152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09d41896532e3fd60df28509acfb3f04

    SHA1

    e25adb552e6c504b827a84491686c1b5006ced44

    SHA256

    cfab93f0762417777ef57eb2351875344e62801830fa8574617275b36cedd902

    SHA512

    f6f699ca68ea2fdc103c8938d8278f2c9b9713463fea0e1926202b6cb4de7d8aa4be5a8a8bf813edee4c500071a7b4bb5a75e9ea1221da27784259faf703f114

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    793dc570f96e8ce91bda9c3eca97e1d4

    SHA1

    06bd8a79b73c156a230832bfc64d69f55594e7ca

    SHA256

    699ea1f2305f304b8ebf4b4fc1072208bd4ce6e901ab2b8e1b83833a1f9ca441

    SHA512

    14d821f09b70770d45f2a10b1bc144ff006ad98b658a8713fbc0d3d4b3e5acd55cb40af86b95631b37f74962593c07eed21abbf0041ef6a61d714a86443a623e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90913235fea5244c78d87a4905432787

    SHA1

    5bf1d5df51d79da0e6598da656190a8cdd658e1e

    SHA256

    8c1c31fdbdca0d3f64e7559a17859a21a04d7274a0ea8b8f486e3db836b5633c

    SHA512

    ccd1165a7b8d8a6f93f6636fc55219542ba1cce5d301955d2ced13d5863bea6628545470584699b9f6fbfec862a0fe897c474be1477c31a01b8c0e2f7e3f683d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d609952f625a13fcd70028c689108af

    SHA1

    a543bdd32081e739ff035ff315eb0fc7148fa233

    SHA256

    e09a1c77577b64380722766bdedc3edd6405fa8fd25314e9c98cdc7209c3f804

    SHA512

    0aa5c4236186624bf9c27bf1e603de0c60a08cceb77cb50c03321b17d7195f269fce3cb4b3e81bd01d7a3fa90e09bc719be60dc372f0c4148bf5438dc670af4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57bf67092999952918f8b78a258e67ac

    SHA1

    44e25fc9ad54632281c3341abd35a9ff9d5b2d68

    SHA256

    9b35a573cbbe070563d0b0b8f7672e6068c5899dc972253f2094b078e98919cd

    SHA512

    cdd4fbe5d6477cc065bed18d4606b89d5ada01112e80a1daae237ee3fd9911c1cc61a45cb2e5168f58534a6f4c973ac47765c98b0252e39f853caa0f367a5c8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db7cf11ef551a970db15edc8d7933a67

    SHA1

    fa10ed0d430f72408ff4ed953e7a1f8f8a940fa0

    SHA256

    81ff05a020643c5ab89e3b6cdd767068a836fb5f1c447d9f6a26d983396bf02b

    SHA512

    471792c160797b99712966d34e6ea9d6191308a0e53a02d769cbb9a9b0a6228f43939399cf4f0115ceee3a3bdb1dde260e0ab1b18f1f9727f93a5a7d8d1dd905

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddc6e9e749d1a71fda47f41c4d1e1403

    SHA1

    eea1ef3a74b170b788c4284f298def49c2f5792e

    SHA256

    fb3e3c43dd092534d84c2566a042aff31a3e743190e998fa4587ee6040e10119

    SHA512

    26d4e955e4447858f480b513a76d29ce134b7d296bf992275a07e0bbeb53acd4ee1236c12a9362aceee52b6b916a1c68809d396ad111e97b961c7b2badc8a5c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4eb304e15a4d431619a6a0207d90ec56

    SHA1

    1c0d9c997e976fba2b51d964072d15b924bed270

    SHA256

    cbdc021a52bacaa6aecd3fc619b3a52f1dc81058a5c97f554255638e0f9e5fc1

    SHA512

    d2ea11ac8104b93864182712ddfe468856fd09578c871cf471a6882bcac51c97dbd562ea6081c0f630c0a497f98e25ea182e50a6db6dbe2888624b92325979de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    048388619664e6f2a4de9dfaa651ff84

    SHA1

    e2e76a7aa34907e24ac2f4f7ff0a1ff2407d1662

    SHA256

    ecc1b36c73f81a919224b5835986bb361bcd1c65ff605ca934fbfc33df3cd96c

    SHA512

    f039a0ed9aa5b14afa1b9ee570699cbaf427aec855a6e90263d4e48a6172ae61488e2d04e823377ffee4755d6ef50f1534aa993b98d24cbafe30adffbdc736cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18e9fd189f28ada65ad81a435fecf85e

    SHA1

    4933c1ddb227b2d94c56f18a5d06d4e94cf2ab22

    SHA256

    c7ddb08dbfd2a9eae76e1def72f753c4830c688e5432f0bbf028d938f0a5bce5

    SHA512

    c2c3cdae08df834f9e9ffccca3451fa6dcfea2278d9e41ba7ac7648ffa474a6bf9117f4abfa303f684b5c6608d325944e07cf1f28a365bbf50f094bfa8dead21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edfb4f33f20149cc0627f01a6bab0d4c

    SHA1

    3753d7aefada3e6a75ffbfe437790e97870f468d

    SHA256

    3eb31b77da7ae40cf365c28c777e5f49ed7d1ea33d8f205ead51621dabe55258

    SHA512

    aa85bd10a1ccfff8b2b7a55952d312f3eb4f62d8da08ef5a294166069a02cbff8798a900b7f4bf05039320e3b583d8a1b8dd6bd5e5440d2ca534d0f08423ae33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5ab2e77bb7572281bf14fad12f98409

    SHA1

    e49c8867d338428f715898ae63f8fd5266faa48f

    SHA256

    a9d857e2bdf0196106b80f8932c1a0aef50df0c9f9fbb6e7530025c2a118fd2b

    SHA512

    e6f91b406da80cac45c7df78028f9142ed9013e744597b973753721823d855faaf9da832038c3749247c6bb56d599fbeee4b927ba7a8060349c763db456e7413

  • C:\Users\Admin\AppData\Local\Temp\CabCDC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD7D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b