Analysis

  • max time kernel
    140s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    20/06/2024, 18:48

General

  • Target

    08cbadec081a0c08cae9694c122078f7_JaffaCakes118.html

  • Size

    159KB

  • MD5

    08cbadec081a0c08cae9694c122078f7

  • SHA1

    2df3d9224c97fb1a5ca82fd68685cac7e2a7c83d

  • SHA256

    d6cc76462818c6696237a05df958afb65b2bf63735c56d133cbddeaf1cc95619

  • SHA512

    6b6be2b1390bcbd4936193699e524acfc094fed318c5fce1e213b1e7a4a5e83cc99541e63b51b4948e6fdc11499e6916dfb0425f1ec73e31c2b5c912f187cef4

  • SSDEEP

    1536:pbMjw2fMk1D3O9Pj2fcdpyHAK3cL/BpOVcZorzr1p:sdvsLyVF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08cbadec081a0c08cae9694c122078f7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2596
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2596 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:636

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdc2e17a98715f55d359bca8c79806a3

    SHA1

    51ff855d0230f7c6ae45ec40b4eadf92eeaf7b82

    SHA256

    ee2d6b51a6067e6e9874d107a39eddce388e932e08697a571853af99a78d5fc5

    SHA512

    19874d25cdd2f8572b23b315f00e8e1667d4b5c990ccf7c05f4eec9d3b16988864a7383ee8c50cf3b253c22b1913a1ec0bf96ce006f920ef4e5836217bd9d148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52d76e0b29644dc7a44ea75ba755eed5

    SHA1

    758925b70b5304aa65472b5cd45ad29cb963eb88

    SHA256

    b7b02157905c823d83124d0dbc5c338a55726ecd4f089c30169e66b7d0253133

    SHA512

    a1c091387081413f81784f3119a30e86b6876aa5491e950148bc1dcd5497c8557c775a179ae91321c3677ad201b77dd1de65d83753a255e69f961aa04a02633d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98253c0b57eba9ecd82e80a4e3a2d1c0

    SHA1

    a35a67f063f30cf9d89ea72e3eff35c57c032657

    SHA256

    0cff3e52191216e564a4372001179fdfc472f2aefeb911b6c19bad816686300d

    SHA512

    40644457bd53b78265b0fb2fb1b6d3e72419f4ffbcf12385b169a8982bc34af34be627afae81dd80abbc4fc0103f54dda2cc39442aa1926418ca5b544f218052

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b8e3e08bcc5bffd131e3c808bba4bb6

    SHA1

    d26c218011f5ba9db91d1274427ed8b32a5f4ea1

    SHA256

    8fabea70d0a42d8c8ffd236acf85955718a43188e524cebb1d5072e58825f37c

    SHA512

    9dd8b9e4dcb1093d13ee4f98f7d5d9fe653336a6478e51078139ba9c0c08f45aa5242031e04e02227654e9d73f7fa367d09b459717967047ac59204b9dc79d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7eaed171085c3406f6eeeeb41b81e3a

    SHA1

    bf7645b80cb4a66ffafb95ea328a30486a9c87c3

    SHA256

    96419c27ac9c37a92e4921b8be111c2540786cc70c683dee08904916ee3058c4

    SHA512

    8cec60a12452bea4d494dfb41a3bb194be41c178fdb39b6a543064759660156ba9de0cc96162d83bf96dfe0907fb1ec9e0011884d7c9fc033fa4126f633509b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7559f871dadbeca2bbcc0f4e1f295c76

    SHA1

    81aa65736ac52c0ffc5ca000feca1fcf2d835687

    SHA256

    a3d31fc6ae569f8d264d010b34ec9904dae1bdc483d8365379c3389aa145b5e3

    SHA512

    8e2882598ce9124b6111dbf42baf7f3b7597b91b08ef1fb50d5bb5772fc20c1e9920f9185a90c93432f4f1c3b47d276dc2818f723d2eaadb681d9cc6faaa2610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6c064ed86dff84f09586fc9aca6806b

    SHA1

    9cbde2590a599ed2c8b92b65fd1d7d583e9a91c1

    SHA256

    3942e2de07cdaccc3a7222befcaa57f7f988fd96148c42be992f098d3493c266

    SHA512

    d87826a8f1c797996102baf922d3a3b656d9f3c72f6666527764dc6ea66384bc9d06507401f64f756e3fa82c1050fb7a8b150eabfea65a22ddb522dfb7fb1939

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f35ac9f0fcae1883205a1b3e23b83af

    SHA1

    ea1ae074246dc6e1df3bc2db2ceb8632a58ee6d3

    SHA256

    9f14ee1773099a997a953859ca44699fc4b9f25836e123bdc41d1a71142c3d44

    SHA512

    ae8913c0294fd74c92fd738aa84adb561e433ac9208a3baee4e33eadf6a1c906deac768551dd56facbc54f9e7884682d599f3cbfd731c18c3fe6eb76c0e9a893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2313826f2f1f2767dfec634a8f51891

    SHA1

    480fdb34909c128d11cb7bc383eb2b8faca8aa1d

    SHA256

    1754e151d2b21604d2d588900d74109d5cfdcbfcc360a9eaa13401d196f1ed96

    SHA512

    5d824e81411cc984c6a57463beefd30ddf259322d1830390b469eb28751a52864a99869493da695b0af05070ecd743a160eb942026b2ef2b328098d8198bb9e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3af3b4f72de32b78d549174efbc15017

    SHA1

    ec3214d7382b74c1f5dab08f626ae30beee0c8b7

    SHA256

    138bc441573195d52b03274ffc829e77ceb7a838696a3154cb48c5b7baf9bbb9

    SHA512

    df7ee91294e9f342c6784db5c3729ffca52f423e506d8fe83884f6317df4aa394118b674b529b989c95e640c376de6a408d989e0b4f060c471ffc30eba1da190

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c830aa6df307ca53e35321e0350917d7

    SHA1

    d30785b03798e94304c06e86d2585fbe52427c13

    SHA256

    7eaabcd6feb2f461ff94ed9506de631de85391e4b3b6f1a998415ee64fff1b33

    SHA512

    6642ec23f692728fa5462edd3404ac3c3188cdccec6c2bbb158dcdea118cbc18886423f3e48b2ebd60c0c60224640dc603c242e4664d0cd4cf39eea836d907c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2418c062342ca62676ea216fde16ae47

    SHA1

    7135e48ee9d193a891f9cd9b74da48707d8594bc

    SHA256

    fbcf3af3b2fa88a372843269920b3866633d8356734d8e265249305b5fb2c7b8

    SHA512

    af372b1b7fe31bc476bd0655a793c395954225d662ccd6118a88bcb168a1e76f186782482256e57b0c50e13710eaad78c570eb81de6252aa967040de5ce372e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53f8e8c5cac3da82977acf803ad552ba

    SHA1

    fd15f7417fda82646159cc5bb021e69ee6eb87d3

    SHA256

    67f2bf6a5fa34153e3cddc0b6f8457e65130088682c06edd4747719aa20a58bc

    SHA512

    e6aa7ca835e4c13bfaeb09f73bbeb6fd0a610e4d148ec5ddd226909b41382d710b314d9b5528a6ca787f0f1f6a4be4f7bcaf9af4eb2a89657e9ad1aa971571f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a0cd91e7b15b7611af5df30684e88c1

    SHA1

    6feb085014b8a14ce43dd34d27991c998f4e6940

    SHA256

    53eccc876fc6eb53036ad04eb1057128de32cac69841faaeb4b1e7b7c118885e

    SHA512

    b829fd47610484659ef86553b39bbbd389011b788b7a3cefaf7eb4d3654547bfaa967e21747b95ff510584774c7ea2b250234d92fd2999a68f214b1d1da473c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46ed93f83f52a52edddd5eb9f8bc63a0

    SHA1

    1cc35b117f5e02d7886fe4386f1b6e2e4a9ca149

    SHA256

    a49bd9c2327d14f375363f62f64974c1ae8df663cbb9797c37dedc3ccbba32a4

    SHA512

    a491c4f7771804f7100d6c2068864f8ff9a8fe8da6e4de32acbd6feb9bd6a7225ac5b9b8d7439c2b3b7d3853a88d37d44eeb017d0ed9f059521bcea38d56c17e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    555c92e8c5c5462b8b3d40aeb6820987

    SHA1

    a7c0f52b311e24f968612f739d0537fe9929c6c6

    SHA256

    7b855ea9de4d10e6229a8df6d5363d5ddf0877278a26ddc0ece8034eddca6d31

    SHA512

    52d34448de23378ec439e8c045e9a445ae75d7ef6c81eae24332fd9f181edc2dc0931e3273fdd783df96b5e560527a47faf8dfc1b1fc7091879ebf334c49e18c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2e227d4e10f048377b032241224fb26

    SHA1

    9b9f58c4161ee02f789d7f76497eea1b38534bb8

    SHA256

    47c46b1cb883cf34b9db22f89d55de7578ee4a5759092bb171c7957e2066ce54

    SHA512

    10b603efa5bfe23f7b21f69bc6c62ab1412f381444effc63d4e943ab6e54c8788c08b9f76dfda46434c360e5361518657d9d55bb8055191a7692e7b9db8db50b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9616341f9750ccb5bf08633631c5b56f

    SHA1

    09fadf3f753e0fbba788e06379c84881f688ec54

    SHA256

    28ec4178626503129d20f793e671417215e5e89d815670cf86f2e3fe48bc124c

    SHA512

    0e16a885a278e9eff692effb608ab6a929f8224f74bd0ac88e03bbe7f4bf4d5d96a7e899fedeb629da41ec0262cb1ef16614c814d9a0231aa4f3c504d87cbacb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13e2f5533aa80c1a0f80fad04de9c437

    SHA1

    456f2899e2ee4ff6af4371fd446917e32b9aa020

    SHA256

    95d3afa1b43c5398829fa53173e838e8be567710ed84110b23812a0ad744562a

    SHA512

    84039e1653b77dfb032f0bb03b77c93405fb0efb37ad354db86ddd25eb2d678d822b8056bcb28c70bf05a6976c2d9886c0201cff7b40051bc8eb6e80b55ea86e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50e0382d596160fc84a3c7d722a96569

    SHA1

    0b743db15d986227a617d5f2a86c087113826ca6

    SHA256

    b6f3fb7a0818158cb71914fb6afded08360d15df962b0e4f0e46218d066a818a

    SHA512

    cfe6760499fc91a5b983310e3c7ce0bd82136a21682f4224dd0c448a86c5c3e4ad57c4132e89a8e1d2b6594d766756741e5dbbe8f8ba14bf336057c347217f35

  • C:\Users\Admin\AppData\Local\Temp\Cab1815.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar18B4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b