Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 03:20

General

  • Target

    0c434468c575ace22ac35ddea7cc9fd9_JaffaCakes118.html

  • Size

    22KB

  • MD5

    0c434468c575ace22ac35ddea7cc9fd9

  • SHA1

    958b3ba55cf404a8992e88ac7b9d4c15d1839e52

  • SHA256

    05cffe0e3f4e2d709adb3ccda2829882902fb92528bfbfc85cce90c05c5e8a14

  • SHA512

    b702d6c2a205b1f8a3664f5b6809b3ba461048239f1c51e41483df87a4642ca472e61dbdaeffdddebab7c42a4c38e6d2a37d4a95198fa33469004a582373afb1

  • SSDEEP

    384:yWUvV1FsFfBQYm5QTDWGPoKCC1YLojTMvsfLJsFQ05f3gocl0HAUjqnsAWnXJbna:17m5qWGP7CGYsjTMMLOJjcCgUjyWnZov

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c434468c575ace22ac35ddea7cc9fd9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2ea344b93201d732d1d4bfad17202d6

    SHA1

    f72a9605a558e112d1a7b73dd0e7a51290a5e4b7

    SHA256

    a930b465b0a0f7da2400a50d1666310028ef3f3de2485fb5fa5ad67d9fe0e5af

    SHA512

    121c42424d9c0ef181bbedf7a90356809e8698989a56583dc4fdc8c95558d11905142625709984faf409c83a8076c7b75f784b0d9743a35433f991b357edad4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dd9ae9b6bb6708d0f3cf88777457a89

    SHA1

    980865bd6741899a8a20f5aa95d322698ccdeea0

    SHA256

    eba79910670e2d6f5b000a53cd29233437bc73a37b28246175f6409b05ef469a

    SHA512

    2e8f14a1450fd68ec9f8d0fa51c1099f77938a45da3ec6451fdccff85d30b9a4ca4da14b2ba22713b14a5810d81a4534080ca3e15fb978a8eb0ab246893867fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdf6e09f01623e2706e0f0860664d13a

    SHA1

    4f1b1bf43eae71af95225a49aa25970866debeb7

    SHA256

    56da939bff19d3a46c631d0caaa293765ac8024fced00759495c15814f176efa

    SHA512

    a93e76e06e28848e9255cd213fbfa0d0eca8a5032451c308eab21b46b6e943b2880683120cfe001b67348393cc7c7f013a13f1db45c771e9dacb100ea7af730f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c404881e4fd60205022c018f5e072cdf

    SHA1

    bc4329b9289033c5d860a3d72ad1da38683301fc

    SHA256

    0f28e1e65c1d461bcf8b7932efe6e2740ba33e734fac3815d9be6e3d64ee2317

    SHA512

    ceeef89c60d4361305217c2238a8ed5e1f313bd4980062626b69e051a74472b9760c98b2dcbd144ec113115b5a5ff2dc5cf49e3ab39ad491ab1da76ad5f1bb2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff9e538ff14f3d9637f8666d95f74c55

    SHA1

    4c806589d1bd167c6b2dfe0faa2c58fc0059761f

    SHA256

    7ca736474c81c52e2dfcec504d9b9d2f23a8e9aa95b3f7de2de8a9b343a3adfe

    SHA512

    7436a6175d84bcebfc4cd5cd217dee844f1f669430a1cbfe43773f6601f3f027055683b17fa183abc9739df9f3c2206c0f594676d818d1761be9da3c68d80260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59a85b8029ee63f69ae1ecaacc86036e

    SHA1

    a08e2926b776ebedbd221ca7920aaf1cd55d74c6

    SHA256

    c0029b68f851074dca6c1cd72a1a4c39f1131f9a8f77d328dbbcd96f89f9c82e

    SHA512

    d2dd9b2daa85e7ed904c4ab949f667871ce20867d824bfd721a9e6fa4954f21597a48907a652326a878f51773b2274ea7d44df33c282b5a3bcd2042f501f3f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7de2769f4ec86e0804e80cf3d2f51488

    SHA1

    30e061347921650ffa660e833f2e1410291cf61d

    SHA256

    90373a1de424601161e2c6f15aa58c56b6a0f85a0ef2814f2f48d4c06713b041

    SHA512

    27b621dd77f3bfe2b2fa57799168f386929c059fa81875acf25e38c17c541d409ec380cb0538d1166ed2a2f5cdab1a0713f66849a6e057ae1342408942f15742

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ad6e95d1a53262a35e9228e0788af0e

    SHA1

    05d2abc4f80f5523ff9b442490ff420ebaa49709

    SHA256

    12ca01f3e2e19cc678a55406a518efb8f0ae00ad9f1cbc4da988a63ed784ad32

    SHA512

    d75962fe78b876d6117a3dc2d719597a0f93cf1c949c32ef8010c0a65848891beadbfd4c4576fbf806ecb10a5b7787fff3696b98882ef8182a00642b503ce954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2fd266cc6f039eac1676d9d9a1b1ce5

    SHA1

    ff274e586a9b6df1207d5d3ac201bd4086b48d0a

    SHA256

    db1fcb9de002da6c665f7c861547a7d4eec199f42aa570fca1024012bb06de39

    SHA512

    50534af7d1c1c89b8088cfe9591a121f6afa63c9d54e6ab8685b2b07ca37a8a2d52a121b1feb6617e46e637e8b16e5a04c813de13d743861f01b8c3ecdb6aeec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98784b2a828d92b5ed0de1b7549bd21c

    SHA1

    a974bed0c9518ce9e69a8308edebf27bea0be39c

    SHA256

    69ba9f4307eb9d2d1149521321de9558b109d6ef7c2ba176da3ca509829d67a1

    SHA512

    9e16e587bb0800d062349a293f1f4161b5310d6d2d26f828183c7a9a016e15a8a006e07024fbb258274bb5dfc927324b15e33505745511fdf955c720e94f340d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b689def7f17a8390b40a578278754b68

    SHA1

    ea54db6a223027b4280ffa80233f7055fbf02c81

    SHA256

    ddd98589e8d72159395d313a3a1f530126fbda1cef477188ffb7d4c31b73873c

    SHA512

    e6cd5a6aff6ec9171de0fd58692332b0b2d0afa1d855f5e3a694229fb07b957b30adf8478d22a803f24ae653c1cf01a0f7d0ff0b51b5de44db3131628be8973f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d73bcc65b26fb0844b867fbd9d99719

    SHA1

    c5abdd67ba8f8a34d44e2475cc4b0359948d02b6

    SHA256

    0b91eaa0b11cc05c89e61665709b78d93af81b7e7e861eedcf71c11473224a07

    SHA512

    69fbcb9c2f8fecc68d4ef1b16230d75141fddc809d61b520a812578f83bd8dbd82c4a027220c0fd9920d8ec4a193454259514a31ca47ddee3981c43d5525e699

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c246c4812d8d11a488f7264e564abc31

    SHA1

    e8883ba412af81da248c4ae188f04a8e0613f5ce

    SHA256

    eb13c9da571d0a6f4d7beb38ebc7173a8b3f753533388fb753125f9fe0bf658b

    SHA512

    ee7ae51f4e72068edb01c1dc8542ab3831381cb41585413529f07602f1e6a022275c2c8e1229c4095ee7f0ca04cb77a83eefa975ab01c093a6320286b783edd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9da561cfaa70f3c9d4af1e9d4b22c2e8

    SHA1

    96d33d874d6767f4ebe31b907a327dad69cf6af3

    SHA256

    cb0ec7fb276dd997d6a6906265333c5ea1a1b01c13f8a3ef7e19d2c71ecb074c

    SHA512

    b9a37b07d87df45416fe517980d2e47ddd959a8ae7d131e3bf29038f6487b3e25fbe96d673f5771b91bdc27b092aba0edace21865776ffb71e38083dfbbc0b1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    612cf9c83a79692577cae350fef19bd5

    SHA1

    a3897a40e0cdc82c3113e3ac74940fca7b018eb2

    SHA256

    688585b8d016af1d689b021fd3cf23238ade33ed96c23c83c0feb601f2baea2d

    SHA512

    bfdd46ec47d106ab4ddda38fd578317093ecf8ccb7c794479df9fb8fb9a2f6987c18c3c726fbb82ea0408c082badda7d991be4fe508a514ef27ed75d017280dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92341cb4726a005934b101e50d576f0e

    SHA1

    f47d52694cb742de1985e4e836ccbaf7bcd6e647

    SHA256

    d4997c0cff39e05ef355392593f5defbb1f292be11785fea9a40984478c89cc7

    SHA512

    822449d39a1d6005eba8c96bed721c4d6134db48a8efbcd7af01fa821262dfafe160ce07ca1886e81226b8647b2985b07b0cc10ff85256990aeacf877cd6e4b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39769efb360d0c5bb6cc245141554026

    SHA1

    85972358ea5cc0bc3c46142668b3171f408ef15a

    SHA256

    0cb42f77e7041ee1ecc6c3703a5c2a6a62ee1b668279dc133115ef895dc6d162

    SHA512

    677159b0e775b21c8a5e0c212b8839c271be2f94d3140e07c96bab603748432a590d2763f3613700466d56b60fee24f962c7cb378ad575f94ee8186a383eddc5

  • C:\Users\Admin\AppData\Local\Temp\Cab3891.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3991.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b