Analysis

  • max time kernel
    144s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 10:14

General

  • Target

    a5076e53f16c2ddc042fc79431c9bebd_JaffaCakes118.html

  • Size

    139KB

  • MD5

    a5076e53f16c2ddc042fc79431c9bebd

  • SHA1

    cf4c1f2d3d5b63f49f30d7f5f17faed571affc33

  • SHA256

    79553324dbebd9ec8f9b53ac8715ef561d2fab2139a27747c63d3b8cfa87b790

  • SHA512

    717038d11a39b1a90198a0bde4225af29186b6493ec073faf9fac88588658d3fb366edc40e513ff291d03a5ef845d76d983320f8e920296bf9d5dec52841824e

  • SSDEEP

    1536:Sq7NwLxvlyEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:Sq7LEyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a5076e53f16c2ddc042fc79431c9bebd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4642617e94b925767c80013d8a3134db

    SHA1

    30fc6a3f51d3f7f874293fef900ee3899aa9a1c3

    SHA256

    5785f6ba60c4a6eb14246d3028a83fd9d364256b52364ef3e50899bf39a884a2

    SHA512

    b2e096ed366922ff5808dc4e5938948b1590bf1c184edc9ae747107915ba923e755f2ea0629b6f406315a3d1ed066872ecab9c7a9641b72201bde42466ae7641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ca47748e01d1475be9e8beadbc871f9

    SHA1

    4803bf8b2e94534b29e01a2f380eb63b99d76965

    SHA256

    25be018244e8905568a65852cc669328163c55ae8a64ee78b362af4944455082

    SHA512

    dfd5b51f7a3e895dcd7b5ea727969696028d2ec60efd0beb70010763f3e70f2027557f9affdf921b16b07c115de4391a0cb1a89bdb9fb6ea15ccdcd46f4813d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac6ce8ea1cbb3068032f0da0592fdd86

    SHA1

    ce0f951da7b2b3f00944ce13f48dcaeb69907739

    SHA256

    858fe5343351d683ff34dbc8483373dc6d97372544903ab630fd4c204fd1aeac

    SHA512

    27ea1730954902582c2bb25a06a8c844ffc464ab3c49158ebce144ec433442836086d557f079a1e8146ef8354db25f42861efe0c60220bce274839985abd7b24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e66794b3f8f3c35709dba910da645519

    SHA1

    aaf299229abc1c258bcf3b31a8f5746143f6225d

    SHA256

    064d1fe1d524b6bffb6babda9cf868587a3507289823478e6b30bb19bbec4cda

    SHA512

    73b8ed314452bb89e740c2dfd239b775cb3aef6fd138fbd5644f981b35091074b52602d6af21b6d04625d8b720b238f845ffbbf5c8a73a23a0a72d5041a0f736

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0094b0d9205c1cd5b625657e89f49c10

    SHA1

    d14696599747de15fcd0fa734652ea2f378c02e9

    SHA256

    a0269ea7a05fa76ae0e345a55f348c812cd48040c22581c3483a8d0e26cd1ab9

    SHA512

    d0e55ccf0584a3c443b128969ddc9b411cfd5b3ced6ba563985ebf1644c561932463dcfa4761723ce83d9939c7327a8bfaaf91a6b315b820d08e2359e0f94cc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f77569353c62c4683a3926390e09cc77

    SHA1

    3d96746b78a9726827b0e0bcb53d0cfacc1eaeff

    SHA256

    5565da0f773a220393abae86d33cb99ca5a148fe5701514f42bae82e2b91ea40

    SHA512

    26d5df0eb5491f78c6b7a7430b505ba10edc93334801b1a85adb127d4daddf17f28d1231b65104f54185d891f857d114ea4bb8208f3b9ed9ae42ec6554834f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf43022a810e46c0e191ef63f9b0f2f2

    SHA1

    eb17ab5c4696270cf575dc2771d420d23f1c3c42

    SHA256

    d69c27be6f32364821062b1b452374e097eb95ad1d0f4a51de9f5483e89b55cd

    SHA512

    799f94c7334824b11eac02d4719e7cf656f4cbd82d0629f25f00b7e6791342eff86ca4308aee35cf6a72c4ac32a66d11f5bad45c9225dadc8489c148615f64b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17435ee76093e89a6d53e1a394a49b97

    SHA1

    7251f7cfb591779ead8a450da4b42dcdfd363519

    SHA256

    d3cbb97621c4550cb25704994baa53b6b4082839661c10089ea814ba04e18978

    SHA512

    067b2564368497c3e0a7748fe18f8025c11bfb59798cb6588d2166d706ccb1ea1c741e568973e7ea65120cbee530927af3c57e61facee23d98f29259be34d365

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a422f105ec7647b9d2ac6e4fdec4505

    SHA1

    0a028a395e60d8c6f3f5c253e6948eeab034d274

    SHA256

    c33bbbe56dd95ff60539da7ab698d1459d85e26c73c09b2a3693ff926845f4ec

    SHA512

    7371328ffe4774b50aa5e2de7e1c2d347d5c0c455b0b39a1ca9a3461d078c13009d3a83ccef0926cf7667c69afb7d53be4edf012c4344aab180bb089ec6ad5e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f55bc3cf6eb4ae810d9a39f6ed4075cf

    SHA1

    3218ee1da73553afb8f2de194d207d765768c208

    SHA256

    b1ea5d264419953f54f053a32c1b1e4dec1afb9bc05ad35efbfbc36c3228994c

    SHA512

    aead9164745c4c1a7b061252eb5ef9c3fc4640169310c98eafced87c4761df4239483d507dd85edf27eea9ff26ea6eaa532c967e6c3c532ca3962319b78c643c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    687818943e2e5d1a33b416f3354163ef

    SHA1

    a79b82ce2d2253333a0a0a5e32f04331292ce74d

    SHA256

    b47c2d5cb68beee62795ed094fe2f103ce9994c8674d1e30079e7d4d447c4568

    SHA512

    1e7cd0ef0c165378db9cc8156fce8500e41cafa8a534ec9da703a35974749564ed0a67c94f7035ab4a93508974893547e558e835a87ab3291563b6f70bf09667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2c0895cab4ba019f25f90b4709971ad

    SHA1

    2deb1d96bbae64274aefd792fef6279acf9437c3

    SHA256

    cf34fdd1817ea3231fdf0d37aee0f06e2fde35f7052a3fa07b0997298f33cc27

    SHA512

    d70bbe78e1e7d6b13ef63a9a91c08476fff37dc1f2bef025b99f19e7d86c8b8e7b2111e5888c210f6d10a221ce5718d7ed8bf9d00f5615cf4edb51e1347765a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ba162db5c00fc2685c07c033fe42772

    SHA1

    4adb272fb6520dbfa75200aaa2ca352deeea7bc3

    SHA256

    7529e08252709772c7c9bfc960ee7b8c07a67252572692dd3c3e9afc5dad6838

    SHA512

    aaff73b0624d73c9c68e94a72a6dffa4acd491fb91f079f1a8004ca6c7991503ce0c42a7e33356625e6f7cfd4e86307a178334c5ff44a63320a5cc86cf27cab7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67688b1661c1a22db48c34ae1e8bf5ae

    SHA1

    c74d4655c0326fc2e2411f2c731980e8fc35a2f0

    SHA256

    5c4db2f022774c29c902cf7a0fac09f8477f2c612079a6e49c0966a85605fd67

    SHA512

    0fd7e9d8618d678ade3595b68ff278e0b83d26aa4f5c0197328935f123eb5f1ccfe7111733f6e587dc6cc6aa99e0d7b3d84ddcebd1920c552f2a04c6119c2cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d356bb3ff97bc5a9339d1e5d3d5708b6

    SHA1

    95627e6fc6caa9a3209f687f7639b9a74cbb9f1b

    SHA256

    a330c686d7572d2c549995bdd6e71cb429b68a91cebc5405a7aecf308b9680b1

    SHA512

    c50bc80fd899acc9bf4b8335f670025a499dbc2916bb6301a3671da0e455afb06f4867f256f168b88dd28870db871395954a3b8e2e58bc0eeb98976fbd9af956

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    608c1a694efbb9844e2a7be365ed60ab

    SHA1

    25edf3b1bf61b620acd88995d83a324a6cfb8a92

    SHA256

    731ee5a38e16533338926c263d62fb08e86817054c9b29296340287ccb7404f8

    SHA512

    bfd9bb5492636d330d036c5d44ce0f64064673f3f91a04e9403f40b6122845d6e5f570f36baa1de9955bb028ebdcec7cee595ef3f5261b3b751ee3a476017fc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c17f06d02d731eccb277fd3da4330ab4

    SHA1

    7103616d34bfda7a83ffcab3f56d586aef4c2a00

    SHA256

    1425df57d493513128d70cb97d0d6c66e9167f202f210f7d463d7816008ce9e2

    SHA512

    2145048736c55c6341c5ddb1c44876b53f5b3b23207a2822e0d9988eaef8951fca800baa556ab0ac13edebdb9e382899ff4bac2dbafdb19650c09e4734b8c3d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e68562e675d635d1bf1e0c754d3ce096

    SHA1

    ff7da5909386f087d0ee76a8c4e3ce0eb8a7467c

    SHA256

    287046f1f5d7ea37e4d60415401f9bb25667248376d7fb324d54a878200e6340

    SHA512

    ba267f7cbf26cf963ef55ac42361f1c55a817ab0ede483ae502aa277c0966fdaf72c2046ee972526c0376a89ba41556346ff43d4642d79bfad2483716027bdda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e290360cd1d010306a90fbb2c37ca26

    SHA1

    9940de2e757b937ee8c439c4d3a1bb9ae44c91bb

    SHA256

    67341cfd482270a164fec4baee72de2a13cd8420e778e7a194d00264b852660f

    SHA512

    9d43f7c7c7e16d18be9083a94b0181e5d08148a841c7af193df8c3e5364555c607cd504312d2a1aebdf97e808646b72363fc8c25d69e736065caee7bbd09f292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8be8d65f7e63e3294b772e810778f143

    SHA1

    ca76d8893c71177520e9ec9c71d2e29058fc7d3a

    SHA256

    046f5abcef9144c4671d0c07f5d79aad93c3639fc702f2fda4dc4ea5cdfb958b

    SHA512

    fe8966e7f006a7c4a7b0fe0313975d1aefb0247e7acc9f2a64e289f02ec11fe332a9b3dc9d680ea4a4b1918bb47b0502fa89d71a5f1d05de2dddaa3f3c6bd9f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4938c4d4075ac9c6714356dba189712

    SHA1

    5ac08341043d33c239c7de0942270ee6085c18bf

    SHA256

    95f278b078748366dfa26fb74eaba41e69bb5c77a5d3ee4ce6db85b5ea201857

    SHA512

    8663d8df48849fc0fc6ae2c3cc78a77a05760a7b7d7d52687bdbcd7baaa44d2144e3296a58443cf7a75760b14566c992ef9e97da514f2c1f72e8a254bfe18934

  • C:\Users\Admin\AppData\Local\Temp\Cab99C1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9A61.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b