Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 17:50

General

  • Target

    afa447f668f1a836c17edf434f497280_JaffaCakes118.html

  • Size

    138KB

  • MD5

    afa447f668f1a836c17edf434f497280

  • SHA1

    a94b4c452d04b5c86893071720415fc440f26c32

  • SHA256

    abd7bbb56926613f3cab141ec0c98d617e52e640b9b4732d3f8b459daeea7626

  • SHA512

    30b0272481c0fae6820abec8a430b9e5c0df151db2756696385e338430a78fc3be9609d4155602399973bfce1b4ab912ebc573d8131d6834778ca5b62812f4e1

  • SSDEEP

    1536:Sog+eBS6T0gyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:Sogr5yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\afa447f668f1a836c17edf434f497280_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2952

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53e30e4d43247dad39702ef6273f941d

    SHA1

    4d282d677080fd474aaa6c4c1936a73a1168bc78

    SHA256

    ea55c866551e7a5f201c11f2952ec5d97ef0a1a618718c2ccdc484bc0fba3ac6

    SHA512

    7b659f9787c509c71178da7896b5b4709ba8fee4b34f72dcd29be385ef0dcd9963bf9d185e9d9112394369a8bdae39cb728c197282c969048e83f790d2d0c3ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64e279a16b826ac6bf7d726b4f9ba2c4

    SHA1

    27abbd607c8e85a9bc7e6cfa3da73feb39313c22

    SHA256

    49390a8e077ccce9ed6bef14824fc6ab24f62e06a272ad397f00becd8b0e98a9

    SHA512

    a444eafcea3c777400815cc6a6f26aa1457f1265a5421563905ecdeeaa428ffe5b39297eede20a1b12eec16e7b1b6cb9521fcd4abba223c83bbc949d331c4123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    637a8feaf111283128dc14ab57fa425f

    SHA1

    e67927f6473cbd868a093fbbce2fff19eceacd1d

    SHA256

    2066a89c303a48da8c0d97b9d75d19e493a4753063440a20fa91ae9071a46067

    SHA512

    5362c0ffdfa13ef56c22490bb676b0e95207cde736205cc5a270f4458edf2c0c126c8b0758ab7e714348f22bf01c889068bc86331c47d5322915a33619dfbb8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ab72ca5cc93a5ce45be68142a6d6d1e

    SHA1

    cb14fc5e75e846afe41358bdcae1a035dc7be726

    SHA256

    8f7bd41ee56a21a51257f69a274931899fc85f08b57f4530f8e941d7393ccfb1

    SHA512

    6f8caf837fb9640f4f20292c356ae5e581d705c250af3f2dd83718e548636c886a4dbc3c0021cac87a3d4925d31f6ac054f17088b93774409e95ba499b07bdc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afa3c5d1cdd0f97d186a83f973bb3da9

    SHA1

    3f1fa92bc7698ffba2f6709a3c19144a0c79fe9b

    SHA256

    56160b8f5492c0983e460fc88b872d90ca765fa036b747d26dbab8585d3e8502

    SHA512

    e0eaf7d27a99337beea45c73ad198614c2519d64289cb5ffab8b1259d9392c52104b05369dc244668d63d08d85529c4ee4099827c08a12059a9d573fbf93f307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2652b77bbb84371b5cfb33b58a621e1c

    SHA1

    5c6b339ec8d904a3ab8441b044d0c1f47a4df3d2

    SHA256

    21dd44ed3d596ab9d477765dd8f82b24a29e99ccc6683d49dbe74fef716a7589

    SHA512

    cfc49b44c726fd35d75dfc8507a1c058edfd7d06f64a5ccd02c23e57f80c64cbaaef5565f3255c4b2e547c801d0724bd2108bdd4bce6e9b4a6184347fa14b8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8d489e645fcb7e8de09c11a7162a5f5

    SHA1

    c6aa357cc071a36a9b5b517873cc16960654ac2a

    SHA256

    6dcebfe49645ce9a480aac0bf0520af5eb588b3d4d44aa998915c6c7528f8a66

    SHA512

    e1202b4eb7bea983b170ad3e328cdf1ad2fe614cd50fee63fba01a286f51edf57daa7663fb666a8464391b2a2ac6265348737bc957f6ccdea6c15b2427a20d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c37825b7e64812fcda9a016136945e33

    SHA1

    2ec9ab2f32603aaeff12edb6b4980e32dd9c5424

    SHA256

    a66bb4caff81591820baef83d18810b34eb2e671fb3d32b94f8ffaed99cc50e4

    SHA512

    511a089607787f8aff9a7c452c742a3ce4cae33dd414699f031119252e99b615fc322f34b48ef2c06e5a9c81fa9698804af9e34bc96fd419b5adab2639f6eeb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff03f20c5d3ac81e116c484971af8cea

    SHA1

    3c090ae1e490a3720607d56318c611d023ebfffb

    SHA256

    df38b9df525a8777fd3f32e46dab7eb09b9b64a1db57e9a59679da0d143168e2

    SHA512

    ef3a44ec98cbb06c51b0cb8d7154062db1d83058fa1a53330dfabdceb4599f84077202b731b644470b85a5a270bc89668d855237b2bd4e425fdcc8485a3827a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37b8bdcdb9f350083e2dc997f6dbb96c

    SHA1

    d59bceec30be9b5b7ea2662ae84269b8efb1e7e1

    SHA256

    9aedf13b76363580852e2fd4bd6286a44a69b8e95d7906ac548bb520fdc829c2

    SHA512

    551f874735e4cf0923f6ba64a5d3993c9217db011faec25edad1e8b5379327fb61c0e114aced2137e2abeafc641a05ac1fb3fd48c862dac87825374dab254ce7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58538747d7386f5273c1abd571c12ca0

    SHA1

    63d71548fb1cdb27fdadbfe3015e755bc76f4184

    SHA256

    7b33fa77da9489aea20643d76ec4b09387710688db340acf816a1f5671ad0138

    SHA512

    a6471ecda0d5d4aaf6e847aefa3170b39512f74edfd07020e994db13be12b45541c171a353ee000c2aa062cf7e3ee9dcbff29b9c6f7e6b539658fdd1a488561a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21f97c5bee34b9cadfd642a64da1137d

    SHA1

    a77b9e79aef115be512810bf327db07fe57168ec

    SHA256

    04bb765daa4f9b5c5c584277ca31b6d1cebbcf40e8603ea87769159311009045

    SHA512

    b993b0a02a191fb6c57494b94df94e48cabedb2e60006eae8587b2faa971c276f9c59ab6cf900e2c8ee8320e36263f970397b749db48a65dfb37035dd15d7dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5a653a25bb2196070d1920033314fa0

    SHA1

    079c3815f691e33cc5291053abd6d86716b261a5

    SHA256

    bc9bead93b8fe18e07e17cefb464a32933b0a363425e1c16434d4f01f94b5095

    SHA512

    1361c1560123394ca3c62e7788649b212373e2cacf4f05ea33de1dc3c7e0875dada334f08684c806d3a59516214d7b612cd66e550bcd735dacdad98f24ad68a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    198ba018913e5b2abdf1cadbb5a8a3d5

    SHA1

    e7ece0cad09f00bb0026e271416f2b420f8e43aa

    SHA256

    b9762330dc4af70b2fab0158da188d502bc34b22b7a26389f873acf6d5e02a23

    SHA512

    a63d39c62c79eee2863edd10ee2b98095144d49abf59f4956918f45a354daf158ae2b3349a6a499b999372b2c3c797283066b6f4114f01fcb07197cdbad22493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21bd4537f2cfbd79b29475636ce8c719

    SHA1

    ce2cc62e279b6888a5b79d587078a2240a008e40

    SHA256

    56adac07fefbf880782656844c59fd71c53a88dd0010f5f1dd0cb3fb09d350ca

    SHA512

    316ace0980297cb572ea2a94a08570c29512b65fb05e7a95a879ff12c711ee1d6164c485e75b8c713bbd944f25d9f0031b04aa844dc3aa3cdb349ef4b28d91e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dbfb69d97069be8f632785ffd8680de

    SHA1

    9f73a9e6101b411ad0b926c6889d52fe5287e792

    SHA256

    fdc71098852672c1b9ed24fa5f0d43918e0d256bd960ac2d3175c9fb4c4fe839

    SHA512

    c165d9fb4294927ed345e09c9def3790c1861c0066d6293a721cc4a4c7490cc5bdeb2b28590bbf31e679ad47b37839a706090b64158befcabea7da4ee9e4ad9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2aa89619372cfe48d045fe4f2532988c

    SHA1

    811378f261392488fdf5fa58b3286411159a49bc

    SHA256

    5c2e8c6ba3599cb89bcca3723d67a7559955d5c1e3207a91f879a3f9c4eecb6b

    SHA512

    0f65d76771cee45a73db78c7a3742d5ad1da24adaa739dd702d543a9aabecb03b57a5008677c5e334323f0ff12d0c80430ea5d01ddab23f847d8c8fee01c1e90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37273ab29fcc6c7210b662b2c5d504d5

    SHA1

    1413f99234f1e0830796b387a1a6658f51ac7d93

    SHA256

    e566ec0a444c35e16aeb881675537d26798075d385c85c2a20a4e41bc521c38b

    SHA512

    329f2bd1670bf53888b5d832398209af659b2d7506aa4c63c67b28767ce476dd720bb89001e116d32d692c68c5c9013feed8c48a2d400d4403a0033ee2ed809f

  • C:\Users\Admin\AppData\Local\Temp\CabD89.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE49.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b