Analysis

  • max time kernel
    137s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 09:15

General

  • Target

    adb639a75d6a98bf7a245112360be0c5_JaffaCakes118.html

  • Size

    460KB

  • MD5

    adb639a75d6a98bf7a245112360be0c5

  • SHA1

    1fcd229306f4addcce3c479f4158446a3142998a

  • SHA256

    e2fca5b3ae036f7e1a904bd398e5cb34f245ee9e692b70b5e344b9e7f39efecd

  • SHA512

    4de8a4c7e1552737c9351bdbcd5de11967dc37ba12901f807f7663a342a209a3634aa3802876b0321da4f12a36b7a1b9449814643420b11d4050a7822937b29e

  • SSDEEP

    6144:S0sMYod+X3oI+Y4sMYod+X3oI+YWsMYod+X3oI+YLsMYod+X3oI+YQ:l5d+X3Y5d+X3K5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\adb639a75d6a98bf7a245112360be0c5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b026a183a1869351a47308369a92cab

    SHA1

    79f71ade2d03fccb4367a1e512ede496c2d8b974

    SHA256

    c7c84be555c32475636474ad0bca726703387c605a53f087c516fe9f2e854fb1

    SHA512

    8803de0ade201c04d26c172c12236518b6230c56dd97d19ca6ac0ace45263d83072fb3086eb8ea100f36e24b69199915db38896ba031512bbefe19f50a4c6705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11076132ffc53b48531a6fe4fd8446b4

    SHA1

    39b3c4cb0c33e67bd76152d107a4d268936827f2

    SHA256

    6b69dc40efb364f9a51ad3d5cf4970611887fde5e022c971b0f33667906cda84

    SHA512

    04f32cebd405a01e507c992bb4abd197ac83fb24a39d9fa6ee14c1f2348c90cd5e01794c460033a214bfe1e60106d0a027b9bdd58d4a1b1b9e42896d4e5ad379

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4afdf6d9fafb3a40eace541bc89cf6b9

    SHA1

    a7fa581851d20120f6ceac1e556c9464f54682d3

    SHA256

    5c3bf7882bf91d5d4dda0034a8be2a8b0640b562713e52285aef26b6033431b6

    SHA512

    0de6f25ad2a6116452d2ab9477b0dfc7f135fa7c1326b8e100f6432e6b75b5e2a3a868f80156ba823437c479a8a8c33bbfa4d6bb356351f7ba514a33fbc8e92f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f9f50d2b4fb8ce7c04c55fdbbe0d3c4

    SHA1

    db4ef7c88aaab3b705ea6d5b7efb19478b85ff84

    SHA256

    41fad06866a7cb7ac1bd43f0d6f6c199b5094d437cdf4bb7f68c7d067f7cbf70

    SHA512

    c651124edcd058d7c969985fe4c1e70b715b148de08fa70cacccacd8862305dcba1956446fc2beca6c02aad1e23ecebbe33e4e107e79ac59c7dd01e3648f8fd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    825ffbcb53389bbf89889f1185e04622

    SHA1

    b06b1c3a1cda4812be4bf3a931b6b3de6d85f897

    SHA256

    2d9aedc09a3a8b77d84bac702a8f21d53538f7a0616acfeb48f904b62ad915c7

    SHA512

    e752bb69307d4ce0b93147c6ec9db3b04d82016bffac15e528c18b3a93f01b611984fa8b2e14909502932482cbd5f36aae091bb68ed1b6fe72cf4be54b0b7d1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa742b47973485959ebcc91b624ff82b

    SHA1

    4d373fb8c38e992a062d8b67dea43a05a23d277b

    SHA256

    afedd5e3e60b6ef83da4068777fe3966d3c22e112aac43d5b35f08f3715b837f

    SHA512

    95924396a1332bba8b356f4e9243501fc1360d5c9e229c72f7b606e5d8241a769c88a8d0e4b806d8fecb1542ef386da6101ab43f42b79a64e5ed0d2e81da76e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3fb5351ec5a9a406b980d6a76400114

    SHA1

    187077335fe36a7c592949f45544fbf57955ebe6

    SHA256

    b3192f6072216d96914707e3788e94119e096e0f27b8da6b5b5355256cb1020a

    SHA512

    c4f7d08547c9f1b7d0f57701036fe42df1b36a7c5eb2db8fc45b605ed5b957beb37f241d5c6aa5402b8947bf45a39917ddba23db227c6515c0fbe172f4f688bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a65a7f353786834906a362342c4f347

    SHA1

    2629c116f1d4703b033c1e0667d74ebeec802efa

    SHA256

    82e0cb54ae060c8d9bd07daaeffbfba187901152aed5bf247d050bd34b1a843d

    SHA512

    b25c7e4992607443939207721d3829002c8003281e3913804c75a0a302684f501c618b9f737a5076837058757b45cf287cd08f67b97cff5a19059c4f4f301fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28280da580d8ac049a21ae79b5596e7b

    SHA1

    270356ee00f34e190204163353c6792b8a2c9c6e

    SHA256

    a637bf44924f5ccccdbf482c3deaa2e22500c86b85d3984ff16b11202f6b1b16

    SHA512

    b52f45170debba8a979d2a4be9416c04ac338c76d84283c509b29c70692d8377fca7fa56cca801d1402cf1739105b971c9e0a3c18c5b4ba0b756dcc523fce973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aebdcd028bc6c282f2e697b8bb1278b

    SHA1

    8084f3ece7bb5dab46e0970833f92f1f17b75b38

    SHA256

    45c501a80250a1f94819481b3cb06b84b30e6b8331b09a22108c8ccfca71051c

    SHA512

    f8d0e27870b341d75fc3a3dc86b9f5b57588b30581a8c713b0af998548285263d1f6bab16435d8d52bd036f52182bad66c893dade3e2849a5372d48f7f37a4c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0277d31206ead3c0e155bb2838bd9f4f

    SHA1

    662c64372a05d9e105ffd61cd4a4d2af790b157f

    SHA256

    dd8e388b7be7a05133b3a215355c221fffaa4fe42216525f3e8e25c8cf495ceb

    SHA512

    5a64c4e132e077171c260fb9fe319204acb2325393c3407632735d4a6e736943f5d55197a9a03271e6578eaf9d01ee80295afbcf4e6c98f50e27c9ef64e29dc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    802ea6c049fb5a7aebeefa8de03d9c65

    SHA1

    4ed27e8296dd0347a2437913b47e3e198f095e93

    SHA256

    fcd94731d179689cd476fb07851326843d0399ed0a8d94b35a4688497e826c04

    SHA512

    30ec1ef2e13432987daa3dfdf65ed3549763d41f79d1c645786b56199be4c0c6c6719163f932ad746aab658e43dbfdbc204dd72ebf07dd5f343b994e27ce9a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9015a755536d8ce8fa3ae86c45dac21

    SHA1

    35f6de7ea62cdc16e8c3bd965c9c72078e055fb3

    SHA256

    a4587c30359135d92b7fc7984db6a82b758ad130e7d05eeec6eb705967e2f95f

    SHA512

    8e2697622f604f6d19bb9d27bb9ed631e305d2c70d22f74f6489dcf60bfbd8d8be08b7554f98eb4f910fb6f27655efaac6951669fac106371843e90ac77abc99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ace179762e7bb19d7819d381e271b9bf

    SHA1

    1e5ff0910acaa75de2d8d04df30d14bdd2473805

    SHA256

    d2b5680e818494300d4c677a4f491a9faa0c536f1ca00fbfa0aeb22787dcd5a5

    SHA512

    a54026b15713bce0b33d13689d3c98e6b63ff9a06bc73a382b057bd6efebe76c09132ba728cef50d740c132d60c9cef81f8ac01d8a09f490970822f30e5097e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fb53e1569195f244707cb336a8d750c

    SHA1

    cb1052be19c588f157e7469dea8be4db1b11791d

    SHA256

    14c264cc99c2c56d893647c6fbd0ede612864e3873a2e8b8a3aedeab762bb866

    SHA512

    b57bfa643d2d6d67fd7aa0c564dee1131193496e5f543ef5e55c98d3fcdced6604889cdcc7111a32eae564351af0b8301393f2d96afbff1ba50c84afdd4ef16c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ff267b80fe74b7e118640966a9f8cdd

    SHA1

    833801f2c1bbe398fa0027b5b12839bf70809373

    SHA256

    79b2c4a31aa1c663599205f46a0973a76eddc493a3a8fcdede9bc2900e67cb5a

    SHA512

    94c983fa4c786a5b550e964f2cb603f50474473234ea2ede28291a860413f5f5863c86509c7faba2e2acfb49a9770708d9c921939455daa263f7057374fa6eae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcd64f2f7f0d8969f261017843fd926b

    SHA1

    e442caaca0dc65a365d6b6ff0a8153fc6319b755

    SHA256

    90791705f9a8330526c3def325b1f4913e9b3f0e84b08fef5ed5eb3b1b7822a8

    SHA512

    c40d1e08d85fcaa1299608f1e0db4e0320e84db154637b86528b2bf323a8897edd4dea810ea9d4caee9f03dc1789cd11fedacdd79b2e39753aca75273d91fe91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf43c4f76b4b2321c0802c2ce1818ed0

    SHA1

    acb280ac2176fcaf10778513bdbc4695a565043e

    SHA256

    e7276de11d40bda6ec791845a54b41238e96937f5d86a22e8f583717c6a3b0b9

    SHA512

    a7d74a794cfa2489efc45c6e42482a88d40226ae266cfb6ef065a735694207d4a3db8ce795a144b05153c7983c0f8be1d0f1bdde6f3dd42efc42617ec9bf5c03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b245f5c0a8d347ab476627a1a34de68

    SHA1

    6f85b1b291cd7ef97c7a31b2473948726a6bff01

    SHA256

    ae57ba8b3ae4ed8b01595ec805aacf5a70f6e8353a92b596b3f8e1138c0d2037

    SHA512

    b38ee7d617478267002d8be67ab117d7368ad4f6e08dc7a2fa37bde5ed88d8240d3e56a5fcd53a167d86cc928e15080ed0e49bb70bf2306e37ec157f58cee857

  • C:\Users\Admin\AppData\Local\Temp\Cab9C60.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9D5E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b