Analysis

  • max time kernel
    134s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    07/07/2024, 22:31

General

  • Target

    29ffca7fd90099a0e77efe841bd3a623_JaffaCakes118.html

  • Size

    9KB

  • MD5

    29ffca7fd90099a0e77efe841bd3a623

  • SHA1

    b640bf328fca58a53a79e66a55215bd0adb031fa

  • SHA256

    c6b024ff9118d740ec588b78c34f5dd65e8be74519cee23d0b6af45b3200f266

  • SHA512

    f6b25a9000e284e8c184d01649a0b25deb303d940fcb3bbdff93827c2c62ce2e46fd495e4c3f8d4d878d2c9cb0cd3aa3e629f982a909bd49c03886ce87f9d1d9

  • SSDEEP

    96:uzVs+ux79gLLY1k9o84d12ef7CSTUnGT/kmJpxKMhNtANtarYeQ9MolVHcEZ7rur:csz79gAYS/6SxXhNWNiFoPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29ffca7fd90099a0e77efe841bd3a623_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5628f1b22e2582dd5157247303dc985d

    SHA1

    009a085339727cf9d2153bbc5b577dd705e773fe

    SHA256

    2e8fea94f25a6704751f7d2c9e300b2973e0bcce3f6d03cc8c17e654264b4df0

    SHA512

    0953e648238123a0f47f193f768452083ee496becc6492c0bf97e5b6b7826e8620ab2a75d8345d5f44d497ca56c97ccb78d32f184a0cf2ad33d40c4458605f10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4271e317659642d910713a9d19623053

    SHA1

    3334a8d954d9bc7cb1218f6aa30ca66a4a26f71b

    SHA256

    156079a653095d4d42ef5ae3256e94c78b81c1b4af2eec040d17152067a0f04d

    SHA512

    5b9a9210e8003b3d667314bb8e29b7985e56aea724c93fb5b65fd9a1645f586ff2abf7a4131852690b049d4dcc0ff228527a5bb70d22d3dcfd146a8228533cce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    443a8a507ef019f1e34b47c8b25525cd

    SHA1

    0aa9816558bae169e686fbdec21247d7c2ec27da

    SHA256

    4a150b4397e87e9d48e2964d34687875620c012ffe19a3323aa9d689e926bd47

    SHA512

    2a7f10012973ae48542cf7fbf4b6128186daea31ae2f5e115873e63123c41e2ec53ec61a034ef87719d029a642dfac9c42acb2f14aec0ab955e4011f93951ad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7766ef09cd91ead18299f85e1e7e10b2

    SHA1

    afca6f6978b347c22ef88f22670bddb988681f15

    SHA256

    dc6c6a63badcd9ce9fc2e7e684e1c16f5d26c4363e67e4e2c2360483fcd97175

    SHA512

    ff007b361015d4619241ab07187adef7375846639ea46ce877d945c178f2e2ae88ce2058c84ad550d51c06538dc6bd1989dff20f2711c6ccd41b1e1effc3082c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbc7d936f8f4f1bd102d4d6ba0dd65f7

    SHA1

    23300338ea9845a2879ce60f12c44694c9304100

    SHA256

    e422cc5e918be1af5e39f2515191f9eb3d7c3d0c446f7637b21f4d5dad696e37

    SHA512

    9b9c0eba322e144112ac2e7200e4651f58bb4a8aec988d9ce33ef3f5d61954a93dac8f437b74ccc3f451a6ff666a9c4bd409fe2be1b8ea29fddc8e12b01416bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04b826cd8416327a27af1b70b65abd24

    SHA1

    d45353692db4dddd5269744a44b77a7db62cd626

    SHA256

    3bdfddfa731e525cc2f897e037bc6e07bd0e15a998dba40d951b6f911be4a42d

    SHA512

    d75123d8d66f6ad1d67de8510d924e0d44be0627c30b6b27e48775ea6d1ac221e5cf2af2cd4adf066c0fde69a85c53c5573a1882174ead8678846931f8e5d8e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54ff24b22389b8e1f16a0d76f343bff5

    SHA1

    24998d64ee927a0a2292a90a3679d41eb53de390

    SHA256

    1770e83658f09043c20e38bc2466be8b2417d3dc680f63a0ef3bcb516df5a628

    SHA512

    396529ea97e30ea01dbfd85dda7b1bae737c4877d0a621c62c0b55ae023a5278a741bd0047044e76c386d1fca5158bc76b0437cc50800f193868df8e9fa99aaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bed42d8c1360072da4bdf4eadfb701b2

    SHA1

    81e3f458193becd1d05f929986493e43099fadb3

    SHA256

    70c8615f4859fe59056462d91b2e6e78fe47ea6b4e047742ad402699a875b8a7

    SHA512

    a22cf7f3f2d3aa12e5f73ba4927bfc4eff76467691aff7cd87d816807e4a8662f64edcd573f021e7a3fffa41a648dfa2f36f0b69c719297c02f41ecfeed2f7fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3929aa06084acde1682f88072174032

    SHA1

    d803a0502bcbd9361f7cdc23648ffb731ed4d545

    SHA256

    297f7dc87586a343f8d634ecef5de289f91631c50e3837c3d3f1661cdeb56fdc

    SHA512

    275fab2fb08e444975933a66d608d86afa5d1e581be7ea6c8936b202d2eb52f1a656949d2f5c6f9df35e29afbe6ab0462c9aefe4e51e9cf400585343a011322d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5b2ef1799ab40d9d1e71d225ff58c28

    SHA1

    c5a9e6487519dc9d5783a73b89855399d947bb01

    SHA256

    4daf0d8ee5375018afdfea93e60289a8019d465fe9ee49ee94171160e0e75eb1

    SHA512

    0498e93067be5012521e5ebefcf993198e4bc186249b14d305e6e40804afec97e546b2269a19c1deea8bcb23b55b28f1bfa08e6428e5d987e60a8aa72acaeb1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb63be272ce993cd1413a20c94160b71

    SHA1

    e0cec785670f02186cd8fdf78ea6698b4873eac9

    SHA256

    0cd4b27ba99193d8ef7486ac9941337cb6be3394d7ef13fd1e7c7b3637636d2a

    SHA512

    ed4b409b842dc5e42f19300a09617830c3737dd22ed3bcc1fecb0898d6152f7195e2cd238e4024019bf5ce35a548d9f8e29f103ae701a203382bbf0db00be0e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0aa9a01bf0ee966cf9c9e344a98c0087

    SHA1

    389055e65aca59bfc48dd3712e9bd7b3273d28ab

    SHA256

    93cc2e01635aa080f613d1f42b50bca62cdb2dcd1787cbddc4b54b0f701db307

    SHA512

    905c50245956c294a96a6ae20946bcf9c7f147c0e6dd811bcb711202e6cbc92668dac89ed30b04336d8040d95fed2d8976575cee76306dc1ff401a00a340f408

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4575226f9732167b0cc637307e14a2ce

    SHA1

    5612c1b673c1caec7ce92909c21c8bf46f6d2d1f

    SHA256

    e7527b4556a3f47a6eda664b9316c0824656cc63dbb74a16af1831a7e5d4080a

    SHA512

    b4386c27ac3e6a2a0561b4eb4b18358292b3a9fa45a3056e5637b58141e9f4d4f53beb32c33982d09126368f4c8512bc44d53153462fb88250af63aa76c7b57e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0fdbda0359b82c33e35db21d54ae95f

    SHA1

    dbb6afc0db253d139a99e6eb13829af5a629a61e

    SHA256

    eb267dbe0564a812ceed29b7bea645cebd1c387fcf6355e52b45fd6d9ae2b9a2

    SHA512

    aff2b7e85f337663797caf171c0e010790929c89808a5918bf157cb5ee88b233ec53133a75051b859952fdf4cb957bdcd836146a265f35efb776a6621e3d4829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a1b27d1fea7daa282efd0e2d121507b

    SHA1

    a4cc199002fdaf8b2e3667c911ac32c37b453d69

    SHA256

    fd4de22adb45e55b743fef6bbbf2a8a627f62fc746a85304046046f842bc7d0e

    SHA512

    7292761752e10ca13a0ef3dd85adae1a2d7e66614ee06b49469fbb06c47e0771ec49a724cdf7ad2551ab5bf50fc853bfa0c1c19d124f48f8832adba853ddd412

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c242af627e78c02f795168c8ef0f521b

    SHA1

    fcb6480439a8a4893f26d7f708a3f0ba255d7f8e

    SHA256

    e28197de2fb7acc76fea39b1ef5812b99b66672d19a59e53568d393240786dff

    SHA512

    ec88f41e01074f224d9e717f8ed26d05539887d68994ca4021adec91c78b7cfcc8f4cf2df9afc723da353c548c48c2ecd01d09a3651db866ba435590e5984e5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b2841c294b4752a1360d02f0b1b00c1

    SHA1

    7f885ab879257ce6bee6ffd2013453f873ffa972

    SHA256

    bf113a75c978495a46a60d0b99730768a877cd2ace348a54015830a4c669437b

    SHA512

    455140761d28c41cf5a031f0facc2cad63f7a48fb2ea381a125775e35007a39d20e43af7a468f3a54ee358fe82165722c54d72724acfbe156142901035481bc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5796092fbef00613577eb9a7b1fee85d

    SHA1

    d3bb4df834c418d09415e32990b621d7c12a6d7e

    SHA256

    8b34a0d3d9905b692ac8ead09cdb81bc50626cd3bfe30649dccb4cd3e436cf22

    SHA512

    0e4d8633cf10a64ee5daaac9ba4c679387e19c84eda5026d41c2f484ccac9d90bd73c07cf75c55ad20f8821f882bc27aff51f78eac9ebff61f66d57d08682cdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc37d5deebe5b99b560ee68875c590a6

    SHA1

    a54c702a80828d88a0b9783be0e7c7ddd4129762

    SHA256

    55d9323fe9f21e52ed3fd945cd6274e5e780d347d58e162bcf656a4769174106

    SHA512

    8418c6123bdefb9503280e31759e1740898a46f44778fbb449759bf14687c6e5a81788bddda2609b5f0c0332ffda38853e1939de309ab3d2d791be3302a69866

  • C:\Users\Admin\AppData\Local\Temp\CabEAFE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEBBC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b