Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09-07-2024 23:21

General

  • Target

    32677b7d504ce47743ac1b93e47d7b8b_JaffaCakes118.html

  • Size

    56KB

  • MD5

    32677b7d504ce47743ac1b93e47d7b8b

  • SHA1

    9073459d8e6c9a8d06ea04838a4f725ef1e3a36f

  • SHA256

    d63e78162f7db4c99622d64fc2bbf055af49501f443b16a89ec3b208c16c9c43

  • SHA512

    434f91dd0534856a62354e69a47f42915861a4cea45aa669445dd1381b3a037b23ca72ad681765fb9ff3e1bb94ba019024108797556aa3de1189fced8766453e

  • SSDEEP

    768:Zcd9QZBC7mOdMgHpC5I9nC430obKVi/HUo1Pd:gQZBCCOdr0IxC01x/t1Pd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\32677b7d504ce47743ac1b93e47d7b8b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7be4e1983a8a83592ac49a9c9e30577

    SHA1

    b23d64279a804bbb9cc257d4b560572fbae72032

    SHA256

    056ec6ced82b42d68298c22ad2353d0b7192da9ae6c72b48eaa8df49bddd8618

    SHA512

    a3b00c704b3c6548a7b6c7dfb33afd93a189ae943894f7dfe88b7638dafcc071866cb2a2eea16e5e78339b2acd04e96c8eda87b0d0a4c9406defa8697b1b28cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d532e8c6f42fd97d6049882d78fe4cfd

    SHA1

    64029b288cd3c9810051a373ff2c76aac42621fb

    SHA256

    822d1b49d7f23c639f9b713e12d4783db4955ae0469b3d344ba1dccda0482d9c

    SHA512

    37bf38fa0eacd3758a93b51c050c1fab93993f4c35cc06086f40d00d13a2f3fc86704a76bdcb41a987728d4f522afaaf172617c6aaedbdacca754d34391198ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    635564f2de1ef9b18bd76dd21278b3cd

    SHA1

    e96618d5e3c56e43e1b7b56e0ee986388d48ae33

    SHA256

    76353c942e58f10fbf59ffa3cb0f3093063a4ca99fe9629df492116ea2fbbbaa

    SHA512

    81c6886066a1d9228cc4ae3f03a5305f33b40a87573e14f9a5520b2ecf144b9ba780771e4579bf84e5e1377ce0cc0f5f4102caff92f2e04f6102c8b5a2b4b30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cce45bb26fd829d44dbf580f86176ac8

    SHA1

    14b6ffaea307f72e86e8126842005026387c1539

    SHA256

    3f9cd4bde9b5af378d0f6990caf569f0a05a599119486cfbf4fae4b4aef888ab

    SHA512

    ca27d27f2faaed40ec923fbe54d765e01ac104ab9fa17a5fddcb15ed2bc1b58cf20d2213b567defe0a4e776c260ef49c685ff4dcd35aa3bd79133fd822b647a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    479c172e37be9018c66df7e18252899b

    SHA1

    0a8cffe47e7254478d0137e0b88612cd846741d0

    SHA256

    e9bbfe75e981f5b6162214628163329ce9adc2cf2fbb9d5ae991816164582614

    SHA512

    01adbc5417522d20a458e46f51efe7ff13369e58104f2a149d7c88dd1d87da4f2b181b57fb8d122c82e83f2009c57881fa13056682b3e86398d15a2238053803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0bdf8c531b5028d3b5ecdde76324ae2

    SHA1

    4a6c674cfab17c3bed9f7f77fcf78d28ef56a506

    SHA256

    91ed9e999d22ee47184274d0e6efc080ab857da91c38f1a585fbbf5def9d8331

    SHA512

    246c413bb41707aaa2f35f2e68f02a171f3de7a9c7a6aadd8f499cd4844d4d3ad46d80f6b8955d38dc24e6994b36ec30d148513ba42b489fa652449388e5c1e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2969f807a42443477d368f904177b75a

    SHA1

    ca0ffc05e1823f1bcf1efb153de69509ac2be646

    SHA256

    fd6f645d57f6f8484f2eda5fcc2922612830f5a3feeaf78df83ae9ca19bfde66

    SHA512

    28ba9ee6e1af849e117bd72cb2bdc40f6677e7b9d9c0b42aad74818eafaac6578eaccf1cf3d43cd98524778a03426936393279b91f7c75ebcea5c64dd06b3ec1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72fadc4d05c9c40167aac71a7f492495

    SHA1

    e33498c029724daf0c940a72cace5b4b2c8415c4

    SHA256

    7606b1e33c7353acd7aa6fc539cb902ed96599ca52752ec49860d0858bb6521e

    SHA512

    c7c82d3e4dba8b43a9333ee515769ed89a0bb6f00d4f4ebfff1de58f1b350e34a831af3d82f59a11ca7389bc4605653bde3bacbea72efe90f6d4e7334da9fcd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2cded59e7923c0ecb855a1aa75ebd51

    SHA1

    00f9f66914ce0788398c1597eb99432f0120c752

    SHA256

    00c02b807f3faab7d9c094008e581c412a8b02759c728fa35722d190da48f807

    SHA512

    72be73aa2217b7e199f301a81989c45e83e35a724c8451ef61c7075f3bb8e9489520893b3466c38eb852eda92decae4b8f6283686da0c0aaee9f85b20f66bc9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8f537f64516d79e8f304fab9330e613

    SHA1

    a8dcea428a8e10daaa2b285328f545eae64edc1b

    SHA256

    c764cd1bd6a647b17ffebb96df6d4d6cef493faa6c40139969ba370c7f5b5712

    SHA512

    2f0e74a6f1e5583a39155cfd27ccf99ae15b9fdb99e3d7ee57e86f2688e22ca66da23fe8587fa117fac7f43e88b57a6796040e255dbf85544c8c6819ca181c72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd38148bdd9d27d8c8a10504ad70668f

    SHA1

    eb28c9b31d0efbb98dd636b9044f8ec236c10b8f

    SHA256

    06c346f13d3e6d2d4ae5c2fbbd8cb205337d81fc3f883b97a4313764869d824a

    SHA512

    c5e622b7c42c139721834078a9186fdb2daafe9bb2288a4c7f2c084949fc6d7101cf1305212deb3ebbd838c551f384e55099dbb291cc3a4babe600a340a873be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f33d425686c5a3efd0d85f676c0e2e35

    SHA1

    a5d0ec145d6903928c61835a013e49320c8baa18

    SHA256

    48120953d545c141b8095d1073650cc813d173eb21f2799c288043786fcf3828

    SHA512

    fbb111bed0cc9601b4af2f66267e90725467e9817e1d47138066b45cfaf60f5edd348314cbc3802e394f3393d239878a81035c8f13b2ee3a86806ab78c3ae7db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7777d663d83c9573e851275c84c9548f

    SHA1

    3caf70834c1144e71c9e7b23c521957f2f6dc086

    SHA256

    39cbb37859315429226074ed9dfc8d4bd3161248c93851b4caf2a16559ef08c0

    SHA512

    1d97813c1922504cc7c49cdc1371bf89b7a3007b117b3db56bb88b27704bf94746e92f7544eda38e37ff1f1e65dc0a1459a984180a3ef97565f364b705959be2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05def8cb52bdbb3761e5ca4be03156cb

    SHA1

    8f1d14919424248a335f34c99c6ed6ac7174a98e

    SHA256

    679d1fbbdd314f8327e135512f872630e5b06f3559b2fbb40cfb11c4b1050de2

    SHA512

    3687d6dac29b75bc96dd772f4c40989dad70a097c02c13df8b086ac1215f1da291031f34f87634367155a8da33a4af25ffe0c38067496dc2be206322bd2f426b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67f89409f894e78d0d7c2b1f83b4f64e

    SHA1

    1e91ffcaa2d4227917dffa6df600d74baf5a1866

    SHA256

    603992fe61d25856d89a0d956eb9a8f0b10decab68040608603f1af694bd8450

    SHA512

    5bb96fea22f1c42e9f767fbc75a4356781bce2fe759975df16d1169ae1ef2dfd555aec0eebaff2e386905963a901a54d5def57766e0b49af986ab58bf0ca6b06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    460ee6d591ab48e4361c5ac5dee587be

    SHA1

    513a6e402423e47b7272c66c374c250f6033fe29

    SHA256

    49c802709ca6e014e88f0c75ef8568a7723f2b5fd0a23044f4b372e86d71c184

    SHA512

    7b32dd04aca5eb60d590cc8a2285ddb242412b218fd2bbf15cde01137b692992808a8e5fee86b646e8fd885b38381b9faa8fed5f23bb2a84c17d9f795eea5464

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    589f4474083cccdd13f77e2e42890a1d

    SHA1

    8204e4cfebfdacf08e73ab53fdec53eeb11b3caa

    SHA256

    e32e3eb064879ce37a2b0f6517911953c48af73a502aae6f1466d5a201177ad4

    SHA512

    48807d1ebe51941ef716059c74695687ed5e24e04e0f1b98466c33663443d79730d44fd636fa9ac02b96fb1f1be6434b3b10f850e6cc479301d20f5014fc71aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93b2a1a9ddc62b589d3c92feb5d71ca1

    SHA1

    88594c43477f2c403e3c151af0efc93c5148f29a

    SHA256

    c1d8d49c22624fbeeec3a6ff2a76d56feb738cc1c312c5212cd5b4d27e3a688e

    SHA512

    1b8e33c6d41b7d224bf638e6cf7c0907973e92c443bb1ced0c7557f29ccdffc543149ae63c240a5753ff823a7f18eac9f09a70ed36e99d32a6caebd52150da5e

  • C:\Users\Admin\AppData\Local\Temp\Cab83C2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8481.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b