Analysis

  • max time kernel
    144s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 15:19

General

  • Target

    af0e8e6f1eda7807452e1d3bf2b905a4_JaffaCakes118.html

  • Size

    201KB

  • MD5

    af0e8e6f1eda7807452e1d3bf2b905a4

  • SHA1

    130a4db4149a9a58f9256204f722db56cd49d238

  • SHA256

    2daff881ffad6a496cc94b65426a7c1e7eb2a530808f8ec69fbd82a8b476cdbd

  • SHA512

    b5580d3657c20347ba023edf080e6c4b07879f5c238b731410a92a9022c2ee6602963e6c4a2f475e19df7c2ddb3a8b04c417444b8523ff7f2b34e18dba2a5399

  • SSDEEP

    1536:kaGno8L0Y+8tgeQt6l8LntnXCmOLfkDPyXdPCUhvx4AGvM:dGMnXX2h

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\af0e8e6f1eda7807452e1d3bf2b905a4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00dd8979c68bc185bb6d2eefc18fa11a

    SHA1

    744b0c9bdb1c4b278eeda0d1da1033cc01d13aba

    SHA256

    8abb56e60da1e757dbdf6cdacf4658e1aad203aa72ad4c8c4f94dce23e513d6e

    SHA512

    bb0088d93831e34fe091d4802fa0bf79ce158fe678e2100d03771aacd2fe4084be7822b53ac7dc36f9d45b71afc6980ac75721b98c9c5fc8278da19ed6751bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf7f5f5c32723f19dc74eadd723a117a

    SHA1

    8ebb5927e62070c0d47cf5ef741f365e2d19c72b

    SHA256

    187fded4d0ba9fccda60c498e1bdf41372efee38de12172c9026ba9efb352956

    SHA512

    f5e234330759862f19077c94f57b076261e89016ad38b06a6068b1fcaac0b0e62d1780dd82978f2767c8fc236428ad2657e62ba98b548d3601784004b91bdea0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e0ce38801c56e457811f8db71921bbf

    SHA1

    02d542d5c2f4b0b61fb3b6609aca923e9e3afb29

    SHA256

    cc871d51f2b6a62f883078e95d53b6569f5cd6db00731e822025f344f5c63ab0

    SHA512

    19e3d2ca9f694effab9dc192ee38e3cc6f02713cd0908bf81adc54b98a158fa064f207f8bb88a8c54d62b7bf5543b913b481a72711034da215ccbeb2b278b392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be7b3b7386cadcd390febba47832c3b4

    SHA1

    225aebb6022e0c9127e3046ddf7d039da1e98353

    SHA256

    ea636e8d533331be6d9cc1874c5e939f044f1b6dcd1932f0cc336fca3305b03a

    SHA512

    2d119afc8006cb7606d445d96fffe88988b50e435dec35842a1bf25e1f510d22f5680274dfc3f8dece4f776ba63f56c85d38bc97969066334bd952b98c55cd9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa44cf8541b5b4b8c15d3719f1b7d1d2

    SHA1

    69deee7b706e453962e530cf8f12081a00ebac96

    SHA256

    ee7b0fb771c592320a76fdcf1ab64e3cf39b984b0b7db931a40f432cceb40f95

    SHA512

    77d02f4c0b2715eff9df45078e91fd197360c80b39e295272bf68e70e469fc211f1286570331bbf4ce3f3c7c669744e78dd57511708f3a12bc6c2c1410f3fd1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24a61ee041a10db9fe23fa6d9deac72c

    SHA1

    d4f2908409053a019a7ee67063c1bf7ef5ee932b

    SHA256

    327c104c5a7395dfab691440a8b9f9d29e4e2b0504e5a158c20837fee58b23c1

    SHA512

    10087201ba77edf262ac355675f986c698196a495998ba9129ce590c44a9f36a8b0b8bf911adb5f3139de9a88186a5b924a802a968e49e84315f6161bfbb8861

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93af66354a0f109b49e0da092e93a4e8

    SHA1

    e0d638e166b7c2f43f7f844d3e26310628ac1d57

    SHA256

    cbd5536bdcb2cba0a6ff255ea3e8233ada891b29ac4547a7b0ef0b944f606660

    SHA512

    d56a5b57353441aa52132255f4e5515bd0cd28070fa9263817ee7c69f035f2e40d5ae14970c278a508968168604de1f9c124e11d9f80147edbf5558dd408bcce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf34d02a4a5c8d1130c398a2ca5ea504

    SHA1

    8f2a93f42158eba54a916251b8089c07f3a229aa

    SHA256

    d478d8296efe71c3c71094c73392d005b988c99da2361620da837adf036a8cda

    SHA512

    25ed1968fd3c5c3a7e7a6cc0e8c2547ba702ff094e6d1aec3ff13f8f31ad639f40f7cbd706e6f7b5ffca55977fd32a638642a4d6b016c584db7b9237137a7f42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ad881b2e53aedae79de79ca22a37bd3

    SHA1

    b31136b1099fd96593bec49bd5fff7c88a8104f5

    SHA256

    4adf1f019e828120928919084873cbc1bf874fa08ae4890b826d025f9e95498f

    SHA512

    654909f628aad7c29dde278d31047e203de1bed3c01cdde1290e66a4006c1cfb50df828f458dd83c3f9ec7c9733a4d3003fe245bc7a7ce8e8b29aaa40e5704c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    682cfea2b3a18721bb14b341ff9320a3

    SHA1

    58c760974abd22445525470e46987a60022a5825

    SHA256

    ea48a56ca6c146bc84602c66f5f44a6d8c6b685a4bfdc8a360dd94b0bfa0e4a8

    SHA512

    4ce75ff637abf3a2ab40d5fa10a7c6e85c1b3465e9bc3f19c00c8bc5aa3e8569e8e91afe9d17cff0d3cbf551c248beea26513ff6ff1b6e8a322179fc3f129945

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a472d20c3e29e26164ddf1c5cc8f9a3e

    SHA1

    361533bcf5f4a77a44b4a56ba6bba51d9809d4f4

    SHA256

    55627683f2dbb3e34aa7e3fbae17ba26b33bac8f7785697e29be4f3d742a63d4

    SHA512

    b55cfa07967a20503555b83fac7f123896f0e0697522a590dd85db841f431724eb1f47889e71978018ab66070b994394997a4b21f8b74edf375daff850715d5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92b010ed2002c8c09285d455330b1be0

    SHA1

    a7f079ad053b3431c527555b4829f31e9606ee6b

    SHA256

    592726496ae8697111d805981ba6d9ac8cc156a7efa62ceea6b3ebcb38355057

    SHA512

    421937e6278e8ce032173ecb862035a08bb9092d9da32743468bb994b1ba78dde9922339bc679cb1edb585b53909cc786bab2def1c4b482976a6a94ac368f4b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b3914f5084cc3c4a9127e0b4dc99bfe

    SHA1

    0a7e8d6b48097146c4ce6c22fb1aa8596b8acadf

    SHA256

    a68987c1256faa855d53321bebe91554f04d99e950a1c65cd6d7098f652b5623

    SHA512

    befe71597e0afd04d7d96e49e0fdb8c5a64f51f0a207803ba8f6285260145b6feab64709a1e27424c6eb3e117c5eea3391e1deff0a8bb3d5ab90c25ed4e3cced

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b9cf77eac13bc142b958f65658918a4

    SHA1

    f3649f42c6bf2c133115efe5308df6d2373a2f99

    SHA256

    609b59649f307bf0b8a853ff19594fa1a42c4e999434b4640902c6a371ca5998

    SHA512

    3a194f3d4761cbabd4a4e750116f72d1b59d02d916eb34c1751f4a66e249f3031c2bd62b1047e64fa93ecb7fd421959da5eb25faf23f425de60987bc50faf0a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0018733a0395036f5cdba214a6973b07

    SHA1

    f0abaeac7085772befca0b9b98c0b49243dcfc6c

    SHA256

    924ace754060b2475f2adc29d45026ad5c7df4c68fd07f7387b55987dad7d2f0

    SHA512

    3c3c8a75648535e5281cfe8ada596ffc7d9afe6cd419da8da6ab3df921b5cba1dfedb60f5ff4db7facd4e78ef487ebeecbf3dfab63f887fd6efa1e3322aac02b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12aea3255de0f92710c9f2fcc422c0ed

    SHA1

    cfcece2e450ac8b04e11990527aeeac76de3827d

    SHA256

    cd570bf1683c037b80c028121aff3a217267130d611fc87ec239afcee5a7cc3b

    SHA512

    6d695cbd8020ac4850a855e0ce2db0d6ba49e98aa5e1a75ab239cac1b8b2bcc5bdbffbe4346e99b841fda7cbd025ac4e9065e5ee36ab4c86de8d372199d7a587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c13d8d70b77ec4e6db88d55087e1c816

    SHA1

    fd9bb41507d5b3385fcdd02e67f8a2cb34dff126

    SHA256

    439855fca78927e351f24bc9f3f87475953c30cff39176e9699b5f4e597949f0

    SHA512

    9a318f8bd5cbd15fd44d38fad85749c9113e65414bcafe677516184b6afae931bc75acff98ed56f76f005ae6984e8aabf62a783ac83a8e6602cc66b06d37af01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd4c608537c85ac795066b31b580a7e4

    SHA1

    f028743bb0f127924f96ce1b25624f34727370d6

    SHA256

    2ca0633fa3a23eadfe584f8a8cced40b86e1b5e162c9f01294826cd141097ecd

    SHA512

    f96c2e2d61f714d3a573730de566efe1335c88486b9a62acbb180f55b383675415b506f9b019e4e23c45acbef265dbfd3382c5e700299c1144eb4ba9c10c51d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb87ed95ea707a445bee001eea482ab2

    SHA1

    a94e4590f31b1effee3d204ee67726176e67a690

    SHA256

    524a55a951d6fc984b2d88d54f94d63eef1f8e77378cbd2d08e2c537e9a51155

    SHA512

    72734842de4bd1a3229f7438b42b018a680b4fc7b373dd10819e76c104d5250d2b4d043da10de8c630370516d854a5f55596f98fbca3d866fc72643a9d830a95

  • C:\Users\Admin\AppData\Local\Temp\Cab955F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9581.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b