Analysis

  • max time kernel
    144s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 15:19

General

  • Target

    af0e8e6f1eda7807452e1d3bf2b905a4_JaffaCakes118.html

  • Size

    201KB

  • MD5

    af0e8e6f1eda7807452e1d3bf2b905a4

  • SHA1

    130a4db4149a9a58f9256204f722db56cd49d238

  • SHA256

    2daff881ffad6a496cc94b65426a7c1e7eb2a530808f8ec69fbd82a8b476cdbd

  • SHA512

    b5580d3657c20347ba023edf080e6c4b07879f5c238b731410a92a9022c2ee6602963e6c4a2f475e19df7c2ddb3a8b04c417444b8523ff7f2b34e18dba2a5399

  • SSDEEP

    1536:kaGno8L0Y+8tgeQt6l8LntnXCmOLfkDPyXdPCUhvx4AGvM:dGMnXX2h

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\af0e8e6f1eda7807452e1d3bf2b905a4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2360

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00dd8979c68bc185bb6d2eefc18fa11a

          SHA1

          744b0c9bdb1c4b278eeda0d1da1033cc01d13aba

          SHA256

          8abb56e60da1e757dbdf6cdacf4658e1aad203aa72ad4c8c4f94dce23e513d6e

          SHA512

          bb0088d93831e34fe091d4802fa0bf79ce158fe678e2100d03771aacd2fe4084be7822b53ac7dc36f9d45b71afc6980ac75721b98c9c5fc8278da19ed6751bb9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf7f5f5c32723f19dc74eadd723a117a

          SHA1

          8ebb5927e62070c0d47cf5ef741f365e2d19c72b

          SHA256

          187fded4d0ba9fccda60c498e1bdf41372efee38de12172c9026ba9efb352956

          SHA512

          f5e234330759862f19077c94f57b076261e89016ad38b06a6068b1fcaac0b0e62d1780dd82978f2767c8fc236428ad2657e62ba98b548d3601784004b91bdea0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5e0ce38801c56e457811f8db71921bbf

          SHA1

          02d542d5c2f4b0b61fb3b6609aca923e9e3afb29

          SHA256

          cc871d51f2b6a62f883078e95d53b6569f5cd6db00731e822025f344f5c63ab0

          SHA512

          19e3d2ca9f694effab9dc192ee38e3cc6f02713cd0908bf81adc54b98a158fa064f207f8bb88a8c54d62b7bf5543b913b481a72711034da215ccbeb2b278b392

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          be7b3b7386cadcd390febba47832c3b4

          SHA1

          225aebb6022e0c9127e3046ddf7d039da1e98353

          SHA256

          ea636e8d533331be6d9cc1874c5e939f044f1b6dcd1932f0cc336fca3305b03a

          SHA512

          2d119afc8006cb7606d445d96fffe88988b50e435dec35842a1bf25e1f510d22f5680274dfc3f8dece4f776ba63f56c85d38bc97969066334bd952b98c55cd9d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          aa44cf8541b5b4b8c15d3719f1b7d1d2

          SHA1

          69deee7b706e453962e530cf8f12081a00ebac96

          SHA256

          ee7b0fb771c592320a76fdcf1ab64e3cf39b984b0b7db931a40f432cceb40f95

          SHA512

          77d02f4c0b2715eff9df45078e91fd197360c80b39e295272bf68e70e469fc211f1286570331bbf4ce3f3c7c669744e78dd57511708f3a12bc6c2c1410f3fd1c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          24a61ee041a10db9fe23fa6d9deac72c

          SHA1

          d4f2908409053a019a7ee67063c1bf7ef5ee932b

          SHA256

          327c104c5a7395dfab691440a8b9f9d29e4e2b0504e5a158c20837fee58b23c1

          SHA512

          10087201ba77edf262ac355675f986c698196a495998ba9129ce590c44a9f36a8b0b8bf911adb5f3139de9a88186a5b924a802a968e49e84315f6161bfbb8861

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          93af66354a0f109b49e0da092e93a4e8

          SHA1

          e0d638e166b7c2f43f7f844d3e26310628ac1d57

          SHA256

          cbd5536bdcb2cba0a6ff255ea3e8233ada891b29ac4547a7b0ef0b944f606660

          SHA512

          d56a5b57353441aa52132255f4e5515bd0cd28070fa9263817ee7c69f035f2e40d5ae14970c278a508968168604de1f9c124e11d9f80147edbf5558dd408bcce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf34d02a4a5c8d1130c398a2ca5ea504

          SHA1

          8f2a93f42158eba54a916251b8089c07f3a229aa

          SHA256

          d478d8296efe71c3c71094c73392d005b988c99da2361620da837adf036a8cda

          SHA512

          25ed1968fd3c5c3a7e7a6cc0e8c2547ba702ff094e6d1aec3ff13f8f31ad639f40f7cbd706e6f7b5ffca55977fd32a638642a4d6b016c584db7b9237137a7f42

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4ad881b2e53aedae79de79ca22a37bd3

          SHA1

          b31136b1099fd96593bec49bd5fff7c88a8104f5

          SHA256

          4adf1f019e828120928919084873cbc1bf874fa08ae4890b826d025f9e95498f

          SHA512

          654909f628aad7c29dde278d31047e203de1bed3c01cdde1290e66a4006c1cfb50df828f458dd83c3f9ec7c9733a4d3003fe245bc7a7ce8e8b29aaa40e5704c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          682cfea2b3a18721bb14b341ff9320a3

          SHA1

          58c760974abd22445525470e46987a60022a5825

          SHA256

          ea48a56ca6c146bc84602c66f5f44a6d8c6b685a4bfdc8a360dd94b0bfa0e4a8

          SHA512

          4ce75ff637abf3a2ab40d5fa10a7c6e85c1b3465e9bc3f19c00c8bc5aa3e8569e8e91afe9d17cff0d3cbf551c248beea26513ff6ff1b6e8a322179fc3f129945

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a472d20c3e29e26164ddf1c5cc8f9a3e

          SHA1

          361533bcf5f4a77a44b4a56ba6bba51d9809d4f4

          SHA256

          55627683f2dbb3e34aa7e3fbae17ba26b33bac8f7785697e29be4f3d742a63d4

          SHA512

          b55cfa07967a20503555b83fac7f123896f0e0697522a590dd85db841f431724eb1f47889e71978018ab66070b994394997a4b21f8b74edf375daff850715d5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          92b010ed2002c8c09285d455330b1be0

          SHA1

          a7f079ad053b3431c527555b4829f31e9606ee6b

          SHA256

          592726496ae8697111d805981ba6d9ac8cc156a7efa62ceea6b3ebcb38355057

          SHA512

          421937e6278e8ce032173ecb862035a08bb9092d9da32743468bb994b1ba78dde9922339bc679cb1edb585b53909cc786bab2def1c4b482976a6a94ac368f4b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6b3914f5084cc3c4a9127e0b4dc99bfe

          SHA1

          0a7e8d6b48097146c4ce6c22fb1aa8596b8acadf

          SHA256

          a68987c1256faa855d53321bebe91554f04d99e950a1c65cd6d7098f652b5623

          SHA512

          befe71597e0afd04d7d96e49e0fdb8c5a64f51f0a207803ba8f6285260145b6feab64709a1e27424c6eb3e117c5eea3391e1deff0a8bb3d5ab90c25ed4e3cced

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6b9cf77eac13bc142b958f65658918a4

          SHA1

          f3649f42c6bf2c133115efe5308df6d2373a2f99

          SHA256

          609b59649f307bf0b8a853ff19594fa1a42c4e999434b4640902c6a371ca5998

          SHA512

          3a194f3d4761cbabd4a4e750116f72d1b59d02d916eb34c1751f4a66e249f3031c2bd62b1047e64fa93ecb7fd421959da5eb25faf23f425de60987bc50faf0a7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0018733a0395036f5cdba214a6973b07

          SHA1

          f0abaeac7085772befca0b9b98c0b49243dcfc6c

          SHA256

          924ace754060b2475f2adc29d45026ad5c7df4c68fd07f7387b55987dad7d2f0

          SHA512

          3c3c8a75648535e5281cfe8ada596ffc7d9afe6cd419da8da6ab3df921b5cba1dfedb60f5ff4db7facd4e78ef487ebeecbf3dfab63f887fd6efa1e3322aac02b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          12aea3255de0f92710c9f2fcc422c0ed

          SHA1

          cfcece2e450ac8b04e11990527aeeac76de3827d

          SHA256

          cd570bf1683c037b80c028121aff3a217267130d611fc87ec239afcee5a7cc3b

          SHA512

          6d695cbd8020ac4850a855e0ce2db0d6ba49e98aa5e1a75ab239cac1b8b2bcc5bdbffbe4346e99b841fda7cbd025ac4e9065e5ee36ab4c86de8d372199d7a587

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c13d8d70b77ec4e6db88d55087e1c816

          SHA1

          fd9bb41507d5b3385fcdd02e67f8a2cb34dff126

          SHA256

          439855fca78927e351f24bc9f3f87475953c30cff39176e9699b5f4e597949f0

          SHA512

          9a318f8bd5cbd15fd44d38fad85749c9113e65414bcafe677516184b6afae931bc75acff98ed56f76f005ae6984e8aabf62a783ac83a8e6602cc66b06d37af01

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bd4c608537c85ac795066b31b580a7e4

          SHA1

          f028743bb0f127924f96ce1b25624f34727370d6

          SHA256

          2ca0633fa3a23eadfe584f8a8cced40b86e1b5e162c9f01294826cd141097ecd

          SHA512

          f96c2e2d61f714d3a573730de566efe1335c88486b9a62acbb180f55b383675415b506f9b019e4e23c45acbef265dbfd3382c5e700299c1144eb4ba9c10c51d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bb87ed95ea707a445bee001eea482ab2

          SHA1

          a94e4590f31b1effee3d204ee67726176e67a690

          SHA256

          524a55a951d6fc984b2d88d54f94d63eef1f8e77378cbd2d08e2c537e9a51155

          SHA512

          72734842de4bd1a3229f7438b42b018a680b4fc7b373dd10819e76c104d5250d2b4d043da10de8c630370516d854a5f55596f98fbca3d866fc72643a9d830a95

        • C:\Users\Admin\AppData\Local\Temp\Cab955F.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar9581.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b