Analysis

  • max time kernel
    137s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 21:49

General

  • Target

    a6bbd0aba8f9c07063b374a2551a0240_JaffaCakes118.html

  • Size

    72KB

  • MD5

    a6bbd0aba8f9c07063b374a2551a0240

  • SHA1

    72c6f43a57015f162f041516313b614f542cc050

  • SHA256

    3cc3173f753bd9d7037eed908505073db676c6541284c36c59d3b18dda672fc1

  • SHA512

    91ae8922603565e3fba21dbc365783c76050329ee59cb4c616d369865cc465d501ece27dbb390fe1c25e17e78d1c45fca6b73b0189689eaaccf96270abd00864

  • SSDEEP

    768:Ji7gcMiR3sI2PDDnX0g6sC6Mr2liZbwxoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcc:J3oF8GTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a6bbd0aba8f9c07063b374a2551a0240_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12a3b1541339c3a3d4ece10a0ddb6b7b

    SHA1

    565ce6653ccbb390a165b890ec98267927cc536c

    SHA256

    f8730dd018254bf3333d8377f9c31b00e586889f2c4cab0a9454fc70d0cb47dc

    SHA512

    e29e79ecad784373f9d8fdd22064aa72efcac5f17414f74d15a32bf526959172e83d474cfaac628915ed687e481837066ae99155e94ced61afb845ee53591c8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e17779b57475e97ec80ff1672ca8b18

    SHA1

    0f9d263aa7b831f5d122c01e420b1f1426db0cf9

    SHA256

    376be8a186cc6887b84bf29c5d651a4d3b388b595cc4c32764ebca8a6e8e8dfd

    SHA512

    c07ff13000d91b65cdac17ea5381a69c1277423e8f77206a6b732df9468d6d0c44648cf36598823715b37b55f8cba1e161bbdcce91b7a0ad30fd61c887c1867c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7afe11b704201c872727f328fe0994b2

    SHA1

    a5622a87488b2c1b8719f283df2cfce44816c657

    SHA256

    f2b1cc8527c6f653c14bdc50b7a53a0ed3b70939c009b6ea10b5c7034fd2a32f

    SHA512

    a5786f62dba1f11a754527b32107ab31123d09bf0907c9570e551f31a63a59388336ee071f39c93ca6e801cc994cab98824ff898eb1b9f9cf89cda9308986074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17ccae19c2875e7b921348367eb93fbc

    SHA1

    852824abecf606f80da3927e95923a056a8e9767

    SHA256

    a51fc2b487e1f2121aed89d2fa63a71965621773f7a4bcfb40817b5e211ed308

    SHA512

    98afb9c152fb9dabf2d981d3d33c13e36ca2e458f9ef036c8677e08d1c392b4974123078adf2e686a474b0c28f0b9570800284d77446a9e601994d3708a34fdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9814b69273963eafdeeebc12257ac9b

    SHA1

    a61d1f60245dc4c621ba573c003cd7eeefeaa793

    SHA256

    a8f26b330845467b0cccb5e27f702ad105a1379c7b8502a78036fdd21f4dddd0

    SHA512

    80917d6d2e6593b7efe55b63f14d7a4a36cc94848b9777ddb68345df3d7b99ba8f5129935ad143a54c9c828a94136fd5c434ffb1eeb276f754ae4588f2f465c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7889729865d02a1e382492b3e1af5eff

    SHA1

    74ca05d793a0f1676c0b8497b9ebe28b3abae18c

    SHA256

    e28a07c14f9f65cd5d5418baf6fdf6d0e484d14e0070022581c2602e66c9c800

    SHA512

    2b6bc675392365dc29cb3bed2c2cf85df04f2dcfeeeefae641d43af3a8a77db31e4cbf5b64b6255e6b98aa92e87cd23fee173bb6cc32d9142b74df15e9779d8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7643f4b1cce103c1f6e047f873f74775

    SHA1

    dc84b12ba557d9df92c42c0b7037e79c9d7f8f88

    SHA256

    a0e57822fb61100ea8dfa603d05ea42805b211761cb1f2063f1f1af7a300f624

    SHA512

    76d8896971e389305aff2073c36de4adaf4e29101259e752bf75f32da8c8cd38578179bbae6ea17b0c693fc0b4eb83851a93d8b15498ed35a010a69b50835c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c2484b976902d02878b40d41fe9faaf

    SHA1

    eba9f9ea9ddca523c550e877c81b43c24a9ba4d8

    SHA256

    63423a5af670fe11bfab31d61c92c7228286b27abd11b54ce65b364c0c15ead8

    SHA512

    ad7ef0117ebe19e915d8ffb4784024cddafb721641c9507f01197f60eef56cecccadfe6d73ef5a588eefc06c61832f68173cdbe609c6a0e8bd3c8b2999bb14ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddd8e46cb18225de218e4fe8c45d6e36

    SHA1

    bf80194076891c6f0ae5a70f6a6c016410ca08ff

    SHA256

    01114e1d920b8e215349dd46d2ff360a0011ef14d3f106095c61fea533c5b6da

    SHA512

    53eb69e51e2f0310bc66fb466b05f0612031f4252a655f28b28ae8d5ac338b368e9b3ba9fee97892fab73d7c06df9c61d7a528b84ef5c351edd8b5642a9bccfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ff82951df942b85405d29b99948b27c

    SHA1

    6a87adfd2ab57c6d7697c3cfa1e8525c44ff7974

    SHA256

    d261fe451f9c11f33661b7cbe719ed5693308e4552c9fcdb8fec198953d1208a

    SHA512

    9e79b9427213d3fde0925f5abf47489d91e75fc1db9d8137e0d0e543e7cc955ada7f03e0b0cdb0cf28801de33d5b90772dc655c44485bc87e909909a21db0690

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c38c8e393e98dde2a8d9086c6d1d1e2

    SHA1

    5e498d6594c551fcd171f16e0094ffcacf968c84

    SHA256

    08c3887fab39ca1c6685cade0953f53914cf4bcecac21685d318f7eeb9cd4050

    SHA512

    151d9d0f31a7225dc3c69f1a8481232ccbdf4d9d08472af7ebc93cb63da93f7beae536073ee7382ef8f417f766e0813b2355e1311ca523075f6788b287591da7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    777b79ac4038fdcf317d26ac9fb8dbbc

    SHA1

    7c04a5b6dc31dccc43121a68476529e992198a3b

    SHA256

    9d34b6123d8d61ee2f14d4fd84a1de761e3c4b43bf3952452f5e8cffdc288400

    SHA512

    35cc87854d4d613d5fe2e3f79db9922fda73e5e5288913eaff17ca37acb251a2527afba12a0ef4c512dd13ba8536d7009d300e46616b3cffed649e0cc2fb5e0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bf2886c069042ea43912186b09f69b1

    SHA1

    3206c10e593bd455f21158443a70b89c091b7db0

    SHA256

    1c7508b1188cf6bde2db3290e4526aa84a3126910ad4d937fcad2cdb89e05bcb

    SHA512

    9743ee56229f4353cbc8b9c512062c138fe1879aacb5dc835114cda570a4a4b90932c4f58dd05fbf40f69fc0d1622dbd37b599ecf40bcc5fa3dd03dde166bd3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4e244e3ad2ae1ba0ca7724b7f4ec63e

    SHA1

    3c08efc1d9dfdbad8aa61658d0cbb215e3922a59

    SHA256

    ac2f07f01515efee7fd3747cbfa137c1c36fa9f8f781488a51ede5e64097f98b

    SHA512

    ea3ccf1fe4ce8b332e61b1a53df06232b902bc3e348c373856491024159b914593907dd04514cea01ee0fd1d530142f8921a5e3fac9af1a88351fd03cdf5d3e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e2175b4650511960371bf8e25a6e618

    SHA1

    6ae4e47404355951c7dedff08d8c32d2a4abf8ba

    SHA256

    66bb84f1df95fd6e865ae14e1b18b83d3d4fc2f9bc96dc816531e3ad81a00ec8

    SHA512

    89ca9b9295e4b15820beda533edcdc9d6a165df445d81266ac984315efe90d7d16b9c286d337a7a7eb6197781101ec9ccf8ca5abc505c5c0abf611c983005e01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a509eb0b6c7dccd4c8c6e469798e2f29

    SHA1

    490cc876b3756c4f1d7760702c72e485b62c09b9

    SHA256

    6184616d0c0dce7f4dd5cb1979d9f9ee8a67fbb757c342d619b99a7e46effa5e

    SHA512

    17377fe4b442265cd30684f3fd9c13c4b4790977d4007c12c1aac35412ab3ed8f9dd61e860806402158b2cd09e05b36a039dd505690bda147640de8b42c0135d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6eff3be38fccc7a7ec2ada4d74f12415

    SHA1

    4cdeb8f09638a750671f6e93b47fbf04f08167cd

    SHA256

    079b16742db4611f95680b785f50b4ba041534bae664eb8c4189a60b599c618d

    SHA512

    d17c018f2ca7ba5beaab0ee4991cdd2fef7afc7317a5d14ecd9315ed412821b1f6dea686828ce8d695ae33181c41b618d7221ea5f47b6861adaa9f382e4dce7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c922290cb044ff12d0cb9ea4ff5d06fa

    SHA1

    bbaf13abef9dc48190e90c87abfbae64322e0cee

    SHA256

    e06413f275c577e07bfbf76cd8922a29f2cfb8b56a971ae1b33505aeca6e3967

    SHA512

    60deb6c19aef896ee6f1d385772391ce12a232618182dd661ac3c139930760fae665985d74db13bf44a22f40f364ca0f3004485ed5727985898540e03f291891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e28154b65d0ce52ce5c70956f57e90c7

    SHA1

    2966b785ecfc03826b7d005a94e856f7b59656b5

    SHA256

    0b2ec441aa2c5c9fbad297dd294ec086faf35ba57958e986a480b7479f383eef

    SHA512

    b670b0851bfb15242f53284a19db40d98598e221b6679d0fd7b41bff927eb2b504efaef1fc17bbd2a6b617dc6ff80f69348118fbf1a8fa7191028733aa1e49d0

  • C:\Users\Admin\AppData\Local\Temp\Cab77B2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar78BF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b