Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    05-07-2024 00:08

General

  • Target

    26bf47dd42b19570452ca7d2e1178a54_JaffaCakes118.html

  • Size

    19KB

  • MD5

    26bf47dd42b19570452ca7d2e1178a54

  • SHA1

    e0ee42cc5ddbb1456e703318625f008916532917

  • SHA256

    90a99be5f7c324a0d3581a8586aee7f1c1a53c7f995ac2da1a800cd8533dd303

  • SHA512

    4e25a428fba163ff2d5aad74c88a81b29b26104d10a9313e42082bd0861f3cbe00c74c701b7dc177aa8fb63d23ac80e7e0b271b11d8961059fa3b6f73825fddc

  • SSDEEP

    384:4+QfPFd9QZBC7mOdMg8tKfpC5IgSnbmFe7AcB8689LAPd:Zcd9QZBC7mOdMgdpC5I9nC4nPd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26bf47dd42b19570452ca7d2e1178a54_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2052
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2052 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b08d01a92419259bc1ed9a4cd4d6ad66

    SHA1

    07827a1bd46bcd6bc73b9959b286d12436079336

    SHA256

    5f62d3c760a089798fed57aaeff60fb10da8ea45be9d1eee5bcdfe5e2d79ccda

    SHA512

    6322878219c9f53fa838b25f3d3fc57884d50272101213c56f3dd09eb40c83171bdcbecfe5ff92019b6836f06ee2e9ff36bf9e020396cc1c5781cddf05034470

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ebf0427806f27f9b104da87dcab30ef

    SHA1

    cb590e55b87012dd725dbb4e5f19b8a4f94f8546

    SHA256

    5a7ed056027052be6bba429470771c14ca7aa36a78b160a7b4deb5d63f57b6b7

    SHA512

    989828bd9156d9666b58c513606e889eec88f411a140f1600a6a56a8d6bfb79ba2b1fc4131487ac587dd5ea6c8e04baa0baccfb990f09032e1ded941a9e7b2e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fc92a0006b3801429feb9f2f355fd3e

    SHA1

    5713ab608c63b75190c3b68b7a0ed5ffc5b4f8ad

    SHA256

    54c0d948649a096b1a8d1172c76c4e27df437217120008f3ece2de81c21ad9f5

    SHA512

    ed8dc040498fbfcec4bfe11863d9422552ee58c6a1b190225ba35e680c334cac496db0ddab68ff4617fcda48c923090d4ddf0e7c3acfcf0d7ae675e1289aa33b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c9c1a12486b35cad170651133e7f44d

    SHA1

    a2767a083a5bcbe0c250fd0c5b40dc000c689f45

    SHA256

    99949cc16c827fe8f46106458fb698f73cd6e0e191e0cbcf2d3b65c68a2635f1

    SHA512

    4dada54c542cbd496102d9630ba3dfc070ef604417a929f59ff8ec6319e98db447952f42a1283bbefe1b89220522d4f68283789b9be71712ea3379aac26c2439

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f17a64c053ee2662a8d5f5d0c028338a

    SHA1

    fec79cd50b08cf91e8af1f404cfe0208c61b955e

    SHA256

    34f79dec71130fa103fd92f7406b972d26c489a8cfcf05eca75d2146e920a4b5

    SHA512

    287575a0a7c6bce07eb08fc93ef474b5a973b4007e0687244fe2ef99aaf9c82ca4edc05a5f69a3436c5f4933b8302894b66bb712de3b92be3ec8537d89a1a5db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e13b6c6d543b0e3b96f7e724010bba2

    SHA1

    93db78375ab8515d2e2502d9efca538327cdfe41

    SHA256

    dd077354aacda8aa364ba09e5d013f848a592f1fa0379478b0cb133f946b3f7e

    SHA512

    06207d660ab47416e2c5f1ff6cbea1a85668275b9771b77a5919b660151bed1f91305027454c2f0fba4579acc06766e123f3b4b45019083a5d7c84ff9a32392f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6432af4b2e5fab6fd1165e740de1a3ef

    SHA1

    e27f53789e9d9ff5f453e2610afb74c58d628f70

    SHA256

    8d3a99bd054011a7c1d4376f3573bf6b991f143b0cea84d0140718def4553627

    SHA512

    2907aa9f4a566619c8ba85b953de822267d2806f7cc771b4d3d5b8d0995321c26576c011161f32a1b35ad15abf1777faee1b2725973f784cda6e9d08a5d2ec5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    172e3f70445cfa18d3aaaf52e5bcd3a3

    SHA1

    d571756bd4bba1d519773da7007aeea446855ebc

    SHA256

    204c9b9c23fc1c83f7dafeeb937b70ae2ca24de2499bf8acabd9715570298105

    SHA512

    4b47d4a047dc6c75e50c1dfcd6249fe233ece2989c5f49e0fe626440cd5bd490cfb0c9eae94f4ef897240a8e25f48185cefbc69c20d43eb5dc39e8363b106bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46b07adece6514634341b264715b8695

    SHA1

    16b708bd31eba7759347fac32d23700b346161ef

    SHA256

    169b4faef758969864d6e8c1e6e5162b2b1ea2b1242bf355e14dbb89c9d40439

    SHA512

    493348259dc01136dd1915aacdfa9288ce497d1abc826d28c73cafcaa81cd6ca87c88d535c7d54f8a947083c9792f1af0c9f957841d946cfef93ba6ca1d23038

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5b77d5506bae12cf4db4a493fc20910

    SHA1

    2923f3699b4ec44b7298182e156ae71ccf095381

    SHA256

    57395b18c4e68969655bb4659fdf27836363ac11d3b0c715d9a868cf78a59b8d

    SHA512

    8711f64a1a4f63fb3fdc75749e80db7c9b398909da71423713a0dd52c172dcbe1575ac3b05b7b4b1a535957e7f55c64500010b4fc7f61106c188ff6524748353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7485d54c9fe06fa3c0553d27d70a268

    SHA1

    5f62dbf29f297b38f566db3de41b3be217b27086

    SHA256

    c2615273eae3d719fbb9a6203539dfd2983b3f50dafb52da6af543ae4a0b1f84

    SHA512

    110f4b76c800a81efda0b8c05fabe5233885f9a537f28a0961e7fd5d97687bb2a421f20f87681c105092d2014d4c9d819ed0bafb18dd274f19e4fa0651d86499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2a80c4cda1ce8f32587df640645ee39

    SHA1

    3ec6e54ab344c392cd50b15b0cd0791eb4b31a6d

    SHA256

    481231acb9097303f45a7228e14ae08379ab3d2c61ab4c65968f4a0d7035021b

    SHA512

    daa6ab4b796e65ff0cb614cffb551458f57c059a1e4c952254e746e324c1975c8b479de0ab9ecb2907c45f47e10d3a2f2362b6271029d2c34270f5c494258e40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0f1d53f6c5b78b90cd252905eefd046

    SHA1

    d7345bb79212fd413d51b91e793e663063c1118b

    SHA256

    7c590e233aff0952cedb493c0d872e1ef2371ed2f3122a1282a75c88ae54016d

    SHA512

    5706ee05e58d35601660a1d07709402309c2f50855371c17def721c743bcf38e992fbfd5af98a2fa65833caae1f7f91bd9188d6f27a83392fcacbc8432c0118a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b90193d1c47ccaa91cbc6b0767430c9b

    SHA1

    27d930898ed1ef4880f874d38388452c3bc13f04

    SHA256

    68fc1edb826e65e2cb99cb5fed88c52c8fd2626ab2d08448f2a0d383fd8dcae5

    SHA512

    94cda1ee95c49c06884078a1051e297297524c1e65a549999c40cd3a1d716b22014677675ba45f7c88040b3192a523a3154343282c32c73e0b229ef17a3613fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a597c08f3df4890d549581572b3bb5e

    SHA1

    afa46ea3a15059f5083ec948628d572bed7877d2

    SHA256

    274cc5d2bbdfe0af19ed6a99c3d26059320071a2ee68acf9c2a6f80d5c404191

    SHA512

    232e914ad31f9171e4290a51a98f12e259fc8fc872e0dcc3f30ed27c38f2be4994600b3f3674018117619526279b57ec989e3e5e74cc1ceea2640ce74729d1d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfce973dadbb3c57314ed8ca6215546d

    SHA1

    80c170659e90cc793aa2e507e865d0cb73e79a4b

    SHA256

    c98f46c8f42d1381bee92c2e61c954ff2469cc55a2a883b727b7deed43ebe359

    SHA512

    029c990ebe528cfb0f53c129c6a2449c3027b950ad24cd17850101b2faa1ca35dfdd043debf6ebf4523380e8371a8879911c3da58f7d8657d1461fd8da351328

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e39e3a508074438701df779eaa062a2

    SHA1

    d637143c19af8d93ce2902f2f4b7b515d15b3f5f

    SHA256

    2fe668fc5da6402e5928206abc300f4e90f9bc71a6f67645b61f194cb904ffcb

    SHA512

    770eadafbfe67cac89c04d81206968ef9b52700d3a8b7dc81e2b08d966c12e81bc4f0c20066b5a3931c20275c3929a1d4f8f81c0801f5b40a5c41147ce36b0e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a15b2bf9f0b06b451e8944ea2adecd18

    SHA1

    f19dc82335cd7ddef4521e78b58f77a3a304b747

    SHA256

    7a1e9284051a1210513a36ab481b294d44b9163f1f3d5c213c79a2e03432c5ca

    SHA512

    a022800bfdceaf0ec9dc0d1ec9dcb1e1458752e0aec44dbbd51c2f76274fbc8249062a25901256b016c6c40469abf5978ea3ffb69aacbba4231636e77a487074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d206c171e4090f722e38e567c148965

    SHA1

    eacd8def57452b80669973f71c6ddcc2074e311b

    SHA256

    313295aa86fe86acc95c627e88f7a0027f336a9dd6308ea03658665576f1ce3d

    SHA512

    894a8d1ba1e95fb40878ad3a51bd04b1f5ad5bda817b1cd83e88287b2c02566d95bfe337099f8734aa5527c7b35ea04cc6076e3c089166d84dfaea37a26e5954

  • C:\Users\Admin\AppData\Local\Temp\Cab27DD.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2881.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b