Analysis

  • max time kernel
    137s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09-07-2024 00:08

General

  • Target

    2e5237bd12bae9646b627a66be0f3d66_JaffaCakes118.html

  • Size

    6KB

  • MD5

    2e5237bd12bae9646b627a66be0f3d66

  • SHA1

    4c871a53c06ed78c23708c09bdd8dc965966989e

  • SHA256

    ce172b35654aed5d9242efde75904aadf347bd38666ff544bc60a225778bf46c

  • SHA512

    15714fde0f6fb753709503df29abdf5cba88ca0273d3f3652bdc26b4298a7211010f8270e4117e3cbb6b4f010d7da99d7eb129b95e980c96da24b27273dcb696

  • SSDEEP

    96:uzVs+ux7y/LLY1k9o84d12ef7CSTUQLcEZ7ru7f:csz7y/AYS/Vb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2e5237bd12bae9646b627a66be0f3d66_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2376
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2376 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2436

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8148e0fc7ccda027db28c07faef894c3

    SHA1

    ad1f82cbd5556c7d9a094e254f0bbd37814ff1d0

    SHA256

    f6ef03aec4c417dcc10e3328e8aebbfee72bfc0604c3dbfdece67400fdeb2a5e

    SHA512

    930fcce52b4141c0b38b8d906c6001b2db304ed639c0a3cef2e2ac8b220e03128e01eb160e690913e29de116974cca6ba378837f6b425de6b78f7b657b08aab0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdf3ac5edf88e33820f0fe8cc72d30b3

    SHA1

    2ba987408c98341acea0e84a3d7748efec3f8193

    SHA256

    a1097ad6d2fb2546c87cabec448a509d0ecedf959f1e4e8cf764fc9afc90f05e

    SHA512

    62d13e37d85274b6205ebebebe2e6d7f184cce331fad405422613ab99738de9947906b1ce19dbd54fb5e6de08220d487c518301a4cfb1b519b47f330b62a11c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbce36053e4748d9cdc0592c5ef34ab0

    SHA1

    f59f6faebc4c8d0fa439b86b8be5b40eca94745f

    SHA256

    23f5935a7f723af7635d12db4a2d3dff02fa7aa8c63f03028a020e02d247de67

    SHA512

    f7e795250b668555a2b59cd5b5f444358717abebece2f1716035ca54aa56e43d596a0de210ca1a53b96dc792c072368d9337816fab8dbd3210fc15986f2d00fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab6e8caaaaaaa554c5cda0296b492d90

    SHA1

    26406b69f400fd33ae2771cb29a584e4c62ae82e

    SHA256

    85df97e6c2cdffbd86f5a5c79b1b53567c845adc68cc0425b6718fb9f6cf4132

    SHA512

    7ea8c505581a6d00093cccb32f9ba14d65fa7e815ad4b11b68da89a239e3eaa676d33d541a133a42a9de595c42fc99405c2df7597187494eae348787c84dfc57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e32368c08f7cb20baa67a6edfe97ae21

    SHA1

    787b8427e4179dc0043b8f7c528b1678cfa0b609

    SHA256

    f4571c9cacf1903a4fc1d17bee2ff9bad454d650e4ab51d32c9f1105f5e7ec63

    SHA512

    6926ea8710b014718b5689c5cfea52ec85844db56aeeb510a4fffb6657c5e1f2922b90e9c9bc627fd0ba91687e4dd5a3759207c25b6101272e39bba3b4bdb5bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b76d818b04df45245351ed0c68ca345e

    SHA1

    381f2554f6706dc5aace08e51a5e2ccc7d201471

    SHA256

    0cb37938b9695d16f4784fcaa947d095744a89263afaf5606fcb9e336805cc5a

    SHA512

    f21f6df0602a7ea9a24fab3d4a6e17d66f13e1495f5ffd7f2e0d0773d82505377da7d839f5eae3f4ea079c57ec7f523d77ee1b17828f8d3e39ee42d428ee26ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0760e4d3f138b583a5a0b8afd4247b7

    SHA1

    1ce33051d5149de46a2dce462ccf24f97384a2eb

    SHA256

    5a2c1c99fc5c53d09b693a5754909eb94015493e47f013fa57cf41956a8db7c4

    SHA512

    e4547763c6d4be82e55757631d5d975943d1291f360782bda3906a8215d91d3bc1b7f808797bb27e959c22cba0909977c3d69b2087600704cf1396bb22dbdbc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c5db3a7aaa0d31b4f6ba726ab1cfa4a

    SHA1

    62d62f807b9cf18fde25274e5e7272043618d018

    SHA256

    c265262f30a116bd1be2c1c0ee602fc9f00ba7ab9b18a7cc231cf62f3beb405c

    SHA512

    d819a6075c098f45ebeabae93f301dc32d0e9249f0ff77fcd1261c9a7dbfc34c3a5b723987447579f72fcdce004b8a07604337cf8f7f36608b64f46f051c0d03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    138a483eca40c581c2f530ddaefe2bd6

    SHA1

    7aef14aa1e0871ade2d486869347df1f2848e3b9

    SHA256

    6d473ff3548035ba7c13353f3a920b343be89aeb3dc92d78afdf0cc1cedf7ba7

    SHA512

    1de6d177a0378f606bbaa443b991f87489cd886ab5f42279fb2c1d39bd1645fb8f9c59b574b3db0fb22d7f9f3bd35b45b850cd0478e29b328cd9bc3c9869b000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ecb2825b9ec0f02a02799b4ec74f57e

    SHA1

    03fe9b6ec6c1c297cec91beb26fa75a8f7ac32c3

    SHA256

    36991bf78a3313d46d57d846aa6b477fcfafc6648511bb1ff5b5fb4ac06f1d80

    SHA512

    e56f7d6cf0023503880cc72129e595fe231b5171f3a203cf74e8610133311082a8e4a0d6bbb4b88edd8d5be34c6773bb68eb77f3749a1d0b0e4a9da8768dd245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    defde571c8f743f7e364985e31c48b3d

    SHA1

    de472143c9f4f9025db1f6cec22a1978a0192ee8

    SHA256

    f0540bb30541f43b441c4d6e5f8845fa347dfe5dadb0d46a9c9db2ac1d57b46b

    SHA512

    704e5c646a7014b5f78cae1ac62a24e8709e17ee60c94a79514bcdeb759302baf7a22a829d8d63c3f0edd99bcfe6f537a9aaf18ceec5986b8fe3dc8fe622d31a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c42ff5b89e7db65d751a97bfc3a6c11d

    SHA1

    b87d99bc322b35a6a29ab3c8f104cda0302592cc

    SHA256

    1853bd96c6b6c018c22f68d61f6f62a13847b1ac09dc0dfe34d5e097cc08bdea

    SHA512

    c370803ccc8e9ece39f5b97e83d01b79480fbbbde4acd9b02cbfe7df38a2db0ab2037b31b3bb6195ff299e340e54d034106ae4300c13f40afa5196b305ba4721

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d08467df896d9f5cde67cfa1d8acb77

    SHA1

    1f62751ebf5599ae373192a96c54be83297430d7

    SHA256

    9fe9316ac267700dc2062d7eb51aa6635600b779571bb87d01981bd1d83973cd

    SHA512

    480178fe4040a440e268f9a0cff348823be57f8501e307f609625a3a1960cf745ee951804c36d637e8cff26e91ef38ee063c61409332e9c55ee7db1446943059

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85cd65e8f9a8ee8fd56ac0c5734bcc4d

    SHA1

    72211ce9c795be4f31629944e4c73d7f9bb9717f

    SHA256

    e54c5809a2a55b51dbe4b0b3b955718b856a9f0cea6b78b623f562bb2976f32a

    SHA512

    ef06265fb497aa243da5cc49008c6f0eb3ac2577f6add3bd6f79dacbcdc918e09dc353980d0e9dd682ad6519116ee7f367ae944728c680a91f8f21736f4b5d9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c5e66f33d19618cc876633b39c14407

    SHA1

    d250f04eb8144fe6c467d734dd12be956ed1286e

    SHA256

    b0570125e42a34a2cfcf161375bb3db01f61126250153e3fbf642cf1c64d1b57

    SHA512

    9021364db94fd1e25f7f17715549e6fa290427b6b684639352ccc6c63dfdf470c60397b9b9e6b74105499accbda6096e0ac6db285a265d695e50ac756d010647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    013d8b2ceb41ee7e8c62fccdfc9017e0

    SHA1

    cce22d506a08fa4510865417ce91ca04a9dfb6f8

    SHA256

    f6c9d259b61059fa269e0a965fca5bf59943c992d466e947706e03ee63381491

    SHA512

    5eadcfc0fbc688617b975788a9527b29624a47011fa468b38c02400230f947c7fc541187a076c7a2e2b81f01a9e33fd61ee4d18fc40020efb9c2ad8c9ae0ca54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b74288d5b90753c1407bc7be58c8aeb2

    SHA1

    aeb9c53d7881aaf270e951fdefc391d79d9d4089

    SHA256

    52252656bb375cb5c6ac9c2e359259ac7e3f331ab645ab7d5a6aa4c707a5151a

    SHA512

    1a17e69b51069da20503351af57d5fd756badbe5ce56b0c795c62aca69450147c9390c919533cff9ae69047ff7c528365f5845f949613a37589126376fc3e688

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68e4bac6479707758c20abeb79227e37

    SHA1

    7fb8b8440043812eee4c53f08171bb548bf644bd

    SHA256

    79e81499ece604af71edd0024501c60ae0db834507d9dfbee4e68893afae43bc

    SHA512

    fcab4ad15fdd68d3423c22c934a86d512ccfe79d6daedbd18f418de3586d6f56cb585eb7ed0e5e3091089858400cedd8672fdf982b3ac0ef2adee3807a8f1d2e

  • C:\Users\Admin\AppData\Local\Temp\Cab4396.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4437.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b