Analysis

  • max time kernel
    142s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 05:28

General

  • Target

    b6f9d3d92915ed5696e070e9c891658f_JaffaCakes118.html

  • Size

    139KB

  • MD5

    b6f9d3d92915ed5696e070e9c891658f

  • SHA1

    c726544486960431af4eeb10cb9f2e4b4f1abaac

  • SHA256

    058864bae553ea08a2c3796d1f3cd18f47c9a39d201b27d0e0b89173c77ab076

  • SHA512

    c37d84310ff5eee2e574c9c21f1dcf7ef96ceb02ebfd1c93ed1d7995eb05baad5b98c6b9ea53276049df932960525a9a6f56bacce9802c8d5fc90d893e11c3f5

  • SSDEEP

    1536:Sttqsb71+YlCwyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:StF71+GyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b6f9d3d92915ed5696e070e9c891658f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2320

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cfb10c14645b28b4076a5b1a34e6ad99

          SHA1

          9cdce673c149192926f131ae093135572d9c0297

          SHA256

          2b1bb02f443df30bd10fa9cbb36394d25fb9c92b16417da8b0ec6839d8994a89

          SHA512

          5fd7ba427be5d1bb77db90339d2604ae4586192f404ad041ba5531cf06274c43007fa1a949c2b8a9e69b83b8a66c7cd7c327be3af52e84d00e8bb148441c0560

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c0e4fd6bdbb944cb4fed8e8b3edf330

          SHA1

          b2d4941033f25c6ec5f85543e2edf097bf6e08c8

          SHA256

          5bb874783e5695de1c3611acedb0feea39c6e5e7d99dc290be0de5ca8941798e

          SHA512

          fa54e89b8853113cafff11c0a9fa2d496c0c60f4a4db4daca61e98376b1940b0a24d3c2dbb3bd44a79d6c3d6481c2bfb2c34b275ff5cb69754ec302da6a0521e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3fec500537f5222b26f80f4cf4529031

          SHA1

          a3d7d898c116da796edade813a60325c01988bdf

          SHA256

          118588c07e675142fb9efa537b129bfe7311a81b25aabaff79cfd00c97d9b185

          SHA512

          7f2de54ba7c4975b894d1d2e5e1a2169516fa5220a4efe5b1ca1a88f93a87befb7e48c0497137cab161ae276bcdc784341a748086ba8b964c2a7668b364a0891

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0817833b6a418c9dc337d7c2b15df38b

          SHA1

          126661fb8fc108d4ba981af1133d67520cbe4dab

          SHA256

          de927a34a5bd6d194bb6068ad52b040499594e89aeeedb70696cfcd2c9d8cc48

          SHA512

          304109aed7bb0394e52f6610caced8ef6628e5edb9da3ecc7eb90cbd5d024ff5423c1ed9360a51121a873625818ec9ad2966e3c187be938a53f0af2d9347a102

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fec11bffc2f3fd02943186a10dd35d0d

          SHA1

          b9232668ddda8c3c2fede829338da3fa7b87c746

          SHA256

          b67e2c67d1dcb5513daa34f2bead0c22dac73c444ebc6f627600c208b15dfdd2

          SHA512

          3f82fc1446a62e11ba4899e6a811df21fd2fe07002b9c23e2148f9a9742736b23a6bfc48599c0547d1d2b2e42d80ace6e44247e975636d5ad5d342bc166ee991

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          16d7a854be54bf4a131499c60dc7af33

          SHA1

          2255aa6d017b704d3dcc191e8d77e8ce163b24bf

          SHA256

          2b28e27491921039b8a7d45fb63f9a01ec3881caf590c0c1cc28d98349921955

          SHA512

          ac406cf70be3e37e1f17a8610a8a4d6b4ca275e3cdcefbbcc96ec666851534cb8cd6187d94002814cd8edb8c542cecef2ec74510dfe9e10e21922a2aeba2886a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4f87ea8c7beab520d10da932343b34da

          SHA1

          e3328113af3b4bfc5329a32f6a67d942c2ef0599

          SHA256

          e0a9286759a90e62ee66d16599d55ed72a746f15779dbacf809efaaf7d929b4f

          SHA512

          40137eca4e862ef0a6b73e3b8dcefdb268b2b2eff73d4d935c572b23c46730ff9d34b39a579816b6e643b667b50e439b8fd7339f153c7077cf51a084b96910d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          05cff8a631f90727c48117649b074298

          SHA1

          abf9c32070df638b7ba009847b4adda8c3590e1b

          SHA256

          83d23c3144339b45f3ab1754b0449542177fe6ef0872ff68667b341f6c703108

          SHA512

          c92f582a7c3e58acdef0c69f18504fbf453859a1fa37be7ac86de2ca43ef2d2f18a8cf962918f79c5b976c9b99cd26e705176719f6be1e8fff0fe4441b964c97

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          28a6ff96a19075e465e57137f2262bb8

          SHA1

          78a795ed4b7da6b638ed6350fa262cddf463e6cf

          SHA256

          b7cb58b6ada343147c5740abd14560acefdddb12486f40ef42275f7af4e59743

          SHA512

          db0162f616cfa215a5e30bde1c2f796f870b76728b7e630f006ca9124208ee6251ac223ca561e51a6b9a13a9521ca41a8909e6d01e18edd6770be4ce368d5a2c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          51248a054a2ceaa1ce7f7a874f05dff2

          SHA1

          bc1008a9700c6cb39d2776c129ebd6ba27926d29

          SHA256

          a108bdbde9f7dfaa5ee26b17a6cf508fd0ced185c6b96affa6bdbbb30dc9235a

          SHA512

          40f0fcab5d092823db0e42db0fca8a6c890c0045e852aa61bb89195b432f65aeef0f4c88e0cb6a0972cb3a9a5d079747eced4c151ee469ebae1abd3434554050

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3325115a598bf87967a41e439a1d015

          SHA1

          810cf754678149581fa4cedf90b23858ab1c2b3d

          SHA256

          7f9e633ba6e82f044c6ae965269a980290de889fb45e0448629e6d0c893be8b1

          SHA512

          6568f91834ca756a8267204261f88c98b9cf7db8c75ebcd0da6510fefd180f7201e4fbd68784b300f844da946c5444ba4663c3011d3ec6b65f9676d6a4c1e473

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4b93b3cc25cf07be735bb8dbf8b06c5e

          SHA1

          1ef8ab151c4916e967ea15285bcf144176cd2a7e

          SHA256

          cb00771dae80c6a917383409e415e24aba05ab76f6443139b7de1498d44566f2

          SHA512

          2b27265295978d7ddbf4696a9c483abd7c449bbbbbdb86f35a3511387b56bf3b038368d128e07c2f2f7e0465e094ea34930709babecfae17d8d5fa222c6364e9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          737b23f488068e8cdd74540e02ee3b8b

          SHA1

          d5ef78af3aa8f7bc9b93d631b53f6dd5c390eeb8

          SHA256

          934d2e2c9dfbb85b8dc12a05356791bfce68e7be68ee0f23b13e81eb9cde5022

          SHA512

          f854ac4d2ec4de4aaf3932e37ed2e0870b687fd539c8aa3121dd324379cdb4b733e4a5551455fe8f6ea355d4b003b6c4940af75f181591c7e26391e611e7c9f3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1d2597f22329bfc2623ced03b0d45b34

          SHA1

          c82ce894884b20a111be138cf084b751693eb97a

          SHA256

          659b0a1ecfc49c0456e98cfe2172f6134157f515ecae77a646e8ca8a9abc26a7

          SHA512

          e40873a977ecadc337a310bb70557ff9b3e67f13981d8d2bb6e49d053548d9f604c74c0a99538db5c8c2513a5b4395cc42fdb00bc1ba6fc146fc730aeea9aeed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bb652eee65051f8eece2ad1569d0560d

          SHA1

          5e4e2179466b90682784b802ff508f85829cf9a3

          SHA256

          d621e3484ccc26fb595f135b51567e9355981ee9dba047784b9e2a8829b97d3f

          SHA512

          80a6d2d8e04de9fe2422bc5710bd616d97484b33b72defe30f88ac5a8afa3a6306565d7c77af056f5c28870652313fef7d6fec2119b28d9be23b5817d5560893

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b6ed1bdad0797d5cc34d4e04efb9fc62

          SHA1

          07376032498f491fcbe466a11e209eba860e962d

          SHA256

          49ba7ae4ad3a22d0bac547941cda635fd9bb3cfa5483a432413751c866d61e5f

          SHA512

          b312fbdff425a72856c23b6f3c5719e26539ada8cc29202642f617ba46d7b29b09ba42a2867539babaecb45ac71d178c5243f5333b170c8ca9bdc29baac01560

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf4227e4c88441c2bfbc9aba0a10115d

          SHA1

          9f86258b365049553cc4820c71c5324dab226f11

          SHA256

          e2f279b4eb9770187d0d9ae3f92d8bbdd5ca488e874492bc412907e94970a5dd

          SHA512

          83ca576f8ddd8919f80e3597f892e79e23be316722fac2e7d5e319cc00fe6b7f55954615bb6d282c3a6985ab276bd9b395ba6355de5fbe5d189bbf8327f72237

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0c1be1c39e60c930dfe4a7030288a1e2

          SHA1

          bd70d3f439dcbdfb0411beba591c42c517b2a3bf

          SHA256

          a9c5ec65bd0ef3b0adbe1f71eb5743c072fe1c20b5ce20ed937236cd087a37fb

          SHA512

          879d67873ce95c0b9a74f934eb9a3e05a1b9f18f8586804dc9c1a08e7f8ba7c82707a9f2df0a835b12b472bf198a67173fd7694017404967ce41e2391f3bbc20

        • C:\Users\Admin\AppData\Local\Temp\Cab7551.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar75F0.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b