Analysis

  • max time kernel
    143s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 21:48

General

  • Target

    b55dc132c6ce506d2723c4a69ed9eb4c_JaffaCakes118.html

  • Size

    218KB

  • MD5

    b55dc132c6ce506d2723c4a69ed9eb4c

  • SHA1

    329dc8991da6795a546a8094af4f638553638970

  • SHA256

    9e1e18b1b1ab8466b6db40fcb7804ffe71a0c8326b841528757895cbfe6d43c6

  • SHA512

    cd92bcdd703ec39163639d45bf083e05ddd18fff34386a2ec3cc725d82709096a9542575fd67f94fbfb43c31aa7a411d16491dec988939ebb988a61aeeab56dc

  • SSDEEP

    3072:SYtJcmXMlSDUyfkMY+BES09JXAnyrZalI+YQ:SYtOmXM6ZsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b55dc132c6ce506d2723c4a69ed9eb4c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2260 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e5f106cd639fcc7e8d98d24da7dfdea7

          SHA1

          b0353de8ddebf9a72d1f2f60ad012cb77dcaf9be

          SHA256

          7e3df962abeffd814124c96ccbfa30fc2963d63ad7d7d03aad9f35addb8d3991

          SHA512

          4d8ef33345d102ba5893637685f587a3e723e7c15a536cc740a7ab2347b853a690a6b6e95ce54448060bdba91b021edca64e5dfeabe154669713349dfc061047

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          845f90c4f92f60b54da33c990e5ec3da

          SHA1

          530db4f2ee99ebcba1d4fd3805b330df2769b943

          SHA256

          47df81678dfbdd53899d2016d78bccdb4814740ea45795942a6e87fbf611ef06

          SHA512

          ea9b41312454486896fd6ee495e2c4273e4706765b5eea1c536b66b8864a314b816b1571c1ae45989614271bf5dda583ccbcf176dcbd4d59b558d32181978a67

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          369b3a3f33e0a387204764ec683c3a10

          SHA1

          fec80459e003f6cce02aea40e573a0fde98c7aa6

          SHA256

          75e58f924741a23bd2cedc0078906d7307c77528c80129c068c119d6b4aec542

          SHA512

          ecacb6ba9d9b0ff98939afcb7594310964180dd3f73d941917e46fb17f20dfa2f3c81b51cbbfea267e71d742fb7d906751a5bad85fae429b2da8087bb031fa66

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2fbd9547b4b8e069b81b1c99d4783bf2

          SHA1

          8df5fc7d82b8e47730d927756d5464370cec4339

          SHA256

          70d68df20e62db91a8e06ceb494f68cff2a80f39fb7b7aa67977698f2fa6002b

          SHA512

          89d526ef9aa611f274dfdbb207e46042b1dd03fbad97f74ad5d83b3b09c0ae4ef0d37292ee64f15e4485c72b628bd028d17aeabc051705f869313bb97d337ff1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ad6d967382fd138ceee53c56402eb8e9

          SHA1

          ef00821592f009e2d7d2af5c877b90d5381b2895

          SHA256

          bcb1e56d01325cce73a8732f0626ceaf8c549379fe48afe76c3163ba8e0fe762

          SHA512

          d92d263d26ad0bdb237da607862d86db0c4d330cb9231997de4df1b371c4742386d119d752b1aa915b187339de447b540b543d1ebc11796e0b336a1c6fcdaecf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dd77f755bb4194355cdc7f75971c81e4

          SHA1

          bcf9b87f3a11f09e14eedf4b3d05607a20ae6afa

          SHA256

          4c957b2aa63bfc49ad0b44d43712bdbeabd4e16feda0eb9aa3f7258f8ecaba43

          SHA512

          4dd0201a02d7b8f3b652691389579f91bd484b0228cd628590972984028bad4d228ba783a1c198a54d5459008db3dd23cf1f44452996e7485041f437bb1571ff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fddb86814186a387742520c6bb41e560

          SHA1

          a08876bc54a7349461fb6f31def5fc30569bf5f2

          SHA256

          64611ae54ae0d37694e2a44586d2fe58df1b704356a4b8dc4f3fd5d0f1a48632

          SHA512

          1e562863846b953d001363d29b215d5254b07d834334a622a8ad4edc72f96cf744952d65e4f3be198dda26a38b39453cf1fb56a228903948792457a28d3de915

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7da46a6061f180787b2eacab899c56f1

          SHA1

          edc1058b3066c4bfc5daeaa64a781c071d112c8b

          SHA256

          8efdd29ab36da7b6b322d7c14feeda77b183f31daa0e5d71166f0c6e613f8a61

          SHA512

          b2a160cc9c7860d590325a38e9dde7000455394f33df48118543337e8ff538460a7596c33c1ba0b0bf8bd824f9cc9e194e3ad7b315eb2aca1796c431eb782c2a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2cf68d86e243515e3294c49dd552b928

          SHA1

          42c6ef28d88f2f94e8961cbe9ee3898e2e3e7533

          SHA256

          f61097b59fc7035f27639996dce1c434d17f603bdad16a7fb6bfd19552020ace

          SHA512

          1341d7e8de683ecd3715146cb6e3afe26b76e9d42d2b994fc61508002fd73c34d2c061c0a0cf544447a23e03497fed61c1ba0f68cc8c0e60110459403de9e79e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6414465c43621bc3d38dc460a06bff03

          SHA1

          f4f636b93a722a88b2537497355bb176a597133d

          SHA256

          c86e131e6929046113087c11fb071601e661a20de541750410ca8ef7b3c6e2e6

          SHA512

          1d2e0465e925a9ddb5ac378047c3625c29a1c10e6dee6d18dda57e85b91c0dcc3dd93b51ea35e36c74c88744f6d2314515b337b1b7e1330102dceb6d35ba9e00

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bb3125029e49d11efb0605eda750a187

          SHA1

          2a1d4f2d40e1675c5ae38341c3a556f2f1d7a880

          SHA256

          8a525b982955ee9a00a688247831495e6019e02283b6e2d31ada60783f53fd59

          SHA512

          49c3e1af036485c77ea89aba33649a1d09dd9d5982cc93327b00d69af9b34216a76189b418d566fbf9046b87d156fe4c5dbdfd557a962ba0ff0d6b9d9c84ca43

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d0a93b8fab2ea39eed06fcaf63ecc218

          SHA1

          40e70cb8e67906fcd721960aff4236ed7cb88e4f

          SHA256

          39d48cd2fd295a58ff804d18003c11ad30319a423875ba23565d1aba6e9f2144

          SHA512

          48ba69fefb8c0fd1f53c06bddaf6a3d9a0df5bed493cdf11a53d9fd0d08e4685d750ef3832fb86ac2a5f7f333fa48785834e293b0a821a7c098454e0dd69261d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7ad8948e0e584d9fdf600a91759fc8e8

          SHA1

          9508c70064d606f2eeb958a60bda922eab64f612

          SHA256

          871a83d0b52af641dbe98c5672c7060b64129d8d84417b25236531107ea1dc57

          SHA512

          1b503799cd6949b909ff54681722871125d3c56cb7e4151462907db70d984bf53e7bc05a17c7a374b74b231fe4383f4d9d5a18f7ae024ecc67572640ef5cf294

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a552fc34021f4906ad16d58040b9988e

          SHA1

          0f662e938a946e667c54403db7687d55b4da2ac0

          SHA256

          e5291671bfc85c68142f9df7a7a815be8983906ef37eb068f5712de163a6f027

          SHA512

          29416cc21f864b802cdf6718de4a54f074ca1567c7b19626c36b246af0342836d2092e28a113b499c72541ea6d481e3281ddf54dc0949391b49c601f73b7d4e0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          803a235b8b65bb2475ac272acd5db4fa

          SHA1

          e96cc40e94c5d8905d74596eb1d7179d117e1f31

          SHA256

          ee405d309a3799754b5e187961aa213f527dd298b5d7b0d58cb4115049f45d2b

          SHA512

          0262e567f3ea942a841f96b406c695b9179356f67f8e58e24527b56c8c9e29557140b338d62f4c5ad4590dab5900a24902145d2231449ea0c555ce2b74ccf254

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          27919fcb053809ca76a41a752bbba4b1

          SHA1

          66a4ad4feac3b92e6540ff95fb64966698b14666

          SHA256

          bf618d00f7710a665e458e710028e72a6c25ec5a44191da6bc2851adcdd0e2bf

          SHA512

          c51cfd982da555c6e7f3187c1c58ef91f0801aff1a722ffbb5a7caba690de3d9b90ad031c5003126e509fe8f4bfae174a071115c76c9a1be4ea8856ef84656d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c0b6b41ac28cd8a8aa3c0d9e59dcea49

          SHA1

          69bd02d0b3d140fca23f0dc7ce3088c811c7fb82

          SHA256

          7f5a443e8cc9ea3ab156cf24cb0caf8d3df9af63c99265948b88319df6bdc7c9

          SHA512

          5525cf249def5291c20f22cf4644304656ce5a3e088fc992221c02a2c59a4382172e5c20af5bd2e908b0b42236f701d2331d5459f43c34291aa7b896f7b73c87

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e7d86b7374dc62faaefaebc924c9f493

          SHA1

          9fabd0b789f4a1894a885929d89d37adac280107

          SHA256

          498c84beedaec459cecbdad6292310d53befb1017891a4968fe72078d3ac7851

          SHA512

          1d45a0a7ac756f3fb4b0cac834cedc2ca97928c284291712eb4435b1b888ea54f81193cd7ae8a5a2f353d981614ccad53f914c493354c870d6fd6453e6b5f900

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2953e8dff49414f21a05c2b10a8ec8e1

          SHA1

          3cf90e2f2ebe7bcc6f412849e5d5ea992624b5c4

          SHA256

          54066c0c16e3ffe2633794d874b164e53f4773271731d0877dfbc8004448a4d0

          SHA512

          e4ff6e7452a29fc12a35b1d136541de5296b97ea1c6343372c38d1bb3b54b5898c542d0a99576b5ca1c9ef7772348e113f4aca46c6a39dd9ad2afabca1becac4

        • C:\Users\Admin\AppData\Local\Temp\Cab6692.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar6721.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b