Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 07:42

General

  • Target

    153197b3b3ebaaccc7f133a68aaec6f2_JaffaCakes118.html

  • Size

    9KB

  • MD5

    153197b3b3ebaaccc7f133a68aaec6f2

  • SHA1

    ea5fc4aa2b7e5d21040515ccfca9c2832c687369

  • SHA256

    1488420d99f7553ade800a0b7f81e7c0ea3cac2c21f16f7c36b6c8083c704c3e

  • SHA512

    7fdeb5653513223c5a3f88dcc59a1567baf85e04715a5152c4291f419ad1a21458bdfc9eef1b5d202c734a38c04f9bbb29b355d82ec9dfe6b21f9ef35f73733e

  • SSDEEP

    192:cIrTKy/GILDCBJdKWCQtwQiJPfdytNwgcEQCRkmJBMyiA:TrTKy/GEsKWpniV+lo38

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\153197b3b3ebaaccc7f133a68aaec6f2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb324d2e2036456d1f6104ef9ba67c79

    SHA1

    4bdad73036bbab54c99d6a2b32d3646ebbc4fb2a

    SHA256

    0bc947385a7e657cc9772be283225bbd1a7bb8be4f20a07f6c14f0fd75273826

    SHA512

    9feb4ffeff289e7e721f4b7e73326d1378abc7f67408cbfe0c8279ef298c9a90a22d130de9131f965ed613221b1b6c738aa9a41c2df8c4acfb5040ef3e84970c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed20a12c1542df119f91c9e7c50e9bf1

    SHA1

    5d28efd518c4f608cdea04d06143167898e0a69a

    SHA256

    ef2446cf9e82c14b79e151b1f142d63de4626039c836101962935aaa731d6017

    SHA512

    7bae67748a9be385d653a6c0b3dbe09ed3ba813a6f749e14649774e90d7f6bf2085e21f868925aec3471509a28c265ed18ab0f2927691f1dfb8a810daa2b8c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a8ca40f7d82c58cdfde06cc2678b760

    SHA1

    900421064d578919c9172430690791333c1f4d6b

    SHA256

    815062a663feebb00f8e530de7d602a8a33080c274a5545cc4a92b9186dcede4

    SHA512

    7e37b233bfb0007de70b814c1f6f27ebeaa4275f8fe9bab0ed5e856ebf633cda0922b8c21af763465aa627daad9a0e4fba4b4664f0cdf973a43c0d7406a6b70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0793da1aff3c1c157ae77883841792de

    SHA1

    d9361558a5123dc73e14dfe52de56de7ce2b9ebc

    SHA256

    b5a20e77325b01f45bdb789163a015def1429793d403df7fb7ff982ffa12eed3

    SHA512

    c6663ee96cd1bc4a75ab304ddc6eb42f94b188429a583ce247f8081df04d69a6e92b191323d2842df29ab1d1cbeeee29637e084783d36322e93c4dffbe5df48d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10987906e3b376e96e2787e7eb77834b

    SHA1

    128a1020bbc71b2d07517ef20b2225380434d3e8

    SHA256

    56821b8c1dd1799326ea1e64cb307b0d71f391e172278178346fe781f59117c5

    SHA512

    91cda9316958491a6a6bea2b0ea0397fc0fdd84371e762553ea2b2defc351e78aa8f7c2c3d74684e33de3570afdb450d5e32776c807da0ec3e5f1c2208146d75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e24e312fc7c936d37ff054e028aaa855

    SHA1

    2ce47aeeda66977c0e125409717288f465a4bcc6

    SHA256

    5ea09ecb9f622b8d5eb244b660b43b0d8236a47be9fc6203c880d19824cad37a

    SHA512

    295ec9efa53850380bc3647f4d0309d08245451ddadac9059b35ff645c9c7285d3510d7e0d30cea86f368e28b9258f1f2467068d7a591692a5fefea7005e37fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d5e24ee8743adea76f03051ba8874f7

    SHA1

    33147cdd9bf35566a8ddadf03831b2b74dad5b8d

    SHA256

    1ecbb8fadabef941ed0c53a151633828ee246e68b4eb333b2df9d20f84b659d9

    SHA512

    492a12dba3c177f9af33c754a045aa41f28ff853a7800061c6625d26d38aea01ab573254edc9dea49cae482777d1f9fa72bb1f15b53335509e06230415c653a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8b2e6cf5b4652df35571058366c0ca0

    SHA1

    cb9dbbb2cbdfb10efc15d0c0e390e734b8c010f7

    SHA256

    84e1a58617c443825588d5d9da49e0a6b3bc07ec47eeadfbc67348011a380abe

    SHA512

    f0c2130685c3373a030c6513016a06878d1d34c2e2fee22e019b67601a2a73d890563ae51a8aedae40b89c83adf8753d566212b6b9dd4beea508db14af794138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59251e7300b2a5fbe44d44c3acdd7477

    SHA1

    ef72731f6eb043b1d3d372e7d4d51c04dcc9a559

    SHA256

    db93836211f4c2768dd1d1ed484cb4138013a35e7e45f54ae394ed8f51d9e7f6

    SHA512

    4b5a950c8ebaeb06111c49615d846cc621ac7e41e06aa1acda750870b1588b84061fcec606aa00913fef15c91c2483fe9c586eebc77606748df5395fc653ff11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e27d5f4b38e2b4881a700a2f8d197812

    SHA1

    4c42b2441b788c4850bb2fc96c8450b9d52ce730

    SHA256

    03178bea83c19cddb24804c56c37d9c006eec8ed5930c9a6632874880a96679b

    SHA512

    f4a4676aa422c6f2f0bdac07b3f9f24d6c0210786a6e2f5265961cf1b6ce18c6adfa47aa7ed7061c65f28c7cc3cf86337ea7522fc2a2bca8e05b1452b9497f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6471916a8bdb0a0264ded8c15b461097

    SHA1

    5f35b8be150591ffe9cea59fca43f1e172ebb066

    SHA256

    1b43990a863601b6f2e1dbd2e4a54a1d13d9094ee4d4ad3855fe33da43cc4ee9

    SHA512

    819a6e47e62b556852aa7418ffb13dfb1ff941fe403251b738124735ac1a80aaa9af0a2e513d955ba03bc7eaade0b7a284b39e60b9c1ad5ae6add516a2dc0c1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a22f256ac9ffdcc160daf15ef0f51f79

    SHA1

    fcb012f43fc175a5953b6788732f9e7063a6209f

    SHA256

    07342dc839f0f4d6959f4a693c355ea66687d23be9dfc0ba0a404fb82f3d9529

    SHA512

    76a1c0f0c4acaad465c0aea073c9eecd2da940d28256b3d556e4c00a96affb10901d6292494b5fa9ee789fdcad2519ab540cf6c2cd55a75b3605419e7fb386f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b95de10fc5b239d13b1ae09c7cec7114

    SHA1

    217307e1bdc6f7c43f99b765930425758b399be7

    SHA256

    3f1a4556f5c095ffa33d4d96c8dbaa53625c636c315258085ecbf93bf13fb2b3

    SHA512

    c3ad8f9a104732df9e309e5cc39397fb9afbf2848de76476d5cde876b1f2200d16508f117190e5e3dc757d81cd9a765c6c3f23ce73c0e270705a5f668b9a3e7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2548802bb1e3d0d408230358737bcc0

    SHA1

    43fcc7cda93438de9fbec634649fc2d70d2a734b

    SHA256

    1fbb012d109653cc8d2edba4649247bd4bc5ff86a4001c590b39513330151b8d

    SHA512

    e43b7e7c5cd668c3fabe637bec78343a994db76df132ab7cd9a2ca83072399f24d63112f829825186c481c68dcec01e89ecc18914e5a746e866863caf54fdcd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92a1114ffa34956432cf688234b3dbd1

    SHA1

    01cc04d65b9d574694e9a4b7083c1afcf664575a

    SHA256

    860cf67b7651aa93a2436a7bc15271eae6b620e7d7bc176939f734a964d85f77

    SHA512

    602893a290343f36fd6f949a9f6f88cfddb9f0811130724bb0c92fc90b834ee84750e046b5adfa13aeaf0d27e41a6b480eb48ac7b5646fdc23dcd64338057a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb427cbae3ad4c76eec332c5b789e66f

    SHA1

    bcd764ce5f10bbf48085c02bb0ff21c919a163f5

    SHA256

    a5af8b1432d81cae649990eba3a795896c2e8f7702db9a1d8bcabf8a9fcad4da

    SHA512

    ba4b4e1db204c5466aba0fe04aff503b85810b6da1699dd9c6a5f45b7b1e08d8963b54964c253fe34cf69bb83a10041b1df0b3db72cef1bb85ac54a6f2e1537e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5173c3d7d90e032a1918a24993ec4972

    SHA1

    c49e5664c017e2d442f7474de3f599958d2640b9

    SHA256

    481291850cd419fd0942d0d578a75f185747a2db846b34cf8b4c46185052d3d0

    SHA512

    8198e50351e4e9a7d1d0b75a60902ff2cd14fb360a3e1ddc3a360bd36f4b5136fd05c4a26424598b56ba7aca43b5a63b534da1c88b974f1aa2143a22cd2f9046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93678ba298ceefe034aa6255faa60ba5

    SHA1

    c935fdea00585910743e06610263357985ef7493

    SHA256

    0f284cf81e32ac66772ca40eb360c22046eff12d7825d420c24211ac9d5b551d

    SHA512

    25cbdae5b9070e9af54dc923787302acec699ad268c7212ebf6313f1aa4a257fb279334defc57f047ccef248dd939b122c091321f7294ead8dd71a7a32e09222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8a7e6d1ae6335e0281c40ae26c72170

    SHA1

    878957906ad65cd6d24d1de8ef9f54b3ca83d2ed

    SHA256

    ecd91cb1f5e21aa77f02b838462c9a86b89a090344186520a1a7fb0e414c81bb

    SHA512

    9b5a32b0d265f53a26f75e4f76aaf46a16e92f286155d47df37f34bd8eab74d1508ed9a36031f7ea69f64b4de01081c61af6b0e60c3f90b9671ca7d8801a48c5

  • C:\Users\Admin\AppData\Local\Temp\Cab29F1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2AC2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b