Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    04-07-2024 06:19

General

  • Target

    24eb52ed87b4011e1827a0730ba8e727_JaffaCakes118.html

  • Size

    35KB

  • MD5

    24eb52ed87b4011e1827a0730ba8e727

  • SHA1

    a0fa9bc66bf5438c82f482148cdd37a947ec7787

  • SHA256

    d03dd67777c429d96b7af207428b2bb47f30cb39ea4c465c15bbc23a4bbd9aa2

  • SHA512

    a9e34780d3b7ac7272bbaa517390ff2a1b69cd373ca1987824ed5fae7002dd8db35e478911395fe32d6a75238f98125bdc1eb349357e670e52c7e62a9825c77d

  • SSDEEP

    384:tqSYTKKUkNYew/l+TwIAROLNuyPqYjnxibxiE:tfc+keew/l+JAROLNuyPqYj0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\24eb52ed87b4011e1827a0730ba8e727_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2332 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1372

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48ea669a93726cc2a69f71352d840cfd

    SHA1

    62c6947235db107212acfbfc2fc71b64d97012bb

    SHA256

    39f2c8bc7d88c9f694f9e6bafb8b4fb312bdc5b52a1b7e2684760e1325cf6467

    SHA512

    0a74eb9ab0c0314a942803f05077c861a377872f90533fb975672cea3018d1a8e40d010f630f758ff508c8339b047a2b9822c8d2d3c237c069bc36b58b049555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abc717bb436600217f81088af2f21bc4

    SHA1

    7aaa1bf9249c3190e34186d3c3a858c31bec26fd

    SHA256

    507082a7b8aabb292fafafec67609ba26cbf24f7a3584a59424523278da657f3

    SHA512

    74e98087549607003c7599cc6cc773545fa019abfb53e920da35719e109ca48aa59f43e74062f747ee322d407123338183372f08852e7cce6683e77c99a1e2f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97b582ef4821786bf2ad65ca18a9511a

    SHA1

    fc999b6e0ad2c404d170db4fc641e5812e74f5f7

    SHA256

    c4eed9551a64fe4dac862405fa3be3de5241295ded3bfd9aa8f952e0478f6a00

    SHA512

    f27d19c58512a118a48bd5cae4e76b8da77a0b453554e70b034891e7f377521f064934f2b69cb7e519e7b19cbf8c768289334d3b9eb14f3e06b1fb51b77ae874

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6451f6bd682b0f2829c8187c8e60896

    SHA1

    52309960a16deadbf4d4d21b6f12d511db606dd8

    SHA256

    733b201852d455b2eae3a762fcf138050a01dd14d056d67d9542a0302398f3e7

    SHA512

    e72eb55e9e6baf9962d7d4edf151e7f752d936642b7e16cef103c86f774db7030a45556500a79993d588b8eb1a5fb592caf95ce5bc43a3e2064b5ad700753ac3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    205128c518f9cf10bc785a7c4a484ec1

    SHA1

    acd6f2e8665017fd909bfc42704d73dbbde8754e

    SHA256

    76bd3fad5f46ac74e496f09406bd640497ac5deee6b21661e66f2beb9efcaa48

    SHA512

    2fb35130ad59b8f487469ddbcf882561075bcdc517470c2348a079ef9e5191a3a9e9bdce82eb9bec3addffeeff4256d0a3bbaf0980f19c418c63c16089ba7d20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cc27fa680b76b4ce7dc34c2eb43b25a

    SHA1

    bb1df0e190221e133356c70f673f965bba353175

    SHA256

    4add826c0bc03a0f58f9b4107800dc02891ffd1ceee3aabe1f57597a6e5f4df1

    SHA512

    3a4c45f1dc54f358a2081ac476a8895fc77c573e75b9fd364ebaab60311a95998f62e7ab782c0e39437a76c74f6b5cc72c6daa6fed33eac49d4efbe5dee80773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43d1f31112bc8f91c7deed8e25f0c69e

    SHA1

    9059998bcfeba4c320ad830639d75ac539262501

    SHA256

    2ff629e109ceabf97ce4341e8b46e01ca6143c94ecb99c2f77db0ccb3e3d34bb

    SHA512

    85398775c298c77b73449652a1c5b4b0f422d146e792f94f100684ccbec53ccbae8724bf8934be4e30f55eb2418a16f53ea478c81c07a80c603a719fb552f5b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdd76e61a981820befc94cb02996a89a

    SHA1

    aa436661a831c207bf94c4421cfb98df9a1ae0d1

    SHA256

    4c6acb80b7148c17031d3378206892f9bfe4187c7bf975695ded0d573ff9719a

    SHA512

    def8f09dfab820c256818d87160c4786b1b7f7279e41f8045ab9f087095283480cc81bd18a07dbdd6dd841e092ad77e240bb2bd3842299ceca01281d6292e126

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05dc0407ec583c784f240f44704ba3e5

    SHA1

    b5df1da9a91ab5085eff79267477d8deade4373d

    SHA256

    f07a0e5859de0701e5d60888230a513b793606a04c50cd01f7502cbb6f548240

    SHA512

    ddc5429d15e0735642979a68add7b35a1d3a8f6b8dcc9ec35919d9304761e939a8d43bb810cf2ac934beed681d163cdfbc2ace058aed816f5e5936b05f38491c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6812935424db1a88b94aa4ab08ee59ce

    SHA1

    f1710feb4e73b6977fb30474743a93d9a0625c6f

    SHA256

    3833c047ddb58b08a5f803fcfa03c8d491408db02963bb9a6368eccbcc08c604

    SHA512

    0451c42161f66cf25181f12bae0682d000b4ed62f2749954ec118b80cb83cdbacde3d65429791446dc7f44333c6a4a48814fcf7469384c3943b5cf6311fe4199

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    176abe5fca050299cb659ad4b84d3a5e

    SHA1

    f33b4523970ef524524e11b27c979aa532ae91b8

    SHA256

    2f7dd4aec3584feb06e4978bf79474dc9f469612c8375cc2ba874928f310ff44

    SHA512

    7eb1ff6bbf831dba729dd7f3bba9b6ed2edd17cab9f855482bb6b98a3c0d3da367dacf55840ffbe4fb140ebd76b52b5d63144ba343fa1b511d99cde0989a0fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f37e302b90178c6cf19b38d66c0aa594

    SHA1

    5ac7fcc2b7a194d6106b217727929264708dce09

    SHA256

    197faea41872ebc4e436b44ed0b5130714b6dfef3674bb6f7cc22fa1cfef1b3e

    SHA512

    e68ae79669f85ffb40123d6faa0cf59ded7a028fc9281a2ad78cfd92ad59713bb27bd49d2bee163cfa879e867fe9be62830a05065b51c5f22101c7008af8351f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb6c9fb39d478b31f8ddb3315dfef13f

    SHA1

    e6277ce6f0203110c358e3237f3ba830f5e9149e

    SHA256

    9d6fe09a8b7241118825b4f6a60a1a30acb8c64108651b69e01c20de7dfeb6d0

    SHA512

    10e80a891e58c5076ee2e99d0a5665de85cc7ebd922082de06cb5277c78138005fc7fa5a936892a83c16e8313e29a6abb7a484bad6a8fa1b938ff5f83e719560

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ed9ade415438dd8f665657256b1e91d

    SHA1

    81397154656ccbc5cfd4fe9bb44df1d4748b8de1

    SHA256

    dd4b060f04f18656062a77dc1379218ecc338f6b6a079e034e6bf1093c5b49b2

    SHA512

    3a541491e01bfdc3a15ab85ceb2e324334caa494d79572f357427ab8b2f6c37b82c330aba0fff23a20de602cf8f3b0dbfb307b232dd931bef11eb08d01f0ad99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe46200fe76212231e64ab24bbcb7c84

    SHA1

    e162dcd00755e44f4507cf7c13fbf798ff98139d

    SHA256

    b05f38d3e1ecae3fb6213eaf8a54f7e5bfb0c39e90ddbf9f9c152a17ff49af23

    SHA512

    333dedc8f2affb3e98867cfcd0d76772f8777c3fce6ebb6b94680516a0be692f6093058a51c1a67c3405f0d15fc5f06b722871bf56226b5e9d1ae98ed0f1357f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b9677c39b5c8475fb9f44d7c1645e31

    SHA1

    8fadd69c77eff6319e6e409ac6ac2975c98f4cf1

    SHA256

    dfd439022889842702b068511b347f59ca2e8a6cecc8e78c124e7a8d3270bc9f

    SHA512

    f2eef3bd36805e49a2c0783d3861bf709c556c61c9492aedf4943bb5053f7ddfca850a87aa1bcb38c4a8b3b850d2206e65c8ff448b5457ec181f66a4e29cd7ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27461fe9f6c54471983f0ac54b904ebe

    SHA1

    3295d9bf340b63997ef488e0da29b19d32eaca0c

    SHA256

    a854afc926f6f68dfe4efe9d4de8dce51bfc75ef68b2b491485e9c9303adedb0

    SHA512

    b18611b8731274c73443ad9d3c1e1c1efbf3cd823ee87e57252328e807456a732951055456930dc985c068d8caec8031e43c161864d4948b8d13c096015e7f13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50d5ee5cc210edefcf139596eba3f309

    SHA1

    bcad83193b746d310a9f237685951bf992689c21

    SHA256

    1cc7c6602860d980f4f41b6b10c795cec668f19e6e0fdfa58b54cdfc7e104930

    SHA512

    9b1aaef2747bf83b58832669aae6ef8a1efbd67fcf2a3df6aa7af1508004c313a3e316c9b6493b97469411efc7870d07ff7e3b9f9129cf2b5eb16eb022b9453f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfec551ac0a964ecf2cfc61f9967cc35

    SHA1

    e304f92cec9627585d89b66e864173b0228c813c

    SHA256

    db5d37d9f035828dfbf5b207d5b9e8142e1a8cb02e07bdc659f83fe6e0f01e5e

    SHA512

    53b1fa8d65954dd82485ac3e4af6fbc9d7a52f6f0658ee482c775e46ffc4bba3252785601e86dc96cebea62eef888d96454908850ac4a1ffc78baa5b8448d1a5

  • C:\Users\Admin\AppData\Local\Temp\Cab3141.tmp

    Filesize

    67KB

    MD5

    2d3dcf90f6c99f47e7593ea250c9e749

    SHA1

    51be82be4a272669983313565b4940d4b1385237

    SHA256

    8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

    SHA512

    9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

  • C:\Users\Admin\AppData\Local\Temp\Tar3203.tmp

    Filesize

    160KB

    MD5

    7186ad693b8ad9444401bd9bcd2217c2

    SHA1

    5c28ca10a650f6026b0df4737078fa4197f3bac1

    SHA256

    9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

    SHA512

    135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b