Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 13:57

General

  • Target

    35020d87835f1a6ef1edc007c258d5a2_JaffaCakes118.html

  • Size

    6KB

  • MD5

    35020d87835f1a6ef1edc007c258d5a2

  • SHA1

    08fb498f1d2278985e3c671298ba6133a9fa7a57

  • SHA256

    ce92e2914a0bfbaa83e2a66f7daf9b61c7b5a3147fcc782cb386e72998063a0a

  • SHA512

    3752b45822a3185c56035b20370955b858e22e5353a4f6864b65f4f0e144cd522adf972159d1cb091c1a81d7af0a8dfd4e66cd3bc3082a63245f4c976dc536e6

  • SSDEEP

    96:uzVs+ux7avLLY1k9o84d12ef7CSTUB6o6M6dcEZ7ru7f:csz7avAYS/Tor0b76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35020d87835f1a6ef1edc007c258d5a2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2788
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2788 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2568

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          21188932491b1f3a8ae83688a38b7ed4

          SHA1

          1f14c35000df00c04c747d0a01cfa2415d775ff9

          SHA256

          af2ec9ab3d4a2f7e061ad950c7c7f6fe1ba1860bc506959d507df2de3dd9251c

          SHA512

          06c1fb29d3a4d660e76ffdd204fe4f77a086a2ad93568bbd9d52266cd4ae258b0771e990c23760fdb491d0d694109a9a25ae6e583bbed4cd1e6766a144f9194b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8d0962349370dc8a8e0fd27e8d1c87fc

          SHA1

          a35ce40b18d26f6ac171bb84322cd812b4ff4ae7

          SHA256

          bad927ed6bef6287f921b9174915b1cb5cbf5df05157794d9c3c5409a0244c11

          SHA512

          2239d7cd5df7805e03b1889a28ceae18e155952451609f342c38fe9ca816bbbb8713d0ec6fdf87a5961d86daff4fb6e9274995dff24162b3c81a039807afcac8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          34496084d8e8587b206dd13bf0a0437d

          SHA1

          0365a0bf950bfdce8034821317ffdba0e616a1d0

          SHA256

          1ddacf162d8884e26909bd1d32a9cf304e1f006fc01bf4299c23902688bfaeeb

          SHA512

          d4077314bc0bb320c498c7c67015d801790c57efa1425ca0213286b3e1a5cddce54fab998dbdc1e332f548ec2c112b26535e94ae89306fa5d50b290a1a5f93ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2907f72525dcf83ae435ab468ecfdc86

          SHA1

          b955a5542ec011d1f1fd2f64e21893ea66380972

          SHA256

          aa98e8d3e37a63eee4c3b85a93f425c256ccec458c7485b55e097df8ad9811de

          SHA512

          43b0e7579e12b90ce2ff1c2eeec159013f1c3d6a586ce52077b93d5ef66c36bdb59de4927134a0847d5f3f174e0604f934e232817af5c73c1fb1dd81011dc551

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dc0ce7e10403ce1914f46dde4428edbe

          SHA1

          4311983ab460b635a4a8fb01fd19960d2c102250

          SHA256

          0f4f5df5dccd286dad306447ad288c97d21c52da85f0eea239350a8253e69822

          SHA512

          b81e5606b37d486c2cba6af72a5748d0512f54f063fc61b831104dc6c2a01964bd1bfdc56c41c3e324ef86bd5bc74befacd9027d1dda70c257e9a4916d189a72

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          386ca0d1e21879e756be0698845d6437

          SHA1

          97544cc3fa9bf06dfef170981c5b1169c2b26071

          SHA256

          7aa59ab96fc5020dd7d3d28f1ed100ca41777bd3ec19737185ff397f5efa51ed

          SHA512

          59bc4f3c4acd66d571161495d5ba5e591ae9d39abcea4e485096af72fd00c4efec7a417a72da5fb76bbb9529a0ed050be36ee7e7443bdf41da158e182e53a393

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bb8dd018005554bd30c848595cd500c6

          SHA1

          dbbd406bbaea132d9293f1ed8f39dc8f9a6463df

          SHA256

          5f02d7b77291112ccc878ea5b99811111e81e6977a0446709dfa3df0ae591fab

          SHA512

          bbb54c5243a44d537a20d983a9164a18dc7103580ceb021185ac1641ebc9c2bac68f0cf4738f9319667761853ce5acc1da8b9505d806f5f928e7f2965b94b724

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8bbf62c9800697a6603b6f178cfb6927

          SHA1

          79475fae79a83058de5977b1309a8e49e3868176

          SHA256

          016f8638b6b92d3f56cb9249290bf9e4d57a14b1da0ddd5b18f0a8bc185a28e7

          SHA512

          5368ee6cf58d145459d23523d2dbd82193e9ff9fb707d2732cee999ee0e1fe02b24b01192b0fecae23f1e9588d20cf1431720902fffb29c8ee165a0e39a08dd5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          73c3ca589d89a7a631449af8f19b9585

          SHA1

          ddbdeda9b41e006c5dc5eaa3ad4761b7641578a2

          SHA256

          02d06bd46703a537342c110229b1cc082eb9d85efa16dd06b9a2d7b7ee8edf71

          SHA512

          243fa6be8b8408b21a23c530c46f58ff85e4cbc5e81d4d5d29f400319340b8809d8e420706f471836ab1d12aa59cbaf8abb05b282841472dfa797aa0f4ebbf30

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ccc35c776e3774cde8e6ac5c3ba65eda

          SHA1

          3e7970dbc529a14de555dddd93baed854d553e25

          SHA256

          afce518e2d5467567af2a7f82ddef03ed9d2676d521c18db73883bc7811577f9

          SHA512

          5827f2ca9ecf6eabe949bb31a17b4ab931c3f606e20b2f59d92b9613fe141009a7ae6d57420f2ec3680338455b46de5135658b5b9271db12a0153c3fae8dfb56

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          161a0adfaba47e92d426bc0bedf4196c

          SHA1

          7ab2099ab1f0b247f806926b8c37f86446ddb035

          SHA256

          fbcd80002cbf9733773ce55aeeb2426debb55fe7ea7cfa4afb25cb8110549df9

          SHA512

          6641cbf44d74e932377670f704969263ec50368a5d488d4551f113ade352a1b8bfdde43397587015be766b0459ba2bb5dc40ed94fc05503cac3890bdff615947

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5b286727a351d3ddc710a08728abbdd4

          SHA1

          bd4745bef2e1a24332568f4961313633db65cecd

          SHA256

          64ab766381daec3d394533818df0d4298c570513cd244f3a035f9edd2d40841a

          SHA512

          9df3cd66b21fcb9432ce1fc1e6ac6eed55bf847aa05d50d8bc0878213a2148c3dc9d8aa285ec89462e7e60faf3366bc82c528c40ccf3c1baf4c24d65093bbe99

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b4ef02ac2dbc1c1775f19464eb882883

          SHA1

          6cb487155cee8e19f938576d5ed1a1a5e2ffe4d3

          SHA256

          31a20673128b9ce2456c27831f88b38e458627fc4da6e9f0faae529eda84e767

          SHA512

          693b9cf7014ae4b424a58e3af3da0b707552dff3ff9a92e02493af28571becbedb72bead99cbf99c14f62f7713e878be6b8943b655ad1caba30dbc8849728ef6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c68033ae04633b73b7cf1bc6b6d17a66

          SHA1

          96cfc1bc371a266ba38dd4930dc1da58dc2b3fa7

          SHA256

          309ae246967cf0f3a23560789fe873b45df9f29984f647e8266c241c3bc4b441

          SHA512

          d6df7d6cb9c691f572f0257f12ee57000ca05bb478fd52283736968872d474992b7a2be58ed20958a8120f8e24826c508741f3a9c3082267a48869b9747a7f35

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e0fe528aa529a81b2cdaefda361b8d75

          SHA1

          b2743d871fcfd02effeff5a954ceb744422c03eb

          SHA256

          1eab97061ebdcedf4fbe25531590f4842ec34c60c40dcf1032178dc0c47e4197

          SHA512

          9d10d561f0d9707ddc0cd1c48b6cdccd0e5623043e258fbd97f2c76fb705ca8754c3d67b9f6b84fca87360cf2195d051ed25ca2677a53fbad542d79784bb1a2d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6f6152c0dc778b4ce7e0dbaf456b9723

          SHA1

          94a5c29ca79c387b3ad3f6f64036869aaef3a30a

          SHA256

          d4834450062b1385ef0010a1670877b8cb49c397b91d7dfd8ff7fe8d71585502

          SHA512

          9b94977e0c9273db8207bd9bec45eca73a878a0fa81ef91f8f608694f5e942e454c6d5fa21ba215ae38770455e6cf9e54c48c1a5a2fb8a62f578f53a3a251545

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1f3505096cbecbbf23444d1833f75ac0

          SHA1

          f51fd81be5ea867ec3ed4d6077b2d412b426b701

          SHA256

          ae7ce399cf094eeb38ea28fdb27f754248748418eb1e5141f82762c3dcefc9d3

          SHA512

          18a4862cc29aa0d700cbd91f40c6aa006741a622fa5695aa8733da6e54ab9f5be2d30eca73a7759a7c106a17994531a24f521db1af4cf711a36ed23fc78ca11f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          66d1a9fa26f87e21edd194264c083293

          SHA1

          a155e70cc47642dcfaf700c8b0018721d367003b

          SHA256

          6305ce980f7cb3d051c116133721a8dbca98a5799aa412277a36d9a51b065e21

          SHA512

          23edf72e3e629da42031aae4b3e03c9c486e25427f3138e7fafa72ec480820499bed395fcc8b333c8d5a8b5d75c409551c35e2b079dbc39e748509db69a9325d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3d39c4e38e28e6f723341e5dae56e55f

          SHA1

          a1e9116171e50db4a84ef8137088205c55b8efc0

          SHA256

          3d15dd071a0fd9c1cb90052186b8402ad3a5ad0922167fda296687f611126cc8

          SHA512

          3f782e6b659c506736b3013b6c18b87204f3c8ee47610e57d682b07c0ca28c5b2f9e5a383bd69600bbe9a80e80254bcce30ed79ae835baeb04ed62afc281b9d9

        • C:\Users\Admin\AppData\Local\Temp\CabFDA2.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarFDD4.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b