Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 01:33

General

  • Target

    ac6a54095700816c9be949ed0dc7bef2_JaffaCakes118.html

  • Size

    18KB

  • MD5

    ac6a54095700816c9be949ed0dc7bef2

  • SHA1

    61a11bc4a51dec68777bb30900eb66d2a9ccfc9f

  • SHA256

    8584aa8f6f0407d6a107c46eb1173f2d036ab3c652f78985ea4d85af56350cf8

  • SHA512

    9eb0f0e47cc7ef5833f92b43406d14d7fdf6c56f2499e4f1ece0d239c40b81a4f91fd9060861aadda440fec3ff37a76244765be6603436b2318369a07bcb77ef

  • SSDEEP

    192:SLOzryrTQtHHsWiYUTBcyYr+OTobVfjb/DLL/yie3ogVj2yRBIDd:SLQyAt4jt/3L/ybogI5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ac6a54095700816c9be949ed0dc7bef2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2136
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2136 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2844

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5b775c386901e43d8a821d60f2cbf9d

    SHA1

    1cadac28d6e4a7522f972fd501fda20cbc66a8d4

    SHA256

    439b78158b7b828e14917dbeb9387ab592cde7ade4700eb4f921b242b03f72cc

    SHA512

    ddaf6bc0e6b910a9f55395db76bdf8750e21e7dce38e4c6f8258bb8901635d474c226635a3f9562474026499b1403f4218d4deff34787396f73cd9ce0ec22668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99c8b0b43be2a64a58c96299a6d55462

    SHA1

    65ecccc4218057db0d5f098a361ec89eacb76f3b

    SHA256

    dc69dba065b5d7f1cd25d47bfd0efeee4bb4092dcc3a62cbe8552dd36f824769

    SHA512

    eff7745bd277ee573fcc6c90778a3c7619c01459a602a7f36e163310d709cd008ee9303981afdeb2c5ea422c61ea30d337ce25c0ecafb370d12e636014e3a238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee15bdc0e8b0c1ab3faa818121c31825

    SHA1

    99ef7df77a77d31edf66fa562b05dc3379399cfe

    SHA256

    ec800dd959d678b7fc40756ca8133c265b3fcdeb746e4ee0cb7ddefc54136d7f

    SHA512

    e08c3f415fc54abde3cdc7c3ee7d4fdf869d8c0e9fef6ecb54269205c69d5703460206b5f7c03ee27b7178df7f0a108bbb9d7d046c709f183922dca4ba10f7a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1d362d3e86ef66365ab305bab83992f

    SHA1

    e6dffc0acce4b385ecac9e4f0acbb94b87d5e604

    SHA256

    e02b4d548b5587eb85236137fb824368501b246ace51572d25d21322974c88c5

    SHA512

    62a8a54957094266e4b8d530d983fcc6be799f6d32fc585e3b783e68b43495b072d1a29a71a4f14558cff5c30de4e6bedb9ba724db718b5de290c2152e876e98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6db060c08f474bea614878f81b3fd87b

    SHA1

    81ef04047013cbd1be66f919b1a2f6c1dea1af4a

    SHA256

    fe003f20a4cd179aa88f95cf45fa15a590165a397275ecb71249a75830efd64c

    SHA512

    1abbc1e4e11bcd3517a1f102a092a57449e68d5225a8d935f3d3eef58f000d0ec699493938084cf9fd71db67da40730d66cf6fbc856b6fd1ccf1dfe5f96dfb08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d81ad416e5ad8b621bf5b290efffcbfc

    SHA1

    0b972123868ba37f41113f9c05ecbe21ccac8afc

    SHA256

    793c2c548ca5e01d8f70b94969f2a12d20558ecb9765e35c7b9738402ed9083a

    SHA512

    d807c195b85951ad7d9f5edde5908a70d710a3b806baadfa8c95b5669242fa74c0692f397b6538e42cbce15a94640408bd4dd2ea4a79fca55da5237152098f00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30a03139c0372794214e10a6c2d53eaf

    SHA1

    c64d36ca499796e0eb4fe90570703abcb4fd9ed5

    SHA256

    dc403b935c97c5af84f9758f28b28f7f6bbb20523f49be575519ff4d11bfadbc

    SHA512

    760451c80f0ca69a30a8dcd43599187520a8b52158da120d7f2f9661c483c30e937596a2fd5eda5c75b57d7c4c87df33a30f5192f970b996b74398675925ce98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    708e0c1575b43c8cbc5a29a6a7c5e6ad

    SHA1

    509c2f72e46c307e350df5db7bf8e3fd3e0a71b2

    SHA256

    1b9b500d65bab5d2843f11287285d2f640e679e42fe37a83c5f299fdeaaf90bc

    SHA512

    a69e4b544743752ba410447187cf2846ef64b30b9627e22b221541ca65046a8289e4fcfb82d77b6aba6c9f052d265c8716f74bb038788d41d4e3d173f2251271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7b15a76fde0031886c3fe580d32d84d

    SHA1

    f5bfec8960b06b3359f54d668bead47cb56673d0

    SHA256

    837360ab28c84e5d40791c20f704f56eb0880b27ae1224efbd4769a15c159eb0

    SHA512

    b0c3c6d9b575aa3b2a66442a172f8bf62687e2197cf2028b75fe4a44c10d68ecb0c801e82d050c50f53ce3e417f1274efe4b9839327cc556d2fb03f03a7e21c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc3baac986e3ef84f1848a7e0350f23e

    SHA1

    e80220fccd5c43ed4556c1e6e125f80b45f090c1

    SHA256

    d745d0d5b72f7d9585e2447bb501fda4b2819ba1562c1a4f145d74f7ef63a6f2

    SHA512

    bd3609744c036f459cdef0ff046e92919caba62199d7b4fe0aae31efbe99ebed57adcbc6d11993e8640cb04fd8b28bb0fce07b415daed22653329dde670df81b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdaee9304b3dfc8373576213d948c9b6

    SHA1

    879eb88505384e8f218a6d9ebae6188ff1b9ad89

    SHA256

    d73cfac08f95a795e57dba11ea24a542a521231d32c908e32d28ad0ab0b25ad0

    SHA512

    6fce302d49faf179817990c02d9375f5c4f1d9c693b70f161fd79f592e8f73faed4b0c5fbd92a2a2669043faf410a564d48788e6f6cd3979a7cb8b0bcf455095

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7934c90be54c95090ca212ad65107e0

    SHA1

    c1b169bfb074e7f07c4ca31c30037ea6bf2c2e5b

    SHA256

    95f9e070d0ea9333c8e43e9b807bab125d5cf48ae2317809073ba1d138edd147

    SHA512

    88eefac275b4dd9c86ad87d789480d9605cd33bc9967f574d88c0f2bdc254252ba22a3b55b5ae283d3a85bb860cdd4ef62b4ec900d9e6910710b80ec3e41edee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cbffeb51af16d4c612447f0356c6850

    SHA1

    69e659a0888d34938bb9b4d8e57bb6714b3f46f7

    SHA256

    ea0ddfd250fd0a139523ad5578e553253dd7ff6be82871101caae68118695e47

    SHA512

    90e57ce2b0bac328d7812af8a8bc11086ff7e9bf59475f50d4195e4b1f859800f4289801887df7484d432d7a539be27aff796c22f4ed6518b49e2c7cb4772645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c487fd5441717c58d3fdc0b8f351bb2b

    SHA1

    6522c749f3038c08ddc1bd782fde4a9b795c4e78

    SHA256

    d061aacdce7c36b5e74faaed19927668708f0265d2d43ddbde0b2df1a38bd43a

    SHA512

    7672e22a02b3083257cab30fc98e42b99fbdc7011943cdb9a9d27924b6e049ddc8d12135cf0768a0d26ac5881931fc5d4a39cff7c223326cd11de02c9388ac80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    130e5c4ca58e8e43b106c7e07a16cc4d

    SHA1

    0efab962018d5fb9da5333ffda3b31d28abb0e4b

    SHA256

    8c838622f8f3aabc69ab5531e9a0f2fee453beb931134e14abe11b9d3d7f8088

    SHA512

    4a21339add29fae27d9be34ad2b7a7e66c4a590b89ef72884d6e4c766017e6bc799d43f689e73164f3f592444abdd82ae2a1f491c8597c1fbddb06c7eff0384a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    729457510bc22cc505b45a2b41e2c836

    SHA1

    9e49f15572581fdfc5a823813a56abb40d97e659

    SHA256

    5c7e7af6fea0ad989364cb2a22138f6d07cb2e52d4a63f5fe5e2802ebade5d36

    SHA512

    57567eeb1fb1c69270199eb4e073fd3909252851e4f2694bcc4faad6295fbf17c3e069652284a2a9f6afa1a307603cb4a92c540b236c13c1484fe14255437c1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    559018c536be80c0132ddd472bfde997

    SHA1

    3d317c51a4148f24c53388fa77d4a141af11b301

    SHA256

    ebdf26366b23538a7353a3bba81f8962499ddebf66bc41947faf6d0b6a1c899b

    SHA512

    95e24af9cd0db710725b1b4f807f67401deb816dd81bc82a7357ed7667692e8043c146f7a0106e1171a68fd47d5f287ec567a8341d1a1344331c3199b84a861e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c6a720f2d66864f788eff78a6e1d6ca

    SHA1

    857e236211d7b762dd6fac291417086c5b0d2efa

    SHA256

    64cb9c5b9a800a3cc2fff2d8b69d7d020af1323ee5935a2f813b9a0d0c239e3e

    SHA512

    42e18587f58dcba1762f3ebae9fc4eb5351c66d76280eeff0e645dcf44468d2eb3be82a344fe932ff68686974bcc0dd54fdfffa7ab95e7aa70b0ed9b147d9a38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    548eee83f52cc170e4b3e16cae1eca1e

    SHA1

    ef908aa32c5e149467cc5cc8b99adbdc51ee7aae

    SHA256

    85cbd02eea043c652eddacc52f0c81779823afe11ea1e5164062bf7fdf71baf6

    SHA512

    8beb092a83f721157c55893bbe39e48a2ad191d7fbd31d4027c5f9637f0affeaa3635ea66c631dda1dc53c36371fd6d7b2f0db5b11fb7d5e2f5034812973ad14

  • C:\Users\Admin\AppData\Local\Temp\Cab84DB.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar859A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b