Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    19/06/2024, 17:29

General

  • Target

    bd837340a258a87ac8871725b228d96d_JaffaCakes118.html

  • Size

    11KB

  • MD5

    bd837340a258a87ac8871725b228d96d

  • SHA1

    012c61159a5eadf00ce922fdf52524ff1292cd33

  • SHA256

    93d0b4c8267f5894390258b63fe00262ec5a4be2cb7d43b52ae19bd281f89b2e

  • SHA512

    f33a89780c6f7b37c2c4fb0c41b7cb62491539b75240c1ba31f0ac563f2150c2ca2a2e5ffab950667d07c709367558f65209fb4e17a344e7320587e172d025a1

  • SSDEEP

    192:SIdBAHNxVoeNAwL3P7IuW0jhF2zobMqPZgqjW0JGaOhNofg:SIyNDvL/7e5QZgGD+oo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bd837340a258a87ac8871725b228d96d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:920
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:920 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28b9cce5c2987fcc567a111bd86fbfe0

    SHA1

    6583abd34060cba0064288d515a5ca22a660b3a4

    SHA256

    baa00079bac323a3a0ee3c759504ced3b4a8361c774fb7e43ad7c0d860d24528

    SHA512

    accbe734a5bbd9b088fc42193f0d57a0c9d9434fd5ca11e04c4f20e9594bf879dd68a6078524dfb01ea652526a01b1f3490226e070d462464a38d47a693c5d50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cce5dd53f793f70fcd775e281649c12

    SHA1

    cd15ae5cbae676de69244ec4fe2136e374713f6d

    SHA256

    924c93eee71175c50a686f813798ed039f2749aaa5b4c8aff13feca194618ae9

    SHA512

    f454918987d1647582c57022e3e4d813c5ba7b89c3b207f8c6a1c2242f247221c0723b086fae24d542c838d72cad10b18c3b1226909c3e8a6af90f3591e0498b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    870e76df3e7c71b4aa7863dbc6cc1327

    SHA1

    fed091f031a64dd1db4f38e6763c97133732aa08

    SHA256

    0d15f63d8514cd74825064d0374296f57b22069040be58c96774e97286411020

    SHA512

    fb29c65ab3e4cc743a38c0ed0d776322b314fa7e98eb4a9501da2b00729be0d903bd2e7785fb4f06f3829bf27fbe6c1af7e6b7a7f355256975b58c6138038ded

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f410c6c4dca38f63284d9f4dc06a0882

    SHA1

    f1f4e1e48a9b85e3ba405bc345a05862e3dcbb34

    SHA256

    32f6c2ef87ac8767ae81fa5d5156b0fe7e919c06d4242caa22f8106c800e70f0

    SHA512

    12cf2f69930b0e9b9358ae0c3b550c68791e46bfa6366444ba19fc802b31acae33916e63928b05b3112438d6eb3a82ea72997702775e6b18d245c5d4073e444e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    591acd55a09265a64741afe479dac4a8

    SHA1

    ef173e284d2eefe1da1c17b9bc5154443bafac48

    SHA256

    c13e8b3fa869dda197862794bbd17636ac304c9e4e9a00162617674d4dd1eab0

    SHA512

    03318f65e99ff42da795dcb3097c7f8ed10f630863d8d43875c02bd883c51293860c07f19468b4f6f3ef671217119d88d909934fc5f5cc2820c64ebbc4b66f17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05ee1bbcacd08e8552aedaef81bac690

    SHA1

    590a06d0c9f16470b2d46b1b20b0f99761c29526

    SHA256

    b5b1aab5373ffe0b68ed0495c45a790c555d3d83b84657b86cb57ad2b32ee8d8

    SHA512

    35f691eed2690c3607c9ede608bb13a8084bab9d87e765e5afd7a262596b17c98efea14e74125ae1e5c7988619fd437638f32eaff2f7b40872885e6159ed5e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b7e2040385ac09a389990f766ab20a9

    SHA1

    9cf3f17a4ce6197f29a217e6ecedb7f474105e5e

    SHA256

    53eba3a31d8da489e7fa863a5e7455397c10f733eb32ed98fd19e412f7be3670

    SHA512

    698e0306666e79ef3edc0da3898383bb03fa13d8442dd42da6d1665917315deda3c76770c79f1ddb16e66bb42ae1f2275eb223d12254b9e6aace9c64ef6cdb6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c2a47c8a99a9c0037ed4285ff04860a

    SHA1

    5bb8d77e114e0840f86f1eff7b615d54e5c12725

    SHA256

    5b4f354bb1e530d08bba12c5ab9212bcd355e2cacfa4cc2645088e0d7c2106a6

    SHA512

    460565ebec06d6d103d84b0f318416ed1a0c503f940066f118de5c50a6af17d079f8ae06872b399065924f664c20acf92c7e08ac2340f15a036914180c8a10cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    485ae2344d383d220825d0073da3425e

    SHA1

    8284739bfcc83df6684fe10a453b4b6180017876

    SHA256

    08719bcb2adad58bf7f71fd5633adfb5e802842093b66b88d90d5c803b4b6cdd

    SHA512

    b2b3ef0173185aa0cd1b41275c2a011cefc687667234069ce0d09a3ea693dc378d767c1b1c1f3022b89cbdafed1a5c90b3f6dab98b3be7ee2ce1a0706c8a207a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    397c33dd67b5b9e20043f32aebe4da71

    SHA1

    ea369516622a332655a128780319f6acf288ee8d

    SHA256

    9cead77c13edfc3197979170bd3178a721828732c72aefb0b8361bf122462f54

    SHA512

    33bae3d66d148afbf5ee02842216d3aaba88b5fe61f042eba75eec1d0d562d4869dcfbcc8c119fcd7f9018dbcd7be6f7f8a4262d32520de331d43c11d466b407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7959b417cde418065ca1a4b8249aa968

    SHA1

    b4ea97be7e7b5ad43c7cb6bbb682d1a6bcb7961a

    SHA256

    f77f0ab5339fb14c6d28548068ed12e0ea368e7b5b8412cc14880721c3e0b97e

    SHA512

    5d852343c0a04253aefcf507f8e5416efc4c760fa97b64a7fed6483fdfcaa7c4d317a69d7c03eb89c86d49a7ecc33d7ba467041095c95a75c393c6509ae207fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fa2a0a2e1b9636367fb25512eecfb9c

    SHA1

    839adf89b61b653a466006ba7a1df4641256fd88

    SHA256

    73e79200ea7bd08a4e19cd43c6552d3f0844d632c32a39a1879db9225951304e

    SHA512

    143a3091252a3b16931cc167aef6458feea975dd2c9a1eaa138f2660cad3f56f216833a624bb30167ba258ee8c909119e98eba5fdc8d272428eff65988eb3f3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8a92efd631a74194be40d17b43d2231

    SHA1

    e01c29f68169dc9a4117effc791b8c79a5a92b15

    SHA256

    c8fe465896efbf6d302dd8b6f33fca5b4f6188cc06a2d3193e2ddd8daafe46e8

    SHA512

    868fc60d5cee2e39371106f62d55cfd43a5fda59d6d82651f40be68d82ca6a6ae0096e06179bbdea63ccda0376cb8bb2b50a3b31fe7d76bbbfb387f170068cb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4267e10396f506914008939d1288e567

    SHA1

    c9bf59822eaf9f4446a96637863d82c901d08f4a

    SHA256

    cadfeb7df9b4bd7de38cc6ad2fddb1036cd4cb5cfcf90b533fd126205048103b

    SHA512

    37df01cf0cff38a0ad6a57c417b02abc3ce74cc7df061a1f0957c017b242608e7e82820698cd1f3408dba47b06a6b54cb6d250931d87424553557b9209e9e0fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0936db676918e55ff12ab2f8dd1da556

    SHA1

    b96f5e60471ccec8fa6110bf59486deb6d0d9eba

    SHA256

    b3ed230d66f3a806c3feea24d025d56450a2cd4271c5c7f4dfe32aa8d1d81c86

    SHA512

    b62744221e3f44931b34ccde071fd4356609c9128b618e4fef3a877c9a21695d00efff63106094d8dfb8263c6ce8270f2ad30dc4f9709e07cca367cffe781595

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70e43f07ff963273c57b02c725afaaf9

    SHA1

    3b10029dd4607f899bc973d8913a8e8207ff0e62

    SHA256

    ca73b442e50dfa6399218efc871f33ef8a4188f5fe251b83c3048078c36ba6ed

    SHA512

    be9accb6731b3a5d3d6bd88f12988030bdae53ae0eadf260a1c5585be528ed99764a8e8445171f18dda9f054f6976ee069f1c264b9b0233518cddde0eecdf1d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c9ec8ef486626299806eb60d598be08

    SHA1

    680131ef8e72242a66c95360a9857bae4254e538

    SHA256

    e34f70e3be2b4595fb507a0cb07029263e285d1e1828736f1dabcb9aee24d411

    SHA512

    caebb91778200601ef206f502f26a9f01497efe9d93325b60fd3a4ae93439ed464a7f4e96b6c461e52e32060ce437ae652d34cbc5c4e130697b2912574c364d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0df5352e01af5a1571ab5a193cd95437

    SHA1

    b76746733a9f174e0c8c9c0e5074f1711446ea2d

    SHA256

    a67dcd4a7ed6708a109d32e8eabcd36fc21c1f2df57ba1cb7a164c6ae2261874

    SHA512

    c82956e3f0e0376adf1c92ccdb559c8d088b378b9980955bc8924aeb6e1e83c3355d6cc11aed5de8ad50627754e7a405165fd0a961d6cfa54e94c97fd3b97ede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f18e22bfb33602f9f632c738ead5c9db

    SHA1

    facfd88df7f23a7566757bde7f1731400add8b99

    SHA256

    58a7ca81e8bb310af8c16ca69459e4daadf0685a10b5fa98dd0742b0c070d0c7

    SHA512

    da365faa0a4fb1244da2ae84f5acb97d9a9ff08f348719d420503c5bf228f4d044d4adc75e068943645184e9d85e8eb1b6b9b6b9651660d3cf5ad4266c26a24a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e944e84052dd7a3c417e62fb34112d6

    SHA1

    bd1fca951556a8e31b9e61e02ba7b40074f4493d

    SHA256

    cbd1be90c897f6c969e44ad47b1cb7634849e5ff51e3d6d128a8c14b261c0037

    SHA512

    af2c78ce0417d2230ad4bf47b8c06cf0f45b39b5328b39a49824906b86c3466472a6b75dfc1111d4b8cd2a8f0d88aac900e43fa18ff1f6b80ddcb260cd05eaec

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A8DU897P\style_1_common[1].htm

    Filesize

    4KB

    MD5

    756648449b7f13aa547e14537013c989

    SHA1

    9062ab9b175e65c99d23f0fe93d80dc91cfee14b

    SHA256

    c62824c1e741a4d6ab6ada2fe9439808b35b1ac92d8b5f3126d97d3899f52661

    SHA512

    2c0da68e2954ae8246736ac62a871f743b11ac2a0e8730694ea4f412b3aa356ef7bd34069713965a62ec0199cc65774376f0a14d8cbb6b2f4bdd9b98d7f73683

  • C:\Users\Admin\AppData\Local\Temp\Cab55FE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar56BD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b