Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 05:38

General

  • Target

    18faeb2ca6b44e8ca2138c552d2f13f3_JaffaCakes118.html

  • Size

    6KB

  • MD5

    18faeb2ca6b44e8ca2138c552d2f13f3

  • SHA1

    157be272ddaf005606ff9b68dff9b77ecc8dc59a

  • SHA256

    78d2fae56dd6be7e1232c268d2831fcb3f46d3cf69c7a9a4cfd3a1ac9db1150d

  • SHA512

    e73a6a16cdabaec7e0095008110c77e193346666691b1a1ac5efd192f2b5a15f55aa52d71a9b8f9cb833905d293a2904a96bbc765f5a54ad03266995b2353f9c

  • SSDEEP

    192:qfDWv0AJ47g3yF1PSW4YvnWv0AJOwss7g3yqwsl1PSW48:qfZ7b1rjps7Qpl13

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\18faeb2ca6b44e8ca2138c552d2f13f3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2636

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a60f47507045303aedf28f534f831983

          SHA1

          af0acf6bb19e1b848623e88934419ffd615bb35e

          SHA256

          fe75c61e1e309511082823a3c9feebb0efcb11e48c5e0b7e2138c36708a837c6

          SHA512

          1e2617c9de0e34839b738772648fd513707693d8294f7c9e3805257a311d8e02da415fba9f60a919a6cc902cf4f18e0b94bf4fc631527778ffe7757db320c0d6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a6c751ce0860c8ca62e549d2084cd086

          SHA1

          100b2f497ac814bb7a4c81229f6743ae497b931f

          SHA256

          eb082fc6c37f0f9de9b4c460b76b64d739f23f072ed1f7c3dcb88ac5e6585865

          SHA512

          88aba3d45087c78cb72cd5f85bafcf506e6fe922b8143ae9c605f2b82358b808bfea3a71b581c0fb801fd66f5274b20efc6827f58b4757594af1ac2725f2f2e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2672f9f4fd384421d922b65c7c4b3b65

          SHA1

          f13667688e3d9391d50801343da21b86d3e4942b

          SHA256

          c402175b2997a0747a18b84f3e960b52c0afc8bbf068132c4a09bf8efa9a3970

          SHA512

          37e16c2ddec7b8b64887de0befca28ed421cb823f054038e9f9d8e693c6582b08408827e9c620cdadb0850b4bbb2db48a9c8a44d3fc3ea3ba1f1c864e3e3f774

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          49b1152fc2f7322fd4e86c4cc40fc2e1

          SHA1

          40006e0541b988b0b955e38dce646951aa1beffe

          SHA256

          3b9d486c4052e4f141d323643a9901ebdf0f6dff9eb358b4abe8ea28d41aa400

          SHA512

          6aaa15f898f18f1646cde63c58490283dfed3e96792c351198e5f605e9944f880d07d0d6ff6d334890a82292cbbd49d896132daf23088bbbe9c0f5f308f1a4a5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0cdfadd6d3aafad0fbd716fbe12b416b

          SHA1

          ca6a9c3cbcaf936362a4b4fb4f53cdf9b55b3291

          SHA256

          aee260df76775a19f35513a6753fdf62b50151bcc4d9c31c845021f6cb775ade

          SHA512

          24b31bfd818e2b0e647e4bd83347a609a3ee47009ba9123e9944532dd65c7ad4f473f7bbbfb7ba0471470b52a2c46b74d0fd6dc7bc2d628991a117a601ec73b6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          72fbecdf0e45ab1e7a0bf848f995057f

          SHA1

          314e8fe4cb021e4de5514d48cd7e772c74935471

          SHA256

          eee0dc201b9c4f7623ff066472b034115dbc0cc677b13ed832f716ce8381abd1

          SHA512

          2c45ac57bf307c8c8d65aa19af89f66aa1b49d1509db6a8d0bf6332bbe4898960ff0c534bc024c6005c2314caf002912ae8cb6e8f3c3885d7588fd8f95943a65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4982b529d81f594164972620e9604c85

          SHA1

          4118f737493341f823c0d0558d670f4a9f2fa7b9

          SHA256

          ddefb85bfa30b3ef11e5fc005eb0bd1ec357df54a5a744a2a42576c22b69a708

          SHA512

          faa9c1763358a12a7f333431713abbc5e6eee3fe07c6ad55ea4a474e45f6fd4f66a8cd2c010eadacdb6c3583d30c73dd05de304f9bb7ef1158f04ce0f2cafdef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6d8c10ce551c2f684289dd60088963f5

          SHA1

          be9ce9cfa92f09e9ca38798852b5224cac8d3068

          SHA256

          7910b5d9a86b1e841daa7addc1cf59d53a3d6cb84e63a2bdaa2a8c81b3410c1c

          SHA512

          3444053c6cc9512375bcb84f0eaa622d3d1af5818250ba6cd71c8149fa09fa4245c2f80a8a9fbc8d6af57960a3279702cf6c2a8417f92881d3cb0d1c029c82bd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8fff73d543a88431e31af5948f3a9ea1

          SHA1

          3c4f437fa2041a450850d4c0eef8bb32f5c39429

          SHA256

          3399ca28a009c7b9b7ff7b6af8b41c02571513092cbbf624043c83d7be9f8f87

          SHA512

          411af50919c140fdb5afe80f502def6c13f91cd881aba1baa2f382e399e63304a2a9b2101ed07deb29b494e0686e7f3904f0ff7d00d703978e15e7b3d72ee790

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          09e46c13a295b3b9b76a0cafb2811aa0

          SHA1

          eaf4f83b1292f361ac0b6283af6fc83b526c6b73

          SHA256

          7fdfec67e44cf1b8f2e5b23471155a7bd84dfaebfd1d53bda679d78ca831cd5a

          SHA512

          11ae6470b0e5fd0daed1ee7135bcd2614c593c6371582338fb14f94307593f594e198a8e746161eef4a1b0b3229ff6e92589446f177fb9d7e90b27964069b971

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c00085e661aa17ebb04dd7cddfa2dce

          SHA1

          d288789291487c8dabcc6d378879270e4948c25b

          SHA256

          5b71d53c57071430d456a067be03696b9778dbf4772c37129b65e928d346af32

          SHA512

          98e1fbe8975b13cc5584393e8c05617f00c61244c6f6143f8cf3979a24242380686aa03c61438fe4f0424f26e3d80b956bc4ee8b62c15571a76e1411bca94a65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cfae516b7dbdb637aaf75d62435914cf

          SHA1

          4e1c29ff0431ea947b346320448e5505051cc44f

          SHA256

          eea1b89b6be09fc9a15aa315325de3f97ccaaafbeef572dd29a514b7a0e61cbe

          SHA512

          00f5e859d7b46e6dbc1bc040351d2c6883a687cfa945a03498f9b1b18cc23b869f286ef0164ff2e18a7bc31dad86018cd407ffc206d2ad37e9e2ab2179f60cce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5340493fa3e2b9d071ab76df81c71742

          SHA1

          7faf3bd0018c87e2fef70669db767ffc27f5bc83

          SHA256

          4777e3c719a88c574b34326dcf30d375285cacaf16d90087bac11fe77897576f

          SHA512

          2c3001dc2f36f17ece8ad76e88fe9010ded70054aa9d366c0ad5fa18cc96b8cd6789c97ff7272a9bd6431deda3683dc8ffcf191f9998aaaf277e4edb948e8e11

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          99a041cd5c5e04ee786b739aefdee52f

          SHA1

          b80d1733a9fbbebc94e99c01830ca90942b000c5

          SHA256

          599ec8b9c13b20e910711bfb54ba8ec89db13192a77e219d38c288bac3d9995c

          SHA512

          f116af10917b552febce7c03f516d8d42541bae000a846e24c639201f6d9c70ab26af07a9f4084ee51ba7526ea568c78c72e52e888c9332183dd26d3f768ff49

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8641d35690457bdad770269d82883a90

          SHA1

          715a085961c175ee685b904d643025fb49eadcb4

          SHA256

          3e86e8273d15d5d32f3da10b9c895e2cbb0abaa25a1d4a7484e6c0a49e4c2992

          SHA512

          0d05751b42d793295108843e9dadb5b7bc614a04291ddeddba1c9a72c7259b3becd51e0a952255b09294509d7cf5ecd22d037694be9aa4b4fa32e7cfc3086435

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a9dce19cbfe9be6b96f4fb91c66d35b7

          SHA1

          27729aaf2f9e019e030b8ea5410657c4cd7b60bf

          SHA256

          8b6acb08961ad980eebf3a5d29f50aa525af8a6b1924fc49339c39bf684bd998

          SHA512

          79390860f0ea284cad6ef7c9bebe0a5d73753ac67c1bcb5a37a72e52a6b2f760b2bc7f58674df4af1dc635cec99f045f993c0684864e6614e5f6d14881da1fa3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5b6d1cea4e6f128d3dc73fd61dbbe984

          SHA1

          ed3f5907154f61124db352e8eb91e2b6fb1f4184

          SHA256

          df55a11b50f596d294df7d65c20aba4d23c0d42965198ab9ef3ee9f9617d56d6

          SHA512

          a74e86e6340edbf9b9f747fbdb647cd41db26936c4550474a5d7e43731351da20e62f63c9238d9caafe73910ca6c598402ffe574fc8cbaabbb7704baa68b76d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e6a8dfb4b51cf7138a2fe862f89c858c

          SHA1

          292085a583cd2d8eae421c796f3f397a1fbc990d

          SHA256

          5e986affa390e1f9710d73f5f12f6b9bc93dbe8119fb5dedc1b1188fff4a9437

          SHA512

          2edc2cb02a843db017d1b2ed79b1d668468f47ad836fa3621e8d9fd3fb1d3bfbaccbea7a8642385c919c895d2e4c30526689e638eeb074f227675f5f95e44bae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ec33c0f02ac4892967ac56a217497f03

          SHA1

          b7c8a9d905b4e6cf1a179f5dcba8cfe96becfb82

          SHA256

          6473d7a9a892d3899b5d4f2ca2c7494b49331e0bf4b5122e73ece7db77d948f7

          SHA512

          e5a6a2a8b009adeffbd95073f577bc14372f0bbec6b463f708027a4d538db771fbf03b18110f62ebd58827ce4983e89c29e796883b71a9d4533b1ff0b309e77a

        • C:\Users\Admin\AppData\Local\Temp\Cab2B96.tmp

          Filesize

          67KB

          MD5

          2d3dcf90f6c99f47e7593ea250c9e749

          SHA1

          51be82be4a272669983313565b4940d4b1385237

          SHA256

          8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

          SHA512

          9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

        • C:\Users\Admin\AppData\Local\Temp\Tar2C5A.tmp

          Filesize

          160KB

          MD5

          7186ad693b8ad9444401bd9bcd2217c2

          SHA1

          5c28ca10a650f6026b0df4737078fa4197f3bac1

          SHA256

          9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

          SHA512

          135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b