Analysis

  • max time kernel
    118s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 01:02

General

  • Target

    a77207925307faf46d68cb8765c04ba5_JaffaCakes118.html

  • Size

    68KB

  • MD5

    a77207925307faf46d68cb8765c04ba5

  • SHA1

    c1888f24211da6003bffea03396521e07d24c966

  • SHA256

    0d6695aedbd92bd98ee58083cf2072906a47df6ceb362757799a38309539b6ca

  • SHA512

    f288d8f5b5c722a15d982890690b2a2ea695b909fc06bb352be47d44c28371cb7d7f9bd23338e66ab24c13e3f34b7126e2f9015b0fbf71acbc447de59fd8c732

  • SSDEEP

    768:Ji5gcMiR3sI2PDDnX0g6R4tMztZmnmytioTyv1wCZkoTyMdtbBnfBgN8/lboi2hX:JxF2Ym4rTcNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a77207925307faf46d68cb8765c04ba5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1692

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

          Filesize

          889B

          MD5

          3e455215095192e1b75d379fb187298a

          SHA1

          b1bc968bd4f49d622aa89a81f2150152a41d829c

          SHA256

          ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

          SHA512

          54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          fff983f78e67edbc9af542a90eeb810f

          SHA1

          5303b443b3b8682f1af9e5fad1e053fd87257f67

          SHA256

          0a9c890578e8cfa5bc0f5c9d912a01476a04e2acbf3bd25d5dbfc1d66f0fd83d

          SHA512

          2a750f30356cbbbf20c02fab11cd8d0d4965504f01bca2e62db82b1a93f7c6b427ecd814dbaeee7a12a78fa66e1272be81e2305d760d47c1d0a46c5e9a03e43f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e02c145830a10a693110fb8c2a6c3263

          SHA1

          444e53d23a4d9b7814eb41dd2071d257302ae5d8

          SHA256

          d23c67c52836a06461b81192a7991cdaf46bc6667e3601d80d56442fcc2642b3

          SHA512

          504d771c2b24604c68a4c4f2d574a630ca3d6285e16e30ae60c5032877941bec193c4bd2791de1cb59e3d62019329b93f35adda59b3f5666f039caa1cf47540d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f56b159115c7b9afc724c195d54a19a9

          SHA1

          ffc655782b280d74c67673d8cd4533dcb55bf422

          SHA256

          3c006f446ad91fa092f182cec3fe3b81339d8d393141d71131467bf28111d193

          SHA512

          5996a17673a07c40493d981fcc3d769f2ac175d83c7b85a7369e392c91be9bd124e6831c2808f5f2fa803ac1f52c22105aae09d09275f5842e36f0ed9688e0c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7d9df0012bf4a24c733b2c04ec2eea60

          SHA1

          ff4ddda9f4a4e5a3a19c7fa94b5c089da8c2893b

          SHA256

          1cb2d062cb727420b5519ca2a89bbd408e5bd738290dd2a73413fc47f20baf0c

          SHA512

          8884d27c5e4adbc41c38015575d5de37d7e77d0fc881cc8a2bca50df48dd032894d9816da1f466a18cebc13aca6a82b0c3ba7b15d4f5c9005f1f2ce7c51d2f70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1747d96f02b781e36de3e4247a77c21c

          SHA1

          639a122892f7f2f293c1334d5a67f99ec61b0b0c

          SHA256

          1d882bb59763f3ce6a2194b2205ef5a7ae0d86ff25fd6dafe8576715a022a747

          SHA512

          b49537455f8fa46a0973ee17ca1bdf4c2ef0db3f5ac60601ccd24e13359e0b86c8bbc6955b3d1532ee197bc540a967ca02d17826159621484e7cdd2596d6da88

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          22db6d1c273d8db375be374c1b56b7db

          SHA1

          58932483892502cd5b24bf90541eee38e35c871f

          SHA256

          f0edc95da14bc908cdb73308d100b299458e1cb83dfafd86288f8aea99349612

          SHA512

          0d8227c28f06d673b7144797061fc1e2cdbd366d951e2f10134b8bc276ef9ba07e6a06802960409976e2f36d291fb32ffd3c464e84a2febb17294f18b03bc67c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f00ca62c21daddf88a6bd68ad5a86d81

          SHA1

          99e2a1e89fb8e505c8a08ff894df12cccb2d20de

          SHA256

          ac0917c44f9d5e3220471d0417d5790669aa8f6036b022fb9895f1187f19fd93

          SHA512

          670ebcea4dca78a65a4a3bc2aef3badf85acb2a88b75033b5c8c0c826680e2a1c5178dce9633faeabf629b2c3083087a5ba4cf4369b858f181a6bc30ea660a21

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          549712b84fb01a13e47ce735a864d540

          SHA1

          12b60a2fed028928e85b8f5d89a5b237855794e5

          SHA256

          710f3a94d63cb093706b3b82ad2d9706a32c52e068bc1a65fe6bb53c7bb40a70

          SHA512

          096ab0e3400db0cdd1d044fcdf967646c9eb013228e2e847263bef1beb62a96a6b63f12818bb1311b34637d78755b0cb3cf2f67b53df3779eaff802e08f4e0ff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7e9fe8b8331f9c5ac234601b6e251e55

          SHA1

          b7a9d4a85798bb0d5d7953a9db5be94a40ed1cb5

          SHA256

          e7d4b55dbdad9503795e3e744af71faea651d90f01781046568313afe0b80386

          SHA512

          eddb1212d6b9529194f56bcc82f526d6e0db4f098ee3932d58bc277c90a04171dcdf825bea0a1f33546f3cc7811350b73faf75702797f735fbe5ff5a512e0b9e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          7fb3ed5dfdaf0b4f95cae0c95f30796a

          SHA1

          a7b9c0668306ee767d0fa3ecd56ed26ab82506c1

          SHA256

          b03b85eff2c4dcbf0ebc96d4423782ba3f1743d8261f92c52eb5b637cb7275a4

          SHA512

          1006c8297a47273881a92e7584f3108cb09e47dbd02f1ebbb6ab042f36fe22a9ed3f4f2e5b549c289a301a3a80887cba6f57fae362b93dc59ee5b5bc3790cfd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

          Filesize

          4KB

          MD5

          da597791be3b6e732f0bc8b20e38ee62

          SHA1

          1125c45d285c360542027d7554a5c442288974de

          SHA256

          5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

          SHA512

          d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

        • C:\Users\Admin\AppData\Local\Temp\CabF566.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarF839.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b