Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    19-06-2024 17:23

General

  • Target

    bd7d4680da083d80aef573ede12e8485_JaffaCakes118.html

  • Size

    98KB

  • MD5

    bd7d4680da083d80aef573ede12e8485

  • SHA1

    d350a50ed42f450880fde39b8f4fe920c93fb867

  • SHA256

    134461f497be53bee2ad6845c7643c8dca4a8b817530520f298457f267037753

  • SHA512

    9b6cc92b343723fe226ee2549e02de4a595951e45b536e852dc8728253a81d04df4585025ff728a2bf26d9596e85bdfa6d4940e37c28864f1cf703150fb201a0

  • SSDEEP

    3072:n7izOhkTPiPd0tur6IUAphdlkI+q+d0Yw6PJbyvxF7iM03E5uv7ML9Wrv:0v

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bd7d4680da083d80aef573ede12e8485_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1704 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7a709b64caceb042b27075b6e1fb700

    SHA1

    453156b12316b63cb1af5223fcb0cbf4450dfe68

    SHA256

    ce4877e62329e2888e8fd9398ece781ec1a2117f2c27e7e878e2e6b422ceef21

    SHA512

    d5b0f5fd31487ce913498e11ba6ce03ead19d9c808d08e9485d9f1ffd398a4f2c7cc5ead3a0cf32c51fbd8d0f3985b99b485f55c94f7b96a9f81ac198ef46895

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    200333134b44587b658e64f96fed66a2

    SHA1

    4f581cf2a3974daa1ad5a0ea31dee9cdf2ecea2b

    SHA256

    53c7a0cde1076f51587d71e3064e37c978abba8f135820479d1474f90bc224fe

    SHA512

    49ea0a8ed4d2aeb6e35b4b71678135b172fdb61707c336733e7c666be92cca581617e7c1aa7e6d551aaebc82cc0c61452fe2b368b19c2244e7aeec028e0f6ef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    176d59abb58fd8fbf9012e797c6ec45e

    SHA1

    adc339229a2e274e02651717995a09b1bd3b4e00

    SHA256

    cd36b7336b54207165b3f29c9b4e6072524c1b5a7487a8c2abee033bc8dcf819

    SHA512

    2364c9f73807a090c45caf26073e74501dbdaf93a8a69d3731340e3e60dac413e737fbbe6d31bdbf655d8614f251135dafbf67d77c1559fc8ac1c0dfe9b7291d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08698f8069c08061f0695f82f6af2538

    SHA1

    aa3a7a43063b0e1f18c35ce5dc8c687d2baec21a

    SHA256

    5d6358381b0e1e74eeee54484e17991a97c93f867d8dcdb829d1d07233dd13e4

    SHA512

    5af20ebf2dff13b96714e70deb268dcec0d117e7f7cf2deee716e4771d85801c8e3ebf2185de539c27bac862743222a89d74cd1825c17090760df726b3279641

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3daf74dda0f427614831b092dd608389

    SHA1

    2fd9ee23352384f94d60241cbbfde93ca4b3c831

    SHA256

    7ddddafea9924742279aea25236173a39166af62162ae7200c5f8622f457d26c

    SHA512

    06b2b4d40c8dc966675790a403674756bfededad4f039e5598ea1e16742a82dd227d0ebdcc590f158f3e84ce927dfd3d162e50c4ffa31cd5a2a6fabcae075ab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e51bb6dc97ac65ef81cc930be974a3ff

    SHA1

    ad7f516842e03a1366bd756490df59658a449eb5

    SHA256

    e039c9d403d068ff1b9ea6d44cc2557ab69c9f8c9f18f524e8bc483c76e0aa36

    SHA512

    50a563afcfccd24b439ae9370e5db8cf4f798e9402547e727b42d97d90802573fe683c04f8291f5610f2b820efe97c34a17c2c7cd3e4b00a336e27ee2ba23cf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5432d785e7e9ef23aba1f35d8a6d95ad

    SHA1

    f3901b9e1f32167fd0bd490efb19281811a8c808

    SHA256

    90661b45ee169e36324aed1d85e47a60c373712efaf37b403be68f9eab74f753

    SHA512

    fa9b80b8137399dd71f7d4a07695a59f260844d67e54d5275ec694765eac60c542dbec1067a13681aca29a38d59a64410d7f8bc21883f71c53e966e4aca5261f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    196811211f39c07697d4c384c0e06589

    SHA1

    23a98449f64cd567edfbdd4b9ca4f524e234f2cb

    SHA256

    3c2bbe2ac014bf9b8539a89b852b4b49cccf74f67ebd74b95cc7c5de735f0196

    SHA512

    d6efe4ee55c01f94f16e70b999cf23639dc0d146ccdfa0ba32830d7550d5be84cebb40dde9e8ae1aa29227f24d9cdf72381717bd01c0c05b07baba8c00bca4e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5280b5868b2706e7635d6dff74b68074

    SHA1

    ff50c41a9bc5f31d0db367f933fe7c0a45845000

    SHA256

    d0ef66bb0928c7f80b3645a99748ede9790664098addd8377c4971b6f9350029

    SHA512

    0f1c9764fa172f627d66e9af70fef355da8676be0dafdeba435474f166163a941c8d77cc0adae4637de06d1cc9852ea88cc2013b96a71308d40d6c6b4bd65443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa025b840c12afa1c0e7dc19f1679017

    SHA1

    d20ef26f96998ca7ece3ed94fe9086c72441b0ab

    SHA256

    96ffa571cbf0f94a5cf240cc793dc02f88bae23e3d0246ce25d0222e2a8d1166

    SHA512

    ac7723a384542f603804682811ae8319762c127af8aba2aa83c308f34c7829d2a2ea97d6ecb5e30741c004043e826795a6144b69ab12986c54d0f46bc0729498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a388cf459d7d0747f6a6ecacffdd393c

    SHA1

    3610b7b00fea5eb7cd9aee2e04e40cd89be94279

    SHA256

    79765f0e8314237a5094547daba57a7a9adda1b77731378670086451529f5ddc

    SHA512

    fa5f31b8c3bf5543a86e88f3a89c80a16651f38eb8f4433f5483a91f09441ffa200fd14c0df088f3dd4c4aabd7213a762e91ff32f3b4c29446cce3c69448f7df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    224869679d133ac11ef89639de33d129

    SHA1

    8afaaa85f5815edc803294570aa99435eba20f5b

    SHA256

    0092f9a1e506081b5b3b009df1d97e3b48a94ac2eeacbb9734f3acc7a6615062

    SHA512

    3da430113bc744120a23f680f7d3301b380bb9308e50f9bdd6a66e6720c8f363b5f97772992111851f63b836634e47ce5c36801f33c05c7b5198c929cee1313f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d311e19ccc89084b336871521af39258

    SHA1

    d344b3bc3c265d8af9b5faa478c8aadac92e8014

    SHA256

    d9d116957af4ef3fc103c9e1b1d318110d8619eb979aa5c063e0f1d80383d390

    SHA512

    759409ffa5558be3276b5684b7c6b796cb6dc378614a9e9c7014cf1af33482dd77e1097a5d28dfc6a4bac5d17337a56d2f5fb00ca057bbc8d457fe4c757195bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c681825248b262ed993fe5a36c73ba9d

    SHA1

    24a2238d26319a62bf8c4e0e0beaec7e77d8abce

    SHA256

    a6039c76972917c372324af72ec004e8677b5bcf7415b97dd277e6fee5743765

    SHA512

    3d529034904b27168d3355fc06c532462a55d388984031e8ab8f6b08e1dba5343a85184306b0ea042a9f3cdc12607f5626d5e6fc989dc60a2caae79144255f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d43578c69342d59adb46f6722f631798

    SHA1

    a3a1434844ed3bc680fc105c75f5cbf3b7a6b6e2

    SHA256

    682e075a456750ef7469b3394558d38879186bac5f1b47c5fddbb37502fa6d6e

    SHA512

    d21fd4c8ed699888cf87312cb26dc4bd2405e37af421778acd33c7b11c9cea874c72fe6222ea43ffd9c6b51e6663efadd4a2232d8197580410a75feca9cab0df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d86681ab54c506a0f98291ffcf61727a

    SHA1

    2e35a22d17075543eac00b0b03d41b857d93d751

    SHA256

    da3968a80309fec5dc810e6397438632a2645533d1547fc0137153b2b41ab801

    SHA512

    92fd742bb927ade2aeeb96730365e2a5bd018dbcbfaea05a63883cf8b454675adcdc65ef75f7cc1b35b417f65fdb9eb46707a60a3ab2c85bbbacd644a5a14aa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19d0fabeffdbe5f1b842c72d523e8c05

    SHA1

    354fead4cc0051df0b4ed7fc98ad92dafc553947

    SHA256

    ec1b943b105291e77f98edcc101c663e5dc19f5ed808d1be5fe7c7a3725a8a7e

    SHA512

    322e42e853a1bcdc2e98368778a361b6e529a5783bab40a28d44dd358c8948b127a3d4bd8ff4c66253f773f4bad0f3d2493489c37808baaabbf7ea347050d142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f23ca0fadf3231c2878f25cb41254a39

    SHA1

    d7cfccbc5e0451d2c75c80c8b4e85a1395ba64aa

    SHA256

    c61985b462ea78d5afd2ceec7d471e54a54b1212131b67b8a236ed457ed48af7

    SHA512

    93298a68160fa34dccfbef15bad5f863b7d1ab09bcaaa2e510d7ad9c17302d0b13ba49bbcea40c1e2c49f4ec92a23a92cb672eac31007ee0db56090e7c758d57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41096bcc9932ae3d24dc99e92b74ecef

    SHA1

    d9bf32bc8e31b38216d28aac691ceabbf51c0ca8

    SHA256

    cf9701d160b3c5a53ad60a4962e38228f4d74f171395f5c5be8ff9496cfc5127

    SHA512

    e5fc3b253df12c0628c284e41a9a74867afec8aa2c68ad4af9a552f8837420c5074c3a0cab42cedb185312cda8a58c406db68302a7ef63557bdfa743af6117d8

  • C:\Users\Admin\AppData\Local\Temp\Cab5F13.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6000.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b