Analysis

  • max time kernel
    133s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 13:11

General

  • Target

    ae9267f0e2da1381f5a05edac358f44b_JaffaCakes118.html

  • Size

    27KB

  • MD5

    ae9267f0e2da1381f5a05edac358f44b

  • SHA1

    385e413c2fea12b749c28c1652c5440340a2b402

  • SHA256

    66eed2fc153c1ab166e290bb5c34caff87f79d68ad8c621b1232d4259a6aa08b

  • SHA512

    d47845e53e3003a33fa5df095f34c8fb42bfcfdba7516663d6027ca4b3294200fb861ce9ca6ac14371e1bd16796246fa0b871ff346bdd117753136984185a207

  • SSDEEP

    768:zi9b0fUr9Dngcy3KK7comGP4ywKJZTOfd:zIMUr9Dg13ojGP4qJZTOfd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ae9267f0e2da1381f5a05edac358f44b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    805c293c064588c8cb61240913dc6448

    SHA1

    1223b7cfe35aa0bb93e370421d38473894beaaa8

    SHA256

    f67dd723b241cef8465d4e1761c4e1d399f4dec8e82c5b4c07f2d23f43dab677

    SHA512

    95871faf1009c2835f97a24a935a96a32b8f6a5eda65b05b666566b00a5f81ad16162931d477edfc05acdf80a90ff313e1dd93232be30760f9a0992fb970d65f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66e066a149e778107cdf9fd63b2b4c7b

    SHA1

    9468840b2b86029534dc1327f47a79f34945459a

    SHA256

    0bac76ed334bb944a8205f5048551926b343718d17407a05a68cbd4829540c67

    SHA512

    477fafff7f1970422b22bcda815ee27a70b227598a21e7079154f156aed2337c6c6321c367b7149d8a68c18794cac972d91ebb7943c61f3ac7f4692c19a3798a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf18a18239b3202aa3f098a4f797b71d

    SHA1

    144d6c2bc0cfcdc345ed6bb560b9345c929f557f

    SHA256

    3f92d596c173044419aebb51ce0af461602dfbb8acbbabe8e64369f72fbca4fc

    SHA512

    e0b47834fef1acf5390789b7d95c0ab273093dff5f695d63b2294d115f9af58b1c6de5c68778c5284cf807647201efee9acf8272619a6ecc2f44a5ac6fced499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    733b0d650960a81a34b6a543d4104d00

    SHA1

    d9bbe992e281aa5b6ce01814943b65e853c45f6b

    SHA256

    fc8d806e997dbcd8224611685e73cf022f97b2f640182c2591b620e65c7f6580

    SHA512

    c29210f6c202de46d63e371c5b21a4fa8e1a57f7c4a45314a05cb5ee53c78c8cfadec41650ef4397d2f45c12d3d493c5013f1854aa97778f42e4858c374a9768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fd35ddd2244d4a48ad45e0bb2b8e772

    SHA1

    dbb461cac598b8334a2007ae54a21a3b6daf1c95

    SHA256

    332622ed062a290d2835e12b38cdb431a9435b540905ba4c7fe456eba608ad83

    SHA512

    31d6749f59911bc6b8f0c77fb3db5b1832ff3a603893c982ea06e2e1b0fb8b6e3980983882bf1fbf80aadc44609f7e34a21f15be5624ded99413b767a872cb1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f545926c9bb459f1b1e8098b7ff41f76

    SHA1

    f616c2dc2ca238532fb2a490a538d1234802633c

    SHA256

    38968e6daf0bd431aed1cb91303303081f6dfcfb3db0a78f941dbfbbdc747e6d

    SHA512

    0dfe763f79aa09f0adf7966c65fb2407724a066626d902320e5bfeb3f86742ef0fcb4931f6de70047ca4019dddbb0f9e2a0e3cb2b9bc815a2210d820b710e612

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    895751ba4b5442bf24be69d08aea8ee5

    SHA1

    a12f056ed145b181b7febbf1d7c9204975b05b79

    SHA256

    eb1517676b63ab87426447e3413eb689eca2ef7686cc7b4c2719d40f06c2e3f3

    SHA512

    157631ae620829a27106b399cdc8c6e5fbce9eb738558c9bfce0427bafca701fd3a7b44c2c93f1d219366c9a6c56955cceb73f4ed3d0d86c579cc4e9efcbd174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fa88d387c21ee41deaecd4d6c1a0c6f

    SHA1

    fd12768cc54eedde1cd26f6808fc693b0f31e4a2

    SHA256

    723da4bb0f51d3993d09705766490aae9bbda8cf14b870d9fe1ea788aa7a6f12

    SHA512

    0ce3e6c1ad8fc698d1a4b54f73259ffae66792cb3edf4759eec535941e7bd6f6abaeffeaa9b12ea308b46e0cb49e12f12f1479ec1af87880cf00b8adb4e56579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4de2430d665fd8a204c625a475c9b04

    SHA1

    4ef5474284b56af639ee80c1ca13937faaf8b567

    SHA256

    e98edea5c35bd91923e857bd10e380a7b7e082483045af80438c8d3d5f88552e

    SHA512

    884b95f318477c1cdc3b5365562c9e348f95e3c294c30d0bb125ee8a22f906a2c01333e9ec45468351b7e1aaa4e5432546798938d3bd6ffb1cc55d7722abbca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    841bc6ea311678afafa933e9e26896c9

    SHA1

    4540b90a0d46c36215f07023939f1710c6abebe8

    SHA256

    6cf035587ee416098a5093e29837a453f85b4e53d3416d6d7b66c901a93818bf

    SHA512

    f06ba917071a6ce25319ee398a192500e8ec951b7b1c5dfdc641bd39153e47db34bb35660fd557ff0f21593f5af5c236b8ce397e5d42acdb541ba4ade9c0ba4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6755632943443dda31af3561a23f0de1

    SHA1

    e8420eed14b069fb5d2b8b3f64045ab66a6d97a5

    SHA256

    993842ec8aca41307b4f5b922d1f582cf57430227cdb5173e804d5b062645af4

    SHA512

    ad1c6b3c5a1952f30e01108e3387d7940e5d4353a66a56dabd3beb5e5f399e037567effe255da0b159a142359056d5b5c07e5563fa2b5feca5788f6d562ba47f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81d15654292d830c2e96a7303fb6d12a

    SHA1

    fa4a4a9916fe046f97c3cbb397883c6196d17b17

    SHA256

    e058aafe281295a5c497ac846cc5b2c7665fac756efe71126010931c0507ecb0

    SHA512

    26138d28b8c9f62ba2df39787e19e85ccccdbb07d466df597e23808c777b7d7f7ef548e23c72f0c0c46ec0511de35526b29321d23b4ed97f33fb2e5562e11c1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a20a7a5f02a8a06dfeab6c3bafd74bcc

    SHA1

    2b6b4576e15bf6a4fa4309a5b3def4863d8a8d61

    SHA256

    7c228733bf3eedc5098454f099d562e551be46172f809789e90cca5a11640f8e

    SHA512

    9150e19be6f3cefba4d49c649940b0a6a43a49493b09b45ab1d7e6bb4bf947f798c9c0a323cdb52c9e4fe43ac4e81c98b39707c0c4b2fc225f9a40d042662323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97f1c4557319ece2461563c78ffa470f

    SHA1

    2381f4d536a4e19fa21a3e47a7a4e4b0df8098df

    SHA256

    6412931babe95247fd3cb182f28739dc9ac1ee9dba400d9fdbdec57883508a08

    SHA512

    d3dcd4273252a02c6189c44987e9d869ab91507b0f0c2574ea355e0e20944d25c5fc2f3a04e74de662fe8dc02540376501f92e2b04cb22cd308df91f8550b986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbaac7c6d5aded28804491475601e2ea

    SHA1

    77d64c862214c7fa46c62a5a5bdb9a20607acaae

    SHA256

    3cc8b2552db879e3bc34592667d0cd8c051300828d632d549c7a9090b9c95bce

    SHA512

    6d25fa5bef486a1e4abe796e178de3e35a01a4c43ff491c06b33d4421bc71e2ff55b7902f87885a8b58361c0aadd9ded6d43d53054fc42a27111e6ea06a1bfa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    450f06875a3803ed2ad55252ca736e4c

    SHA1

    ce33808789fbf1fe8944ec11d0f736901584a77d

    SHA256

    aad7585d39ebc4525c61b008cd2866d039df5f8bbb2960034e6fbeaec0043d7f

    SHA512

    c45bf81288355ee083b9d8fc3868220804d0a06b8db054f175022cff22d550a62c994193c098f4ab4cf7a1e3c56b69ffe7aee39fcf06c14b0ccdad2a1ce1618b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f378cf60bf4170ff611fa5ad7380bf70

    SHA1

    600ab71529907608cd505e78aeae1bf5c1797b7c

    SHA256

    497ee5b7c7fb72e1bcce0a5cbfdd11e017cecb191dd51646803c03459381a138

    SHA512

    11bd9c7f56bf2910bd951d515f37ca46b9da43f0ebb33917ed253469ccc902263bc8c4ef31c77247519ba9c4fe144fc20b5812667251c3885fbfe12735b48f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e068b4b77c53330495a7e4c304a1e70

    SHA1

    8666e6624eee921975448f002ab3f9e7f926cf5d

    SHA256

    952a494d8d1e2ca861e6da65c37d25d6da6348e15511ec7ce33f2b1014a239c8

    SHA512

    906296be9eba1080b282fcca1d8ab1b3879cb64c99fc958f35809a6638e5a6be25bc42358c11866e0e8cd12e0735e10a766d631059912a09c4742cc5d6636229

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1fa8d5bbda0774bc8e9c50cfa7724fd

    SHA1

    04dea7f545feb25660a161ccf22edbffeaf47389

    SHA256

    d13a7d2ccd5d3c072d50dba24a5c385b108aa09a7bd9d422a8d6932522db83e6

    SHA512

    4f3a212640105ab0409189bbc75e08e92c9c5be3320abbc0e7822d5601202d10fb1852dca11c3a49efc43ef8ff1dbee2251a2d804312176abfcf259b76eff52d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b69a48fc7b087f0c7b3dd0d577df5d47

    SHA1

    fc90ff83dc6d43ebc00d43b1b42fd639b1f8d2ab

    SHA256

    e027aa35be446a27045097bdcc19bfb67343bea34a2dcd3a9e97351d03242410

    SHA512

    f0fef578680f228bfd6dd41008d85a05471b82710c5fe0b233712bcd5be8422b702ef9a8772954f516f6dc770df7c32b7e97bc08e0dcd9f412ba6d756a3b9ecc

  • C:\Users\Admin\AppData\Local\Temp\Cab30C4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3172.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b