Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    08-07-2024 21:40

General

  • Target

    2de648e05b3b45886c6aeaae8e252e6d_JaffaCakes118.html

  • Size

    53KB

  • MD5

    2de648e05b3b45886c6aeaae8e252e6d

  • SHA1

    d93347481c097beed9a252aa7f99609594fcf816

  • SHA256

    13c7ddbf89b70403ca13deea2315182651d98d66651c2a48c57bd55e1ac25e81

  • SHA512

    4d79f8ba9483f4a4edfaa988fa46a95cbb0ac336ba2d0ec13bfe60b39fbcf7083bcfbcbde46bfe6d84c91e71e8dceaeaa001ee18115cca8aac45d4c76b4b070d

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUorunlYF63Nj+q5VyvR0w2AzTICbbAo+/t9M/dNwIUTDmDP:CkgUiIakTqGivi+PyUorunlYF63Nj+qC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2de648e05b3b45886c6aeaae8e252e6d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2692

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    531055b95165ba4a8b2e52bec93138a9

    SHA1

    be94d50af3998aa06067bdaf95831cd698726318

    SHA256

    af248f59683ff6710c260d95be0b316390e82c81dfeaf96b573a6110a243e7b8

    SHA512

    8a9867ed6e2a0d029ff0cccc3db77330a18ca7a77db5c7b4a9eb3a20ef60263a5b1c7dd5fa466fa6603c8777f52d2fbf42b4c24280fa3d4ed1605ce91c85ac58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7764985eda0c09bc33dbb42929b52afd

    SHA1

    8e6c6a3c28d75aa18326fe690de5420be70b0788

    SHA256

    dce64ea56a4e16bf16d57fb8075105f44bc9cd754b40c7cc1320d2079bd8e32a

    SHA512

    fd81b03cc1076f0d21c87de4465a4964e91358bb6f1b87ee69942c53f01112869cf0a72f65c6f9c00ee3f0da6f5712d55532048e44ad7908a569139009d6f789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e78480d9e17a88166cf533d7cb020d36

    SHA1

    2753820c7b191b2196999f33203b558b6d6d6059

    SHA256

    52aaafc362653c8384a1c3be4f297f6b8541420e08219f2c1d4a962f14eeaea2

    SHA512

    b995a57476c5af2555ad9f734eb3f29fe58f2ebdb29017deecd9100139117e0a1c90702c69e71a3ba7e33de552ef881b0fa0a1282ee454e214f1bb5b49c64e17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7ae2d4064de020d998ca292461d1cfb

    SHA1

    28daca2dd11af5c6ee4a93dc41f64b25c605bafe

    SHA256

    3dd2d871580dfea51dd6d60b975c1d4b31a3953fd44f3678c6782046eef60861

    SHA512

    c7cb396ff480b9e0ea31a106da029bfdfd89cb5a3e655407e64a106a0fd26f1d30c6103124e4672fa7a10243e743b840be9fa97ceee50b5d06f05604a0e6504e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42c6c105bb7e1d3b62b3d4ba0acccc1f

    SHA1

    222c2c127c49a7ed15013bfa8f2410d7f5427d44

    SHA256

    9464d3acacc0f0e164d0aac44e5c5ec5fdb7bfd9f34aca71403d9667f8cf608d

    SHA512

    0acaa60a2602ac6ff0dcff0f6183f986d099e8b75ca45eb0defca8ba588435f5b98aceabeb24a20eca7f00dc58a854c9989786ca0040df20061913caa13245dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58e63c58a42fe5aadeceb3685971c915

    SHA1

    e8b403d43fdd99a2ce6bbbe8578a02f9a4e89722

    SHA256

    b9026df18dc964f944acf19e484615a101cc5ef66accba6eb419b6573ccf8940

    SHA512

    c0023155c398c2113de3a4c13d0dd707a74584fe088e7b4afeba935d0106efa4bf74ac05f550e358feea8638efd92a9d1799d18b66f7ed8c92a1b14dbbc01d2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3adf9c3312df14d1663b6d60ee328506

    SHA1

    416e8647fa611a49667c681b1a57da85da256456

    SHA256

    56def9f93bf83f3c5bea2610a7fcec38670da948c08f1b71c9b6cab904f52c1b

    SHA512

    1c3897d8238f52b61d61f2b0fa4a3bdc29e9d64590d38c2d56b3971154d525f603d56c50525857d4a730b5ac8c024a9c9a8751eb121259f287ee1012aa7f654d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60e78058e5d09a7ddc04d5d2ed3581bd

    SHA1

    25cb11f4a9feea75a3c769884e5db91b257465a7

    SHA256

    6f97c38bac2eacba39a659a5e9064c7fa181ecb24e08ab43cd516a8144a47a70

    SHA512

    3f28d2a95e13f95ea3f1220c5f61b77548430a558567f48b688425e5c4f5d4c8c010c704c00c4c8d3d072ef940dd5493cdbd8b682a8f9702068cf4140aefb482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b7863696c47946214b5f5a4a7a3b9c8

    SHA1

    c50b9089716959d71250705a51358956a0bf15ed

    SHA256

    edeece368504669b9d0a1d750dcbc6ef7276c4d371e61951d729123e73ed7a7d

    SHA512

    8b3d005fbc075aded27b9a200a393ed61c1405435e565966e134344f5498bb735c6d073957f1673525bee2e87decb91586f069072e02372057084185d58850ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc710c5ecd5e456b9ef82c3c7cad1609

    SHA1

    362097ab98e98f6f6f41a65dd67c471f58732ad3

    SHA256

    e21d4048597a95dee384b3b4895ee1f65bce3402e6609232be89821169482fe3

    SHA512

    deb8f71a48ca80a1993042fefe0dea37b249ac54ab1e4b4eb2f99f75733ebf83ad7ca450c4a57c20713699d53e6512f8037f3789739b2fdd2f6b9031f8d3e082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6bfa83f33028bc8324898912f40316f

    SHA1

    4ec7095be71bcd547e27251b12c0a6d7fa355017

    SHA256

    3f6461dcca5d49999a104eed6880eeac3feb30ebcef61240ddc707905a756d0a

    SHA512

    e7f2a09bf2cb295bd79c4a5029682e2b932ede7a70ccced2a30640a21b9a3475e3a72ec5ded736890c0a6fcf3c9dd76dff4df5d8f7cf577f2df420248f36d3d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a803a11fbbd560a5ef06de93fb3be4a3

    SHA1

    25511a6b9bf54332f50812bc4cd6818a1db64549

    SHA256

    739915b03683ea251afb44b063698fc249c8a133ab698401169d3d7b44357ee0

    SHA512

    18632c918515536efb13ea419bfc63ecac7002a5e549810677c45f2551fe87225bcadd09029571d4bb75a87a1147a6ed20ba0de66f5b90758bdf236249321103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b78ac3f6d89d84a040026a78f5228032

    SHA1

    4ae11890bb4922e9d6dc9dc9db1839510502a311

    SHA256

    d07c8ce3518fee940e8ff9341a034aae0ce89f23fc553174d97be71cc54bbaeb

    SHA512

    670df90314b4839da4e8dcbdc2d4a8970ca51b451b49b52bf54adf3464d8813ca88a5de763a4bda9fe87fb2f38ebc5b82b1e2c7b20276b9923bd7c728e06a40e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    044dfae1ecf8a29a8284b8d07978e2f5

    SHA1

    67e88c915d2813a300dfa08a64266b341c94bfbc

    SHA256

    6599aaa76f332d1ce89a5872b30045f9ac5cf1ad3ab39452c52248ff93fa28b6

    SHA512

    67d7198cc15448a21f3ce67ef5bf8b6eaa4b371f1be81a458e0261326912ad578c00ee6cd93c9bf601f102674cc00661d3ea36f2e5243ab13dd25a1e7b0c7968

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5467fc22495c5987efc046f85ac16dd5

    SHA1

    48a1aa9d16215c51f10ff620e5f71c5077e91d52

    SHA256

    97e7141d1aa08e54b24f2686d727f0939fbef891ec7463936ef0c414016aaf05

    SHA512

    4dbfd80cff22661afa49c1667ce0d20eeafe09a2528946be7cd3b38fe87020c27cc315efa3e9c8475ace3da994ff228697149e6bcd0f14dfd7e051b29533a08b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    638a8dba78e4918bd0515d667f26f4ab

    SHA1

    4776dec6cc4fe4599f02b465bb3c92bf04183ac8

    SHA256

    3403b4230082e9f5910e2fd355da11cf419d15a04bf98a2f1dd28ec17b96f612

    SHA512

    8cb79b430deef1f321b1e89c25fb4122edf2a6abc7e2c3154a37a298c9c0dc5c3f474e877b2228b26fef11150af471a4f1df4a894f012b69878b9c90760c2471

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc366070d47a4d35c0bf6c8b7a4bd274

    SHA1

    6cdb4153556b336db9804bea562f715e4e441a36

    SHA256

    20d04452b28f791d7651d295166bd69988d6a904b7133e16704db0504992449e

    SHA512

    d4b54a2ba24a76082541373dabaf0559f3360afd946807ed13917b370cb734f86883a991c46d1282ce5c18a5b0d8dcb3bafb39368226535fc636e00989f6f5d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dc4c8dedd27aedf785a18e47561bd73

    SHA1

    7554658c6e22a3f0fab84ecac72e499c574915d7

    SHA256

    7faec68347108f8ae54fae78f225b2b58abc861188346e08426880fe04b77c70

    SHA512

    c178895cecaab427e46c2aa0d9bb88e4d82a9b02b6f9ace466d291610457e2f0832c6fa6276ffce1194e07a992630ef4e85f7c711ed89f69edef41b805198797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24ca7cce2cda892005acf866a61f90a4

    SHA1

    8d046a0b5d9622f303580e208b3405f3af60e995

    SHA256

    b2d2d60a29a6f104f8252b19447c56a0830e60ac8577d75e303df628133512ae

    SHA512

    77c9a1cd1af19bedd0052c5d28924340275d04acdfcb8933f72d198feec11fd6f3f64f7eaaa187dd9bfb83bb916e14724bb6c21afee59149679b79160c5fe9ed

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KJ834MBR\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabC6FA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC75B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b