Analysis

  • max time kernel
    144s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 00:15

General

  • Target

    a318c464d2e8647864cf553781d143d4_JaffaCakes118.html

  • Size

    28KB

  • MD5

    a318c464d2e8647864cf553781d143d4

  • SHA1

    8bd1becf74c106ebae6872e12d1f6badf91c0942

  • SHA256

    4832c74c7b4056f5e7a4f36ee616118314a9da932e233083ed6b7724309d0217

  • SHA512

    a2ffef3091b3e0c7a14a086b905b4bb0193f02efc85cedcaf8e0a101b7ee0b9d1754cf239b19f9ce8006d0c92ad6a9ffd1c08875a52dd31852beec15cbfc047b

  • SSDEEP

    768:S/VzdsFqvfudlQVV1C5m1CCCcmzm3C/CnCQG9IhbukRz2:SFdsFqvfug1C5m1CCCcmzm3C/CnCQxLU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a318c464d2e8647864cf553781d143d4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2384

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0a0a9361c07355e5dfffd70b09d30905

          SHA1

          2312a74e9d0a766e2c7f3430406f759a101483cc

          SHA256

          77de44a5e7b4bc602260af1751457bc3e80032bbd6c09b9081e79b2f831f145c

          SHA512

          16ac46286c92047ae25f794b52f2a5eb716c2414f75d75d13088b79520cec055fc33ae827e82a5fb68d3f2558b6a852b7ff0cbf9274e1007cb25e80575e14332

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cc9fdcf06e310bd21abd8a6d516d325f

          SHA1

          4d4236c656b26966098ae907c9bf3e14ca88a1aa

          SHA256

          0f25c263171c19aa29858243d491f95d57149732317d5809bbac9a965068426a

          SHA512

          fb18e2757f07959c6ce9e8830c794d06bc5ef1f17f898bad1eb15c829250e40ed426648594e3cc1a6d43fd630a47dfe37d967889c067008cd93929d7030baf5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a1c97cd7737088cbe1e99114f972ad56

          SHA1

          730542c16b906071ac0a8272e22bdb5a409b537d

          SHA256

          d08807e311d113206f48fe503ca09207cf404cf9bbafca18a64920630fed600c

          SHA512

          5d8372a1e432b360c865f8a158a6cb5b7be1148eaf17ae81fe45fcc117e38f9a2820e2087b141a1d0c78184dd28e3776ab7175df60224233a240ecc78637462e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          51bd9a5d75aaa7177d6bbe821968a357

          SHA1

          119e8bd9da2f2f78c6e2f414696a219f15778f1b

          SHA256

          a5fab5f52ae4e52ff276d6812cf18172d408fb28122bc95a3a7af8487c7194b2

          SHA512

          eda6f5e664a3cb0dccf6cb4b0547d2e43fa40b068a6223c66e1da1a928f3d14f0221e50c838a9934b97b5cab92afef4517a3cafd339f8c33fa63d11917aeac05

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          10dbf41f49d51ccc19e98a6873ed40f9

          SHA1

          90560a8e70f52d67073faba6b9b4baa77f1fef59

          SHA256

          88b5a42ffc3c698d30bd95cac2891cbd8ac79741f70f507836f2888615ef23b7

          SHA512

          582b48a98c86e1d094eb52b4c4512fb53981497fae1c8dfed0b4cf01ebda1cd458ee60da1198c78897a72f2e618878cc7a2fcac41af486b69d74aa41cc90ff65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          04ade6ffaa071571f5c16b024ef42114

          SHA1

          8b8a935bacad4c9e40295e93fbb7551ff94f61f2

          SHA256

          3c1f2bab2804640624f3ceb5530617d238abc5cde550969dc2ec055618af52a2

          SHA512

          877006696cd4c1a0bacf9a6ca891447434ccd23d333ed494cdde3594bd899d242363cb8e00a5d35e122188249796ab5ab714caf617651bcc58d6278ae71ad99f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          139ab5496eb49c32df2c6ab05d137bfd

          SHA1

          f747b639b58b4d09813f111ccaa2cbd4603fb190

          SHA256

          a2bf3375b9a8ba248a50a6edb443d89afa623706a3747dd9e46d7cd458951f88

          SHA512

          4da07ee1ebe62e740a6a2d2893486e55770ab8640ad2b1ad3f1e75c14dd5a8a20ecdb6c54c87c5228a18c393472d6e01f8eda7ba2e6288035817f5b183d672f0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a28c2093247f7acd232af5b614d177a3

          SHA1

          d6f77c0f91146dbbe38ae2b83f8f1543cc088ec0

          SHA256

          17996e35ad6fe84d2fcb23872f7c4aeb0cb76395e25f53e94d5238b5c0c3d6e2

          SHA512

          208a2b43dcdab2994cdb393a8f705559f80689e821f7d1fdd543526332d6ce5e67a65f257cfb9a504b9d90c30c7d7d38eee2413aa56105bad3a0631e38f20aee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b483aafb986f1fbf940e98f7b57b416c

          SHA1

          aa3b9df85da295be798a2b440303d3d429d718d5

          SHA256

          c439fb56cb381ce1c616f619b0a9a032f2eeef4270ba849a4478c406c50b6fbc

          SHA512

          668bc4230b2ecf719dc65dc2ab7cd6ebfc49b2fa43c4df035c373474a309ce6e6242c3e04150a70d7fc370943052b04fbe0c05000398fe8ee22b9993f10f8810

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ec1178aced15b6f0c91d63495052e1f1

          SHA1

          dd067801402814464654e1e79728d68aaa61247a

          SHA256

          5dcb093a1c318dbdad76cabf492189e2a2025b3b235a229131ed33d1b98c0a82

          SHA512

          4c86fc074752bb8f93d44f304954cc02e9465d4562cffb9a91c4e1e7aa530a6bb7fae4316e2a56b83f2fdbb9598a42be40667d87bf6123c73c5c47e45bcd3be5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0cce1b5c894b102a4d4dfcaae2c2966e

          SHA1

          dec6533aa2eaf30810d89ea9bff6b69a08729327

          SHA256

          417806a1cbdff2202a7a1471da192e7a474e0863b2a8ba1701d5afed4772f12d

          SHA512

          60b3c56af74e4d624d7dc43522983cbee1872e98b41da5def59882f4b56a74e1d1f72796f80c39ef685d4b49c00cb575d0b49622b00a997590cb1596e9d4dc56

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          35a2f2082a439ea5d1937bc996938027

          SHA1

          f5e216f343f84938af5313ec6309bac5b13af6be

          SHA256

          8a02964251f93cadb1fcf645b241ec1a6e06b70531ae8fccf3105d291316f2be

          SHA512

          b80408bf017dc6ece915cb25f7b1e05c192ed16b984f336c5945b492c17cd565086dadf6fee6989dbfcf1cf30e3e8e7d70fa9b1a1b11c2b18a86f9c9a587929a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a9842bd59acddc046768e624f8210eca

          SHA1

          9441f0635178f5b2d737ccdc76f1247f14f817ae

          SHA256

          c50426d81c05ee9e8b3db32e5fa3de93970419549d0c7e923ecc854bc5e27ded

          SHA512

          83c8f12f6e31af06a9f919d0b78c0eca8695f2bdfd15b47a1ffed06a5291880d070e76cc7f17d817f0ab939a21269da52b29648c049e2f801137a0c23a8b8a99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          38089924a59f2213e089b292ddf661b3

          SHA1

          15e2f171bb443c61ebe3f55d5855ad40094ff7ba

          SHA256

          9bd7fc7ad3df97522810fef7201616ec779d4392ed583ced8c8d3b08bcdd6e96

          SHA512

          c13217513ca37207c210430199f3275ebce86e357e0500af528562123f51f898080e80b6c1c98eaf7b9b5a58f5f4e539d974bddca044697ea7f6957ff8ca758d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          27d4682e904806f245506c5e6cf64895

          SHA1

          07f319fc75c65c3dfa3fbed2c347205aa3a58039

          SHA256

          6219f5ec449c4a6aac3cf2cc41ba46e0b4598db569039456469f255627f6a530

          SHA512

          c218b8126b10600ad4e92b6cabbc073e3657128f3c287f3e938620659d6e6983de0b01b175d6f84c5caa8353078569e742d135200ce248178af22066617adb95

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          65d42b621ed09a717bc501e8381321d5

          SHA1

          9f4d7898f9588d7a90452ff848aa6c11c29ab7b7

          SHA256

          85398ee691e05b499b3a68faba2748b6cc5f514cb29a664abde4ccb7e0b9b7df

          SHA512

          9bf386e91bf8dbcf48d3b2bffb6c66629385d8c99d7a7fb34485fb068da279923bcf61f56bbdbdc1eb6fc066a2966cb60d54ce700d2a08c59c672dd615be49e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e1c345d72304cd9d0a8c097accc6d57d

          SHA1

          873cfa51c86edd912b054b946bd81319d937a776

          SHA256

          e6c9912795e3dca2914f2ff22886b6e0461b8c5c6f15747e2d3099d7ab2efc5b

          SHA512

          b145f9c51aee2fb00adb5ea8d632801c027ddade3415ed9ac3daf6440a70de923003aa5dba931b9470fbf5703ea1bbbe01c6377386da51c47bc9a2ddd0e5fef5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0537a48ee458038ee6fc9c3393c13ad3

          SHA1

          2270710566ec368c0d83b895fd51df9ab571fa56

          SHA256

          bb07aef298911ca4ca54abcf84144f8b27a89588cde7a54042a6d8d4a7d62b0f

          SHA512

          1a129bb07202cf4f0fdf71ab804e09d6f835ea99b39d06faf359a8eed67e76c78967b5decfec0c16bd70e74d966778d9bfe35b562a5239c541f78883fb4b65b6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d80d19808c5f07d919228b78c6c949d2

          SHA1

          61dc58f90b2aaad8a76fc142d12ef893394e1f92

          SHA256

          9f6420ba8278c488b4200290c88d8d8d24ba3ccb25598c6e93d1e6c17dad6d3d

          SHA512

          750f8195f8de84db9929c445e9c7e3ac26857655376bbb0d3caafad739680e980fa09acf9aa04f8c26f7291fdc9831b06ad78f14cdbc55798a98cc5036c4805c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e98c4879a16d1cad57fa77209fc5d5b8

          SHA1

          b29dbddce2d8c75aaafc39d965799c149d3a2326

          SHA256

          be52173c86d74f25e297c8302c413a94367c359c7c55c45c2d5873025ee86f4b

          SHA512

          847f027c2e7890ddc773c7bfd98351306c342c98f07f53877e5ad8f0ca1374d4faea7d0fb26e56748ccd1d6c6059f9910b7db2f99761b9eb6471609c8b4e658d

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HWTP8BNA\jquery.pixelentity.kenburnsSlider.min[1].htm

          Filesize

          122B

          MD5

          00d64a82ba2d055e5facd3a30efac924

          SHA1

          308e275068e3bec5effca608fe9df2008c979650

          SHA256

          aaa3feed097fda6687c7c27860c24980f3ff105b6f326d10c98854145e9afa6b

          SHA512

          1151e227086964ec19c11eb388ace411a56a6e1da96409b2bfdb5313fb5df75223add437a653decf3afdfbd2be2cde421c512f9de423ad74f2ebbaf81119d8fc

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5LT06Y3\master[1].htm

          Filesize

          114B

          MD5

          e89f75f918dbdcee28604d4e09dd71d7

          SHA1

          f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

          SHA256

          6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

          SHA512

          8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

        • C:\Users\Admin\AppData\Local\Temp\Cab93D9.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar94A6.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b