Analysis

  • max time kernel
    66s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09-07-2024 10:33

General

  • Target

    3007d290272726a5ee7696c0308b8662_JaffaCakes118.html

  • Size

    9KB

  • MD5

    3007d290272726a5ee7696c0308b8662

  • SHA1

    bf15071d33d33b6a26397c472e29afb112a0670f

  • SHA256

    cf67d457e47f46193a91a1e358f4b8d441ae54f0867dff1ffa06aee4adfdc158

  • SHA512

    9ff5d016f131cc7999c5a4a526513583e9a97bac2b67d03ee3833d8e36f4a2b1f5528ede7ac172420bd2598267000ed66f728d9333650db62dee1fb597f62faf

  • SSDEEP

    96:uzVs+ux713LLY1k9o84d12ef7CSTUHGT/kQhpUlVHcEZ7ru7f:csz713AYS/i+UPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3007d290272726a5ee7696c0308b8662_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2236

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7358276e04c7350403c2dde15446276

    SHA1

    bd484efe5155820ab00230b5153bf86b77a2e754

    SHA256

    9d9ec0921ff3166d469e2e0a0a65bab37cb61ade61be7d92b86e7f2f96c31214

    SHA512

    e26afc1638e18e84d62e21447086ce18f45e19ce704340fd5fbdf3a42213338d4f8568fa81f8c4670e2458532207323801a47f58ecb1c33aafb6a3ac68efbab2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d26263d94e9c8d068a0f52732eb2f38e

    SHA1

    c81ae5af88c68e637b50c89043a7c691f55d0cdd

    SHA256

    ecfea1f2a10c118468692796d7edbb0ed624c0a2882adce9fb47f1575a128697

    SHA512

    e602c8031c647e1d381228264c67a8dffbb8252cc466c50af92664083002ce97173177c58ca11927231d1cf4cc9c643037c2e3881c13d988e2b6c2917e22139f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ea39e0407da251fc9860f4a2c25b52f

    SHA1

    0ea0fed705b44f21e10e2ad6240d87a0b3146b54

    SHA256

    0ffa56c4726b459dc57992530ca7267145e36aa43ca8da54460a0535841ac992

    SHA512

    9a7c8b0549695f6e22cb20a839860c64486e2c4be879d4bdb05fa6f362d125aa509d163de253292f166e5d64ef0f070e509db7d87887eed95fbc0200716cfa7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0718efcb1d96cf54ddcee9eab197213a

    SHA1

    3523cfa7f5cb53da884649db63ec5e1a96b34d37

    SHA256

    87274d9241670b5e4d11a3ca9ed3544cbddd203d1bf6725a6edebf542d5866c9

    SHA512

    329e2682927b289df084dcbf626780c595510bcfb29a66853ee1a80ad9507eea569d5df14fca21ccbbea2638c4ebe28622227a3e0ef1e39e01735e4a1f28fa29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3074d0da46a6cbd62f7bfa6966402647

    SHA1

    e581e1fc3a93e266099392bca2563b84c6644a44

    SHA256

    8bbb7b452b7b91474328ffb211cff086ec392e4cb8116f614e0161da9f8f80b0

    SHA512

    c33ad1ed70e6ff80a25b7ca20a4c83c99c96b145b606828ad5085af4dc0129e94017718dbfcbda2ae417181f6f7755e10aad66706a67c743205ad9a4342c3f44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dc4430f5cd7da784c1233e9e3e5a913

    SHA1

    3961f465cd7a0432f54d0984fdc512b389948671

    SHA256

    d28f786ef287d30cff62045ca8522fd08ec7e99bdac588fa774a8cb830890743

    SHA512

    881eca771834cad3a81608ca1c959b21cf365938244a5726043219c237e023f56209314748b18cc511932cb31f7a5bb2b6fd5433a2c41adc261e20f74da93a9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b81d01c73054d7eb64a860bd35aff0e6

    SHA1

    65d59ebd61e5803516dbb32f344c3104511b5abf

    SHA256

    50d00c9b0d31d9ced83fbc52d44a8cfa9d163c808849cee2ee77f72cd08319d8

    SHA512

    64c92088546af449dfd827f390e747c3f123f252abe02f5166bc777d013c68816350f6cc6355fe7e92f84ad75385419334fc97ce5f757350472d0e4ea1c922a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbc06664063a856a5bc9dd5bea74f131

    SHA1

    50ae2846c328bca952dddbf22b7bf0dd80633152

    SHA256

    edcf4022b9c181390368cd5bd380b53c2c702c62f93c0ad88e4e2573131513b0

    SHA512

    37d8fba37ccbf322cbbca60d4e41b48cf98ae29074721735a8db006f2e5c2df3351cdf52c17258e35b8997561a07200978cb1a88df152ab9f729924560515bc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ad95ec3eb3c1ae3de232a202a00f294

    SHA1

    b13a95a8da8aee3eaae48443c3b548f8c2017cc7

    SHA256

    a4ee4820abe7597388cefe8da41475948d1e6eb0a34cd4968e86a839ff286fbf

    SHA512

    593fbb96519109e031b267de4312cd7bb6391f26c422d416d102e0ddfdd14dcd3c836d3543fcabca1e3912d59a6d78fcdc65b9a40438bc1145718777dbe82e8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9fed79482350174c060013c057eb90e

    SHA1

    1c958a46a32453b6953c74a4aea46c38d4c25452

    SHA256

    9a6f6c581d4ff2b414855a72d71d85fc5d20c7ff61b2329c80c0291b13e9f3df

    SHA512

    2662b003a366e9c14b10dcbbb8486c438a4221f1c6077db67cf7e6f7c99086783ddf30961e97983750e41295bd88da1ae281be67d7c83e37b06461e9cadad6e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7be3d49acea2e5589b230ffd115f855a

    SHA1

    b80cdd587318633efeb4da09ea386d262b860499

    SHA256

    f3081ae955f28a82cab7a484fde80d2ffdf031bdb360dbb828de7944f8b629fc

    SHA512

    218ad0e209dfe84fe3aa78922e3c00abf499a9bad0eb8ae0cff17843510737814ae44608778148cf47cdc011a8c80bc9784149b55f23466514806b6426a22a95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d6e47629b7589bc41ee471ea3b6a1e0

    SHA1

    a52ab3637db0c5f5425d3f46049a8d393be14889

    SHA256

    dd325342d83d73d44e79763770c0a7c5a4bf1309dc1a9c7756f9ff70fe0f5dbd

    SHA512

    a09d456c3cbb88d3a5bfc04ce419f826ff593a0cc45b097c9127caf4058a6728f3700222b9e4467c3b5b3f39151255e299f2a2b07f147326b8a125a3392e3c28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bc1713ffa6382e38b7ba67cd39c3cff

    SHA1

    787fa3e7242e4b484da5fd9e38c3877c6ff4c25c

    SHA256

    b43b9f20b97bf3df8d91f7faa215ad75974a314530d621085c3e78431b1b6127

    SHA512

    bf759d3993310630f1b6f808084515f451528a059de71f48363a5ad3ee8ed9c79fe66a07f1a12ac91af7c46638900e386040d30fca8c58510e6a82325f9957de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a529d4db21fd094bd88a4721add1ef49

    SHA1

    c2e66d1e5ef7a2fb9774b7c6e6d32d998b393c51

    SHA256

    a36e7cb31547391225540a6b791ddcd23e5acdb58dee734d82183ccaa43d7ade

    SHA512

    f262e6bb330d9900d27cd7570039fe1850810a0a88840ec3b5b052753fe383bdfbbd812e2bd7d4e6f7ec43f11e6974b7fc69704345a5ffa654d1f33180778606

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96ba82cb14af499475828fa4e3498559

    SHA1

    a3ded46d9d60fb181f18f64f62485cb4d8781649

    SHA256

    f7a163c3d3bb45adfffc705e7dee121c655723e06e0ac4181fe1f1eb91d860e1

    SHA512

    31bebb3b1cb60ad8f0884812e8344283ce4db8ad27345083803aa9cb91179bd7152f6e921232b5f0cf20a0b851cbef69c09114aaadf5baf3f6e0b8f09e38374a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b79a02eb19943ab4a233d77844d290e

    SHA1

    35bd8a566be60f4888c6f0b46a31f843590af35d

    SHA256

    4d5b13eb71b8509dbe5e64b352348fb61cd57ead836fbbd0a9037a152c8aac82

    SHA512

    a82e431541d5b80d756a57d955fd11a053f8f4aa08f4ae47ec6490137653abbf1bb7106b5c09110782e1ab61f13f1d2b48182868c50dc4162377fbb70988c96f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    900968fde9be74609265ffabb105d203

    SHA1

    683d82dcd3579647e711efd72250d5e61744ce0b

    SHA256

    ed14c24c82104045f124f67613683f90570f45635933ad7942708d02e71394bc

    SHA512

    62a25778a8dbd76891946c212041570b7ee0667a71a7a5c4053dc37fd3d4b192af31f011e553cc430ad46fcbd3b827b14184ba391ccad2e7540eee3dc68d487c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a8f8327a8876603bdc12df130471501

    SHA1

    9dad070188fbb4ca8c760206d93a74b760eb5f59

    SHA256

    555d1c60eeb56c4ac83794ee11070a59aa778cb44faa6d8d6691199cb5d2659b

    SHA512

    3f6d08767410f6b044045345530cb0ee8420833a23aabe3bbf78dca0dbed951959ada6db87633035bca3aab0bfdcfa4869fdcf12dc42199559d030a6ec4e9f4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbff76b7f269ff4d6c7130e54a5acf40

    SHA1

    b83169ac44acc37059395b1614b82341b3fae0fc

    SHA256

    edbffa32bf2a612b7b2fdda4fe2d0b5c56fa39f5b67b7bac6c57f399c38837a4

    SHA512

    f5015b30b1cecf1a81a29b848bb4901db34346da2c979f2fd2b923e9d672ae6895137d9434fe2d9956d90fb27056b2092aa94b6ce0b6792b472bbce1ee1fb044

  • C:\Users\Admin\AppData\Local\Temp\Cab2F9B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2FFC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b