Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 21:34

General

  • Target

    367a5848ad572e5c853e01901dfe011a_JaffaCakes118.html

  • Size

    57KB

  • MD5

    367a5848ad572e5c853e01901dfe011a

  • SHA1

    b422db4f7286d905c44ca4a4fee193838abda56a

  • SHA256

    1bfe98a8442184190c17e2ba31d96d614fed9228ea4b2daa591c172386df5ebb

  • SHA512

    7bcb060781d7a22da25b519f71117bd165c24c7b981b7c59baec0eed3ec85ff428057dfa73a4efc16e66523310af032f1ad9145cf8295c882f73ece10b1a9288

  • SSDEEP

    1536:gQZBCCOdX0IxCP7Puf9fvfOfjfNfyfbf3f8fnf+fbfsfYfzf1fzfSfCRfbfJfOfj:gk210Ixt1nWrVqzvk/2zUw7dr6kThGXb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\367a5848ad572e5c853e01901dfe011a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2968
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2968 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1972

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          185268a4df6bdfb1e56fea6eaf16a6be

          SHA1

          605dbd68651d43a3aecb617a88c0ea34fe985a25

          SHA256

          3d09693ef1414a9e3ad9b44560ad960c5b754639f6ca30306aca04e84b81e487

          SHA512

          efc7d6bc217522c9701a7a0470adac797c3b277f28aff8a57a5e092437d23bfecb7baabdf8927885bd7676115b6af55c3aa19fc7ca5bca473ac81e677468ffd3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2dfca6b38c53f817516a39dcca442b1b

          SHA1

          090e90c36739d069b991d5d4f2beac8cdcaa985e

          SHA256

          ce2999db58be7e50630a087cdd6e65a48dc8a6cb63f592739e4e46519fa8b2d2

          SHA512

          b44897c7bb48defd0093f118828bcbca74e531efd733a24c915dbc537309fb45a9e17c9c07a78d2fc86bed5733cb5049733357048466a856fdd9bd6474913285

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6faf1f2cd1abb074c86ca9b4df7063a2

          SHA1

          86850db6fd084058f101428e4948a9d52ce5d950

          SHA256

          14484077428a053d1dfe71a73bbb8119fd2f6e0ac58fdcba76a4bf0f5127fd76

          SHA512

          cabdfbfbb75500c1f3636bac29a9af13496f618d1880d8fe1c2d005a6607b27e303ac94413b9e5c1f7caee2aa4a5b08c6d465901fd79632c33e8eb0985dd0142

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a817f1653e668cadbe9f4d91e2f64d06

          SHA1

          8acbf07cd5bc25c89c6b760f0b45bfb42f099f79

          SHA256

          c26c714dc08f6570e11b8b51a83888c34925442b8b4321727799432c82e90299

          SHA512

          bceae0bc29e1d9c019ccb2349da7e475dc7b4350e8b5c9d9c00a7183e7400859a6033d5e7a7f51a14c87ed383361644520969751c70c6d191212bb54417305ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a32ba4238663cc6c109a78413b5e0748

          SHA1

          e404b9b66940315909d39573ca08174c73d2e508

          SHA256

          aa2c9ed5b90e447ec6f6e65c06f94d464711e25d2eae954889b5d7f58b646104

          SHA512

          8de871e7937f99d2aceb7f88ed51d435295b68bc0f78cc60ad80d62a3929d827e0de64b047d1d3bc5f5c9ea552effeef85890effdd7410de2d1342803fb124ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          808d7decd1ef6fa66dc38a9be9a05104

          SHA1

          71bf58b0a855471c5382d5a6daef16e5a85868c9

          SHA256

          777e40fb8d5428d86f68636ea476dc67c5c07258be3bf7d385754e24e2c2a041

          SHA512

          a85e7016aa296aa3f4098c21859bc0f09dc75e0e1d6a4479589aca2b400187412b254c480e9d35b074d92e582c1428b4961b51aef8df612dd591bed9f5bbaec0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          70fed8870f01fac702fad1dd07dfc4f1

          SHA1

          3a7902f5e1813a9d011fcfb6020b8cf4ded3cd8b

          SHA256

          484687e8e06877219067f1d32e8d492c9e3e5b12ca473a827c8a78774e122306

          SHA512

          ed3a7d990f8219fb4212328f7ddf520939e6f9d9543ac2b4cf18cb81cddffa05c5dbbcedc79180750647ec8100b10786dbe58e47bb36df6aea0ae74841317b5c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fc6d5f82699c0a27105144f7bc71c565

          SHA1

          50b715ff472fb9b6be78d33ed2b8ff97bbfba0e1

          SHA256

          921d9a061d76c53abb1ef081ad5c4695fcf9b0997630b97c5a66522c136307d1

          SHA512

          b22bc6897f76f83a581ab4301a50745c60bac356abb12c14f04063ee2cd3a381c6300761c45d5bbae00e49627c41adc2a4cfaf3fda4ab1fad689631df53ddc99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          32aca9ff58ec36a511bf4084d1cd70fe

          SHA1

          81f637a857bce1c76c06c2ba23501a1e4949fdb5

          SHA256

          dc65de22e5cb85be818b45d0444dbfb5644a1f9722b07ed8478c5e1533c8b1b4

          SHA512

          3ec99b662db08bf124448c56b7fec298a642bd85d6cb0965febc45497667d020267a1abf89492ca804944fbeb6d5080545f349a335936c9b92db9652a2a0c076

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c6e7998535220d2797b0655de4dfe4e

          SHA1

          1ea9630bc795ab5981a1b02f3574381fe5b4089f

          SHA256

          b9562633995bfad74bd6fe4592cf00cdb37e9d342de46ac86208e8f7a1132625

          SHA512

          59f772e7e4116c1f51fbc80ab58dd2381e1f3df346e2798f663a9ce7ff4e5a97d4e6eca6212d519e77792f2a17e2a688b03985f89002d7172730c0b2b9496804

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8cb0bf06c2afac0b64c372d326083d9c

          SHA1

          adda651cf0134e9b4c0a997061e542d5edb5ade2

          SHA256

          50a69a9dcb5a38f2cf52855f141ef71d1edb6903a1a7e450fa8619d83c03fd49

          SHA512

          59ac9b42a3ce632af854ca630494f63e1c118c2a1f337e98b7d07f2dbf9bae3d838797ce019ea5a0bd5c3787411907b968b2c9004f7ca01c7c84a6cfe1c04797

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d862a3cf8cc5af3c66d79285877c5a3a

          SHA1

          6e1ce95a25c17c8a8c2b04d9779b430a12931aec

          SHA256

          401e89162146515c7e111ab155f5f4b69aefdc6cb944e07930514442c383a354

          SHA512

          02da57abee2163c4bba61f9a748085e24063f34e0942131822a1bba7ba7d55b328dbef4b6e67f7cf01d2bf04dfb6e4e45457435bd429880534e5066afcfb2930

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          64fe509d6f9c74aa386b44b68f20fb76

          SHA1

          c93db5bdbc451d20afef30ffede5ee640d024c8b

          SHA256

          fd7972d614d614efe2143d58a383e714cd4662e7e84ed01df97ba672c867c770

          SHA512

          f93644bcd650cc943ac0ecb1001b5ebab61117a6edd92ca94a502b937aae453fbbec35daf7b6d6156ef492bd03b84ffe64f6b29df83dfd2aac5f9e297f6f6dd7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2f00a6dd27371d9f9a004289da70aa2f

          SHA1

          2fe60bd4442cbf4ac92af97c7b46c4ff51c8d379

          SHA256

          fceaf05991561c652832ad326dcc75f3dd322c7d4b7fba5718bf03afc37e2216

          SHA512

          bfa967b87524f85cc825cef34d5404ee5c2302a0021246318c9775612187beef7bee7723e142cae48036458304047863f6b3c741158aad5786cdc3ae92ebcaf7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f3b27e33f5ca72b52fa3d9820b1e28c5

          SHA1

          ffcdfbf74838387a18c3c41f28d2cbb2d795987f

          SHA256

          1b0a5a1b00250bfaf36e94643f44bae3d5ecd1b9d469c3471edc95528b3529ce

          SHA512

          b0ae1e05d04be44309346e1b5eb8a7f387b555b8ff4058d11a4d8d2a3017ee33ef11994250a146e25a5e1e731d58d7c96580b376ecc7e2d5d14b77a08f758a70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e2753bacc8265465fd557706cacf305a

          SHA1

          6da4b18fa16c0956ca548df9ef2ce2321ffdd577

          SHA256

          76d5f6d8f2d5bcf065940afb836af89af6613fb609820ef8fa83496b6e9cd318

          SHA512

          45bcf2f1d34cfb97cdab8e0a8641b46669ab5d989b15a53a8a4e7a773ff734f1d671e3262450bc9a80205e6d75e260780381706c14dd6ca4aea0557ea38c7270

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          aec1cea0f706a96a301f4809e43763ae

          SHA1

          7204b4ce810b63dcf84a71e27a3202198839f62c

          SHA256

          c3cb3923edade71f77b753d04b6832458bc41ef886c780e16503e6a587477013

          SHA512

          b654bb908d46ae6cd186847db46d409d764b45da514d12a0fa58944ed8039a4ce2e99afa8161b94573ff9520af92b2ec6cd8afbc5f3fb98aacb3e623b216a70f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          55eee16db73adcd41cfb48322abf59ca

          SHA1

          5e5168d3430223dc208b2fb8ccf813c51805ca92

          SHA256

          c3260eeef698ccc1c0c1080eb093c80ab04874c7fc9338b1602f212ebd863040

          SHA512

          3608b49710c56325381663b81305da049357bbf9a6725044637f6ce09e50ddfe581ed780003757f030e91b9078571553cb2d9db87d0fe1a93b75b9dd78dae5f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          97760daac055e457ce5c0984354b8dde

          SHA1

          e516e46675530cf13250fc9d4975f74e70d52046

          SHA256

          19af4d28bfa966d0fc0b4c238164b11298bd23de23c32b83df2c1145eb099715

          SHA512

          54a51e63508334ff68371c0433cb227fe6c42e5d51765125dd0b0d9194a2cc9ad571442d2d45076a05ac4d4a2853557e7ef21baf5c43cdb366200564f0269131

        • C:\Users\Admin\AppData\Local\Temp\CabE285.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarE286.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b