Analysis

  • max time kernel
    135s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 01:19

General

  • Target

    0bc01473cca1b8fba75b405903aeb9ff_JaffaCakes118.html

  • Size

    7KB

  • MD5

    0bc01473cca1b8fba75b405903aeb9ff

  • SHA1

    bae61468e28e89c7c6a29681db77db24af66e7eb

  • SHA256

    2d1c402dae326f9ae7d29be3739ec470ccab763ce2fe3ca56456e56c8d250a60

  • SHA512

    58d744a9932f472bde60be22e69510c257a089dee1bdb52eae9cc1b76c1f6d74bd0bca34487e135e12c07a7ae166ae557a25c018da749dd095ef8d245d6458f5

  • SSDEEP

    96:uzVs+ux7pkLLY1k9o84d12ef7CSTUTzMcEZ7ru7f:csz7pkAYS/Jb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0bc01473cca1b8fba75b405903aeb9ff_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fd8c6db77e80555be65c9362c33e766

    SHA1

    6d725c01879b7152fa30af2a829ff626c0f7f257

    SHA256

    1a4009bc815a0a806f65cb8cf680b5c74a6ebb67ab4d813acfaac04a22edae7d

    SHA512

    640f33649e3664a8c8093c2abfebfdbd06f36e55dfa847df9a6f0756586cf083685260f3c43edaf321eec84d1950e45ed95af90207e017fbd2c583ba37ba2190

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c48ee2ee99500044dd1b5c7640a211e3

    SHA1

    708d40d5fdfbff1557ea81aa5e08942cda002957

    SHA256

    8a0f7c957ef5bd311aa9ea17ed43934980d9cb973336e8bec5d0570e63412477

    SHA512

    e578df81b137a6c4fe45207b114aa4eefd717a04246634cc40a8dbfc9de7e9de1f1f42b80db84e66339bf58bd7bf4b6223833714b8e637dc66047c3ba003dd20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af26a6e703e7027192efd13315a21127

    SHA1

    eb783fb99aaeaf023cfbc96836b0c3a8e0442dd6

    SHA256

    08b0bebc4122337f9d0ea44ebedabf94a63bd9773592ebf7be25cefd9ff62c55

    SHA512

    7b2b490119a427c080f182b9b40e919053d39d46cfaa4497e35c243d465749add7030a9303f46e62860b0c675ce0610249d11d487acead542e5980dbf9583f8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    017cecae8c07a23ffe01f3278c434a1e

    SHA1

    1f29c25b5eeb42ce1b9f082c856ffae35c5d7aea

    SHA256

    0d8be5034a87439e1b705f9003b1fa6efa21b78f3e9364349087281e163a4731

    SHA512

    d021780f6d20d390cfd068dd61eceb52a88dfeef18c1979ca556e95ac5b0a924701c1c0e0ec549c212fa4b45b7c03d267a2cecc292dcab90d0ed40be677a1da5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e5ce5b07c6e10f821c6ae95c90644e1

    SHA1

    2f30e3d804a50bb2a93a8ec352d4e7d28bb230ca

    SHA256

    0631d40bcf20fb3f0604f5b838670f9bbb3df025166340bbc3d2044429b2176b

    SHA512

    73c16ffcde10ff4111e1dec00b53f0e8439510218abefdd25c6145cccb601687c9fe28b4a8b245214cbd6e0120983874e63b242e334594e75cd785f4054d4528

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f15f7903dcb3e66bd9084aac1a2573ed

    SHA1

    deeffa54a27e479f4ae6eb07b4ab6e32c34e0909

    SHA256

    888a9ed6155ccf440b5088b73702c0779c086b9b2b8bf77c071824f717044245

    SHA512

    156f8e9acd0fcadc6900b3a8fde2324271a6e804bfb6eeb8eb87a72f0788cd96138530d74c1df5af534bc85c1f93b94b191bce7038b2b8c3698e72a6006906bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86f916506742b5a733c41250e03a8d0e

    SHA1

    6e79a3f3044bf65bfd5b5bad066acc126f501d6e

    SHA256

    531d8eda62d55f57c81cc170e39516b2612f027832ea6d39944d35262840c413

    SHA512

    1dd30fe501b910e11ed8ff5007ed529d169cd45455a039772a4c733a386f2f6cdfab94d24a5f5882be8df044ef3891be2f394c18594fff86c506c946923f23d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6471c403dab37f72ccbb00bdf3a84bc4

    SHA1

    e95e1f9a984d74e1c866e9332e2724c67ed3c124

    SHA256

    808baf25a27f9326c340d08c3988ce715e39161ccb73d2758c6e53ff771c1766

    SHA512

    645abebf308ee7d6ffb81a454b168affb7161d3eb0f3b7a1d4fa3ec7a30969b9a19101f2c915887942028f424043010ef5dc9bad32ce81f61d119e7585278f8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ad6ee4412d2c9e2f734807b05a610a6

    SHA1

    bf1492032aaa666f3c8587739916e4462e74b944

    SHA256

    546f9628010c8bf607fd5cecf1193752207b275b32d444417cb3a9539412ce11

    SHA512

    f1aae81d168d56e65fcf7c0ef8a8dbf52f17b0fe2ee14645556242838555d1c7136de8a969e15094443737febb1eacf1af8b6706393c4f5b4af7bdda3a27e5fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a50c9404be760e715c4f16f4cfbc333

    SHA1

    1d8c4478c9c25ca353790969adf97c18ed2c9d05

    SHA256

    752e0c29110bbcf6968cf78e317452dd6e672c64f62231bf406ded8735698561

    SHA512

    73f5eaba9729f560cac3119a8ffbbb8e50cf9627f505c43789a5529a9e30c861397f288278d46b36a2fa424e677d4b151d1f04130a6c6812d0d9900c2909750e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df1cd1187669521edb8ea708e3b36b8d

    SHA1

    180d8adbbd6e58e515c5eb877c0e2ad999d77d46

    SHA256

    b1c3a1f2969fab0d4a8aa19ed90f62689ffbc4b420ba4fe96942cbd173cc1449

    SHA512

    90ceaca1d75207bcba1d160cf1bee54b76539e7318bde43814c9d97243ea4617c360f009f4cc00733d756c9b5d3c49912d5a92e052f5614e8c7d94483b475879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27853055de888b29a565c1c37e7322cf

    SHA1

    69b86ebe8c99856649a00c9f5c12e3aa67a9f953

    SHA256

    a1a46430b5f0f7f3e371e6572c061ff29536a00de2445e2e3f517b02968f3233

    SHA512

    914be3779860e67dfcf0490a9f51f70eac84e5d8c688db8a004fd04156909d4b04a9714cd685960f40bd4f596c4962117c3f4bc20611796cbf223e809efa7452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    272eb707bd333b215a0bc12aa7f8e459

    SHA1

    acd738a3403c76f4366466bc94ea9fd04ff5a15e

    SHA256

    13c76b9072bc5d9153b10316cb96043477ff504a507372a46073c7f68e48bee6

    SHA512

    4ce5667e3c8d44319e201bc762494ea6d00f05353de4f4f25fe20347e5899636b258d6f9e57aabac51a9338a9123b85cd8932486ff82a0dd0bbbddad7c1d69b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8eb12ec06e1b2558712a56632c7b07c

    SHA1

    9373700672d6ea4c8a855d3096645ccfaa5bf2c7

    SHA256

    30507d1ed807d083a7367ee633131e9b2612208cd585c7d85dd750654dde8ae1

    SHA512

    4ed09b053098a1be32eadd3befcb20e93185429f0d493c7c937f3b2da4b53314c6c4f282424562b90f76da3304dc108e176beaaa9f536ccc7e7b121cb407afcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    719edd6391c5c6d6ba362a2b07523e5c

    SHA1

    37f7dcf8aa619888c3b4961cf478075c41860a84

    SHA256

    3633d663f4f7e44e813a3915067d6d0a38eb2b63f657cfdab3cc4f8c80575fb7

    SHA512

    10043e166cc6bbadd88cf28d272c3f98de9ceb0db69b2b1082731683d66a0311f0481ceb20dc8b4ec52962ffc592ed17f1a369db78977df86e84c13cb00bb894

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    083981b74345cdef36cad3c56ead0c86

    SHA1

    0ec57ca9060fb819719c0d435e5a76bbec9cb9f6

    SHA256

    2fb532d5bb585ebc90248038a3869062d40a64e5bec68944e4d1e0e6e3754473

    SHA512

    4e35a0c8e2ad293e4bd385ee6968ce158c1f5d655fd213fcca68c604d2fcfcf019414843e1b209425b9e059a2f039d162c04b1613ecfe1e80036591603140716

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6d0aa43a7b711956ab9055262891184

    SHA1

    bfb5948c1ec65ce0ef705ef0b18f564620e2df95

    SHA256

    906dc1be86c64531f558073e7d38ae743d6df738e9ef670e3ff5a2ed478c77a1

    SHA512

    d233c3bf0e0677b7c74ebec212bdc6b16d97924b84322d263bf5a253611230f18ad6442df79b6a3d66c6132c7db66f2a193e3b02c1f5504ae7247772a9e56b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b67d8b4cf784318455149bbf3e16fc5c

    SHA1

    47e7af06f931a0e920d7e93e4111b86463456052

    SHA256

    1042a676bab46783199d5868435e491dfd376b19bb5dcf83556866cd4280fd20

    SHA512

    2233da6d9bcb01d4c001aacb289247db194419a34686e5450bb4f60f71d77e67e9b9f5045d4d0e752423d40086ce844114cea014662fffc17109a2efb920b120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6516b1d67036ffdd47b436034a35a3e3

    SHA1

    9cdc3ff32391bd0a881346b0874f0f6aeebafbc5

    SHA256

    39df9811437edf899440507222d586cbb33d896d519c771f1988678e5b0b21a3

    SHA512

    b000bd54d319a980dd18bd06d22a137df61702cbe105c8c1ab40a11915bbe97148af75c19ef54621a4cedff30f74062591a2cf3ceb9383999f9a8a7aaa47ba5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af066de492d2394b40600b2fdc18a687

    SHA1

    d8f692c62c038ccc89e2cc69d726786cf1d1348b

    SHA256

    77b5e3f58984aa0889c64c495048c0bdc666b2cc94394b192ce6ebc976b3e3fa

    SHA512

    403c343f747149eaae5152b9eba7d8183a49fd87ec43c2e65ea1ef0a7295b7c03b312ac047b5b064b9646551729b445e22145bdb31e6495d9b64ccc629384c61

  • C:\Users\Admin\AppData\Local\Temp\Cab717A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7239.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b