Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    20-06-2024 15:17

General

  • Target

    072fecae0e87f5df5acd451cbe487e74_JaffaCakes118.html

  • Size

    12KB

  • MD5

    072fecae0e87f5df5acd451cbe487e74

  • SHA1

    327bfe3e46a8f45ad7aad94698a27db46418ad0c

  • SHA256

    3735d64435285f3ac309fa73e63157db4ee35d3bd0b872d414980fd661217228

  • SHA512

    02b0c896eb795c87110fb2ad2176d667a255a782777ace8d319a3a2b0e04ba09f1a9a8c79c5caf7f0c53c88861334c6bbea5c7436caf431ad12f788c9f6c9f3a

  • SSDEEP

    384:+3wgXEugQtN8GrAddlFGGOhLsOtZS0oQoBbK1:ngXEyg0gI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\072fecae0e87f5df5acd451cbe487e74_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1656 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d2b46e046926389c91b7b6e5931f32

    SHA1

    6779987242c5ce6ddbbb6c7cac663f89f86e1721

    SHA256

    f576671988d170c27b6e6b34126da51c3f2bc1fe3bcf83b052c180177c00494c

    SHA512

    6c72b77a2cf21052e52a8cf9a07541854e617700bad3d0c98cab81a984125b25b48d5559b02e106a40e6a318b2e454a89bbdeae8af138442924a0b2c17b86023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    678dbd2e6fdef03298928edb4fb9bbd6

    SHA1

    9a02db1fa5bc8843bd9d912a98180f052752f476

    SHA256

    f27dc8bfe266ac09573225e8cbf9343fad71888c83a10ba8b71cbd5814d92359

    SHA512

    1ccae37807d9acf07f7eee92788111b297f95d6a0c4607eedb35da9a4e6904f39eecae02d24a9a649b902e11466a3c56ddc9ddca683383bb3ce9db5dc94ffb51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b076b7c52cb86e35557b30d4693dc08

    SHA1

    9bd741eb1689637dbdc9786ec40f0f09f2f0c3ed

    SHA256

    5ed9d2628deb7e2aa9ef36637631cb9f0b5db8971a247f23a96955628fe955fd

    SHA512

    21f880a193ed06d56b773b287fad9802de376043ec466165c5d6d636fe9077ce7c8400c02ad6705bfb40c88ff30ef8faa7a1776173aa6a6c03a9401682f844e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a4fbed2f4828573d5d22054c92c6320

    SHA1

    4e4f1f72010a2c2918e9693e8193197a47f79ca8

    SHA256

    e6edf33cc5bd22f275fba7def45b73d9b3ef9d0f27032b52ccf903eb38a0eed2

    SHA512

    bca39bd89b4359eed14b6aa0ebc1cd6cb1cc8c5406cbc043fdb661ec4ff18c4606523fb175e7e67b1fd17f00021cfad49d6429848ac7eff294eeb88552db9d33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7217c1046b8108d118e572cccb43e79

    SHA1

    303e7d4a2121a264be965ca250f7b80b5cec9d7f

    SHA256

    a9ea30f46a61093e89ff56998af0e1a3754a84e1635e716535c4c64d11031c6f

    SHA512

    6bf513264c526e908f3ab1d36cb2a8c31bcefb6010cf6d9f515b83da5fc07a49ca6eb83d2e344ac2d4942481ca172b6ea4dbb28a5f0d021ea2e134e3a652ee48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecfe1d7b914669bbde0b5dec912274c4

    SHA1

    bb0f8413120d002b1140f9fc0e47b9ae4ecddb27

    SHA256

    6c21cb010785b98484cbf1a8bb2612199be26908691118158b6a399d2553604b

    SHA512

    f364eabe82951c9f4acab6568f9deea9d9cfec7cab3f42d0c33d4e57f76429f4ac31f8f262f55806eff2d7b12e925d770aeb4b549518ac945f1ba102744de966

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68730a02068b14d62c8ba108a6b70c68

    SHA1

    f52c80e4120745e9e0fa0b1daade7d7baff8c107

    SHA256

    123df39319026c7c11f68879fd9ada4e24f1e81fa475246a0d046ab7156079b5

    SHA512

    541dd8cf031c8346a092a82aa21cc8a3651f3dafe48dd1bd928f6a3f41c3d6f51f30b44dac82e0ad84d2f52f05d2cf6137f86634c274b20afd1fab6e9305388c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b6e7c1ba92d78ce2e66bd23c91f52eb

    SHA1

    df7ef92af430869fc5ff82839a212a84ad3bff3e

    SHA256

    52e616ad2e5433a65997a971733fe36c045c1f37c4df09c42953ee72242a7d16

    SHA512

    86ed11ef487bd2118fa059ee67045281012e85010759e165ef27316954eb49eb6475e57b045ffcb067f15a1faa44bdfde3f544164111332cbd1954eb05803ee0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4b8ffaca45d488b27041646f1dc2eac

    SHA1

    bbf113d1e21dbccfda2a2d58550d6ae35291546b

    SHA256

    c3e083239eeb00f1e6a77d3e32991b3ee3b28e93f5ca9e9aa6c30dcb0bbe21ac

    SHA512

    5487867ba1523c44fd2f4bb48dd71305519df6903c1b486f30f0f904a74fceb8306c63ac8fc30ed61fdf7f821c344fa01419f46992d6e7a917d38a731e1460c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c503547e8656fb7a0fa4a77622ba755

    SHA1

    efa77ac995cd37c89bdbd4612c14ead526bf7b26

    SHA256

    fecb8147f92a1e425e712c6d50cd81444de6b63179b85773690c958f58b9132b

    SHA512

    be82d6b199a56abff19559f412d6639e07c6eb5538bb723cbeea4e775f4458e830264f83f365f5c7c5f0443513c11e6b608f84c1bc0613303791d2a0358a84c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    891609a46b961d035176baf1287944ad

    SHA1

    25439b0fa2cf6231c0862aebb2f185f0b6276d89

    SHA256

    c5260d76164184f14c3b520390be5a53586812bee3b7eec3fc9679cba9d32008

    SHA512

    956c8c53982cdbba424ce1a0ba546a9d5c52371141169203e1de20705b0611fe3f545f0ba2172b64810e2565450864b773fc6fd26d045544cc84756fdb333534

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33feb623aa4f8f7fbe954ca79ca5ad18

    SHA1

    36dd474951690d3dc97114dc459376daa724c507

    SHA256

    45d2f1d2f92dd9d3d5d67ad711ca5d887a7896a7ba145bf08178d3907803e803

    SHA512

    e516c0d70ec380702f2cd3577720f6dd0c936a73181005fc6f10e4cccaab5ae78ef1319da9a1b49ddff2d93ac60cce061282e273b8ebe35aa70f2b20620428f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a23748f84a5b546b79191c2b354474c5

    SHA1

    36446031a9beadb6c6166712bef110917a7f7786

    SHA256

    be259747254d435d1d01bd6b8e44b498b87245fa1992265a82355ab9c7dbb5ee

    SHA512

    43f3556d8372eb6cca4a13dc951edb0654e3b2a94b9cf85cee9d9968c7ae72c64c4a213afb98dd7375369ecd16560049d8ea8c96e1dbe82967850a1979e43566

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30c35809900a671a049bce2961abdf0f

    SHA1

    d50b92a497784c8708400910ac25abef72262187

    SHA256

    06bf8707cd17023919cc27c1ce5db4715764f11fb52734dd10001e9b11559351

    SHA512

    988b560ae29abae60b73749356a1e9a0696d919dd02c57c4ddd1daa03da00e6687b4f5d3e2ecfe3336592ecf4fbef0cb5bd1c995569513847570378ad8aaa9b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e5492d0628b7155a7733ee52667c63e

    SHA1

    a9c7623c6d8ec8a8a0bc55f3350365a7cfbe5629

    SHA256

    8f83a35847da6029f0e12c9f4a7cea28f872fdb553305682917615160a902f94

    SHA512

    c102520e6334f54c0b1133979027eee94a70034bc182775424ec83ed9d8d0e074ca92989f525eeb1631362ebbb4c0b770832a10eb6bfc96c20c40ac08525bfa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e13aebc7efc474c47bf98beae2e2f857

    SHA1

    5c619d1840dfba3fe01f99c555cf5051213e4dc5

    SHA256

    d13d6d463a61445586932612bc0e85afc2c5796317cd20a5185c702bb476e18f

    SHA512

    06803860cbfd55d796b0b4ea600806ce2324eddfa5a586b1f018acd733561a41799b6c0eeac67996ff180e191ac801b6fa73bc01f287322247c1902f186c58b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    425c206dc449a557dfdaa6a11621644d

    SHA1

    9d8ce45e2d6a514f90122af19386a0de2517d3df

    SHA256

    e717f152cc8ae153751982745ecf7d7f69595ac0d2651a1bb2da68626bb93b8b

    SHA512

    8d9292a48a04b2c74e30da7d199cfd99c03094562e96514703c0816385e46103fd97c16e64ce9982ba7e07070daa2b22d862078565c61290b6944da62fcdbdaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e1461a3022f1c539086049bb82656e3

    SHA1

    02e322b2e5cc9b6c535f89cea996d0d41bac1d87

    SHA256

    39b516fe47124b269004c923712c580d82b36fda9be00388b49b5730d872f54c

    SHA512

    ac24179a839a4ce385f00b420c16700dec3f597c0efbeffa527f0e6fd90988886e5494db04184de225bfe8babe9e0c78081b345686eda521bf550b40b7689423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    855b0dcaef718f8ac45d458163f3407b

    SHA1

    9e6a95ff3c8dccb0545171c5df4fc08f2ca06faa

    SHA256

    a926eef0efdae3792405c3fc737fc9e272d1152ab5167eb78eb1f5569e6fc00e

    SHA512

    892a2f7ffc015a965ff79a364ad4abceab3de000f4e64f502d0569a77a4bdc28783e78fb6b7a2f5db912bc0945918ff5d1709834a1f4b1f3d2336c0c1e4de5a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d3d3bbbe4e99759ed8acb1e0034f356

    SHA1

    dc5ee7f96b3f21b4d1a274315237471748192296

    SHA256

    520a8e55a82c8fc73c291979248e4889031c9b7402aca9e7f245997888485acb

    SHA512

    0750b5cd5259cccd16f57bb0b1fa3d31c5435a803ce612dc4dc8225f507d1a6c3ce00caa7ff8a757f56251e8a29820453580e25078ed514f436e5d20f848ef95

  • C:\Users\Admin\AppData\Local\Temp\Cab2B75.tmp

    Filesize

    67KB

    MD5

    2d3dcf90f6c99f47e7593ea250c9e749

    SHA1

    51be82be4a272669983313565b4940d4b1385237

    SHA256

    8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

    SHA512

    9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

  • C:\Users\Admin\AppData\Local\Temp\Tar2C2A.tmp

    Filesize

    160KB

    MD5

    7186ad693b8ad9444401bd9bcd2217c2

    SHA1

    5c28ca10a650f6026b0df4737078fa4197f3bac1

    SHA256

    9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

    SHA512

    135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b