Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06-07-2024 06:02

General

  • Target

    277ba58dc4005db0e5ac2ab8e36a2ddb_JaffaCakes118.html

  • Size

    53KB

  • MD5

    277ba58dc4005db0e5ac2ab8e36a2ddb

  • SHA1

    34046c33c286119af89e4eb72d671d7b2ab76432

  • SHA256

    18a944d3463f03cda08afda8c2a9f35571aa4056bf92c3170c5ea14f2b38353e

  • SHA512

    7e61a54375d390bff1a76ebacbb943719e0100daa5cceca76f016688638e6c9c0fb12c1233d6285868c2f0c78505b5308e2f8511e4b741ceaacdd9118329bae2

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUarunlYl63Nj+q5Vy0R0w2AzTICbbRoe/t9M/dNwIUTDmD0:CkgUiIakTqGivi+PyUarunlYl63Nj+qX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\277ba58dc4005db0e5ac2ab8e36a2ddb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2716
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2716 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:996

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8f270c7c3fbc52cf41b69e902d97870

    SHA1

    4c05d0cb55db76e0b87a0b187dfe5083f09cf85c

    SHA256

    2afb29f554c01d2dc3ed113f83de8a499c4d359c1de83e6978b5d4449fe090ff

    SHA512

    65de488b0077eea719afeb8bde302a1f27bdd6a2b734ec4adfb17ddf6226130ff44deae46e34ed690645c79fd6453913a81473ef22ca26da65705b2971de80ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b47618bbaffc0c21fd5bdedc72e976bb

    SHA1

    e6deae882fdddfa05c6b70780d82e3779ffe5b11

    SHA256

    545e7736ce688ae60790bfaf3092031e67fccb84370e29f340a7097c092dd872

    SHA512

    07ded6cc5166f37c2e8289eb5ffcf5a3d7a469951fda7a4f485b0fbc03e467be4793d2288ee06527010b980357adec2fa034277d76e12726b723659d7824fbd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    536eb07d0acca098d879087e5e3a5768

    SHA1

    bb07f1174f5234ac3a74254b8bf535c21c24386e

    SHA256

    7192e26b79fe6aa739167f723d6a66b0a65f03ebaa0fc8956a784e5f78a34eb0

    SHA512

    6716b39cd744daadc19d0d78c14fa91a4e968c80603bcd20150f169e1b733b0751b34b6ac141d447ba0f562c4030d2902847c58a992059b5ee366d5965f4037d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4337cc833182d15ead34e2690de76a6b

    SHA1

    28f0224d29d979a9484a7c0035bc88bb85bae908

    SHA256

    03b571a49218b5d09f16a2b2684f79aeb35e4c0a7264e6d53bf2130e91429f4b

    SHA512

    8cce747770b9e054a0323952a8cfd1e67d95ddfd0ddcc63a7b35ba9d615827ae8c488c867cb339640c548cc1c304d3f6003d82217ab388cb60dcc20c73e2ef43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4d26334cc0e3f58dd4b5e111c0dcd2f

    SHA1

    109dfe1d0452f32d92fead8f7ae51d4bdf4ec8bf

    SHA256

    6e4c20294aed6aeca7eef5a65d1fbdd35ed1cd06d32b08a21d822526aeb93bb8

    SHA512

    a5c49094ffdcf5e4d726beead387eb5483bc3487ff693a79060055ccf4735205fa2e33a9258a8d62a81d91eb722491ea978d75796d8ea471c114c084c30d5a41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c317ee63aa55f0ace0b486fd8a55d7c8

    SHA1

    f7bcbad063acce033f5396e0761e91a1588c1302

    SHA256

    dc29929b5b6ae58d53ac060bc8bb0cfbcd4b4341e373e5c85636c88a500881f5

    SHA512

    23b4f6a8bb60786b0f1931ebabd41294be80bffd6559a53d421e00c17b5ff365c3d1c4edc6c23af5d86a2ab8076a459ddde5dc1c59677737633366b1653679e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cac089b54e0fbca667a8ebc3a4e72ee

    SHA1

    092f8923726e2da7caaee3dac0342ed563b3688b

    SHA256

    1386b1dbe13e3b6da4efbb3b865f4cb6a5f52b362b323a085e3f709cad091980

    SHA512

    850b7b5f845007ff17121b4c380a775d28ed452db6b2d60f5197f2a2e012a37416788058121f0ac39690f2d1c7a844e4d134b25d04a319cd867a405b3993cac4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aa4d3dd288162b2feba6f1ba48702dd

    SHA1

    0b2e8f16884df04d09c2f53bdfff103206b610ab

    SHA256

    d27bad2436defb554a94e5c981789eb0700217641aad0df37b18c5cf69398127

    SHA512

    b26888a1a22e4248d9cc7d5c312a2dab4b22419427a8ed1d52cae65c9f6668dbef2469db468febd22702df6575efdb9df35f2807fd5a9ba4d686f0059484dafe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    904e4046fbe3e062b489ee7a03b0007b

    SHA1

    3ba90ad8292b3ea9d5b4706c1bcea09d397c6349

    SHA256

    f7552720e0a6f754fb1d6a7babb8f525c6959f99a19f798258870424facd009b

    SHA512

    534b0671a5b4286846a694919f577126461a4a8f1fd10d020f3f69bdfaed005aad4bdb6b459567b56b19cc056660e758deb3d484525c422e53ec80a8a9cbb951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a3f69e5f539a5c44a6890144817ef06

    SHA1

    1449948c39ab638e6a0f2a86bead01cae2c42e45

    SHA256

    a21428632ee100507c282a1178fd42b5d863583d90199a4a12c9fd45ba683bb6

    SHA512

    95098b65bec460dbbd861a646525805575988a1ffbbc8784503b31d107cbca6af193467a3276f1390aa9926f70165c38947992558e60d4851f8d89ea749feacc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    915bdfb5e9391a6fb77efdc0c15854a2

    SHA1

    52f406588e005219c008b00eaac26cf6f2f21975

    SHA256

    66ef21b8b37cd96fa0b7421023eb84555489cb0117c5b5be83544f34dd82c454

    SHA512

    8d67490516f4476aad0bf233b7841e011900fa7ba8339a7c09931aed4c6a1dc4ab743a33847b6057ae517cf79bdf8dca5fd0e7db7113f6c7062a6db3800b0f24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e09337726031c57c9aad0137e1ad4f8e

    SHA1

    12503c94b3081729fe8ab87d409c909d7255bf73

    SHA256

    8eb7dc3f90739d22aa1d776bb451b0e855692116058654c81c6f8fa29d1302e5

    SHA512

    2a32a9d24d1bbc72b8de4254d0de569329bc826be07f4bc1371725469e696eee4bd85e2a90a4029e833f241869ab458813407077d3551529396d6db6fdd947a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d46a67b1179d5fa748685ed06e340af

    SHA1

    3ef9808f5ca338b78a7e4e8952ecd3e25d6b69cc

    SHA256

    21297e2db9b52500b90ef06eae5ae535cc208141ef2030f7c0881e8f1a4327ab

    SHA512

    985c1dbed82534b5f4854eb841836119186152045cbe519f6469a9979672458417fea52a639a5d10dba8e18e206c9a92d251572dc37142e3c7d97c8eda8bc6ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b34d12acec8d3a1193d74a3ef239fbb8

    SHA1

    11d6fee547fe90671372145872fd607bf12aa656

    SHA256

    3955ced7d29cae6c91ba4bf369ac09950618da63197f4cef27c496042b4fd571

    SHA512

    83339a05ba128dca89415d5a7f64f61a151d9e1a2c9f79a1fd68c44bf326acf1a06fbb5176a8a9b92378bae1a0909e48ef509ea841565c70c2ace914b1a858b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2327c1403834886b1b4c6d1a77c89c52

    SHA1

    cc9acfeeaab97971bf2dd53d601a8e3fd35a0933

    SHA256

    73855b5a7b899cb8ab3727151bea230eda352caccc6601a513f766d0a5024060

    SHA512

    a697860adbbc3ac4eda34f4e23f236baae4144651be0f3780ca6381f6ecdfb986ed6b04a44223be5cbb5d987b03e0ea4507a70149c12b237010e4657b8ca07ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9140a77edf3ec38236d6d2cb6c0a970

    SHA1

    32db1e8b3aa167582fb761bbf00de3ae17a02bde

    SHA256

    11bb372a1e9d04d732c36313fd2e7752521f0d28a706f68e0047bf3a8390feda

    SHA512

    ad14bbf22d42787bd65ec373e7103e0413ec82dffdd8f28010a930da6375451e33f6a85cd704e17336baac116165f3b25b6b87b8ac1417769ed26fbcc23a5775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e2bac869e8ef7fa361d3b7a50213321

    SHA1

    18760eea8587d3d605263cd30d278cb8b1a81f2c

    SHA256

    ae95859500e4a5b355c61be8d321c28205d990a9730c9dbfd7f4926aea6bc112

    SHA512

    7b52b9647fb246d0ffb5d402848844346a7fe1098eee55e91a96248f758fd7ef1210d7cdd13b0705c2a2b455fcd902691367f475718058bbc0e5d5edf4fc3029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43d2c8c98a745cc6d657ddfa1e545ddb

    SHA1

    4643055a27f421f223c47639855656ede5681290

    SHA256

    f4aa6c8486fde78f02ce4836e4716934a9b0897112438b61f0f50594072c5c6a

    SHA512

    bd42f084178cab7afd2ac7f3ef77d487b5490323099bfdc3e34e91a08901c01a85f65da05b831296863c65ffdb124bd9542e2033e0f4d9dc83e13ad7dcf15920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84b97a3adda3801085d313f86efffd88

    SHA1

    5ca12a25b2a4b334b510bf614ebfad61c208aa31

    SHA256

    7edcc278f8a1d5ef41e449213bcb4adc76bfb031b0e89be79b55e3a57886a48d

    SHA512

    8078cac47ee53eae9bab304dd0c5810a1185d7f03634a6b778f7bb30033c8070de7ea9dcca23cf68c65551603db7e2203239d0bf939c61f10e585a3bfb4e5757

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84EXSCRK\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabE9D3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEA84.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b