Analysis

  • max time kernel
    76s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09-07-2024 12:01

General

  • Target

    304b21edbdca5552ae24630a2c9a1b5d_JaffaCakes118.html

  • Size

    53KB

  • MD5

    304b21edbdca5552ae24630a2c9a1b5d

  • SHA1

    737be5f9b8148e70aa83a531674ba6bb5905572f

  • SHA256

    c39edd521969aef02e7fa1648e02e5cc81641ad84ccd88e7aee46da144877095

  • SHA512

    faa4396399e6d5e2061e150ae3b485415d187f53a878cc90b75b0d802d18d4e63e04f8d27995bb2e171f4327e2957fa9851b79e363ebf3447272919fae5ad37d

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUErunlY563Nj+q5VyvR0w2AzTICbbXoi/t9M/dNwIUEDmD2:CkgUiIakTqGivi+PyUErunlY563Nj+qT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\304b21edbdca5552ae24630a2c9a1b5d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2884
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17559bc0477ba5d7099b62fb39f4c155

    SHA1

    1ff53f2111a60e649c967c2d51647ade2fb46a3e

    SHA256

    f1862048b815bd5765ff2d8ebd28341bfc120b9227f6bebc498cf81764cd56a3

    SHA512

    318c4e917771d699ff2b5fc60edca69ee2fd0124d3d2c835aea8bbb51da1885a16f9ff1ee960c98afe7e74c20a28ebea616858a22e788fba88e020d8a341f07d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f42e58932070ff45499b3625645b4817

    SHA1

    fda7e7dfed9f9754012c925a26dd4b617611ddff

    SHA256

    fcdea47ad2e28f74eb447c9b430b89bf98d77160ee0000df39058a9380f33cb5

    SHA512

    b910b949b6f1336ceabea31598bcaccd064e78ccbbf2aaad8f187187182c5b7e1525f833d5e68df70f0d9268189d100e872e75958c8ae33a2a6173253896fa84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29e00f160b2fda13ed3c00dd5b987067

    SHA1

    fce9122d4846b59029b5c4dd7de9c5da1492ae6c

    SHA256

    8c2464845fb174a0cae8330dcdde883e9e0ea03013a21f801e1716a4681bf691

    SHA512

    c3a2c8a552ee7ee392b5f9dae783c7def94d5f4191fb311d512c469608cde4007247d0891e15e9c30738e26e89bb6caee7905dea6d25823f64e9aa87871a23d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    747990c95cd3bdc160a59bf2d81250a9

    SHA1

    91dd8fea7b04e8321ad8fa2f97266341bd6875b0

    SHA256

    730cb127851f328b56e23f05b3c83a93ced0e4764da8dd3c4445e91b418bf483

    SHA512

    890e47ef011622377d396cc68032ddcbd9d2cad46cc7a22ff52af13ed6f779dda958ee0b9bd7ec28b5d955bfaddda8b5e4d8629e70f0f7ba6beb6fc1cbbcc83b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4888b702fa8c2803ceb1736f2476a516

    SHA1

    25d9f8646bdd9b00557a5a3a8e16a8753e0cfcac

    SHA256

    53f3abb3d7b3070924e6ecf9a5a6988f4032743f3b6bdda1772b48ef6ccae598

    SHA512

    1f4e8b2082ed77d323c7a538b32839560a8cb45f1b5f7b1c8742c2047b5218121f0f8ec5e62cd76694c29f7cd19bc9fb07777526678c02dc82e081439fbf3dc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c04cbb051983326105774cf8565eddfa

    SHA1

    b24332377ee3c31c43614b3c5b00a68c9bd4422b

    SHA256

    9e300cdb3f86831b6ba36f7893f0233f34081d0ebdef006a720052a15ff0c487

    SHA512

    e5c4ea1d93b3eb8bcb76a7740df0d05b94fa126416bc61a067373c0b900da7b9fb66b31980daeeb381c5996c5bbc236a28f545641c27486e0f6dd0fb7ace62b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    692381e7db40b530c307589a049330d3

    SHA1

    f303407bc573bc1cbb62033a41330c856d5d49d5

    SHA256

    a7d98a3d859b8d494503ae8991ec04b009606bdd57d39204dd4a767a96d60830

    SHA512

    b6c0a7d0ad2e239f4e655910c13a25492c9cbb4ae5829ef5ea8bf8e6e5585d57e589000390073ca449bb6bb3c3fa104c21a8f87704f6318c9d609fbcb662d9ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbc7c734977afcd354e733cd68347a34

    SHA1

    92faa8d334f9c8e1c05124e57f08b9bd688ee2ab

    SHA256

    df95d67e755fc5649b5d7a4a5115c0f7d1ece34bd432cca9fe5358d88adae649

    SHA512

    2071a61ef4073784a75cb82b09e7b0e401b58c82e650cd619ba7dcc3b05174bd0a3faa11483109a59dc529d922fe04e4a68870f0ade234a5f0ae4435bbeb1f38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00fad2a51bc9df9522b7efb92ecf32ac

    SHA1

    c3753f9c0405292a8abd746d8f1354225eaeeef0

    SHA256

    d0ceef9c720bf9537be38dcfd84349818bd8350724e9c9202248220ab8624450

    SHA512

    1b2a29111d9622f269d1294a6f99f54a56f3fe4663f3f714caa7fbd1a07a0536e7af557821a7ff307332295c797d8b09b79bd086a02074664cd75b8f26c37b0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66a6b58d3aa69a659a68f89bf91ab01b

    SHA1

    842a3b198dc4ebceddb5f158c952524ed4728625

    SHA256

    b38b48351ddab74dd09b9a35b11957781ff25a301e7782df08a582c7c49665cf

    SHA512

    59110835a4f0e18cbdc96fceb05ec097110c614cadf749828484de52a4203bccb7fe93582e22072e34ee58383f4a7c0db07656a63a916e0201648761ff9bebb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f42eda46651320a0e53a2f580ca5718

    SHA1

    dd3a08945978f31b9378bd81c4df845e219b5e41

    SHA256

    2d7751a5f992e5507357a0083f43e085716802fc842ad37add9ff7fc58280cba

    SHA512

    c655727d8daad9460634db7648f294de2e6f393a5b0773bdf9ec86f1a9309412c360839193a08fac42ea4d40897fa874ebed38ca761b8b550e39d1cad580a9e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a28bc57adf94c1914279536f224d38d7

    SHA1

    f3f9ff357dc3bb90153dfda11341d563752d6c13

    SHA256

    9397da8e0482503f1622a052fed9012b0a68f223c51e0e3a635743c8c268c566

    SHA512

    a3375f0c70cc63a306e4a67576766caede4b84df76b961239b5ed03c90ad355d9e6daf3c5ea65010cbe2ff921597053fd0750abce22a9877f2b3084cb57d4cbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    134920587138e487d45ef5ea7b6d6a71

    SHA1

    b8bc6f72a7b2f5cb60df71e9c5ef37ec27e1ca55

    SHA256

    f3282e0b530f7664cebaa231e7708141ed23d4255a3561f6da71902dcb30337f

    SHA512

    abd1834cdd04870c5bd9877f43978465e38a64bdd515d05001d0b5d7da2b0067263a76277215917941ccb037ff87a64c0496738092e6e4ee9649cc3d5ac3a9df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bf4e6758e0420aa8baa42c0a2bfcd35

    SHA1

    2c03664361782273e99478736ef090588fef17df

    SHA256

    2439736856e23ace6464285d9477fe5972d55ea40823bd4d72e8af0f8705eac9

    SHA512

    2bb6fc9f35e7421a0a8218953798b93ff2d2b5153be6ebb0c22144d506d273b01010d88686d8a96c5e6a63f91c633fa5d501f9d01fd9acabcac370ea68a385db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e65d52f389957877f4daab147505793a

    SHA1

    5bdcd91d05ecdff97baa86416d199c244e710417

    SHA256

    e8be527a509672563dece0c5ba69dbdf680b9b0b9ecad5bfb90ca4027d35d2ae

    SHA512

    231845c0353a1dbaab2a1641998785377e8781a88795da60f9f2ec6948fcf9f24846159bda33b2cdb35be6057d10eb05c3c75125ddeaf2d7eff28f61649c117d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4a36939c6753c2a7e98a38cacd6d0cf

    SHA1

    44e90d3331dbfc07ebcf83840e9f62280e39de1c

    SHA256

    d477441c4ed8eeeac4873aaf1f1e015d6af87fe55a810f415e9fb38c324d9e6b

    SHA512

    5dc3691dd5898e941214e4ac6a6fdfbf98c5f8f8b0e9f071c47e96e7f87489cb75f56195d19f1e390472f6b69c44b8dbc947d1f684ee7d9ee0db8e7296034e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b296ba0cb2d3645af140ab5c8c293b5b

    SHA1

    340d126b02f81ac6a093332a282bf2fd2fe99ff7

    SHA256

    69966826e42be20f31e403b58726399733eb505073898b6f777f36d04834c444

    SHA512

    a6bfa8bdb346926556f9fd7154c46702d6b78d794dc976a0bf7e4bb61788a901d621010a831932db9be30ab0aad350d77c74aa5a2044df306ca9abf97adb2f69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f00f651cb933a15f4181e900d09efd5

    SHA1

    3558558fbaf52223e21d0e68a04b883023a3d880

    SHA256

    10340c8d7631763083a1891e6995369102360240250076926d922efb101ccd79

    SHA512

    0dba73a43e584dd808f9334f17fea4c84d8fcec0234ae25a569867d6bc5005ce28c92dcb0af41d588f440425e3880710b00828188c0162a49d9c4160146752ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df376ce32553d48c0f092f1887117a5a

    SHA1

    d85b12b852079a76160dee9cd068ba8a08cc08dc

    SHA256

    010e45f5235ea5724ba0190bdb19ec72cfd5bdf265e01b6746e4c1b17ea826ed

    SHA512

    5a3f0f59571b7f5fa2c5682661f57f13685b1eb0c680644412fe3572fe4b0c30294c4c6e5df940b36559755a13f49cbf82336834f24ffe2f44e517f32adc825b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NFAY0EOS\wt-logo[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab2D0C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2DBB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b