Analysis

  • max time kernel
    144s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 20:58

General

  • Target

    31f44a938c25d6ce20ebd39c4b558bdb_JaffaCakes118.html

  • Size

    55KB

  • MD5

    31f44a938c25d6ce20ebd39c4b558bdb

  • SHA1

    c6c5a87fbf16ea6ff6cdb3cfdc5e68c36182b6f3

  • SHA256

    476c8796b413f36664fe9683269f1e73bc6d647a53886e1553a0d29310e7cebc

  • SHA512

    3e39cbb5ebde3c772bfe751ee7436e6e05c50ed319bb1d7bb3046a825531ec2a5819d8febad3aaa449c1bac02b32a98f74e4ad23fe4d5597afbec00fddccf393

  • SSDEEP

    1536:gQZBCCOdB0IxCZH3GV+7dU0JhmT1SOx7Nzt79xvvAwi7Y11sx0CnkBizlPxlBRpz:gk2D0Ix8GV+7dU0JhmT1SOx7Nzt79xvA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\31f44a938c25d6ce20ebd39c4b558bdb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2808

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79557b11e3362a2100180e0d3fbf56e9

    SHA1

    20839abc16151c4e33cd2787acbc7dc24aa83a9b

    SHA256

    80c83ba6921aead79fe4fef34ec0aee512223c7670388bd9d2f47d7edb520ca8

    SHA512

    a59ecd3f9c0848900bfbddb3fb011710d2fd284669d195c46ca58c4074b8bab26902d3654fbc5c255fec9a145f8d07f23e634606f643185e1ac4e35dda6c6427

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2769816fa5d84c6ae046386b7cac812e

    SHA1

    d9b35e7e5a27ffb3db3e9c31c0b50de0edcadacd

    SHA256

    19d9a1a9dc09118e1f99514f9b4a874658b26dd0cfa2dfc86b721c547f729da9

    SHA512

    25b0c5bc82cc2c30880378d33d2aa6db909792916368cfe6a024274363a53f115b845fa6260a5b2bc5c7432ca3bb10baac58f5f3428e28dccfe20daac636d942

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78cf576da9e7f843cb895b8b851355b9

    SHA1

    c91bae6b7506f5c1e77298db21f0614dd5216a02

    SHA256

    d8a47d3e2c1a6f83b7e9f1b62a6ace520df7600dd9b2b9ecdc5ebc6bb8deccf8

    SHA512

    fdcea0534416dc28f59484296a267f728d4670c2980064a542920d799af285f7b08b9fecbe036da7148d5139f132f77eb557cbdda7a9652033d1365cd37c64f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0957214a2aae56ab55c21765b50627ad

    SHA1

    ffbebccd1e858aac67f07b5e64cc94a5099872eb

    SHA256

    a67ec444dc9a13332584355e2540d8a8ee92a7c64328ff1d487b5619bc1db94c

    SHA512

    df6d2189adc29e076ef5ce395fe1ad409590bea3213ed98b49b70d50720c098fc5083d9a6eb692f08535a7276903ae08ed18e97260a1d7ae8a04a1cfb9e0fb30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    048fd7dcdb42130e052e26bdff04f076

    SHA1

    abac1e0460398e4f14dff8433e514ac517dd6bcb

    SHA256

    6930ee9b463f568a8927bf701d93f05549db5240265c690b2196c4e3a3a89470

    SHA512

    7fc596971752fe0cf402e1d7b486fe9e3f7842fee296bccc95c3b8f2b49931b0309e6812d0c2f9a1b27517d0fd0215490ce3c599475c555c7019f918e24703ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cd37079d5d0409eebed3167dabe9f34

    SHA1

    59e4436c07ffaa2847437f8045bd3ac9b6cedec2

    SHA256

    a4cdbe49f34e1178a19c2553b62cc06a8120d848226b2f00a69086033e1b3830

    SHA512

    d257a1a1fd01c5d2c61c9e3aff52cf303aec4613205cff0caeabb4ba6a61e32e205dd598b33edc8369b8218107c7d89033cad9e45147e88ddb98c8ddd04a8027

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe914237c279b022714941a94270605d

    SHA1

    1af60593bcdf8c2a7c89d0a0c194831f78b7bba0

    SHA256

    2b4633da5d12a91770716c10648c8493bef50748821c91bb7ad92af127863ee5

    SHA512

    144126b9cf7b7c86d8a9031fe5228ce73336b1383b1ab71d4d9580e8ed7cd2e89fc56f2b7cb5efe6005d15807e8fb7fb38d4b53c7861ade73c4adde31f9d8ede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cabe20d552f8ba885c3c3249a16276f

    SHA1

    08e32799f19d8d23134c143134527775186282bc

    SHA256

    655548d6407b192c07f6411a8ac17e4108ef74e1c66fd69d680b6a25585fe356

    SHA512

    fe9dbe609da4ed3f02371ca7a8eb41e38ba1d3f66fcdb85836a9f4e8f7cb0b7deccf4d55280b5025074555fdb5b5830aa141bc39b0b338feb58763b7e053b75e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    214d7b5430faf1f6b2fa9d98b27b069b

    SHA1

    6b725283a10ccb7bda2b26ac93d5c06624507386

    SHA256

    2c963d345cdf2eecfc6e7a55f54f9a5c1222b232915347338b4f8011de928c58

    SHA512

    d393c3a771c7f1fe751d44824c73a7dc7d89ef3ba2a078bc30874cbd19a4d17a14742685d2093680c5a73291af5e318486f28fa7fc3d2dff7d7edd7cb9e0d6a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2765bd2f8912d6362426b6955b016bcb

    SHA1

    3892cab541ffe89f65c872c5eed81a0b23fe767d

    SHA256

    b9310f21327db7443f46764b2bc9e904eba3d61113d87479aedfc3bc47a1539a

    SHA512

    d420c45c3cd8d46ce70c8d55a4ca4b2b46735f6110f2c5b17761c5ca7b8c3a5713577bade458304c3167bd1f5916c401d5a85b3c94a5cffb0c5d61cfac50806a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fdb9a74d373ef45a8373fa68cdeab30

    SHA1

    85ef2fcca285282ace45dabb2a7b06f8f3551642

    SHA256

    5d39a83eff3aee98d55cb7f5024be288acfd7dceaa76323a506e521fb2e2854b

    SHA512

    51f43bdf3f1b514b1b756a8614d29b256d48765a0af15b14c1f9d1c5f1080516ede6ba73a6f25f5b772e9f113793dfee12f27a0003c34b69d3c6f9e1206115bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6774b2d122bb37a6cf19ce6585de1865

    SHA1

    76c6e778c3a50ad97b99328502635d51327e1779

    SHA256

    830dec20b52564d1568edc7994d38ca323224f7115cbe364f71d197a5f6249e6

    SHA512

    13ae557e752f0cf03010fb775c2faf24cccb3246d3854416efe3fd46b28593dfb00c2ec3bcc9b60bd009d69e0d3e1aa2b7eb3e39a646d3eb4d262a38619c335e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a92d1800a964477c7c33ea7f5d7e3f9

    SHA1

    7da81afa0b473461bff7a882901277e1b0fd8cb5

    SHA256

    493f2da194d95c7ceae196afec941d91ce886a3c0b5f68a4b08476d818dff613

    SHA512

    59b67e2bd849a83465bdf02ec7736963f5c3aba343fca000d64f543e66c92fb09cb0596592b3d7d173123266237c31ecac48d041d456a4e82cefc79559a24ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0323f1073443936a3f02aa750fe71bb

    SHA1

    efc3cfc4f84478b639b5feee6f5f54bb75e6ffe1

    SHA256

    ec1608ceb7ad7fed484d1cd3a15cca9b308173ecd1d8fee54e42d82295bec002

    SHA512

    0a68093477d7f3c92c71e7ce1dfb9d6586fbbc9bbe3744c4f606714eca338409b937bc23ab2fec01f227a39b8fc796dc08eab5579134095c006e402cd57b34c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c8d0bb33abb6e90222910ac48b3d036

    SHA1

    ca9ca89384f38564b140c5fb6435617a5c3014ad

    SHA256

    c8bc2f210ff24367be9e80beab14a027945ef0b7177f7ec164e9eec71df7e888

    SHA512

    8c2fb21fd6b7e82629f1722616a574c0b601fa220b26ae4f61428afbd8f2d1dde301dfa32cd0662ce7663223018753aa56cc75d58e62a455d2adc743d36bf6e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15177a051315c63e8d1f580a90bf77af

    SHA1

    1d05c28e6cfaed284483d308cada7aaf3c284c91

    SHA256

    ceae7e6c514ac7eaeaf220d6fd7b2d067d1ea48a7323575042f7ee31d4f830bc

    SHA512

    b315e9b5020af8bf2d3622c22fb6b66144286aa6b17531bd4d0ecf836ad9bf2a6a70eb7187ba604c7df725d73112d6b3c3825e22521fa9bb5c234d82918c889b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50e74d43521978a24e88aebb83e8a6e5

    SHA1

    6aea3c0dfeb61f79f47bb672d3cd37dea77a567d

    SHA256

    b5acfaa459fd59ba00b3de2b4ea5f04479a3d67fc316ca0f965dc996372c5a6f

    SHA512

    e8978ea6a606d8b7613a3a23d4bbe9531a05eebb748019a8da6c05ce7cf84632a21eaaa7dcdeb2462ae041b4950e045bc3c1ccde743f3763a8fc60983aeb7ff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01601d41c00df59318651a34a2e71fb9

    SHA1

    8010556462466814640e3fb1cfcc02e2c2ee28bf

    SHA256

    97ad69d79257ed6646b452f3fc2a29853b6f944b83cc081c4cefe86ee8d27cec

    SHA512

    629505e332bfcb05ececabf9f85d00dc20f4c5b20b0e41a705ce201869bfb3c975266be57b0b745829741852462dd0aa52109dd333f964fc3128a8e252522d2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbe25833cc2143701d0f7e3486f66cc4

    SHA1

    46183517486c12c342c1dc800882e0534f2b3a5d

    SHA256

    99b7fd91002f289ade5dc9decd2e07f7d28e33b817a3c5d9925fc6022aa00088

    SHA512

    03117dc4892acd339e88980b1019de0ddd88c0808d4ada82fe04923668432c788b003795cfc179901021470b803eae1f40055df273e5e20b734fd24b2688ab06

  • C:\Users\Admin\AppData\Local\Temp\Cab22CD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar22E0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b