Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08-07-2024 08:02

General

  • Target

    2b93542d2c918960ecf659a6f1bde532_JaffaCakes118.html

  • Size

    9KB

  • MD5

    2b93542d2c918960ecf659a6f1bde532

  • SHA1

    8404ada4c3e67fc34f12ffc123f13b643a957a10

  • SHA256

    d376cbc703e63edbee36142cd9832bc3811cbae41ad0a9124e84dae8e625ac2b

  • SHA512

    7eee290b80a5705ad3faff4cfa68064642bc128738ab84cf8fbd8f0e0a27b78d22b95abfc77610e81e2daa2173a468b601a87d8dcdf0ce2e5b3dd086eb8e5fcb

  • SSDEEP

    192:S5jkTsZ3cX1pyyt799bjEONzBeeVcJv7J7J4ApKNXImIHjq:S5xRcX1pyyt7Pbjbfee843XF6jq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2b93542d2c918960ecf659a6f1bde532_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1620
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1620 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2683e2e82e322dd23f6ab2330c90626c

    SHA1

    ff5ef8e821b5ee7c885b3c055d2bd38c307dff93

    SHA256

    43ef60619845ae512c175b6c057d165245c97e4c2b907b0fbcb6f0dac227409f

    SHA512

    1f2ca0ad9d3d8326c3d4861624dc2884e9d15aa6bae29308517f578c863d81db6e99f2e960229699894d43fdceaa9112422332d0a7ee4ff5a7867b3a6c54c83a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8a69dfee78ee23dbeb4276c0b7f39917

    SHA1

    e2a3889655ba2998e0d70657c64b6f30ca8b1d09

    SHA256

    5ab67230cbdd67682ed6b27aa25c005f9da8e61a2b3345dc6971d262b9dfa4eb

    SHA512

    039523f6b1c744598af15f95ab5817ce262c1bb99c47c4b80f7f8a819c3eef1af416729132381642dc85af9797acfc53f3323a19d40113179bc9a2ffab03b664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2c078773c66bc00ba1a45c8785d0071e

    SHA1

    ea699bd3485f0fd3e2c3566bf7da266356618b40

    SHA256

    3cd46c6abd5b8d28b2262a045c7e27f7ce953dade79f4c72b35cc4adb4ff5ef2

    SHA512

    0447cfbe02251de56033c93999b490286916b78eba934562467db8c7da91ece3ec2bb14cf437e9de42442cdd1365b38aaa9784890c31155d92604a09a26bf39e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a0d1b570fc75883586b2aa844c545864

    SHA1

    9307656fef87a1231ed59d619407ed2ae7bb1131

    SHA256

    63aaf578d676cb2067b619010560cda0690b796c50615601dd8e949f76e9fa35

    SHA512

    879705b7188c3b3d2ae046daa93772fe11c5ecd9cd0aa2d223a5cc2d1d4a089beb50369386249b389eb9c75488096dbcfb91e5bc5e554cd63a217939c0a2949f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5a108e8506f0a2eebbb1dca7963a9925

    SHA1

    c1ef6def6ffafb9900c9aa8a9d56841dc24f985b

    SHA256

    1e92f472801b111261bf2d06921356921db7037c49993c988e6c682d8e3a1c0d

    SHA512

    cddd016142874f67973078e1ea977c90a1dee1b6cfea0d33dc09d4bdb8ceec2e76f903273154090583a2cb56613e1ed0939f27a95ebe66355230ac2ee6f638bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    274ca4672f467ff83bcbd37635ea9251

    SHA1

    52f6b402bc9f2cfb57a1d2f7e4cc4d4e1cdb4bde

    SHA256

    d0374c5137254660599392b7c593e08fdde83dec61f1d8b0d4f44be38f24a5a2

    SHA512

    73bcef63393d84b229cf13721c5706309cb4131f5d7b2b74fb086c8358f42d3b17da77fffa6490d67761675cbcce5e8e8400f9aee3944fa450bb076870375b1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9874187d98c6c4c2fe0f0bded783fc41

    SHA1

    116001f65705adb4e2d38853760889239a859184

    SHA256

    fa74a7454927cfe5832d2dbe6f8159c7de51a9a5ba1fa5a17eff869261f0b754

    SHA512

    c27a6ec5223f65c4d745e68246fac35e80558fb3b04d89c60bc8708b5d43fc754877717acdf370dd981289e5fa26dde8fff27de4931e07dbf452e02f4a3a83c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6498b1af06456650ead16584a688d2ae

    SHA1

    33a33a051e2df89fb0e96d973dbeed9ae3415f7d

    SHA256

    d688138c47dc54d1a9eb77c1276e75697067f5f81e2e9aa00f902ad243d1c5bb

    SHA512

    bbf8040e30ccea2c5194701f2093c38eed6b6c838bcde4e2a68af82a5b40967c144ebbdbb9708df34cc4c800647a426cfd76032f3e2fac6318063df3857bb0c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a1e4cb510f73c8729c7d1bda41ca8aa9

    SHA1

    eb11eea8a73463544d9f0d55808205e9d1467980

    SHA256

    52d9a6e1d5a2bdfe6a54dc3c99f8e593aa06b0ab1d3518cb0b5eadb93f51bd79

    SHA512

    febce3789aea4da30e770107b4639c1c6029828c6319286b2cfdfaff9679dfe1e6f64117d30ffe2c0b2a0f6f867f3f004517ea45c9054acb58d58bb5625e39d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e5651168601212f4332fd8c0cd394ef7

    SHA1

    1d4034a1e52f50b283957280f42eb9f5a55ffe44

    SHA256

    385288dc1a81071d3eca29211bbd170765fc18c3ca167690ffd473248c392969

    SHA512

    56411b8e1acb2f504dbeac9af26657477899a414b0eb4a4016b5174eddaf9e0d1cecf93f961b5391c39fa244220b9e9cc39e884f6d819317720fa512986bdfa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5d6f96ff0f6d739866a4a714ceab3aaa

    SHA1

    1d6da91f8cf60a6802cc7ef51a62fff5a380de2f

    SHA256

    669b4e20768bda0f18efb17739371468937d2b85ad03cec03a9eb47e0114ed59

    SHA512

    d2f612fee60f4af42d0e47608872d986d8898009553591267d7224f9633605dd52265bc43206fe2c3442a587349b3afcfa3accc51113501e3493d16d56698d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6da518a56a7eb14865e2fa594bc5c0bc

    SHA1

    1ebe3f1bd32bace2d89f0452538cf4fedb8c5300

    SHA256

    0613c580286f8ac11005a7571e145a67cd08d1ed8762312ef4c2912e126cd93b

    SHA512

    d31e887fb4bdce2ea34727b120b94e545c013af01d6b84d96dbf2a9671b7eed42dd648070b8869c328ecd1471eec8d6e189f9cd8fd8a06e1ccce843b793674c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    effc4c25baa6b6e605dd9a08f06fe59b

    SHA1

    475396b6e55b6cfeea770692c823f830904d8cbb

    SHA256

    fd559dd9f2b71d7a95e9ce88e1c0b24c4f49c3fcb79547a5d0b41ccb07aa3e40

    SHA512

    e55bc77afd4d447f0363f7d6fd74ddca7d13e9eff65d61f6f9d531ba2e725ac6dd000665695af32fc68515454909b244921685f8eefff0bf68b6bca7bd5e2eec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    39c4d4af2ecb2b4ce3984f2ca5610c54

    SHA1

    fa0ab2fa3ed51de88fe68756897751023684670b

    SHA256

    3523fbad56c3ce8e1fa282ad3ce374acacd892fbeebc4555c76debea870912ef

    SHA512

    e2c2f7ba95008747a32daf104d871cec9936463fd6ae1f9a2e505cc60ba99baf096f4142c46fd5c75296af810ae5d4682ec6126cbd83d330a0aa610f7f8f819a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ba25c86d5d192ee8b4e3b95bb9612819

    SHA1

    d0b48ff7fb549727ea2506a1c93abf4210d54b68

    SHA256

    28ec57c34325a3d9c05c974255143685eb21853926d1cd754e724dbf813787c9

    SHA512

    95123c6e0b4322c127dce4de2447e0da5a09c2298357a81b587dcf2a80e69968c77a812a31b080c99d9470749a8b5501dc2e35a1da74ca84c8c3290a83b44a3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3745e413553344cca1396e1800c2c5de

    SHA1

    885e12ce58ff6532bfee3403a383782f6e73edff

    SHA256

    ebc3398593a64243cbc70b2855618d7202de3651fd1972e2a54807fb0e3b09c4

    SHA512

    f4070f3a16706be5405e25208dfd3183174807483f180e3fa9ba8d307a3ee5c9d09c586b3017db49513dcda805aaffe2be87b723aa6209ad357e5f85f3b807ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b6b175299a9e8b00186be2794f2704c6

    SHA1

    c48489c7fbc7265fff8c07f255791bf689b0efe0

    SHA256

    ef6ad20e0d31be6a53fafc02af7a66006375e7cba39b3b3951f07b945558b6a3

    SHA512

    460b924d828b28bfd537b7bdc2ca706fdfb2a2c09e6f92b1c492e9611fc38bd84d1b2ccfb12b39edcfd14536cf557131720c8472718afcae0d9823fa525791c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1ffcdd09d94de7a126a3bc49c408c663

    SHA1

    d4c0b9580bf33df603fc73c22e5dcab645b5f6eb

    SHA256

    e66084bd740010beba14bb6a09c6cd240bdedef7698ee22c4a4432064ecfe3f4

    SHA512

    382e87e7440857891aaf96d44d9bd456bb575dd0a8537aebbf29c3ceab4dd29445271233716f3b5d608193274afa0a8ad648f2b0f7c642a95c08315c120115d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    14c0ed489bad03bc6e5b91487f35f1d7

    SHA1

    54e42df71ea976c7261b2b07723138bd9c4d552b

    SHA256

    7f3a3263949f998db12874d0ec1549579bd1ff0f0dd2e9ef317b7178ff6625f0

    SHA512

    24f77d007a6cda58c1788a74a6d8034f15357bded955465d2cb76b3b239003b266bec790cfba7ec6089ae786d23b1e9d106e207b39e94a24265ca098be50ad5c

  • C:\Users\Admin\AppData\Local\Temp\Cab984B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar991A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b