Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 20:54

General

  • Target

    b5282cc7ae727b4f1ea2c1f808e7bad6_JaffaCakes118.html

  • Size

    17KB

  • MD5

    b5282cc7ae727b4f1ea2c1f808e7bad6

  • SHA1

    a4e8d0537cd4456f69d9eb4ed93d181c9759009d

  • SHA256

    49a513a56e146a44d07fbc5ac4e2058a98489b7be73574cf652600827f95841b

  • SHA512

    fa4c09da8d0f5dc427ed3da4ae8372c540a1aff0d79794dc3a79acc5e8ff75bbc937a909901cc15a85069a0f86ec6d259476f97970a2048b9754a1d308667db3

  • SSDEEP

    192:SIM3t0I5fo9cKivXQWxZxdkVSoAIf4zzUnjBhRb82qDB8:SIMd0I5nvHpsvRAxDB8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b5282cc7ae727b4f1ea2c1f808e7bad6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2476

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcd5cab5c3c9ba93769d809bcacd8728

    SHA1

    e412c49c99a4d722adf2fbb6978d2d277ad97df1

    SHA256

    89b850b11cacb791da11fc1f552717327ad7c75a6460b31f0875619008623c4b

    SHA512

    0bee670ea07b965157f8c59a16f8fa9f4ad5bbe1c5a5616a7b8d25c24cd4adf4f19df05c38312d66775546db7d92b785a46ed3eac6fc4579b29567ea28a3d2fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc72ffde8313bf48da35885fc8571396

    SHA1

    b764daf3782ee9eeb6506375c67e4a914efd74b4

    SHA256

    97c426170adda6254d304397297e9c27c0e182cc8ce1d8cb96d9a9112ef80717

    SHA512

    d6bf1208c1d4a9698a8a598a28a226e32dca6ce7f67062ccc1a7686272425a521f4695ef2b0bca0287b03b22597cd7d3aa8090cb658db880183646285d497431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15a2e5d32f0237d739560157cdb65bf7

    SHA1

    fa56efd1379ff61cafa429bfccc68ed49c775b17

    SHA256

    07e7a66895312d32c4a35dbe3391cbc3fac1ee22718e99164966fb977a206df7

    SHA512

    07af7dbea36d350e5c1ff2cf3e2ab62b7302dc80b7a625b1fa451fbad6cb822a2e147400b3c4410b794d805159fcc8e768126b3ebdc8d83c72a0242c882a4ecd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52ac0cf4d9750e67143d427d7f463266

    SHA1

    5c57a8e76af05e44e12e0937c815c2cb14a0875d

    SHA256

    979afc688cf3f5c39afc7091194d716ee77ba339f9cc2902688c20679b4009c5

    SHA512

    c996fcc40a31362281f82684225d319e7b7856f2b83f74667b7032373abd83a33fc6cf151dbe44973acf33de8fcf2fe696e51bd7bb2a5ff8cd497009dd170da3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80687f4210b0d1a24f1e4fff01f6b295

    SHA1

    3383bf47c754272550fe1b9dff869c60add9617d

    SHA256

    d5e52aa06d21cb170cedbee80a80a0ba725aa8202ad67c356cbbad7ca72cf039

    SHA512

    d36e4308428cfed7dfd6a9077dc198ab58e47af5294d2d67aa69340ef5339f1e98d543cd02f4e5c6598bb3e8108cbed28128525e4aa96e5ec55c1e025fb43c07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfcb7094c31065b89e866da6a4cb5b75

    SHA1

    08f11af99d8a63f8478ffff536ec71dcbff3bee4

    SHA256

    91f594f8f9862a1c82cfe9b4ae8200d6866ab58e0f688db2161740d406943f3a

    SHA512

    dc4c04c7c1f3c99718982c367a0c9bb8f3f01a1337530ca89d63176b57179bd9675cdeda8d52b1fcae7ff85ae8643647ba4e3b4ce0068f18e4fa19437934343a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    348b98772ddde45b241e10fba773eb1f

    SHA1

    04cd6a84228a63ab6be1d638d992ac2fe42bbf55

    SHA256

    13c2597e3d5c873522f7fdd8900e992a2bc4f08ca1576c71b9509ba766af46a2

    SHA512

    bc0fef712bf72e87ab86cb9ec779f2fba9c0d3ef87d576ae1afe65749af35b67042cc341e1ec7a43e7cac2a12fdc8d57468654637dfe756a7f3262ff7df41a07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef454fa63afb3c51b54a37db6c739d14

    SHA1

    320985abfd12bee72ed1bb03195cefa06b6459a3

    SHA256

    c3b84cdac16a72c21df062dd9e71a473b12f4abb50c11a6ae7b1e722e9254ba2

    SHA512

    8392ba1dfa769cece35f37d8d448d63cb1df786a5388026a15aa09011d7e645612416c61c7846768adc6823e0d29e184ae38db17f2d296945eea14f6c68d5e73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e1835e078984df5eeaa29df7bc4cdb4

    SHA1

    bdc2ec0914583f88cc5b97dde454cba26b568078

    SHA256

    f29efa45b452e3eee61a2a0dfb2c581dc9016f77af752227207fecfdeaea3042

    SHA512

    66fe29399b31444bdab246da2f741e1b20e70da543f32ab77b4aef9c0dfdc78b9d09597532698540410e677fc8ad08e8af547b512f3f22ff89861a4e191469f8

  • C:\Users\Admin\AppData\Local\Temp\Cab30B3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar31E3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b