Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 18:30

General

  • Target

    afc861ae528960a88ffdf34a701a5305_JaffaCakes118.html

  • Size

    43KB

  • MD5

    afc861ae528960a88ffdf34a701a5305

  • SHA1

    3f1ec8ea586bcda802475c1b998822e7f3a70499

  • SHA256

    f7b4d619865b8af9b0bd9ae3ca8a198f80dd79c84b3867be63121fbed2909971

  • SHA512

    03c884c00c3bfc63d7f49095a5300311e4aecbab5967263560819fa6db57b570a84e5a3d9ea9836359799dd062d5bda4edf491772ee272c379cd93564bd3f316

  • SSDEEP

    768:R4TqMcsOoK9k1w8Tu3i0IG4ORfPX1P9+Xz6jHLlVsYhAoy1FilsPd9ZI97nUR/Yf:/MPu3iO1PUXgAoy1M7nUR/YjEFwQRxyT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\afc861ae528960a88ffdf34a701a5305_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          9e9fa8ec76a6f9741d9aecd1cc0427cc

          SHA1

          f372e9d8fa5f2084f8ab6132e98b4d8d2fde1992

          SHA256

          34ce4da4c641c4b8ffb040c9e834b8fa8a972f0bf9953f58c810cb65eb1bac3b

          SHA512

          9ef1c6cacd2951d892390ae8bb46b927eb20a3128e595c3e0f598fd95da2b2e93ee55aee0baf06ec84cdc3f4647053e3503b34be48ea5cf2433464ffc7880ffa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f4f8f9a88ebd30babc065585027c8b7b

          SHA1

          2334de2783a788d51c65cf0bc94a72222593df58

          SHA256

          1466cee8eec5ac04c01b0db7c00ce3736b2427066ba58fa38427fc9b8dcc05e6

          SHA512

          0be8650df3736f3c82b5d453a7c603f6763d913708978af1db440e5408abf4bab9a5820b3769386756a82d59148adf3ef9eb9a1e7516f5c1a80fdfe2962253a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e16b707ef62e562b85adc0826d829286

          SHA1

          a761a22e2ef994654004ae37144dc2d98ce9a52f

          SHA256

          db7697f00ef1b58a9abaab4e50040da4e37b6e64a00252346a635b7a8c168d1b

          SHA512

          9918124a30a3af886a71c3fcc8fd9da9f6b305000e432124ab365ea7c4d20025c4f8671b8ac046956bfcd2cbc87e3bfbdc17a95ef0dd04f1cb5bbe8c66ed0e30

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          24e0f00cd31c5d2e986f5cab1dd744ba

          SHA1

          c18e4f70471b3ae902418c5b261f1da768ccbe10

          SHA256

          ac18c4d18d37d76dc09032bd46baeceba1f5f6ff9f67b8d9b704968a1f4b2766

          SHA512

          8e285cdb9105732db2bdbf1b33f6f41324a1fc82cff27faeaacb93fef617e0ef106f97687e21557b00224a0dc5ed065b5e3b98dd50a1e6d86105bd83d370dee8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00cd621b5260095be0b511562171b737

          SHA1

          3d2cf6c6d86f06edba7b5813fa2abd014ee1ef4e

          SHA256

          3d3941392867c00af36de2b7d67f6c76e26fcf4df9f38b56677b832d27bd6f43

          SHA512

          3146fd6ee4b7a3025a9efec509ec6a49d75c92412513f1f02e46cb52311f2690ebc49652eb23c207da13369dc426ad86ff1ddeccf937bebd45106942f13076b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d1be5cb87997a6d76272b01ca70572f5

          SHA1

          d1554084d78b31658993bebd2dae0c273294f251

          SHA256

          69619193dc9b4c891802b245d24a2a5da3f1a740d2a32a9d647a516f9c51c96a

          SHA512

          b7bfb37b8616cace7b465b7fd71a5156c4f5c0a40e10cfad8900146aac859ff0bf2ffdec0ae3a74757f2dd9393c2d0c24b697f5fd49ba0345492aa4f2e05bac2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8fc93c7026e692a4487aa62a35cb4333

          SHA1

          aeb2e9cdc5c4e03d9340084e83ee6be60aa559d4

          SHA256

          b5eab68a349f14064be8c14a0a6c9064effd4d0a98f0ee3951cb349ce8afa7f2

          SHA512

          ca9ac27d274243a716723863fc2a5718b438b6425d8371e79285e5ac6de92b7709df137a255b93875db39b5becffe31f26bfa9f1a8bf2569a00c4f01f026289d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7ac9dc23182615520e0c523e874dec3b

          SHA1

          932e50d9fb87670bc64fa0f47beece0233675bfc

          SHA256

          268af2003531f117199caee2844ce319a4825834b130ffb69463f2fff389e578

          SHA512

          2b87f6f15ab7c179892a22cead5fdedd78c1104bc2be9d0c71f48c9755cc656613eea625baa819dcc7b7c0dfbb188a393bfed8faed498065c2747afb1222e181

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5c72bbb21880176274231f8522ae4231

          SHA1

          8b22c0678e7e212e09a15a82c2c43aeda980e40c

          SHA256

          0d6765f1eb682f21dd790c85026f935ed2ce4c2b34fe7b34a1882894d6d63655

          SHA512

          16e26f3ab51ebd781e151127d09a2fd6a5644485b933cae9ada0e40356b64ea63cf51da91a2cd4136b4d09ceee405eeb2dded48a85031416f692837d91dd4e51

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          27861da34eaa22e91e76d94cdb019ade

          SHA1

          c51ab12e1c161ff0f3fa06efc4fc8fb5e5b9048b

          SHA256

          1051c3b68296023a33819cbb7d5f2bd5b28e5d9145d39c90801b55e2b73ff8c8

          SHA512

          2705467334a84a83151bd1925594f889b1d682b98e879b67a78a6a4f9cd2c3e6e8123237fa9dc87778caa98a3a2c544a91f92aff191542b745f768c3b723d03a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          93da0895dfcd3f4baef7980363d28864

          SHA1

          8b1130b97a43ca2550e991f64062e5c713e5a6f9

          SHA256

          4eaf22f608071c2cff6e1e97a9041c057ab7290eedb62deeb043f56aedc3c72b

          SHA512

          93a249a35087604aac1bb7653b1438e55d8aa7f8c14925ae1f71b6639bc6d3899812179ba947476766572a709aa2e4dc44090de28424801d6993b82c8d20890d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d0589d5fb0f0537ac4ee4740bd40190

          SHA1

          1bc8b2f46a015b7c3d08a06c571c08249aa9e0c0

          SHA256

          3e30674b33a93813e7dce4cc10935a39ad6a55b0f144e0ca2ee2836a6c2da62e

          SHA512

          8bbfcda67bbed438faeb120d4f2d439f6eb569b0404db819c303bc1a54fb5c0b75698da02aecec3515805df8058083f97ba5bce856af147bc2a6c325db163e99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          ce4ab10517a99bb6b7e567d437bb69d4

          SHA1

          a53dce5a725063deaef56052fd5b775b4f57d2fa

          SHA256

          3268b049811b378dd4babcbf1c0d18a927dd6b10b11c23a56b5cf39724151934

          SHA512

          e3f3f5a6c876e0caea6bc16a6e9f2a0b5314793df412aef67db1bc959196b868bff116dcbecc0221c6743fd19ad6537fa7daf7c45401a88e17441e6dfbbc322d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          8d3c2e071126e5dbc0c1b838c83e2220

          SHA1

          3b630f0001e85e01b983d224930e2d0913ffce52

          SHA256

          8030f83cd23bf11037a6bea9370efa7b7bc28d6da78676fb45276b1731a0ad86

          SHA512

          39ca07a3d314f376797c5ad1cc360958d7229953538bca8597cb164c7ca12fe80dd96dad295b3baf52fdba4e4ba34d9974764460bc234a000ebaac8f6d972e07

        • C:\Users\Admin\AppData\Local\Temp\Cab1F46.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar20C3.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b