Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 15:43

General

  • Target

    355d251f73363f2d4f57bf6b7aca69b9_JaffaCakes118.html

  • Size

    11KB

  • MD5

    355d251f73363f2d4f57bf6b7aca69b9

  • SHA1

    b216828136837e06921c7594cbb6ec702d620b6b

  • SHA256

    14b556a1935b88f7db5df89e68fa01b49f06483669ceb615774829968e906a54

  • SHA512

    253d573a7f6aa3922a8ca330b7bf9dccdf10662e7d6340152373c952ecb8bc0ba503f52af1065f4d775ff80d358857f7840a37accbfef724786b83b0e1f2369f

  • SSDEEP

    192:2ValIsr0r57M4YxadT8IY/w1wvqLkt1Psw8uBuLbdU8d:salIcIQ4YxalY/gqPsw8guLZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\355d251f73363f2d4f57bf6b7aca69b9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a24a7f1572d3aa6553178de893c1363e

    SHA1

    1653a30f33c048d425b5aee231aec1b653722d9c

    SHA256

    d5668e9b9d2a8d43a03f7291e1c71040237ed161fe502a85f67f4996ecf11420

    SHA512

    bcc14fe7648e74a7dca5737e953c5cba43e7f1713c8a6a1a7e290c23e20309d404d5e0f5e7906867fe3f75ef0558899e2d1a83e29c783c7a8dd6b4abf263dfa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a2fdca30d0ec5d86ee3cae07c5b9007

    SHA1

    adcc94afa2a8eeb4d471bcf8dc7fb27158fe6c52

    SHA256

    34e2d97ff2c99e3fe36d200456d89b84c41126e72b28b0367247238764b715e7

    SHA512

    e508405d73efbf6384543110fcf314f725794ca5b347f7f4ddfbc56d3b9f71bc4b222269bf306cb1c448f83f0b3c58479885a50091f980be4563251e5a5f4e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50de1fdd5fa6ec2ee611e07800b6b6e7

    SHA1

    ca2320e98a3a7db34abf9d14e4510e2dd886445c

    SHA256

    e468df4936bcf3c8252bbd981f1f2c8e291ce8cf0366e40fc8b12ffd4c790c2b

    SHA512

    01f87c5f15772344a46a6fe65387f5fbf09f882a345a9660ae319b6944981d3dd4903c844f67d025662d7846655288e1d6e2122b3f5f32678c314831e1ed038e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    682797a2df1a0317d5996cf58bacfca6

    SHA1

    040ce279e192a5f31deda935f048b9b8d5148ac6

    SHA256

    ba82ae00c082132534540574dcc989e50cdf8faa09321e204e05b62971578d5b

    SHA512

    aec453d862f7189e38d5f56640f2a781b17422ee6f3e96ef0e76d9d779a087402249788a69a9162ffa26acf10d4d22c6b36684539faa76c7af98a45f20db2cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cd24d20d586279ccf174065ea3f2b72

    SHA1

    3e65033aed67ebdb9f576b6ae59782e10eee2749

    SHA256

    6c9368b0b58960e5a2c05040884b802e2cb38247bfd481483e122a66661511c9

    SHA512

    3e896597f8282cd7796d02e5ad90a215277a7359f7a92794619e3473e2a0dd2c21997a3a3e2163e0c6a08c1f2e0ec1875521909354e33e127655acb656e9ebc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9529b7cadc5c10893148bc392817311

    SHA1

    0156150982f4f85f9a1949e666307c415850d58e

    SHA256

    90620cb926821ebf6eda2f342f13802c9a234687d48cf9ab06a310016a82a664

    SHA512

    0dc9af0b4eab47771a5d7f15689a6e6213d8c215c9c54f04d536f11a45014089142134fa7f59409fc365203b037680a3aee8a0fdf4e8b3f15eff40fa2a514857

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bf56ae3333538d68a279fdf704259f7

    SHA1

    e5fb1c4345487e4889d20c91d7cf1ab27d58692d

    SHA256

    e854d66a0c8eefcdc0688a8a52135962488c6efe8dc40517775ae9c3a89464e8

    SHA512

    6e2d8f8b46e137012a59685be775c522f33e93ba08194d9ae7c57dac74db611b40c11afb18c29c04ffdf4902252f1b0dce0d5ddad00466476a44e29e62ead778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bd39e726906359ce22ffdac2136bc62

    SHA1

    026c4863887cfeef9e4a02133dcea88fe1c2272a

    SHA256

    120cf1be9c9ad91dbc132d74a3971c4ff42c35bd07501118e494f92989a35db3

    SHA512

    16c83e735fb519fcc72f4a2cfa93e1e6d31cd6fa5f8d029916f9a1a48cd470e0da587e1e3ab3d5891cbf73ccf34c3c3369ea5e8c41d713874768522cf7c435ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c142cc144b269378f8758358bb872f35

    SHA1

    e5d41b4f5a436a0120294e45bc2c39cd7b3ef1d5

    SHA256

    f8c14edc9054a92b8ad18e7ec45f4e7688cfc5f064d3211a51143851e33e0bb3

    SHA512

    5c5108aa83c2dfc78848cea692c2da4515900d29d69e0325044f0735953057370185de5b9ce80abc3d3aeca2c6afabaefc1d28ce73769d4e7afe2021295161cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    492833434c7df698fed565eb4c6cab9a

    SHA1

    467f88af8857ac43e3f3b9ce61b43b1435d3ed09

    SHA256

    5d22129fd56086ba3aba7271f219752794695cd92e5aec55087469c225b48cfa

    SHA512

    28fa0e58718d1344d52d32828476d7314ca079d20da13305c6823c4349acad3cab9d8e0c9a6b0a72e91554818865a040b9accde4db7360732d32f3a992c4c135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d17e0da168fbe7a712801eddb2adad38

    SHA1

    8efc30cca11effebce037449865c408127cab992

    SHA256

    c56c9ffd9e29fb204c9c5acd7a3582b9f456c3c3803f012633888122837ee832

    SHA512

    2afea44d8534f94cde5e7ac00e070c4c557c2c688d9f04c8751a80bcb6747346059db1e803cee746c0013d2f96878890812d693ae9b10df9bf395eada2e85b06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fab1e8cef1d70305be84f263abe7ebd3

    SHA1

    64b1887f0c07032eb2d37c8aaff3317071db3f4a

    SHA256

    974d76bce4fff03b481323fabd019f20b3d77c058c1e2bb451c2583aef291300

    SHA512

    502735f2792dfd8639b7c6ff1d32e6a501339bd8d8b416b945aadb442e5207b3748d9e51489e654505ffb379fdc037b9793caf3033d85881019a5c8e7e7948b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af3cdab2aa67c52ee9a44cbf3def56ac

    SHA1

    9cee4bfec33c193c25d2c7e7b803d1145f378d49

    SHA256

    4651dd28c188b4ec4dc75869c718abdf07013b852ff5d19c68b895b845ed8d5d

    SHA512

    9f14fbfd216c985ac513433e6106a4ad8e0a47e2e710898c16c2ce257893a0d0962b9d8065cf0ed71ed92e8f52ee0099f06d67b6cd46c0b77aebcde5bf7cd1bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cffb14b3604785bf3b55bd1cc2dcba67

    SHA1

    c74c919de10cd51e763e064aa4fb3062076fd4fa

    SHA256

    9f836d062dcb245b96d26d3cd7beb5652efce6726f50c3ac509a352da344adb5

    SHA512

    11b7c9b160f02e7f73fde91a2398d4290a97cdf6f49daab9a2fb326bec0d1a2b12cec795d038d4be41266d581618582fe52faf10224eb2556fa43745f0600b77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53f2caf02b8230f6b2723874f50595e3

    SHA1

    9e437f59910b02046da3ca8a0153ceb4d84207b3

    SHA256

    4a1a2c67f8094433da9093978e0ebb70973c6f81c3410b3ffcd29e55fb2db1c8

    SHA512

    c4f2590f83baf409d594cd65004681be8f83c9abc0c5a3ee753e757002ec2296ded8f0c5d251b475c24119e5f207b530fdea8026acecb7c4a1bbca0ed24585a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec8eaededd3cf5426fcce8efe13c22eb

    SHA1

    176473af37629f04f3294f896369da0b42c7ddbd

    SHA256

    fa6026614400cc72507a53fcd83bea859911ad5ccff8ea6d04534d295f3d18a6

    SHA512

    bbe197942c1d5140aaa459c32c668e40cf7733403680a166505ee4dbe3ad376052b9b8ef48aea1bf8a1f49744cc400a810e950703ea92b5800c10d3a6cde3b63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54763bb360aa13f89bd0ad9af5c9f0d2

    SHA1

    f873566b33300242012449e0aef789cc8babea30

    SHA256

    9190ff974af2085fedf22dfd4c5c05ca0a3a2478a5b5f5c8c9a3a2d7a6daf67b

    SHA512

    323099cbfdf1ed82c5eeb4cddf7b8a03212ed58eb57090a83eff00b565ec9c56fc51d71a5170972dfe938da55097d5a0ab054595a46e67653becd33f9db88644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f78d301c6de39b24c1b6b7d70d1f6472

    SHA1

    9b9016fddf4f82090b7e7408528f408ca9bb4b1b

    SHA256

    c7194f4e25d9ec79cf61e77f1a1877fdf6863c8e6539bf4670def8a82d68eb24

    SHA512

    bdf5a0caf88e8f898d663bbf6e3e16a0473e80b529d99d7357d3d66a67e9f5b36f518286ab9d91e01a6831ca2a3f9f742707f68acbedb5a02d0f0ad377a4ba9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4849b2a31263a33f34814957ea769df

    SHA1

    38d9ca17bd33844a9b974ec665f60880e6201b79

    SHA256

    2ea9c347e1159948cebf76ec8abe70db126d6a8a23ecc87c9a5a3b3a43a996ca

    SHA512

    ebbf97c1a61c70bc969c8ecdaab26f2f352ad7e774a4b2e3b3a867cd9ddd2ddd38e303baaf3f87bd50450e81cb42281e540c0e769cfda600ddf5a751c6c45b8c

  • C:\Users\Admin\AppData\Local\Temp\Cab606A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6129.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b