Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    24/06/2024, 19:31

General

  • Target

    0a6ece02ce45c0b7bf476601a65da23b_JaffaCakes118.html

  • Size

    53KB

  • MD5

    0a6ece02ce45c0b7bf476601a65da23b

  • SHA1

    d427abbbc3b4eff4539f83838b0898cb95aed9b1

  • SHA256

    96e8b4d7045cf0278a2a6523aff30da8a4481e51abd62b7454c005e7a24c617a

  • SHA512

    dc3ff4e9a30a54f2f408f46c3c7f90e9864f4fb8ffdf473ddf37a44de7bffebfe01d0fa3a75fe0c92d9d0782167a55af56245f10eadcfd53e7a4bbf516ba24c4

  • SSDEEP

    1536:CkgUiIakTqGivi+PyULrunlYX63Nj+q5VyvR0w2AzTICbb1o8/t9M/dNwIUTDmDn:CkgUiIakTqGivi+PyULrunlYX63Nj+qH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a6ece02ce45c0b7bf476601a65da23b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2132

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f90d23f972a5ca4dd9c0c963bfdecfce

          SHA1

          a8e138c8045a1308fd84aa738f79f377082b7503

          SHA256

          51cbfbfdafba79071b31458ab07407afadd8850d6f63f82b82e0e561e227a1c3

          SHA512

          21da87cd1c6057d9b370d2c5bf51d2aa44a3e59777ad8753ddebdabf913d7625b845895a4e6dc18647d32aa5626015a5ae03ad8978aa50c12b4b0ee8fcdbbdb3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4717020fdef9945ca3ee415af8189422

          SHA1

          aadf922f16604e258c2a273bffda0d1b10670ab1

          SHA256

          714eccd1b146c6257de76ea60af7fa0529b60d0cb9ee216975d3ffcd6d55d2a1

          SHA512

          a727c9f0d36682e30fbce63b6f304d1c442701470c2471eadb9e184ba226a63c39ae9e1640a035bf94f597ec81811229d2f780ac3e83adb494a9aa1bb66ba910

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2733eac712c05cb2ab0a9d355515b4f3

          SHA1

          b356b545e399f04b03f33f12f459f5f317c65ad0

          SHA256

          d1c6bed3f38575be748f8f434df671c8b270e269621c19e94338b30bed09890b

          SHA512

          83fa7a0fb11f0c5aaf0797b9ce80bf86f3b37644416794de032891ef3fca75e832c06bdac97733e6f0ccee3a8b94becda0b3af8a391e7182617d3b073ea3fba5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8daf420b2c65d4b729dac992e06d820e

          SHA1

          96bf981abed408a4fd90198855b06baa4d66ecea

          SHA256

          a564fca39ae56ac768f8c43e13d895a9000f1b0559c38ee630d57a5682486bac

          SHA512

          6694e9806240f09ed24e5b7d5cd6046131bd4f9bc3d5e0fafe5d30ffc0da1e2d6c76cf62a9a746b5195cd71160d92147a2749205ad4a8733d29bdae6b69e7d48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1d48f92ae6b8fad0f7ee20ece195705f

          SHA1

          9e262b908f9416336e86ffb3571149c98772020e

          SHA256

          62fd9d70b90b83eed8c3a2589a5ed830fe2b011149e8fc05a0a507f4281ba387

          SHA512

          738ec153296c31a329021a7d2206b08fcee3f666db48ec355bec451b8313035e955f5b332045c323368170075423e52c1d7f2709c62955b59aba2e8451906e59

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f74dbba6bc6cb5976c60ce62fcfa5316

          SHA1

          28e4318933d7c56b0ef9ea33e9c38b41e39940ae

          SHA256

          f5c9d4948ed56e0c36b42de2e764c6cb309a881518327d3da4e332214bc6383b

          SHA512

          002f152cc37c670f7d15d89c90a34905b8011a902961c0b05e7f2861ea5b9ce2a1d8be716e65757b018eeec441129294fe4e0cfec288ab47f6b3c8b470fc8ba9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          894b39051217c6d624801d78b5c10bba

          SHA1

          4ecbcd2f7f6c1735bca4c8fe61b9928f629b1ec4

          SHA256

          19e626567baa932c44b000c91872365e8113931aa723b363ed286436e3804549

          SHA512

          cd1dc985cbbcb25f8244425d2059aaeac0e94a4dd13930f21c140191ba2e31f497c223ec88ded2303efa65035c545676efd8307d5756c3e22489e0df4c8343c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c36c8eace61daf0b736ce7d0e440cab1

          SHA1

          24baf27506585e7748c8b2817c4e73d04e0a7859

          SHA256

          fc3f0a740ced2f62835cea7766047702da17c7e27d8eb2602c0a9446f20e6f79

          SHA512

          ef1b48e8696b1c2a1078e864198eead4c5ad13735042a1e14e5d3483a266c1d04b26a2bef4af14cd274498caea8dab2b4c546eebecdd0a9af04325ea159d79a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          93257487cb90b1107f8c3401d7d15a82

          SHA1

          5a88695827e68d3e772bc6ddb12ec7db080ac669

          SHA256

          bd6f9f6435c44420e70ad4abb21bd6877ddf59c9ef54858a13448ddff1f22bb1

          SHA512

          5c1ab4fbcd189226831d817b84fb4707ee7522f63296f3fd3c95d471bc43af6d495ddff75f4325d12fb520b28dec457d1ee481b5c11a257e123691c774d6c828

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c229657b96668d967108d92e2bbb621f

          SHA1

          4eedf574194e65f2238bb6c9a52837862be6db36

          SHA256

          3e306ebecffdab36b4484745e1d4c33357e0488176cd471599e7bfc37729ce14

          SHA512

          23839f363b3e24599b851d14dd2ad27b7fa38d66ba97dbd083da33ec019f18d3df4e6fe678c7e7e3475e835241c781887b5455c936c7c870c73f33b40cfbe694

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          24deee3ee8077ab8dd5ed5d237c8ddd7

          SHA1

          fee1f1c72d7f82af072820943b885b6089d57bb4

          SHA256

          1f411b824b0bb6fa0e8dd25c81a31d0cf3d2bb86f728e5a6ff63af92082c6efd

          SHA512

          d4e8a0195d70ccb86c30faf0da102d584087b09709101db924f202e7904a0b76474eb5f2013faf99e28eb7d3ec210145aa6baebe897b0ece3ed376bc7348820e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          885baab328c7aed8a6a2d55f19108e84

          SHA1

          fab299b2dfc6a9e5c130e4db0c6733d280204231

          SHA256

          2cbbc9a8b4055663677cf21570996426b5d32ea826159a2b11b1a714aa235525

          SHA512

          cec7c1f5e6927badb203910e87ffec5459f5fe408f717bab03aaccbc2ee1c9967d82ca5f4968028da16f4865d8435272b05b147aef65d1c546a72d99d9becf93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1f526a717db4d4443160a9678052cb12

          SHA1

          b6f32b4468ff2be26ef192cd5807b460062262c7

          SHA256

          a4e2ddcb98549d3b35aa7bc5c6e955292be0c95a557c40330ca4266cd6cc5ce8

          SHA512

          30bf4aa6a143361438658b78f55ec1787093ed53d5c99d5e1bae61d17d2d879710272146f397942902484beced7bebd5cd3a72a7eb8e6609f9290c82d59ad642

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6b8b49d54fa4bf9b9f6898a7febf6b04

          SHA1

          a6cf13cd6e7c38a67f5fcfbf98bf79d8f3e9e98b

          SHA256

          bfdcd8ba9a443b55ec0386e84ca7df1f61a5890708fa184fb4a590322e72c558

          SHA512

          d6673526670cd50ba62fdb19b5df9efa255805c4bcb0b074eab33cab2ef486991499ee9aadfeaa65383d485495aed5b237526c28fd0d1987026ceff05f63f3ac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          09d3c9762d708decc1ef64c9df6540af

          SHA1

          6f026628eaeda377b4d6ce052883a7ef0c3d6f3a

          SHA256

          5fe969d70c637f683e064940e80cd9f1e0fa18f4b1c74fcf36bb440f81ebac30

          SHA512

          5c3eb405449c85bb8dbe989f61a19226b01d14e90a64a7f86f566dfed1eb73512afc121c5b326746ce7a3caa419a8e54dade34c167bd4c97b03339ae442a422c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5e7312c79b26430f8e4812afe1269bd6

          SHA1

          f5f460d5914c74a11855049f9ce9a0aa44280e58

          SHA256

          231c5fbb8def856e4e47641c99d59ebfd703172a187c820e953c2bfb8155bb59

          SHA512

          3ac4d2c0946265ebed15c5cee31b51eb5feaec4859aefbef48beb04a0b9ed0764f0c186669a7774179b3f7c601c52b72901f61eca5c7aa175208002198d44b76

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fa034097f005e87e6f0df144323c1a9e

          SHA1

          1bbe33c981fa2ba09c4671d8e72bad59566fbfa7

          SHA256

          ae4739a8f33f2f80a504f105e057cd8759ec538be67a677111cdd1cd4a666fca

          SHA512

          d3299f467aa9cffb727aec0c7e6e39a8ea285dccfc1973499c5146bd71142818c20b58b445d63b60b0c073018b56e20433f06bf30c32726671b2fcbad1a6f3d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          53da8d1851162e53c47dbb5e26517414

          SHA1

          92488763a11262900cc00a73f9bebf6b012fba9a

          SHA256

          d89cbe7b4a93d13b1ac50b2c2d33896dfede2c445d94a65885bc530ba91194c4

          SHA512

          9a539827b174259f0ed0f79e94541073db386472038a1a689cc5c59c3ffdc64db70d6b90b26e07b771b53aebe8565d5eb744e555f1428a1afaa3569158f8f0a2

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\glossar-js[1].htm

          Filesize

          706B

          MD5

          67f3a5933c17b3ab044826d3927d0ba9

          SHA1

          5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

          SHA256

          97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

          SHA512

          03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

        • C:\Users\Admin\AppData\Local\Temp\Cab471F.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar47B4.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b