Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 03:13

General

  • Target

    14789a194baa3a2ac6f17d8108a858ad_JaffaCakes118.html

  • Size

    31KB

  • MD5

    14789a194baa3a2ac6f17d8108a858ad

  • SHA1

    7b5cf67b903d7bdd425f47563e94b7f4caccf0e2

  • SHA256

    e9368bd546ab2b7f0c5df164b0d68486fc12b5b7581e726b48ee1d73aa4d6d2e

  • SHA512

    206102a5d0af4204bf2148955c2504dcb29336de3251f2240f55c9a68a1604a2a737db6af926d59ce2d10fcea5f0d21f77fff7f76f540afc3fb680a57f29ce3c

  • SSDEEP

    768:/n1ZpKVAqnd+qq9o7B2mwvQsTq3opF/25DtD:/n1TKVhnd+xmBtwvs3opFI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\14789a194baa3a2ac6f17d8108a858ad_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2852 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d9fdd3a9bb27bd3daeaae07a27530a2

    SHA1

    f3db8c8d00edda4756a9a6c0476b4733dc283708

    SHA256

    0c89b32af8bca3c5cfa9b4c1c9cbbd18671f0a4d387617f9f2c708f4e566aa0b

    SHA512

    9fc30a7a87bf9816a94d68d7b0eeb0d339dfb77f7cff8928012963a11bbddee640e2760e199dfab559141e6748f825465dd9f580eea18951d3221b7c95630dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b222d6e21aebcd7b64263814155196a

    SHA1

    fdda5a5715d9d0ccba076d0560c11f1b8b2e360d

    SHA256

    126245e39ac1a7e00f2fb5e8def2ce0406c823df8a8cc21af78e2a668a309b0a

    SHA512

    ada5c8c6714ba05db7e0b8633fe073978762360b704a3e899a2dd8df25bf288a94223db0117626c8a2f129087505d26eb396905b7476f8cf79f34182e93470b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dc7c8a9b79de288d124796aee075811

    SHA1

    9770b9b0530aa06d72c8b253cd55e56d9782e42b

    SHA256

    59a6e9d993651e9c62645257cff4ec813f182863475fa279b0bfcccb0fbda59a

    SHA512

    86e748f501923a1d6cbb07e799974a8dc12d99e25c63692c9640e862edd8837f614b11e71bd78594ae9dca2efa87d69a5ed0dae0b510956055ce09d1cbd6ecb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9b32311338f6ea485c52c5ec1cd5f29

    SHA1

    52eb3d390bda425d9254f0536d4e28277c85274b

    SHA256

    743050856e1e3100a0566abe4bf9e8d75aef9005c12d2b36abcfd1198bf10af7

    SHA512

    ea7eac98725886eb744e72c0e61b6de3363a1c656cc57fc291d65a05c2c530a7a1651bd4114cf8281c0dfae53da7709a0447fa363a7931753cdfb995b734057b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f7bc20186607355bb95ef26bb4e1af4

    SHA1

    86055946d544f05c4aeb0d9374ff8e129f2f8868

    SHA256

    115a3291f49b9aebed77cd492bb11da0f174dc163ea2c47ca2bcfb0ab2a0b329

    SHA512

    cca88a1b546e6c8dd270d1db45e2c943b100d58d227a65c413bb934eaf47015197a196931a8d7df348aeba42b05e7a69cd0cfeb735ddda6430e13492659c63a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f4626d7401846117476b405e0d1f1b8

    SHA1

    2c48c6bdf3b0b393b57d7d95bc8351e2779e3bd7

    SHA256

    cdfe6e41b499c8d5050b01173b1e8c1d62145ec58677197040ef5a199e06bdcd

    SHA512

    34296d29ca87e0e7f39c11116aa922e530f9c9a504e3b3c6e842692ee6a505d52a8f6b5e6093a3e90e6f10d789708215349eb46cb73f8613508fbd35574ca356

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    748c8f51fd7865060f1fa117de3f1fc3

    SHA1

    ec05f8d8ad764a953b5059d0c5c05f40015ebfda

    SHA256

    e0a0d306dbdd113a3e71e763b3186aef23490daed0f113714729430518dd1e9d

    SHA512

    e4efdcee6e3f4779ef6cfc4b4866d189c3bc8dc7f52886b29f26e071acc7cfe98e561439e06607028f12a3d7b155c3f1bfc334aafa6a9950d1a11e1c203ece61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b78e1ef7c8a5eed4e617feb86c375d5

    SHA1

    d85d48acece43b4503758bfa5b359d43f48efa5e

    SHA256

    d0494b3e096e747a22a0dd2664fd97fa1373421103ee9f93cbdf1c976d98668d

    SHA512

    9bd9fa07ab88f735b833e8cda103ba387331f9341b1b989c4cd927009c2e53701a1dc5415932557a3aba7f456e5457a896a36b96395729aee2ee1a7f04eb9c1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f7a740ffb4d258ea75013b7575bc589

    SHA1

    7cad33b53d63922b8f23fb247ff254e49be76a45

    SHA256

    8f88c8a0107a21e3acaf327b4f343d39104525e624bf6c17a70e8f6a3dd6c18f

    SHA512

    39c3d53e83eee693bc60332baffb16fb9c6031f3b5b323484a58846ef3236e30b2bf213676c42c32a3392128c0d1cd2ebff9d3a915fdab58602166186c7dd722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a66ad6d6491a494de3a5ba20ac2a7ffe

    SHA1

    9775e82548f5f16f3d7fff1419564323c0fd3376

    SHA256

    7c6faea22dea801aa8ddfb4c092648260f28944ad2c7f9900238d36787785bd6

    SHA512

    c7fabc57701438a838f0b0fc68921e1dc0fd6b65841d8d96502216b2612455562a491a36c177c64abf125fbd9c3bd4709ff7a13ce2849f5b223985d2128e381b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    441e9faa0f043b103d11e489d1313d25

    SHA1

    fe4bf1198f98cb9696f4a87ec19abcbca268d1d1

    SHA256

    0c491696c744d0d273b88f97da25a78fb898da153bd1a34bd66ca7abee0e94a3

    SHA512

    721ce92eb7202b94f79df8461682c654983f12d0b6f6bd518e73ccbb72df7987f24cd6fa74c106c43ebed5260d5673e05e83602f954fd07dfc7d3ef315088363

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfb58b887bed3b6254955477d6ed801c

    SHA1

    ba1d2c2a09f4c7c69237749e5ac328384d895fca

    SHA256

    6735aa824e11d46e9799c76e953f17c3b3eb9637daa795600351928c55d527bc

    SHA512

    c79f00fac303934d26e35ba7687dd2e0cc7dab1617f3d64a2b74327e83ccf335fd09bf5c9405fc370c9f735fba6d3c75a9bbff529ab428bc65ff2fd8a3fa19b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db8b0c669beef66953c8a9492d30449c

    SHA1

    c1c4670f87502745780ce3c50ce6aedb1e97444e

    SHA256

    f27771f2f50a3c999e9d984a1a774051c521f75a91d744efb68ed4530b66ef64

    SHA512

    4a294077913def490d0beef520c39b38148b5a19bd0edda6fba06d82dc685d48de264730f893c092d778fe0415e208240d2cead78e79a5f7a26c6be7329941f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01ae96f07aef2e193657794404292838

    SHA1

    be272943be42238caf0e53b8069288a578bd2319

    SHA256

    7fb6436bc98757bcc75f573e2dab88b0acbd53e29bae58f24cb280b797cfcf3d

    SHA512

    503e2ca7f87e06fb511042ccce744dcf25bff6ce884784bd6ca59d6747fa87bf85ac1f6fcd62daaa6b10172c454ee8b6ef84d4a61b12252f25f1b4e6d2d4bd53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bd1db747ef676ab9c566f9f65c7f9ef

    SHA1

    5d3c69ca51c010be6bacf0fd2106c2c617f1a50f

    SHA256

    111114584f33700f0c1a9fba2bd1b0a763ff7b0bcb132794d3f911957e098a9e

    SHA512

    d61f1e742e388ed3ca7de3370dc8adff0a9c6b074f4315b54f2ed2c32184fc5cf1c670d71a38b7a6b45c35d0df44d1b332db344c3155ce205730a18f765c505f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e89059f095921801553d68b414c53a2f

    SHA1

    d20f5a63e570f2987d9436b75f3ff8743a83848c

    SHA256

    9ed8bf5998361a469b1aab154652d6201cd666351f7b8dfa447be2b717e676be

    SHA512

    27f35ccedcf25da2aff8bf859ba943aed00df72c941a10f7cd0452a997360c33b98f1158db252034378db10f159b14546e874a4c7a5727c61497cbe20947095b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1833aaa67116c04bc6740bd5b5156b6

    SHA1

    88a8a3e7a40d4f25b245b2871e5147846bce2b5a

    SHA256

    775d3c7b416a0012490f485b1d014f8d6556349d9f9de7d963e989718af0beca

    SHA512

    eeb35b9d70a2b0d1ed4054a1f7fe4c96a7a850548a181153c168f809c04cfdb67bb5af981216316c8afd59788941cd4f5468d6511f489ca0708c2c817d2cb998

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e63fdfbcff524ed9b46a44b5bef0a13

    SHA1

    436e90339157d949bf516fd150f3eb5616ec30a7

    SHA256

    8fee98be0d050c457a8d7a253c622cd9d9c9a89e5787587ff737e1699994a088

    SHA512

    f69a64d9b9df82e94037cc52944ab63c8eaef5738006268aab8493310312a7cdcb7df32c361cf836456e335f4730414e2b316b9098d7497b8c9f6304470b0ffa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65ae5358332e1b2164397a0ad52a60e2

    SHA1

    43c52fde06678b9f30d3f50b526db9e4d29bdf42

    SHA256

    00efe84a937c434d6ff7e731594fe6861762066e7c7f2294059f1be3f027fb0c

    SHA512

    d746a97b3cabe9d6f49fbccf1e6ab35b9b662665b9b8061adc6c94b9be7b8c2938b21bcd5c2b44775fbb3ca5b4313e449a8d261d9edd1b2df04b46ba84e023cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75d1691584652712a234a9dacd7130f1

    SHA1

    3cdcd34963ad2625fe8976cd215391010b6f8d8f

    SHA256

    8985ead62f3fcb7f746d81270c374c8e04118e763fe5a2408e3601d3a1d9273d

    SHA512

    1f2a56170abf35007a32308904fe3d86f501c7c5e4f6f8be095b1bb42e589ca8b28c177ad82e3df4224c48c1ad47e444803dee329504503b5481f16e70c82499

  • C:\Users\Admin\AppData\Local\Temp\Cab6651.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar81E0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b