Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 07:46

General

  • Target

    27c801561a1f1d66c923e1fbd400fb1c_JaffaCakes118.html

  • Size

    238KB

  • MD5

    27c801561a1f1d66c923e1fbd400fb1c

  • SHA1

    5325dbbf03dbf889660918207e9a8f89b6093dec

  • SHA256

    ae1b4318c8b71504ef1e000e55d262222e6a17c0eb4985eaab4211f9d73da91e

  • SHA512

    998bf9156d970e12ea9b479db75a1124e4d9eaae516480835f5f0b84bf6a1bd16dc78d3d212ccedaac14d6d36592ef347fdc2dbc2999287dbffd69f1c5c67a80

  • SSDEEP

    1536:pbMjw2fMk1D3O9Pj2fcVNTHA9afLamw8llW6cZ5A4+4p:sG00LXlW6U

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\27c801561a1f1d66c923e1fbd400fb1c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:772 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0d632deacf4921b15422a1a46e1812d

    SHA1

    81a8093693f4d2f063b18af449a664f4df83393e

    SHA256

    4daf52fe0460a3b1e748384bdc7e26e9853a4d723660cfb98dfd92ab791e56a3

    SHA512

    726b29524a30ab35ac7277ce4b6f078e4f2b85d0662724c2d141e050064fc218bcda6fc3fbcb76425453dec8eafb801e47f8b68054611f283679e6d085df79c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1919816d46f76febad6dc6df92ac66d

    SHA1

    a9e404c9a1bcf8b41aaf9b5f5cd78d71eca9f0a1

    SHA256

    a2ee30205427c596d182ce178bba11b90a9cdeaeb4b149f1fb1b9df707c0ddf8

    SHA512

    e362e3331746f4159f0f7802dd1ad9c92a3cf3e405274075304c9c84af78377970ad8d1075dd95fb40cae0a3e79a8fd395b62d2ce3ad9190565d25570a32d6dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de0dbc3bc1fcc39b9d9d5d9f0b48119c

    SHA1

    b0eaa208183ef9259999aced239b3f807ee68aa7

    SHA256

    83c8f417e5a9aafb2495a20c5d7d2178495d3a9773e45c300f07c48b3d1d1be7

    SHA512

    5c007403724b942bb97e0232f762f3e649783bf1bb59aa08cb17c747b1a2f72d7575089445a1463c914bf4fc94c8af31bcf1ef7da6b0253d80aa65ad7e25b257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e48ec078a5295439ee967370381745e

    SHA1

    7495cc1f23cccdc3c1ab45058119f6ef4bc664ef

    SHA256

    29185065600a9619684f73b7893eec1e81a3a1fa3198cea6fafe822e0e9dc264

    SHA512

    efb62bddfced30eacef2ffb8d9fa539db9ea63fb654ae72c03fecd15959d4a2dc9dfcc9a9c203037cefa42a2a7aab3fb7da67bdefbd1a0e50f133766f2faa709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f601320bc00bfc8c5bf906d387c7e9fe

    SHA1

    21e3651a7fdd08d3bfdea763aa55273804dc2473

    SHA256

    6b1c413d07ac62f263d3fdfae509ed11b85095fc7372346dd27b0fb913566a38

    SHA512

    1720f00778b41ee79ea785a8caaf6c99463e12718238bb274b473572aa46c89f5010c01d9f5dffb611781855cb718000fcb241a15f0958d058522fe2cd449928

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29e323516e1a69daee0e4c3f785efb81

    SHA1

    7d217fea2162fe3853fedc655e244baa15a85a69

    SHA256

    395326596e6ca87529658d6efef4cc39099b7fd66f21a06aed7013499e06f968

    SHA512

    0cb8a76d7c146fec7b4c0be53f9845c472e7ecd749e86d421ba5de24128b003bff35ddb2871ba82a15ccfcaadffd7598c0f0e10f89d68f98d65e997b7ff117f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd8939a879e0ead766b863ceeb7e3f15

    SHA1

    a41b325802c366b7740ad1a877c3aed6941521a2

    SHA256

    8ec5d5bdf5d6077d389812f1de2f9e2d2a0d3dce802bc83083d719b2a12c9bd6

    SHA512

    18ed5a01072fff8484333091a72126204636464aba6f976310017a09e2abcc0465012ada75f3f6e41d74cfd5b62bf9bc84bfd66a2b33bf3e7c39864bf4a30fff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    285a2a7664bb7a6988592572cb9f790a

    SHA1

    92fa28be638b766a44b6620f4483b48013664e5c

    SHA256

    4def1693d125f7b6c33e937695ccab42e52c6c063b5a7b5f7e01b120cea90ea8

    SHA512

    93df0d7b19b3f84dc3062af30a51f03ee9c5a960a5fd5e22414e30103daa8436c7f9afbde7981891723694b743078e3065e46ab832999ed877033d007dcde856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8e0eab3fa4e0042ecc25678738cd280

    SHA1

    49a28a4705b62c0d747f53eee7c3bf42c1150d92

    SHA256

    2a8368bc195adebb26e0e24af79ab0ab5e3af8ec4d603e17cac62a9e549da753

    SHA512

    9ad022644dc6935bdfecd4ac07fdf521483ca8c0f9a72a8c59c9187bfa489095f8b2ea7ae964da0be46c9714b6daf2d910be1d262350825677243b2bee7fc88d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    656513410cc47d6b07d67ac591a2dfb0

    SHA1

    c0c6f05ee23dec98f63d4e597a904afd521b5ab6

    SHA256

    739e149681531a40933f50197c91f89a32176988ea2e6bc79dd3db63b6a0be44

    SHA512

    14b86ac14ba942a8d687498e8df4114d99be97983a1d9e00782bb49ceb96e5ff69fd8d6220aec204139f994c6287e107740d31930b093b7dd776c3175b3fd027

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d36aab99cdabb11f929324a427e64c31

    SHA1

    734a1747e97806734aecce3ff685fd992ac776fb

    SHA256

    2ca5963656751888e3a4fb5d92cee43a4aec8024343db89d69423b1ff97b5682

    SHA512

    68ac31967314e5102f51a361a4422ae157df19cde645d56b915bec16117462abe8c15d70eb3b4f4c71002ea61fa3647fb29b757506a6c3248ab54e78574ed241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfb09e287bbedc02ea99a7ec3eab22f5

    SHA1

    219965c4097ebb0949bca3ccbbbbbfe6bfefedc0

    SHA256

    e75430d4502aa885334c834b8e0b0fe55e94d91d70629ce6eba935f4228f3755

    SHA512

    efabd0f0e1764640d48cf3ad13670d4af7b985dd04aa3bff3c2958e06cd90d6b59580f6104af65be522ed015518433f8d979fc6055262f88beb969814cfad313

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    289c72f2f0f08fd450b307945883137c

    SHA1

    33a689f93024c36d529b2c48392d34a1f9061299

    SHA256

    e8162f8eec49e4077bb8047ff7836bab9f17bb382c5c9127d5bead1ca27b36e0

    SHA512

    59c773f75afa646415b6fabb9a8c2df911661099e842451b5854d9362eb277bad9cf278a3d696ca52085852bc7be6479bbccc5bf8a98eb8fdb78bb7ddc512a26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63598dcc06c52ebdc186d7fb09604b6b

    SHA1

    3afe1982e92e8d50171d18ba042cce548550d1d5

    SHA256

    d535ad2d7e265d05a0e75966c9f41cffffda0acadcec1a6a9c7c1c20433af141

    SHA512

    774ce6ddaf32929572a81d45685f9f994555a5f09b56c2324b3fa251d025071cd71b451ba9a9665d7f3a4993ce90d5da491053a97860cc5f453c426087eec2a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00a40e7c5678c577bf966c89abc828f3

    SHA1

    5bcf14dc20eb590e59fd32ce8719dfa6b444165f

    SHA256

    f5e93807d22757ea6a4e48e075fecee6a4d493921614f89a2a667632385aaa1c

    SHA512

    8bdd56521db9540ba2f25b99824ed836807651ac43a60689a3d9250878008dff4404ed8828b17e62896944db551004b88001b68499e0401db55473c0f58347ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6cf6d7d4a0507c5086e6b28456db093

    SHA1

    7766ecefb9bd557e976694d336267ea911511b8c

    SHA256

    af98462d250642b9de773e98bed95b33d89aefec97c594bc4f602b478a149624

    SHA512

    e134e9f1f86709ef2222d5a0c595b9024faa646d5ef8d64adc84404f3949540f57c605b3e67c8d3d5bc7fd55e4dc1934d1a35ed7501b6ba040331e7b13037ffc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fda110a63460991658ed4ba12f70f6f

    SHA1

    012d11316c11915e85fa0b00c34b2634b7dc8dcc

    SHA256

    89403f8201438bd58b55243f0d66037740a78d00a3f353274a32dda89d94facc

    SHA512

    110b773abe05284cdfc42915767471fa26474273921d22d5f2b07d99de09372d932ffc9b9da7bd945714fad88caf501a177b2c9cf80e9144918396fede8ed7f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db44f0f94ba7f5ea84b943631b00f9f7

    SHA1

    3520f4fda3abde066d31dbb148fcd900c575e326

    SHA256

    80ace88d08a3eddabc47d376046441d890268bc9a6bd456613bc6a2ec2027670

    SHA512

    db36bc11424676a6d7558be29f932f5ad63e5212a61367763b21e7c80dbe4e31328f3b66a040778a4a90ef59eba1ca139e572b1eb903104a70abf5fd46b971f8

  • C:\Users\Admin\AppData\Local\Temp\Cab874A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar874D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b