Analysis

  • max time kernel
    140s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 15:55

General

  • Target

    af322df404bf7e7eda8f65f53508e36a_JaffaCakes118.html

  • Size

    9KB

  • MD5

    af322df404bf7e7eda8f65f53508e36a

  • SHA1

    3edb10a1b2a07863a47b3d29c0a6ba9aab6f5d42

  • SHA256

    e7751f2227984b1c798043cc52ef1b0980fb460d5f0bdd7d5c94619fb4ce1d25

  • SHA512

    b542563672ea7dc8372e889a048b7183ed7e60d0a370cf2304f54512c1e64a151a21172b47a8126475a548aef086ebf5b92dc3e8e25779c5741e27279d73c784

  • SSDEEP

    192:NmWgBp2gQqxRqgSGR7gDRcgSaeWnUxIzuDriJyfgTOgi2:Nmf3/RLScMVpHv3xLTXl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\af322df404bf7e7eda8f65f53508e36a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2012
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2012 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1532

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e4bf08f8abb56ccb33d195d71d677451

          SHA1

          56a46a02856cdb2753dbc6f509049ab234de79d0

          SHA256

          4cc65859b748dc988a6b63f1dea75754ea4bd9e45ef85b7142483082f333a06e

          SHA512

          c20fe5230d82030d0b2075fd45fe2c4423ccb6a4acbcd89f91934a33fb10a1af582bd990044e326f38aea95e017dfc836e71c0bfa6b5c5e69a305209271b46a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ee34ba6762b440448f5adec6a68cbc85

          SHA1

          a28d10f45529f7194e2a5cff7dee7186b7cbe344

          SHA256

          101476b67e7155a8682a0b28a303820dd8321099958b5f7597146f90db2325c1

          SHA512

          4ffe4e4c196356b7e273b12703ea70c485e858a9701df492c775a6c75cdef2792052586f4ed9e18e55fb75e664fe965ee6b979321cd18275dd696a43c3c72efd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cfe3b7a55699d03de12657bedaa76448

          SHA1

          70f72a10c920e1ff8482af1f926a364a95b8ccf2

          SHA256

          1d0c80853a771642ebe1eda78b13a70714e0e5e89c6c04d54d843170fa686474

          SHA512

          e481ab95aafc00cf8ced7570511200b3a747fae10bc2652e54f415ad8c9cd2409f8f447a9be2538cbe0747d2ad626464e08a9e32652fd454d594b5f8891de2b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          77544d21c02a24ced1f1eaf17a4b86cf

          SHA1

          6cd727c40f5f6a843475a276e177482ee29fc298

          SHA256

          8e94277d6ee99e6491992fc1d6e0f13b978dd492eac5fcb86f761ad1e77c4f16

          SHA512

          1522c9b874e907d0ae6bb93115aa975d0d76f727fcb5b41894985b24d3b09f9b5ea7744b574d8449bf743dead40c089d73ed5de7e4ca25bce355d987d7baf394

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a7c959c691737a4bc91661ee1d054c4d

          SHA1

          156143a444635c9abaf46b0b3179aeff3ab387b0

          SHA256

          87b2716aaa7ef8366370444d4efe175e2d6d4b13d5e70643cea9ac5e887f66c0

          SHA512

          97e04491b232ef234f642442cedf0646de339f12834cd0db382c20dd58e9ecf97704e724555cbc4104c581b2835116ac40c9225bbc7d20541db3face6b1c3ea5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          45e46eeab52cb63fd1009772782668a1

          SHA1

          1df071f2569ac00e42aab9a44da2fb7f4d3152ae

          SHA256

          646f43cf307dabf17424f47c9f3b06c739eacab7ea54881699871e7814d5bc6e

          SHA512

          2f179815dce31f26d30e15e4c1bdf34952089c57101bf695db06e1cc14f72e03550e12139bd6955f1974b504854648755933bf34b19bac3b3a79a5a898f751e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c7f0799b33e5af78c97f14189d8eb225

          SHA1

          5e3cee1e11cf25ecb58aa08b0ae6ee8b00d4e9b9

          SHA256

          3149b6920b58da512ffcf53884ba102c19dacf8d58fd1eea5f4c74970b1300d2

          SHA512

          20468d3fff76b4cbc3a1ce2403cadb199e8b9307c24623134c88acaf362ff0f6bf680c516546184958f7eefda39ae1460a11d9c28afc59628726341946bd9007

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          09a87bfadff76cef7111f6420fc08d09

          SHA1

          59833de75fa4ef3d8b80c53fe0feeeb44706554e

          SHA256

          a3799ce95e8c8915106df7d870704f3933d7df8cdcb59c92e42a6783eda64426

          SHA512

          a74c80fb451601780b443e34f5a434c57670fb2554047a4708f38878d03606da32a034284b7b929c72fd11f2b53c5f89db5865543d01d7b52b15e4222a104f70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          55d1d70895e349d8928c680491fce29f

          SHA1

          9eee0a0fa16c2a7f52b182fc628ff1b031fc6799

          SHA256

          41895bba3dcace759c55da9e72c068f768e2be0b138db61097a533bb51f885ff

          SHA512

          9325427b31d940663ee5f5840eb43993927ad2cecb921d979085c90c8f6cead22029fb062e11781fcaf15d62a1b9d246e0a4d8dc8eae3a511670b13652d15002

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d60dceb17ed264d1247618ffb7b3580b

          SHA1

          71b8ac931c9dd035134495d4196047b823a07a0b

          SHA256

          72535b0e1eba89dc7213bc3000f3e96fc8775e72d7eec681532a6d2fbd92b1b7

          SHA512

          bd9c2c64117333a09eb4de1dadae75cdeaf67fa5a52a01e49c2d2592f91a878e73342b500f1ef83f89d95d60ff7ba6ba5cf429b8a5a7e49d387e66e32cbe22e8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b799f28a14197a04483bcc1b385b6849

          SHA1

          a0d7c8b6fd4123ceacf48f5eac9107130ea131fc

          SHA256

          3c0ffb7c606288f4c12e98136bcde3e89b709b62be3e4411614e3a0c0fb4cb5e

          SHA512

          eca98bb336130a1f52b6de0a8ed4a232b1774c5ed6c2db2b133b4c75d63243c58fdfd33cde4da6cf254b018d785a646eb8e3a4713dcf558bbd2e760c3812c30e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5754df666d8bc2ecc3667fd5bdb5f8f2

          SHA1

          f51de9a4f32701c45e2634321f622d2f9aa65be1

          SHA256

          eba18f11f083981a03d6b379a7a6eceb44252189ee38547e28ecb9b635f69d3e

          SHA512

          26461ec947f072ee193557b931d5ed7143670412b40ef5b31d7d0d1044330c67449780c1c4048b8a06a628c3d00e83b7a9d8f61fd3c672f58e47aeb73d4f935f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          be7d7d02a519c3eaa0cf2c0f4c00cc7f

          SHA1

          72039f188b8cca0e9bfd3d0f56080f5ef40ed435

          SHA256

          de691d5a4b080bd0258ca1c4fcd4d8902b9ff7225510e6987cdb91a401697ea6

          SHA512

          04b56408c3c3f9508a7117f8ecffa0ad1eff1b6ca01e219e759044d95ddfede7c3205143a9def5e8073688b0d73ad1bfb29c6e5726ab7c66a9d3dfbeb8a098dc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ff0da9f63bc8e270a6686e7f6f99ba45

          SHA1

          e22b46757958bc28a61e2782bac4e6c8796c00b0

          SHA256

          f053b8f88bd82432fc09c9fa0f5bbd834b9110b98abba029987772b8f8e9f6c7

          SHA512

          b5ed251ca860902a64460e44f5b5c01f10cbda7150e27a9ce2f4229e81526d1445ce2408ae96e368b5b47dbe142f050d27ad386488e88a5bfa428529b80a3edf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          13c5c7cd47725c84a1c2be37285f11d1

          SHA1

          9b8fb8d509db1adc99d11fdcefe6bc7311c38596

          SHA256

          37dd10f27e18e8d34378dbb78001aeeb9163a1d2da57cc834639f904a6b37e70

          SHA512

          d01450cb47c40c6830492debd5bd8c448f23ae7b657c29c17728499c6bca6981bebfe2653d2d653842e5ae84ec87851bc10d63c10bb1b617ed5ad654486d7288

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          47cd8aa6af9bce5561e1b45575a6eb83

          SHA1

          9e8493b45a72b5b11e0bf4377aea2ff727858066

          SHA256

          2c1458895d5dddd2e2d62bb3e6f6b2a685fe850e1c6b4d4b6d78ff6e472b523a

          SHA512

          143ca4296b97ab8638521233e4e3d2b54ce9c616ea2058cdcacd5b649289760b49f6a4f1117d2efdd4d874b75a00fa81e7de4deb52d19740b0d9824a2ae34552

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          712bd6f60556ea8047e9d1bfb1dbdef3

          SHA1

          3c2396bf98c263023195a09c1ba2539ee3d52a67

          SHA256

          62640cbe51f098ec3ca06bc96ed4bc7ed2e553fc984dc25fe3a220e5ec14308c

          SHA512

          e937ea44a49ebdd25794f26fbb6cfbf2555beaf219522039419c5f9fc2c3a66098b8ef7a521c51971c42e595f65fbfaeea7bb84e2dc1519a3abcf8abe8f1768a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          732355066fbb04cedb65c723ee147577

          SHA1

          70264afc031ed6e8c8bce2373e8f3c40aca0efd7

          SHA256

          1da8972532ef3dad2c652fca38e66a109f205c996cb9f214fc928022016817e4

          SHA512

          110372dd49c521f26814a864d4bf0b6652318ef87418ea572bb1f26cc01bbcf2a83de329e367631914a040907d5148bb29c36cff91babda45e49b7d5e0521d46

        • C:\Users\Admin\AppData\Local\Temp\Cab560D.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar715B.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b