Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 03:56

General

  • Target

    3336a25764f4919443fbc6757105398f_JaffaCakes118.html

  • Size

    99KB

  • MD5

    3336a25764f4919443fbc6757105398f

  • SHA1

    6053362c74a42b19301366ee6cf9cab3665b976e

  • SHA256

    180248784d23817cdc704d6f5fd3b6e45bb3f51458a4c7bf41d203c446391acd

  • SHA512

    0214341f150c003cce22ebd7da49bfea2ccbf45ebe35886a4395fa5eef992ec100a69fbcacee943a357b1a1cdedd0bff5425fea16c7366cebd17f48c2764dfeb

  • SSDEEP

    3072:jTmyH4y6hLIx2crUg1GzeSFLoIN1KMPy92olCttkcu:+IcLIxyHKMPyQQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3336a25764f4919443fbc6757105398f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dc8026de03cb689f11fde5f6874ffe6

    SHA1

    1eb3ef565f350c9b683d256b31076347674082d6

    SHA256

    68c88778e0629d31553e9b5588c52ae42a8db41a17c0a858e7b9497cb6e18744

    SHA512

    1e26ddc9aaf00678aca60e4260b9b30d5da6b09097794abedad33d56e392606ff8d933092860b38947580a7fd26aee04050d7669f076d8eaeffd0ed73a675797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03efff12dd455199b8c8ff3990c384e4

    SHA1

    c0933df9b71ee54e10b4c14fe432c751d0d9a6bb

    SHA256

    1cf75f68fb412a732c96f3b67538b10780f978fd5986e4fec196e05de8ce8b1d

    SHA512

    d008a62c5215c6fc17b8f43dbf84cfe771027c54e9a32943438255dcd5c0ac40d9d30dbe12d544128a91c9db203460e2f45d269c5cc0e1624d8cdd2f43073a9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9f2056b040e58d866358db3bb33dd50

    SHA1

    daf2468482f5863c82c4c1567979ab1aadde47a5

    SHA256

    6126686387de4fb3d99b30d3362e9ca8e848d1b2d3aee0369acaad4da3f72317

    SHA512

    aa407555dfc74223cf94c857efac7b1eebcc1b3164a86c35e38ee864e7746dd240b3a9183ed5d024b57b71da82063ed7ad0d3196fa35b69c5cf747e6cb6ed2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4893fd3a3b33acd70ba6ef8fc2cc6bb9

    SHA1

    435cdc9b370d721f770fcd19141e619b57f3c21e

    SHA256

    fd089ea36621b5ce2b673d9cb810ddb0a4af87446090885e0daa1ea8361cff35

    SHA512

    47464d3220a76a9ffbae40855303a341731e40e8ca3c63faf15103423a9293f563557d77a06b9f9a95ef09d4ae081d21aa4130498eb2029a956f365d73baa9e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f8ca241f878ca587aa3fed2dd6c572f

    SHA1

    493dd6f6c471c964a64b01a567fd8448450584a9

    SHA256

    e4d708df29b8af9ad3c4624adcecee4aab47bfadae31e173ac9d2dbd3038475b

    SHA512

    9c722861bc64b73a7da7ad0ad5ac852e138380079b1ac3190d303cf6ca1adc6c914b74e74e56ce0c144ecfa2d363e6366e658f8dcdae52ae09a92221bc4bbb29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1775af27819a35c2f7d4123ac056ee89

    SHA1

    7850ae18bc7319c9057b62979f7a131cca2e7d58

    SHA256

    be4b8684b88088ed64e1b3a924baefb35eb1c54b35857e65aa42698ef2e95c7e

    SHA512

    d288a2668d201ef744ec57f1c204538b5db1c218f86736d8072ec5d911bd666186336dc915deebb70571f79a811da25dd6b1fceb0f42f9fb48bc2bb24d43be19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9469034d5e468dadb8ba5c4686418a6

    SHA1

    3bfdf0bf0fd19c4761a710e00bd2025b674d3f53

    SHA256

    0b59a5c8b2c75179982ceab96f30f28ccd856d8059cf60c8f0ea90f016740a1e

    SHA512

    e6f9e0f112f988f09d1e7042b037ef5977ceb2fd49b08114899361041a8516f1e1f8758d0fd9e3aaa572fa0b55c99c811f2afe18921d3b4ca80328afa6084624

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fec78afdf07b2868bf2d1e241ca6dff2

    SHA1

    29d80b408bf111692ff9e289d5f6f57bcd343aba

    SHA256

    22dbc58172e92e8495a80f52b0d5e018052ab9607511d90684eff747544df3b1

    SHA512

    760df4d12015aa5348e1deb0e6513f828e6ee31465d0b877ca61fcc527303b80bd10039508ce3dce4b3859c44f59d07a9da93ecdabfb723bab8979c37c137192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1ef1772a7652ff1ed9972badf80d29c

    SHA1

    4f52133b6a6c07c3dd2dc147c667c5db4497e4ea

    SHA256

    34c151a5f3c3f188cf97ac45e94f2f49d77c8f46a1d11fdb9cf9bfcc539a117b

    SHA512

    ca215698d310391f7079b60b7f3fea13071c9da63bba115aa3c0225d0b2c2e5f60e0d5cf7ffa34786a57d945198384894004ae245267be20a4d736ad6f4ef6fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15eb00a3277a21702c5fa006e38285e0

    SHA1

    9835a04596351e9fd63769f41284e376f291ba7e

    SHA256

    6df69f52fef40c82d32adbb7f547c17443cb03fd6a1504936fa58c6878454d71

    SHA512

    bccc27b103ef01a1ce2c6506f207ad4da1e9883a6cee3eb32915125701db564320be72eb22030129b76888ab6eeea1af95198fc2eee3d1c1a7c11d2a9df3d405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea82cde382a38e1813a6b61fb9b41264

    SHA1

    4b8fa1b307eb385a34e467e6b5e6716ffe15d378

    SHA256

    e06907b40ef14f222e507ab378dd436f15fc59e0986bd684557bf1b824d016a5

    SHA512

    baf03d717216a0bb8cd13d9c977364a6dc378e7d95db257b5bb2e7484c5fac13ab1c99de3dddc080f83e6c7e47cdb619ff28e4f0ea45315b5c9795b9bb678685

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3dfc6a37bd101bc1f7802b891861748

    SHA1

    be7fa4104dab0ce67fff0c10ca207d478ae3697b

    SHA256

    8df4f59b35178356f322c20a2afb6ebbe5aea26dfb2f6ce799935c06549baba8

    SHA512

    f642424bc77af33983f6cafca44d8fab1f52bc6ec9bf951f62e4bfbebe57fcad5507eb256d2e35884432f1f6a4969bb2f0a38325ec37f0c9d98df1ce04e46912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa5e9fba375c7b513873c533eef54246

    SHA1

    fabf8d54b9c630f8dd02aada477c2cc32657c1af

    SHA256

    9e4eb61447dda48a3d46d45222f5130e2c0e5e7b4ed71fba12606702fd803ad2

    SHA512

    f9b236deed992112939d2f5b4a6612d1119dcfec20eab17eaf76329b6322ff9088cafaf9a145f59f01228641ad0ffd860a6fdf602f8e632d3abf3a3029214cd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb28eaa1b8eee85993429a110c661122

    SHA1

    4ed33dc7ebe32bc87c99bddb9709dd614638c19b

    SHA256

    65958a1a3a057c2b5fc21dbe78532a0986606d551b287a194972aaf9290f324d

    SHA512

    522ace537c1e10043938f35139b093d0f84401162be2f0aa7836060c890274eb5a47972ccee72eac36c9fa20c28cbd6766c0d1ac2f8edc02de4459a9cc35af43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c23d304c3679276534d615c99796066

    SHA1

    b2b67fa9f5b4718f422a38b4f571a324c9c629a3

    SHA256

    f10674ac790488cea5b6df17911e3a30d3b85ef1125e2ad91878e85f31cadf47

    SHA512

    b32cf9b6eb289501c5b33db0cd581cb21c3e3911b8c5db6efaa5beca1186b186d76ab294dc86f7818dc0da80dfd7b015fe0477ed3d452c8d1abce286a1531f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    583bf91607ca62e5fe8f70cfc7550497

    SHA1

    300badac544c5e04092f673797a548cab391325d

    SHA256

    81cc685b1382478bd006fe07b20bb68769ba0cbffaf49f17e2d15232e80286ea

    SHA512

    d8138f08d3e565e3498d55084a354cb33ab5b6c23868b48ce106266c0c25a1895abca314e1ba2a283743915915c4ac1b2c46c99092743e1e167d40260b26e466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a29c7f7d074b839ca0c2323fc8820df

    SHA1

    d50950e3cbf203b033046cf0a8490724f3aabdf3

    SHA256

    610dfa413306123c0e590be14c3891463e30904ca869b230c71ed6392904de65

    SHA512

    b9439ba1966afbe1e133485332c4644ece98a1c965ab8ed6c0dbda57e6ad35961d411416b5023b330eb4051e6b3ce1b6a8681741e6884a435f8da49ac3872141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3183422a467901d4c7e17f5c3235940

    SHA1

    0c47a59661ca5b6b8327ec7e95c2a083fa7120fd

    SHA256

    40b15c3c679517e351e603f8006b3c99dff6f275a64ceb42a18991bc8242b6ab

    SHA512

    a5c38e0c723bf8876aa3c4dc257123fae7e35db7c076041eac5029a28033d6acaaafd2d87d79a8ea7e685414682f99743fea299d49850b49eefc769f0ae5d629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6dc3cb3e5e09cc93cca073ddbca891a

    SHA1

    a67087115e423ae8c6cf2580dad5f87a33279f71

    SHA256

    a66db158b771a98dcc885d80e9ed30e41210120b300b91d925a8a23308ca12b1

    SHA512

    4602b01bb724403a9461308d244d676bbc80b51313a42c06923f7c5dcb71c66d8299b25caf81fd74d24f237f58b672d7c16938e84d08d0cf5a5526798165b856

  • C:\Users\Admin\AppData\Local\Temp\CabBE9F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBF40.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b