Analysis

  • max time kernel
    117s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10-07-2024 21:30

General

  • Target

    36765596c36b7b2a97c526ab639c4529_JaffaCakes118.html

  • Size

    12KB

  • MD5

    36765596c36b7b2a97c526ab639c4529

  • SHA1

    31308702e861fd7fce1703465d74147366052199

  • SHA256

    1c205151561750e18287d280f9747b8f010f2299d42cbe3f270403e9e4196f48

  • SHA512

    de3beb8ff6daff91a47b0ff9c46eb66d02c86941377e1b4bd14f845f29fca0b1be5b56b49a2a09dd802c8d897931de88fc73f858698c9dcc12f93bce9e806adf

  • SSDEEP

    192:2VwlIsr0KXyJxVC4N5+D8k/w1wvqygB/Z3n1wWda01JauBuLbdU8d:swlIc0V/j+V/gcgB/Z3n1wWda0JaguLZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36765596c36b7b2a97c526ab639c4529_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2492
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2492 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68fad4e4a07dd1bf9d7a14633949410e

    SHA1

    2955da52f70079ccdb6a2467e2ba853e13fd8ff2

    SHA256

    6f4c8d341d9f45d8f8d7f1a7a4a624388493b2bdb5739152a38dde3f7967ce36

    SHA512

    d74cb99b3484905ea658b41fbab7ce4cceb40ed1f0f069318e8415af2fc43820218b15aa447f8698031bad5d5cc15dd1b084a5b7cc150f909e9de76c1d3df95c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8061471deb69aec030d9510ee748995

    SHA1

    f3dfbb6499d1de6112d84b237f848c6e626a25a5

    SHA256

    433cf3eaad04951aa049c1b7eaec1b05d6296bb18e6009288d53c72703e68f46

    SHA512

    f1f18df8db75867b7972935b5ad28aff47845d6dc36cb9672c575e085d6c6e37297d492dca05af20835d31fa2e90488431c2ddeab896e74eca2630e02461f7c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1186866746beb3968da717b17ebde6ae

    SHA1

    063486af3a4f9dbb42f84b88c546d509eb172b5d

    SHA256

    a741dee8b531cda74cbcc526ba099afb44186c5b5d7cbf35565114554d3d3142

    SHA512

    07c4b564d1a77cf68b55108abc51378901c401fb959d4f401fde7bf940f8dbd2cda5197b2ed015e60d453fd7d71fa508c773f6f151b00725c41221ee5b400e75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a474511065ccfc1a5abdbcf824061c6

    SHA1

    818f82e85262bdbf16063361e7205ce435552251

    SHA256

    9d3f1e519fc79c449547d4664a92def461612cdea1206fcab29fb7ba34279db2

    SHA512

    d2194d2b6232652a4c8fec15271c27758b1fe655aec2c2949f4ed5dce8f2fae0ca79da309db1dca7b04c6d4b4302c49394282aa3f807c750a072005b1ed879d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb9d9aa63b45c46f5931109501605ae3

    SHA1

    977d18814c67f4242c40245a3657a45a2c490713

    SHA256

    98310eb5479b450fa6656be0425c07164c1fbb0c6ac82584d3905c9bec3e3e82

    SHA512

    1305c3e0e710304812a9ac908953975a037d74c267044edeafc6a04f64dc6181033b2cad950dc6711994c15438a8fae5b9ae5dcac69af47f869137d2b009bead

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46d69de9b8219e00bb271186d482e93d

    SHA1

    bf457c4218cd3a36af3ccd5a27cf041cfa4afbdc

    SHA256

    12550283fef7479f9f78d7f052596428720b45dbe6c7240a72c45d450279e642

    SHA512

    99b2d460d544995dd669bae948646531a0ed07bca687adfe965c48492583f7158cbc0e4e5d4b2d0be3b2e6a481f00295969073797db72158616393a5ebe26604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2863b9955cb30fc5e7e0264be60a41a

    SHA1

    bb86114c25317a9f85e908c8132c50b46bf2dbcb

    SHA256

    062ac378cfc1de6138185f36b655a969d2c7f9bac012712d62a2af09d4d37ad0

    SHA512

    e805735f8db182d4dd5fc7554b040f07730f9edce47c5bc6c7280f1016e31bb15b0b5685513139d88c0abf1b1a35d855ccfef59385d602829e2882e9044e3305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55f987723cc6b90ffa11ee65fb52f02f

    SHA1

    f7d7315c1cb53ceb2666ca3b32b42cb79079859e

    SHA256

    d8ca03210dff1c895d27ccaad737905cc0adddc4671ef6d70e7da93e8b8c463a

    SHA512

    d8c3967191d7b8161e6320fc6ece42d9254956923ceda209f1cb413037d1fe45bbe7548c59cb241296aba6cc3f38060796d81ea2c8db1d8892218638704e06cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35c35d2cffb697443e78406be8eac12f

    SHA1

    606aa4db7bb8d40b1d1966b73477914652dfbb03

    SHA256

    ab947833a243f4f73cc45587495c990130ff7f9ce8c4344f2386b74fd41e6b8e

    SHA512

    feabae7ee02a7f61a6f5cf542908b3c4f771040b05355a84961428a89bbccd61bbdb65024f90c3fa1b77934de70a66f0b8a57d64808b0ffee9ff694ed5442c59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a812048693f566dd5db1d09b48e3f59

    SHA1

    725eae9d2bd854d7e72ff40a73618600e235de8c

    SHA256

    05372e107010f443102733b839c155d335c0993fb973be55c149b0832606c2c9

    SHA512

    fcfe0a40f77e85f495ceb5da7f1da16596d72f23b45024f65c40571022adcceae20ef2b11b00f59470530cf51d7e35ff346ff087353989b3421155eb46e2311c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9e7b000cc536c743378e2042f62c0e3

    SHA1

    068a8366745dd4f678c1f432432f0b321e2cfb19

    SHA256

    eccf52f0ee92b24cf0ff915506f4d1c95e0ac7dff714c5c879f142f87b75fd00

    SHA512

    62824e5412d8eec22d4656dd5c97a2aabac214c9b7abf179e9c9cb4959fd865c49451b1b8c880de93f8d5c1fafb0e2af0193002eb5aa637d94ebf73e849e2d2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4a36da774e40f9508e0fca16a0cefb6

    SHA1

    cbfa4f6bb737685df9f16f8afd9bef246cdbd11a

    SHA256

    326b4f4b201ae110344e0d94cbd2be394675ea5b162d50549c4549b0af1dadd0

    SHA512

    473d9e1d9b1bbd0c60d3a8320570fbc60d8048d240b792f2b9d6a6978f3e38efefa072fad6cf0ce0cc92e32fdb4f561da6e9763ee1a4f6ac746de58e922f1bfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    881fe0995aa5080175e75a260c8d8b9e

    SHA1

    98b47f9d84c2c074b7760ea4058917fc25b812ba

    SHA256

    e5121f17c59c3b2e8e85da6a533cf3fe84eecba8d251f41957783f7f56750b0a

    SHA512

    414d0b52961b92db835959e056da47ffc7438489e0443f6ef6446b35b7081fec7367ca9c2cb1175d60e0ea5882ae07174d20eb51de7c08b3008b537c01834fa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf9538cb84ac87c3b2523f1b492965ce

    SHA1

    91dc97dddb0f61c2a0c12a0844a0bd021f42b306

    SHA256

    52511a359f3da0d455393f2965e108d83d29c8b6ad007147937080a5d2b4e750

    SHA512

    71c8cf73d0c09d24bf217c96f5b397c0b66ef2267da0dd9c583be0f9a52a126963ec6682e961ad9174e09a1efe9fe6b6acbdde70ed0377622d77c14356538e03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2884d84fe9ba3c6796c2d193441d73df

    SHA1

    bcb18b87de11d907645e6a27c6c8374f40e38672

    SHA256

    bf50aacd5a3f68b1afc475b21293c7bba5ba3a397e0ee0d97937dbb3c59cafc4

    SHA512

    ee00104eddc7bd857d232f63648664e8b5b0b6de55794a020b91d9d9233121f6f009d1007bab677dd8b67bc8b9971bd1aeee3572849ee2759d3d39d9e809fdec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da1db00fd9ae53199dc3a6a6eac6a3d7

    SHA1

    3769e72ba55235b58bb6f63cf3a7b1b4af233238

    SHA256

    9f3982cdc9f46a8aad25dc28efdc2cc342c5c8ef64ade40deab24baa58ee1a7b

    SHA512

    e0fa27fba10de4c744cc495aba06662bb1da81324eabbb63544c42d9b08b0e4001cc6a6903268d593e6c0823bf51ac18f1b792fca41690f4c26f99c919cdb9c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70b36da28d098fd5fe7631f9d83a3585

    SHA1

    2fa447666d2bdbc194c1a1aa5455caaae02b40f2

    SHA256

    db2ac2d31680cb587fe725ac30d14e748d019de8a74cf07256f29a7b6d526c76

    SHA512

    d8f862418563505b913c2cade605a9fa4f2a6c3f5e6d67052a14cab70455762e02a4eec366b1c997b9237ab2c6702a4251c3dd0fc04f62a13deb9933a1dcde93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    454609551792d121008201e3cdc188f2

    SHA1

    f20f3857206382bda1335a55d60714f7cd1e8154

    SHA256

    07c71b5763c4d245fbdd50c18dbd4079fc13df2bef103a823d95fa249e921604

    SHA512

    deecdd36b9758c7259cad1f941b3a72a38742f35ae92363bc96413e4d340eb97bc8ce11dd22a888deaaa889e9d5e840584b200638b5f064aaee99f42a0b45a63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f01264871ae41cf390f68325f1f7e3c

    SHA1

    3db106b5d259abcaa20109b03da25685472f3ef2

    SHA256

    f461d4598187125a748e984aca8b97f87286a654052933191971ea50ce5ab053

    SHA512

    7d61b280d8fb3ada68a9592c99d28f8de5405605681d18313dde327086f284b5aea0e987b1945e86b98376c0bb852e1f5ea2a2d6deda9a06b6547bd89e2848df

  • C:\Users\Admin\AppData\Local\Temp\Cab9A5D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9B0C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b