Analysis

  • max time kernel
    135s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 02:56

General

  • Target

    1888f2c4e7611769ce028b548a5fe88e_JaffaCakes118.html

  • Size

    53KB

  • MD5

    1888f2c4e7611769ce028b548a5fe88e

  • SHA1

    c85d81d426553ad20be7ea78a6aedcdadaece518

  • SHA256

    145621df30b6cf725372ee77586bf2f09d65ea13dd86d71eaa7bffe010cad0b3

  • SHA512

    319b5ee836b5443726825a29c9ebfb9b466243283735394df3cacef98890e1c543d352e97c8058e45512a84955129dd99c291dae5184f32ae4feef57230906ed

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUVrunlYG63Nj+q5VyvR0w2AzTICbbSoP/t9M/dNwIUTDmDJ:CkgUiIakTqGivi+PyUVrunlYG63Nj+qp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1888f2c4e7611769ce028b548a5fe88e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2064

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          715d54ed0c5db630c1473c720ff3de57

          SHA1

          bc64f6af6fdf90de10c57b9393cdc0d6de3a5fab

          SHA256

          24b8d041663b86b9ac39db495d054c64937c2f239af9abc6acbb212852c45308

          SHA512

          e979aa3a538a10c60ed57ef639ce429266e849d32e9cdbad81359cc733cc56c07245e0e5736774a73e703a6ceebe325dab35028f1b6afe46e0c4f1613e5c9414

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a5254f1316969b70d8137d9bac0f000f

          SHA1

          1260d43c29e6ddebd46a2ff7a81274982e57c80d

          SHA256

          535a2c335dc74fb8ba7729e2bfd3208b00bf94aef1bf43dc250f2149227127da

          SHA512

          e28fe1748223aa13b847adb4a44f73bbf818adb17cab585f082f9a18089a3ad7250f6064c2c939fe59c2e10d67cac12399703f082a0cadea290106304dd5689a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          77bc41a0d3b3fa8a7621fac853924e74

          SHA1

          f03a15ed4d16ee663d234dc4c3b804983748579f

          SHA256

          15215bcfd691cf6d36a17a7b989437db17e6a3f6089b7cad28c3671d5f1b10a1

          SHA512

          9457aa447012baf51ea9d08d0b8a34a9dc9d44924e0d0b045c18ce377b72dfc4495b2d65903cb3c269c4183db7c9707ae864835d8d70801c76514eba04c0f0ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          601d1cc2f83880f7ef91cd73e046749f

          SHA1

          a1531b7e30ba4528f72425df9abb6d7ee0cb8a9e

          SHA256

          5b20c654db839b09ce2c9b0162541c9c3948fd97abe6436f5388b82329e1c32e

          SHA512

          4ae00425a46fb27d8f352136bdb350dee855a0c8143cf7ab0ce18de187f79749b10f4a58757d2375e82b4a808a276690a6ce083dfc97cc1663038f607242fb8c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          29ca5438e0149207b927b4afe5fe26e7

          SHA1

          4e78415d66c55551f0305df0cc44a88a57f83036

          SHA256

          ef6df9383d47ae54b36d825989f49ac50fec32ae7f02969ba67b334277a81d69

          SHA512

          ec8ac62fc6a5f3f6ce8eeb8f810479c40a8a815cd8502d258f9770a60b375d3b483b3cd346fc52dac3ef67e434fb7a341db7bb1ea9c9f488924891f2f85fbdd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8997ff38f0c3eba169a917ff3429fb36

          SHA1

          245b94dd354f0e54c61b5186f192d579d4e28ece

          SHA256

          436113f6d42b491dbc78ca6bca9494cc3a6774d100ad06e9c754dad4d0d5d0de

          SHA512

          47d3b406e0ed542a85bc8999313aafacdb94dda6dd5cd6e0b291725b55e6149689cada60ed4e358b262067a8b343e67d2834ef51945bb8b900d6e6e1c0cc6bae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c3c2b0ba14616fb66d50faa625860bc4

          SHA1

          f4922b625aaf3e8f9c5b43cdafedadbf0e0099c5

          SHA256

          80c02f7eb2aded8e940862b34388789b2f8e3814c54b1e1a6ece2fb379f88aa6

          SHA512

          c4c07420ab6742de69407444e9842f27671f48f5cff911b4b936c75fdaecd44d36634b058987fc4e67b33575ffb1a99cf228a95ff7960eb209a977b4177f3082

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          60fc368089aa95b466c933670ccc5c4d

          SHA1

          9d3e5b2c48bd3a6cc6dae750a001aad3e38e7e29

          SHA256

          3113c5c7cde07529c4fc9e928d4c91f207150ffbdf0d7d2d1e75f7933bc09dc6

          SHA512

          cca5d711d08fd39ee7b389125ea51164fb341151d290f785dc5494e0c40cb7145765e2712ec8e888fcc3f58a5579c0bbb5c2bdf6ee5fad93bd13d53b0662b917

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dc73b9a3a73ef158db6d2b39a1767ed8

          SHA1

          a5649207a23e7de93ea921f2bf50f59e6a784cde

          SHA256

          9f349b39ffba48fa2695c09c3490ba382777c331d3ff348d09eacc11710aeb61

          SHA512

          d8b7ba1828bed01ea70e7ea71e61254c4e06b7dec8b49d92bae5b9de98bbe41d17e97ab56e482d409f3a96144de19fc3f4de692ffeb91130e4ab6ad200c95f2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7bac0be9d9e2ef3c5d4abcc78e4dc2a7

          SHA1

          a761dddb414ac5080a70b4cbba33f169dbdf293d

          SHA256

          f7355605af5ed3fd8d133acf67f7c3f5ea1a72ba2896b1ba0960675b96a0dc7d

          SHA512

          e90e35be0e2565050a2a6e6ce8e0e1c085bb749bb7b7dc785ac74b2d9fc91f4a8b576a83b605711ad022bf789c329e976d721cef952c073723eb1c9d6995bd34

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          498402a83a70c45276cda892e88dd5fb

          SHA1

          88055089919dce8a0a7baf611207dc0f137422af

          SHA256

          70bf1543f2ed3490235634e5cdbf63b9f77de92158c735460ccaac1878d7cc3e

          SHA512

          ab67b4f64a81a7986af4b02152b9596af59aef30b85a3e0227b8f551271f6093209bac400d7c4644db8072543b53ba75d0fb40ab090f40ad1f66afb443ff7931

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b546fa90dc28e8c403e84edd86b96f07

          SHA1

          1598c3cc99a586d090f2f2a742c320bb7f1cd61f

          SHA256

          74e1411d4bc6ac1b69047e9a822978d8442d0583c0bc5a016f036ba7845c66e6

          SHA512

          70d2ccbe456b97d97fb385caecf29ad9db472269266212aab6a5517a76bac00ca11ec0573f70c0031e2e9340d27ea70859e829f58904e8247e20c9e4c160b9ec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          574ef7f26053e555302de90ba2dacfc4

          SHA1

          d7a9203539be0f90f3bff8259e4a7b06a8015fbe

          SHA256

          80d211d6e1e58d152de3bb535dd277dbb390ca20bac9728d4a752430c3d56af3

          SHA512

          1d343bbc14cc338cb8abf2b8ffa9699f4867a4fc593d3e297356e587f85a2b0636a980fc723be88a7a2bbdb05c96bbe53786028523f3dd08f4ad33a310491776

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9165d8ffd76b407bdd7091bb2683f8eb

          SHA1

          a47080220fa734c0cd0cde81227509078db90211

          SHA256

          bf1ee1cf6871b5992b860d9cf33b98f8479bc2f1087093cc867bf0ae73c5aeb8

          SHA512

          eaab9b7467ba1f59fd944b1af5314ba339c1174618535d574bc54e73b69814e79fbd1481b0f80a2869e403b9edc25544752ca6949fc2a5b99444f50aa36de4ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d82a8ad01d9b82e95ffbc7c4938ecefa

          SHA1

          0e8ba2b83b3bb7a4f34b0725941cffcd8f9393d6

          SHA256

          441a18d51a17fbfa0a1e0176b73f79b2129874270779535afa072a4c9785b8ec

          SHA512

          fbcc08c3f10eee5d993a02dfac42547a3611ee924609c46d856a6bdc1bff0167ff391f3e7581b22987848e6ee28ec22f04223f44f23cf0d5676eb4a10d899052

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ad55b0da2efd397ac7a4ed8cccd0f55a

          SHA1

          81893f75ab59fd88c83fdf23cef66e1e5907249d

          SHA256

          996b70810b04483f134435a48e2d3a09d6d6d35cce1f5e664e274f8bf443b402

          SHA512

          0c85b0bedc666741031f00bab053d61dba9254c3552fca3b8d65d790acd192b5e737572be1c16e33ee4529f9588ab2379c1675df4150aa43f90cf1a887caedaf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf0dc947d9814bc2b4de81bc2942bfb7

          SHA1

          a0e6059e46ee1e945a5dc083d6b74a43c40c0036

          SHA256

          bb2cf6016934bdc7af6d6619f5ff4a31295f98bcfabcb3288f7a427db926a89e

          SHA512

          7c0df3c812cf2cfaac62d557ba6333166ae87b4cd93e5483e7e3a69929f958e10ac5ac2274f4257af0d9f315059c19f1c8c44fb9f9b2c69f3085d48dfe3b4fc9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6864a88e73d25de9f82a8a5bc6aa85ca

          SHA1

          87d667041a9101f9bc53e4c209d92797dc1a0539

          SHA256

          c346794ae4a1a6215e7b2169c2ff2adbc362f8f3be2b47caee71b7d18d7069ef

          SHA512

          e25c3ea8e095e5e6dd27018543e119432457b50bd2c43f99b444abea7c69ff5dfdc6eb2129ed8668564e127576d300e0a333e16245c3b01e1e0d5b075f5d0dd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f87f76ce7a678f69ba12a9dea30ef9da

          SHA1

          e66a2ab79c068c25e7e4337231d0a3430af1bec3

          SHA256

          f3f5b1490a69f963cd4d7b7336ab9003fb19add5693c7a7503aa8dc37607a767

          SHA512

          b8181b0f43129def6778d6f440c1cb0457060886d4f095ceefa0bd04aef18fce831d3b2c981312bdb04ea15bd66bc78ccf2cc3a36d64fffd074cdf15ad608d10

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A8DU897P\wt-logo[1].htm

          Filesize

          706B

          MD5

          67f3a5933c17b3ab044826d3927d0ba9

          SHA1

          5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

          SHA256

          97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

          SHA512

          03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

        • C:\Users\Admin\AppData\Local\Temp\Cab7C33.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar7D03.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b