Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 20:10

General

  • Target

    1c5759a75f9c8cc38e23ec4f62d11d78_JaffaCakes118.html

  • Size

    6KB

  • MD5

    1c5759a75f9c8cc38e23ec4f62d11d78

  • SHA1

    2a527744d300424dff3f586b319240bda00bb0bf

  • SHA256

    13ea9dd617ce386b8267f9f1451dfb419306dce3c1ac56a667cb88fd6202640f

  • SHA512

    d5dd1b0a381cc3e1ac2d7c7a18cd3891baf4e54a2a925d55931c294373161e9ec33446226ed1f3ae2140a1a41b50c80879949c9544c837623f309351364d8252

  • SSDEEP

    96:uzVs+ux76MLLY1k9o84d12ef7CSTUiIcEZ7ru7f:csz76MAYS/gb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1c5759a75f9c8cc38e23ec4f62d11d78_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2160
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2160 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2164

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cd0e2108c54df0c9092904bd89d0c796

          SHA1

          0c27506131993e4d7c369fb7e7932ffc45bbe27e

          SHA256

          05b3ff6586995544f56c761d597f1b41d75a72f86349a52c82191a5058bd9c9a

          SHA512

          fd6f8f3f8d5b61f6efaf3602e1880b3a1ad512f2b86c76bb2a954a32d853efd426f8746795c5396f7891c87b512272181558e4bad899fef3fac6b13202b6e103

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          199f02ce2d600799581a2ca3796e795a

          SHA1

          5e0c0960ca786e63923b9b4dc82aa500817e7af8

          SHA256

          02f893d70d8a3ce316d01499122e38cce360a4951c8253e8c3cc41aeb118872b

          SHA512

          bcc5d768a7c91f114c7f2c243cdc8696029a9c2ec1585119d9d4f8e62c5f4f911f1c20e8476a5b32c5433b0c83c35335bc7621563952ef1054214aad6feab23e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00013efd700c44fe7a5de6b87b576841

          SHA1

          48c9c7b080467140e0b39fd29b455433f3b2df7f

          SHA256

          8404d7406a43bb493898b88350fa80f6acca7d74503cdd109ded3e27fe52aa6f

          SHA512

          52e8abe8882a5bb274d46e8da068b890b7034a1ab54ba94e1488f3eaf58e2fb8a60e87be4c61bab7f2cc45ef0c081584c33c54587dfd48e44f1906a87606565b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f10e8a8f2cceab68d7b5100abd0a8660

          SHA1

          76dc5dc9135579a4b54cfb06bbc5bfc508f0bbe9

          SHA256

          5951e330ca88beb85576df4f90a9f06b13cb499788f43b81d79066bf1c1ab421

          SHA512

          fd3abd90eeb8a2587b1561b520bec476bea250ada54c302eb742ae60babf3f2925870edb1daf651183ba3d8e10ba4b83e861cff046c8d9c1505cd06dfec512d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a69a8870a6d7c9651a5e6f7b87674e88

          SHA1

          ebb21b0c80339edb2d01b482cb178da1c8fd6e5e

          SHA256

          08824aaead29d9982150995f1d6cb706ecc9cc6ebd394c117301baef3f8b4173

          SHA512

          19434f32d1e1139370ca1628e619072bfbeef9aa374e8900365ef4dd247200599c8937843d252b805b04cc4b05fc245f0201cbdc2cd4a77c0a049d9eef4b2b6e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b62d3a0e0612d2251dee6300f461e9ce

          SHA1

          7a579c555ffa61f754a335623ffec9072fc0bce7

          SHA256

          66771d41cf129b56883daf1727cc452147d839d691407da9d36f52997f9e751d

          SHA512

          a09ce5410e16905d306466cf784d85ea8f285e70759289c74b6e77cdeff7569e9ba612937986ade216c3b5476636aafe59e70160bec097ad990444600212f90f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          796e0f0e5768c427dee3ede3b4221795

          SHA1

          52e691c3864eb4695004383aafc3eb2478d474c9

          SHA256

          24a3b01f90f937a80af9c2bfdff5128d0fa7cc51fc42e600778455406528f4f6

          SHA512

          46ebe05950663eb5981cd26adaa4575c59908beccbfef3b68ae933242e57d3d7c716876095b4b2adb6657365ecba2ca2cfdf902206b8c7ef92aa582b6f08b52b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          742b07b103432eb3241e404e59b967f3

          SHA1

          33c5e68139408a5bc7551bc1df58b8127b578816

          SHA256

          8cbff404d14aedaa9acc626b138b1347597664359e78772240fdc1de011dc893

          SHA512

          c3c2428fdfe6c15dfd52fe0ae87cd25cd220625518c6d9a93bd7595e523aa0d923ae1f606085b2d67bdf6b7b1c015afa15005101ca034b312d4d4e5c43b96f27

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e4ac8730345234152ca95226c5d9c8af

          SHA1

          824498b645a33e693672fa8aa78d17642abfec11

          SHA256

          a60d1fbfc6b9c22aa386e7f44cca2b1aa6607cf1360716279a235bbeb0887a6b

          SHA512

          1c1a432bb6f65016a5322865866ef24bfb53701c27775fd2371cbe4219beadac8caed6cae74c76596d9aab520d1242eb48111bde92a0a3d349f5c85c6ac09354

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          964df7fee1b20515eec8f8af81a6a7c4

          SHA1

          87ad4046b76a3cf7ef0583bc86a753e0e11744cb

          SHA256

          d35da4e93f6cf9e85a7a381644d4939bf0094ffc98ed3a9b1a8703682660cf74

          SHA512

          3713382ddf7103a733e8a33fb7a20eabcebb70de171d394b1258a1c29d1ef3ffea84f4fb78a9ef5c776effe22a60a83afee6314368e65a1fdc541c275926e01f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f1c390c9a38b9256e90706861c9f1480

          SHA1

          07388fadc400836278a6532f51e788779c646d30

          SHA256

          b10383ad5739503fcfffd2c0ea27cd3282d8615c74e9c4d3766af4c701cb7a49

          SHA512

          cece3f65b0a90184912617ca36bc800f25121de59a590108e0f6efb9b9a73d72a5785cce22689f5e8000ab856b419ed76552bf4dce6abb644998365e59930bc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1de27e5590d14b4824901c601fa69e51

          SHA1

          001aa8dd31d5c1334139f6e699eaccdc37963dfc

          SHA256

          a0ab9d207610e403a950cb5bef4d2569c98163e73e74d872e688f1c68b849c37

          SHA512

          b760c4a88d8e6b0a6eb35c0068b3c067cab234895c2c84ab08f3025b2c7942aeb08723a192064c4b829e4e99b395a6ab90d4992085e00c55a43e64c6841eb015

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          95ab3980225fe7cc817d0312f1cbc8bb

          SHA1

          dec67a2b6aabde5a8c02643202f43edeb7f63804

          SHA256

          c2b35c92a45d79490f0bbdb19d795aa5986e2595eaaf1444729dc4501132c176

          SHA512

          fc60d51b34138a38cb4644ef0ad8aa0f35f72f2ef87e3390e33ddea2f56102b55247b609dcb2ebaa5b6416268c0fc54106f2be2730cea276ddf63f1e4ab9ee31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f168db80191137e6e3d46b37f5626161

          SHA1

          dd4e0ad3f7592859dfe354aaa7bc8500249c9321

          SHA256

          1353bb733ee8c3f17661240da4e5233234cd12b0186ab5e85010a9e1fce53039

          SHA512

          f549c69c61096ed5a0ea69dab3fd4b80a312a1806562488bfe64b0595a1985f12320f275a3c1cf79e4dd656abe9ea566cdf3593e92fdd661dd268c613a114374

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f477cd286b822526371bcdfe36d116c3

          SHA1

          e4a0fbe6b4f557269101b510f9b649f76bf97a85

          SHA256

          3c06cf167503e1448e51b0cee7c57ac77e7c598731a0466af818437ef4ac826c

          SHA512

          7630b1e3bf1e5b673b482c75f8934d6c88c9ca68621fdc4c09f4e5178cc1b987debd6735415baaad06205f5e46e88a7db425bc470bdc8acf39ac6d3951858241

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3247d4f5813193d9ec249497fd8ae15e

          SHA1

          463d027159c97c9b95963fe6aa985950d3c9588a

          SHA256

          4fc2bddd178a31a5d7c88f01d7256183dd2a2b5f7139971a803bdb3ed0acf50e

          SHA512

          84969a3f9d8d060fbcc1685bfb0d12ccb8926dfe552c266e7b9cf96058cea706c5b22061d6fed08eeec132ccd56933b7a4a001ad115b40cc10b7e705f2f13167

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          49fa586dee8e10529faac531c2fd1309

          SHA1

          545ca66bb01b3e29ae022013e606ab03229c0c37

          SHA256

          c8b8368f572e8e2041640d5a9c2433205d2e7510d7bfa1d5f0c583ec8514a09e

          SHA512

          01b271bf54830698196f15866ccc1c09861d2aee071672a2f92a8253ed2368844ad88c71cfcb85f0c6c830a60da671d3596bd3450fc1e670fe79951399783dad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          eaf98ab6b6d3256a6365a255952e1852

          SHA1

          3f36379729d5090981cff55d62be015873749da2

          SHA256

          450a5eeefc8c9f889aeae9cb084622115d2ab6c0cb7941ed2dd131dd96396cf4

          SHA512

          c5952e6d9fd0d34e6dd9e360995476b8348e7eea693ec3441253d8110cd1509e69278f2ff58a318e18de50cf8e1764653d116252d9478b39a69dfb57b24ef0a1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9c11fedf536ddcbf3c29f1b111e8e5d7

          SHA1

          b99b0ad3508a25423e816a38fab6690e88d6e210

          SHA256

          d498d1312f8c43656921ce44ee5fa5343c7679abd3ac2ed88c0ba3099725fdab

          SHA512

          1727886df3f44066824b4deaada45891d5313109c2a04d846f58c46ca4efc89908fa83120ac5f2b339a1b8bdb73a4276e682d8cf08b0ef30c746fb05406dc366

        • C:\Users\Admin\AppData\Local\Temp\Cab2859.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar28FA.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b