Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 01:33

General

  • Target

    ac6a54095700816c9be949ed0dc7bef2_JaffaCakes118.html

  • Size

    18KB

  • MD5

    ac6a54095700816c9be949ed0dc7bef2

  • SHA1

    61a11bc4a51dec68777bb30900eb66d2a9ccfc9f

  • SHA256

    8584aa8f6f0407d6a107c46eb1173f2d036ab3c652f78985ea4d85af56350cf8

  • SHA512

    9eb0f0e47cc7ef5833f92b43406d14d7fdf6c56f2499e4f1ece0d239c40b81a4f91fd9060861aadda440fec3ff37a76244765be6603436b2318369a07bcb77ef

  • SSDEEP

    192:SLOzryrTQtHHsWiYUTBcyYr+OTobVfjb/DLL/yie3ogVj2yRBIDd:SLQyAt4jt/3L/ybogI5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ac6a54095700816c9be949ed0dc7bef2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2844

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b5b775c386901e43d8a821d60f2cbf9d

          SHA1

          1cadac28d6e4a7522f972fd501fda20cbc66a8d4

          SHA256

          439b78158b7b828e14917dbeb9387ab592cde7ade4700eb4f921b242b03f72cc

          SHA512

          ddaf6bc0e6b910a9f55395db76bdf8750e21e7dce38e4c6f8258bb8901635d474c226635a3f9562474026499b1403f4218d4deff34787396f73cd9ce0ec22668

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          99c8b0b43be2a64a58c96299a6d55462

          SHA1

          65ecccc4218057db0d5f098a361ec89eacb76f3b

          SHA256

          dc69dba065b5d7f1cd25d47bfd0efeee4bb4092dcc3a62cbe8552dd36f824769

          SHA512

          eff7745bd277ee573fcc6c90778a3c7619c01459a602a7f36e163310d709cd008ee9303981afdeb2c5ea422c61ea30d337ce25c0ecafb370d12e636014e3a238

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ee15bdc0e8b0c1ab3faa818121c31825

          SHA1

          99ef7df77a77d31edf66fa562b05dc3379399cfe

          SHA256

          ec800dd959d678b7fc40756ca8133c265b3fcdeb746e4ee0cb7ddefc54136d7f

          SHA512

          e08c3f415fc54abde3cdc7c3ee7d4fdf869d8c0e9fef6ecb54269205c69d5703460206b5f7c03ee27b7178df7f0a108bbb9d7d046c709f183922dca4ba10f7a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e1d362d3e86ef66365ab305bab83992f

          SHA1

          e6dffc0acce4b385ecac9e4f0acbb94b87d5e604

          SHA256

          e02b4d548b5587eb85236137fb824368501b246ace51572d25d21322974c88c5

          SHA512

          62a8a54957094266e4b8d530d983fcc6be799f6d32fc585e3b783e68b43495b072d1a29a71a4f14558cff5c30de4e6bedb9ba724db718b5de290c2152e876e98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6db060c08f474bea614878f81b3fd87b

          SHA1

          81ef04047013cbd1be66f919b1a2f6c1dea1af4a

          SHA256

          fe003f20a4cd179aa88f95cf45fa15a590165a397275ecb71249a75830efd64c

          SHA512

          1abbc1e4e11bcd3517a1f102a092a57449e68d5225a8d935f3d3eef58f000d0ec699493938084cf9fd71db67da40730d66cf6fbc856b6fd1ccf1dfe5f96dfb08

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d81ad416e5ad8b621bf5b290efffcbfc

          SHA1

          0b972123868ba37f41113f9c05ecbe21ccac8afc

          SHA256

          793c2c548ca5e01d8f70b94969f2a12d20558ecb9765e35c7b9738402ed9083a

          SHA512

          d807c195b85951ad7d9f5edde5908a70d710a3b806baadfa8c95b5669242fa74c0692f397b6538e42cbce15a94640408bd4dd2ea4a79fca55da5237152098f00

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          30a03139c0372794214e10a6c2d53eaf

          SHA1

          c64d36ca499796e0eb4fe90570703abcb4fd9ed5

          SHA256

          dc403b935c97c5af84f9758f28b28f7f6bbb20523f49be575519ff4d11bfadbc

          SHA512

          760451c80f0ca69a30a8dcd43599187520a8b52158da120d7f2f9661c483c30e937596a2fd5eda5c75b57d7c4c87df33a30f5192f970b996b74398675925ce98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          708e0c1575b43c8cbc5a29a6a7c5e6ad

          SHA1

          509c2f72e46c307e350df5db7bf8e3fd3e0a71b2

          SHA256

          1b9b500d65bab5d2843f11287285d2f640e679e42fe37a83c5f299fdeaaf90bc

          SHA512

          a69e4b544743752ba410447187cf2846ef64b30b9627e22b221541ca65046a8289e4fcfb82d77b6aba6c9f052d265c8716f74bb038788d41d4e3d173f2251271

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c7b15a76fde0031886c3fe580d32d84d

          SHA1

          f5bfec8960b06b3359f54d668bead47cb56673d0

          SHA256

          837360ab28c84e5d40791c20f704f56eb0880b27ae1224efbd4769a15c159eb0

          SHA512

          b0c3c6d9b575aa3b2a66442a172f8bf62687e2197cf2028b75fe4a44c10d68ecb0c801e82d050c50f53ce3e417f1274efe4b9839327cc556d2fb03f03a7e21c0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cc3baac986e3ef84f1848a7e0350f23e

          SHA1

          e80220fccd5c43ed4556c1e6e125f80b45f090c1

          SHA256

          d745d0d5b72f7d9585e2447bb501fda4b2819ba1562c1a4f145d74f7ef63a6f2

          SHA512

          bd3609744c036f459cdef0ff046e92919caba62199d7b4fe0aae31efbe99ebed57adcbc6d11993e8640cb04fd8b28bb0fce07b415daed22653329dde670df81b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bdaee9304b3dfc8373576213d948c9b6

          SHA1

          879eb88505384e8f218a6d9ebae6188ff1b9ad89

          SHA256

          d73cfac08f95a795e57dba11ea24a542a521231d32c908e32d28ad0ab0b25ad0

          SHA512

          6fce302d49faf179817990c02d9375f5c4f1d9c693b70f161fd79f592e8f73faed4b0c5fbd92a2a2669043faf410a564d48788e6f6cd3979a7cb8b0bcf455095

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a7934c90be54c95090ca212ad65107e0

          SHA1

          c1b169bfb074e7f07c4ca31c30037ea6bf2c2e5b

          SHA256

          95f9e070d0ea9333c8e43e9b807bab125d5cf48ae2317809073ba1d138edd147

          SHA512

          88eefac275b4dd9c86ad87d789480d9605cd33bc9967f574d88c0f2bdc254252ba22a3b55b5ae283d3a85bb860cdd4ef62b4ec900d9e6910710b80ec3e41edee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5cbffeb51af16d4c612447f0356c6850

          SHA1

          69e659a0888d34938bb9b4d8e57bb6714b3f46f7

          SHA256

          ea0ddfd250fd0a139523ad5578e553253dd7ff6be82871101caae68118695e47

          SHA512

          90e57ce2b0bac328d7812af8a8bc11086ff7e9bf59475f50d4195e4b1f859800f4289801887df7484d432d7a539be27aff796c22f4ed6518b49e2c7cb4772645

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c487fd5441717c58d3fdc0b8f351bb2b

          SHA1

          6522c749f3038c08ddc1bd782fde4a9b795c4e78

          SHA256

          d061aacdce7c36b5e74faaed19927668708f0265d2d43ddbde0b2df1a38bd43a

          SHA512

          7672e22a02b3083257cab30fc98e42b99fbdc7011943cdb9a9d27924b6e049ddc8d12135cf0768a0d26ac5881931fc5d4a39cff7c223326cd11de02c9388ac80

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          130e5c4ca58e8e43b106c7e07a16cc4d

          SHA1

          0efab962018d5fb9da5333ffda3b31d28abb0e4b

          SHA256

          8c838622f8f3aabc69ab5531e9a0f2fee453beb931134e14abe11b9d3d7f8088

          SHA512

          4a21339add29fae27d9be34ad2b7a7e66c4a590b89ef72884d6e4c766017e6bc799d43f689e73164f3f592444abdd82ae2a1f491c8597c1fbddb06c7eff0384a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          729457510bc22cc505b45a2b41e2c836

          SHA1

          9e49f15572581fdfc5a823813a56abb40d97e659

          SHA256

          5c7e7af6fea0ad989364cb2a22138f6d07cb2e52d4a63f5fe5e2802ebade5d36

          SHA512

          57567eeb1fb1c69270199eb4e073fd3909252851e4f2694bcc4faad6295fbf17c3e069652284a2a9f6afa1a307603cb4a92c540b236c13c1484fe14255437c1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          559018c536be80c0132ddd472bfde997

          SHA1

          3d317c51a4148f24c53388fa77d4a141af11b301

          SHA256

          ebdf26366b23538a7353a3bba81f8962499ddebf66bc41947faf6d0b6a1c899b

          SHA512

          95e24af9cd0db710725b1b4f807f67401deb816dd81bc82a7357ed7667692e8043c146f7a0106e1171a68fd47d5f287ec567a8341d1a1344331c3199b84a861e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c6a720f2d66864f788eff78a6e1d6ca

          SHA1

          857e236211d7b762dd6fac291417086c5b0d2efa

          SHA256

          64cb9c5b9a800a3cc2fff2d8b69d7d020af1323ee5935a2f813b9a0d0c239e3e

          SHA512

          42e18587f58dcba1762f3ebae9fc4eb5351c66d76280eeff0e645dcf44468d2eb3be82a344fe932ff68686974bcc0dd54fdfffa7ab95e7aa70b0ed9b147d9a38

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          548eee83f52cc170e4b3e16cae1eca1e

          SHA1

          ef908aa32c5e149467cc5cc8b99adbdc51ee7aae

          SHA256

          85cbd02eea043c652eddacc52f0c81779823afe11ea1e5164062bf7fdf71baf6

          SHA512

          8beb092a83f721157c55893bbe39e48a2ad191d7fbd31d4027c5f9637f0affeaa3635ea66c631dda1dc53c36371fd6d7b2f0db5b11fb7d5e2f5034812973ad14

        • C:\Users\Admin\AppData\Local\Temp\Cab84DB.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar859A.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b