Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03-07-2024 17:06

General

  • Target

    2324d643259166c5a589c850c4428bee_JaffaCakes118.html

  • Size

    6KB

  • MD5

    2324d643259166c5a589c850c4428bee

  • SHA1

    7ff5ff201e4585a7f41c35197a1f61ac5776ff0a

  • SHA256

    723a0780e429947298b0285ad2ad0255d22075b04067c56695090251db04c947

  • SHA512

    ddc8d9570d36969e091bd8e9ab26df43e512376970b1a8d8674b3d626e83e4f3c669ce8ea23e44ca2f780323ef487c36733807f5353d4f3e93655de0b37880b0

  • SSDEEP

    48:GCpoIYSZd/pianp4dS4dUaXpidS4dsqaXp/dS4dlaXpRdS4d5VaXpwVdS4doaXpv:ZpYmpiApFIp0IpfIpBVIpwMIp9DpUW/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2324d643259166c5a589c850c4428bee_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c975981f140dd3949f44b305fcbc9598

    SHA1

    0366783a6e63d61d0e1aef92d09d5845ab9e7d16

    SHA256

    2ebd20383a03f112423ea0d5bef516b85f05a40bef7c9742c64e04b215e8137b

    SHA512

    5c60a6c1b8e7ae6ea411f46578c50c5ed8ef666d1bbc40a2575c415c0a7c3690b1fa90afc671aac9eb4cac79846ab3510a08261ad8144a3bc20b2519e127ecdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9f45055426199dcaa0a4c0665e8e007

    SHA1

    4809fb7ce0c79a7fc4cf7a81e19ee7a0fa93ea42

    SHA256

    f772d1a47536535ce3ad6275a20088bbd38d64063c4bc1e600391bf2816ea642

    SHA512

    224efdde1b0b65b938f1dcf31213ce294dfff1dec3e7ade54dbe70fc578f48a2dc2c06cda454c549f78f86e513997550ed755cf70454d0211546bec014fb6335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a400965ce1b125aceb92625abbb367e

    SHA1

    b46dc6b3dec28771eb77c25482fa9de8baaf1671

    SHA256

    29bf3cb4482405c9e84f316db382a40c23357b1c32176acd8ec6d8860e1560ec

    SHA512

    240077c115cba982545f6c0003cc2fdcca5b61a7f5faefce5fff64b9cafda765911e1a25c9e6346b0c46cb81b51b7f3bbe9466272c521428a9014fcc87a204c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58048fa6e31fc9f4af41b44fa678baa9

    SHA1

    3ff0aaef385951419ede9f1efccbf330a0c83c02

    SHA256

    8f49578b5e11e5e420863234490cf7b0719cecb42df76b299b2f36ec4dcaa568

    SHA512

    dd924a5e582fd0c3de56bb59f6984e1f7d584e327e509799195c0a6c83415d3b3ff90662773b901f3e6676c712e1fc11e480e112ea1c076d2d95368ea572ee39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b1e3a7094995b1188c0a30963e18347

    SHA1

    7b1133a38f1510b8e1222b5e224d9a54a86de591

    SHA256

    dd76d8325c295c13fe04c48a5aab89c9999842437da4a459bd8411ee769a5c47

    SHA512

    69efd0d9704845f4333005568e7fa876cd087d884c06d6899cb7d57fcaa3b40c7c99d8df91f0648746e4493e4835efeda042e0ea08da5ee4bafaacde27e07cb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    787fc7df6fae1720d0f6f5d80da3b28f

    SHA1

    999e1f45418e7877453b0954213e11b3393bfa92

    SHA256

    b58398dc99443ac862466fa1c029e4ae44be013289ec6e873d29e02203dfc5f5

    SHA512

    fdcd9fc0b7aa34c2c9e92f7f6b5eeb63d08534a6b2d5c093d5ddf0cd8db0daa803295ce162a6ba337f54e997e391b6f9da247d2be4a454f9f95d3796f61620eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c03ce725eff3ad16076cc5a75c51834

    SHA1

    a7c735730948b0250145403447bdac7ecfae0312

    SHA256

    8c1b747dc3dc9e1c24ec8c89e21f874b2740a7e18d57a535c3c0baa2b49d398e

    SHA512

    634dec76e8ec559111ae6b5a9b3c56b99ffb3f0d734203388bae43f353e5d3738b8ef9e1fb21ec929b3662862bd719b09cc056be4b28f78565d565c35718d39b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b92ad32f9c9bccdd7ac7ea17424a3934

    SHA1

    c0433d6e6a0582e4de8587b92b22f22ff1d90548

    SHA256

    b1c78b7aafffb121df8a38da61cb9e41ad065de50fe9892e1318f57884e3b333

    SHA512

    a4476c8e74a2538365d8bcc035d99794f822c6a508ad131564c85d95e3a8bedb8c4cba78555fcc789089912cdd5da8613e487f971d19beb1e8032b9f6e923f0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb3a98dbea8d73dc0d2794fdf71e1708

    SHA1

    29614b8230d5d0cedaf45b56d03ede1ffc44887f

    SHA256

    a0840b23ee37c846ee641188ac32fae6fe497460087d86933ec4f258820de07d

    SHA512

    d6371c0aae65a1807e289ba9b05c9780678a640b8f27afccc80b07a627fcd676e5f89a01fa1f0ae05fc6534419afef561e8b6e2eb6fc5f43508f66e44fe4922a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc61ca76077ec18df31da4efde186749

    SHA1

    846f8ede372f23e16201b6aa235f5409d63c42c7

    SHA256

    8fa2e4dd77ece08292b918690ca01ca62cec2e2d3407f04a21a1d700a7be510a

    SHA512

    4e2ecb310798c5d0c2eda73a540c603e036d51b226c4aaea3e776d078cf7a7c5fb4148c200dda073832b0be641ac134484d8a50f305a4e562c0f3433fefc2933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb15c76c282c939eccbe6a5f4b34dc55

    SHA1

    d1822fecb6f3c5506b7d03aaf235fb1f8dd59e86

    SHA256

    ae60d0363603e9e27e2ad061bb83d37f1c58fe05aed7375cc7f140b43fe342a0

    SHA512

    4e4e28fbc68bf4c672743691970e4883d152a469576bbc81e5e1e6db2decb97bffee32a22bf7a920e18d1a0b7d8c308161024dd44b0e09cba12953efec32fbe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ef0d3d33f781d953ed2474bc5bb2bc8

    SHA1

    407267f85920158d7af34398527d0c4b3cce0e43

    SHA256

    e542f217d5f563e2fb3156d38ee0e2ad7646ec7a433abb17e02ffc4ad8b53ca0

    SHA512

    83527f5206e80ea384943a5758ccedf4a56348eb7e27425abe165d4c9e0d13db08f6c588fa1988bd925602e60eb4c064440d7520c09531edc86ebbbafa449ae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c24efcf3d0e97846da9a5ebb2632d69

    SHA1

    ac81a856d9a744a417350deaf7d89c1884c851ac

    SHA256

    c589c996ef04d9b4320b9e14773f0dcc79abb3bc9fe96431dd9776f316a2cae8

    SHA512

    28c8e91a96db5e1587421a8d7e06b4b810c28f1567ea5fc2a55e2fcd0be253c3bdb01534f97d29711dcae6badc641f23f4b09e7a8eee8bb3258ecf1693d41400

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e879294a81adb2da1d409ce53c366343

    SHA1

    c3a0833d167349d08717bf00d0f8f2d4caba0289

    SHA256

    5144349fc8ab92013a14a81ca2d4f9141786ef5c9c4ec84db7a46b1ee275ab53

    SHA512

    752c36d18673e09685908d4caff325912ba36a4c2f8830227498fa05fd52e165ede087516bc3e4868f122db1fcc145e52b936e1f70b44670e41d77d60a177982

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    120695b0a83cd5ae1ce7e9ae8c193a47

    SHA1

    302767a07ff7a1a530cbe404a0845386f787ca6c

    SHA256

    8b119e324647a52d0472ead22f757c249e181391a0df978d4bcb812860e24080

    SHA512

    a8366efb334003988c76697574571b4052950cd6b6ecb91eafadad675bc13e48afdbc2b367f0db6f1053ec9e530461c8871399b7e7a7cb30d836f77a35e4deab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    551af0b56e16d702add2a8bbe508bf33

    SHA1

    f8d2bcbc1a5463e15db6bb778bd647cfc8d972e8

    SHA256

    39b6190a88f36f37d8fadc7a86b9f6286f5432b8ca8a9322570b7542c1a252c8

    SHA512

    e51fc8022d329f4e18d6d41ac82da33712a6fafc0b1eea58db9c8f3c5e54c334c3469fb635386b813a451c27a5790cb3123e5cf1b66cebc514d2826d5be7d19d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09c8324046f16f88fedabcd82062298c

    SHA1

    24a1bfb67c28423f691f1206ca4472f9ec524439

    SHA256

    7b87b92eabe2b29e86f1b29fb6d2434264daeb7e17b9fdbddaf8d29fa8636c19

    SHA512

    c34dd8809fed8b441d90d42832a1f2b6fd6fdd41cf960aa474c2831d97b7040809248a3c2bf47aaedd556cabd70d8e53456119bf595bc4ca57ff727bcc41a460

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d8be2c6909bdf3dd3abf5d5ccabd775

    SHA1

    fcf4574d18a10c9c78ebbc4c8ce209a773c09358

    SHA256

    11cfab73ebc6b6d81ee8eb52bb2d181b5f0d6de3d256647568f701a30ba0eebe

    SHA512

    8dd550ab6543ca1ea3aa9480674c1c8f6861a3042bf9b74b83398753f27f333ddd5c1137c43612d092753f37a4db1e20b5ff6657f2e820dba9d95b100f1ba780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69cd616c264bc056a019f873b8fecd43

    SHA1

    8d573e5faea2118be224229d90ca730e4c7275c3

    SHA256

    b14662074e86ffe1c792fd7e754edd5f08486d0d8f96089e9d7f40046fe9175d

    SHA512

    80464f158476d660155f6094eec167c40106bcfa565a17953677f69c9eb0ddf88ee14fafebeec00f6605d74889b8785776389786714d39c5a4e9d0123c93b265

  • C:\Users\Admin\AppData\Local\Temp\Cab7590.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar765E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b