Analysis

  • max time kernel
    138s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 02:22

General

  • Target

    2aa7551dd7229bf1cd74782c572f538e_JaffaCakes118.html

  • Size

    77KB

  • MD5

    2aa7551dd7229bf1cd74782c572f538e

  • SHA1

    965b1d25d09221db2ccce6918bee604dee09d1f5

  • SHA256

    c461be6694c644f045ae1136df78be20c346ca002f2ab97d6582a865c14d50cf

  • SHA512

    81ecf4abf720303d5f5bfddb4059ffafea99b5ff832529c21ab5267955da8f693645b7359f2926c669b2dfbaa0e72b64733b4820d0382b4bd528e6354cf74038

  • SSDEEP

    768:Zcd9QZBC7mOdMs/pC5I9nC4Si7NCc2G3Pd:gQZBCCOdz0IxCK+G3Pd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2aa7551dd7229bf1cd74782c572f538e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3032
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3032 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ab3f458a0242a43d6da23318502e687d

          SHA1

          fd670bd6383f715a724446995b3734c6347d3212

          SHA256

          f632b8800dd5085c7525d17326b4a48673d96c4acc2bb72ff3bcd16217a94841

          SHA512

          1832b14c39cc15713e19e616623e7ed3a663c02bd7e06bd4d3f6415241bdb4a6bf5be1ebce36b85a6d7fa5fc9e814eb223d63e6322baa999d72a559318b52182

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3e05998fda3d4cc63cc55542b0558af2

          SHA1

          3594737da440ca2bb36b78939ceda2a4b776afd5

          SHA256

          b99a032a1ddad5e1df5b04899830d7c15decd52fc85fa1c967c5ebb61b700fb9

          SHA512

          c61413c3de141fee0bfdb688a8ddaf61ee27d8cf4842c25d624db7dd2e69d0821262718bae043ae7884faff5a43756eb39c0c70c6246018a77c8aae4c4998df2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f192d09bf11d70674b19bd41dee96163

          SHA1

          dedf4dbb7b58ed779c66b2df3674d0082a4ca049

          SHA256

          4980c57a7f8c83136230741cc16bb61be37701a8d15a3d6447fbe944e2b8c96c

          SHA512

          ffa52dcff10f59f78858372541c46898d3cffde567300dc75d452f8e871fdaaaf8f89342888c4bdfc267e39b9f38e7d4ebe435133dcaa978f072bdc77d8dc879

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          63c0bd9257786f052894e4ab13bf4c46

          SHA1

          f50730371c28390ddb653be1f13672e0ccdd75e3

          SHA256

          8cae779d20a18b5385d52919f4aac7d0fa38d0fc7a1fdecc91bc7d0db0208902

          SHA512

          0c977e6acdf256b2fd2d2563470a20b769a02ed84f0b55d3053a3ae2c7d63b2e6da997cc8de5058ed187ffd424a7e7493eaa3fbc09bf27dc65e2241ab660051e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          116237790c0876081e1160ed4dbb1db7

          SHA1

          2f9ac4e283159d13b1e9645099f72d00f0644fb1

          SHA256

          367854fad5b0565310b8b1fa6b405c6db3e0968d03a7202e1301926ae536c538

          SHA512

          8f884c1e6d8d6ec97b5051ba60348a7d37fc24ea8df9937dbe843ffb41739f4d19ed11503b0a5ebab5706db766bcce82e6a1ef210bdc741799c1dfa4336c0558

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ebfb74a9c5055f6ef00855abccc80f3f

          SHA1

          1a99bcdf5031653bcf7d5bcc774022a08b55bef0

          SHA256

          3079d352c3173a34d70a806e9b709bcd7b31d1c9a70e18d93bae6f62b2362839

          SHA512

          6132410c46aa49e4be62165113fa0347463e8903e308817bd486ac38a42bdae4fd80036d155362536a0f176d8cd785b24b9d708c5909fb4c549990d7a99e4aaf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ffd377e0de130f89b2a04c8319a9eae2

          SHA1

          fae0453e144b441345a40cc66f9161243355d6a5

          SHA256

          e9e15283eb8ae2b882f960d6db88be553409f307788d04a723c5b353f31e9737

          SHA512

          f09eb6a235cd96c804ada22ad02f0c5910a850ce4b489852a9935c3c6f43f670121dbb2582df00fe7000c1e9a2c8c5749e1d56af5604d4ce4e800590d97d587e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3392934d72d60e9d4b585f8833b6e860

          SHA1

          97387e4299e9670582b303693458a732e6bf64a6

          SHA256

          7455123599a6ea010e7b469462c09f549774b4c25eafcdea4c37f28806168e09

          SHA512

          65a2073d946a09be02d4a79357ba30519255db1b612de3c0c571547096eccf5ade18344af7da410433ffb76d7b82f930dede8408a12bcccbf3ea56fe6834cdd6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b5af2ee21c3e9bb7b0e06de8f641e818

          SHA1

          b21cf7e50a7d51c6f07d8d865ae802354fd9bb13

          SHA256

          37383d4762c78c4ebc2eadf78ace6412dcff9b60e637152bd504de768e11da2a

          SHA512

          9c7d970f4ae22339709ac720bd2933acdb937cbb7af5f4cc6874b08e7e168ff0b55edcc28a5801403a478351e4f4e8d88c345a7b354d378ef2b180e386e6a6d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8c8f2fa86b581e4388c7c518883330b6

          SHA1

          81a87bc993dfa18874e09fb69db6deb714c00f9f

          SHA256

          0764cb2676cc7be561ca6a285bfa57603c8cf981d21f09359bbb7e329bc61bd2

          SHA512

          486b70e5da208de743c5a744ee1ab739375db8086db7492dbae4a5184be9f462ed08df3bc55ea0e6116cb71a548b93fa45828a1f7e3fd72272baf283bbeb3d8a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7fed5f9a792e08a04f4a1322c0b81e12

          SHA1

          a04bd099f7bd8daf87120350aad9f970ebcfb3ef

          SHA256

          e6225064f8a99482eb17c0fe4e00754cff22149b632eb56d254c9b68248c6ecd

          SHA512

          74480a38eb4a046b8f1bf2514ecdafda662194c6504f5cb70c76336e653c7d3e556391a2384ea7d0646d6941fcc7ccfbf52e6a133b1c80f54b8c678cab012c18

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          afd6672ee83c978e0e9dcb96814ec291

          SHA1

          54fcc1d5ef9a9bb17141439f7e172e261660a9ad

          SHA256

          b1cf7cb904a0e46f9d6cc138bfa435a6b0d1be29346e33300eaa10a6612a8c1b

          SHA512

          60e3b342d3b818878f644cc52d6a0a98de05562f294947e245e65b67fcb2fb1c2e2d717359a3b0c2f6259020e5702243eb6306228fbec801497d4b94edac2838

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9f18d97f37db79ae6acea099e253c72f

          SHA1

          d5a8ab753b781f48c11c2b4210d5b63f59ac17e2

          SHA256

          6cd54d1dc044a31ea22d1d0ab1a4c4d72b12b39f48b2dd1b92bd73357a842a73

          SHA512

          4efb5f083b55932a72306f461b67475048641cc59d51569e3c1fe38cf07c3be397def6a0d1f306b10b49ae6636e71eea7ed4995f5c78e4e9f1812d99160e5a9e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7f4acb608582b5486f7612968ddc951a

          SHA1

          bfd8743e11aa12e1eeb593317acb99bb6c1e4ad5

          SHA256

          7c7d90a8cb5f7cab819f5781db65abf0a7dfdf404a17fddafd814c31a81e4613

          SHA512

          8fb1ba468e5e6b6c72e4bdc22b0de5d8f4954914efa83ed5719e75e60c5aec13f5302561f7e7b27da43c013cc863fd0891d83558f957663d15cab8bc5c5c30bb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0dde106a255d766eb0240713a050f063

          SHA1

          a83237a3a455b917e92eac569211ab8cecf5f3dc

          SHA256

          836657a5cdf85a67f980c31daa1e63508b581b9670eb21a41e99fedbcd78a4db

          SHA512

          1b46dfc394c93fd2964a240c03a5dba955cbeeb7c3aa471476f0327cd74e04a88bf8dfc944fb2cb34d4e7bbf417aac7a2320860bebaac8775d9c0f2de012a7eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0e8e71e0323c26284a32621e0fd29cc6

          SHA1

          e6cf7ec18d57a1d4f0a38907cac5b02874d80c3e

          SHA256

          2d0952602486dcf5d11b8341ab128647d1368f4a75800315d63830427f93dcb1

          SHA512

          291c18f6e83f7e6d380c373f1c82c16c8617a481a658aedffc069fe2b1d7aed0a0ed3c0e6d4c2bb330bea46f7ba3a797feb7dc75473de9d30177ad606aeadc78

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          56f0ffc36787d55a27b027d35ce55294

          SHA1

          01c714eaef4a5d102abe4e80bf58fc0708c2d252

          SHA256

          cc7fbe7b2716f10e12eff1569abffb9744ee22e7d45e04958fee0bd9b9a949d6

          SHA512

          ac309573de677aea86456b175c0239853c2f2c7569be6e52f97119a747fd7f28d1e401621277c84c08729f0b40e097f67dbc4d192226716b5bdf016732034954

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d27bf456964905b6d6b730b451880e9d

          SHA1

          73cdf71b8792a92ee0d5d587eae5e45df11ac7f0

          SHA256

          e218e5eef42f9cb7f6cb3450ec2434ca8e36c063dfd9d84c0ca0ea44d6e1e13c

          SHA512

          ef8606200de749637234db339dc5f3f6f114fcc10b8a307dfbf044c28afeffa5a0627cfd8354f14ae5357b9d55896ca457671e4b8e78c537b05ff955b35d0b18

        • C:\Users\Admin\AppData\Local\Temp\Cab372A.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar37AA.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b