Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 17:24

General

  • Target

    35ad06b4678ee56e2acd82f5bf899d1b_JaffaCakes118.html

  • Size

    19KB

  • MD5

    35ad06b4678ee56e2acd82f5bf899d1b

  • SHA1

    12d9f52e53e4865bf03148f9609563a2f9ea2c33

  • SHA256

    ce481b2df6546fd8c6a2cb33072cc33ea28c51dd05c557072633cef2c3067c51

  • SHA512

    656952cf5fffd361304f79cc898306b8e898760d99bc7d6963c86340772a99ad3333569199399238c862091ffd74b987005ee9f6f0f2591aee616581b70e2190

  • SSDEEP

    192:csz7wAAYS/mo0mAoXX4LG5maNWJUDyPcb76f:crAAY8eoH4LG5m8WJUDjS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35ad06b4678ee56e2acd82f5bf899d1b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2424
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bf2bd9ba850152fa69c7050c9f7e05fb

    SHA1

    80d5872c1a7c28b0138bebcd875d92874cc6b2f2

    SHA256

    98efc307b86e9a639ad1cdc49e78e831a7dd449944e16f593b85d60c07cbe5a7

    SHA512

    c95833fe628600428baf5a03aa1a1aa52aba3cc835c201e130403c558e41852bc15393fd3f12a75176428d549b86f1e20883141c42b3f20748ddb3240a6cc6ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7b698e70066b462a3d268c25b95111ce

    SHA1

    f21aa8820581dfc89bb227c275d9d27e0745be29

    SHA256

    e584c81e220bb116246a9f79cb8745db37c0dd42aa2489d925591828f8642605

    SHA512

    ca9cc2ce4cc78f908f9d22c5c712e57642974e3d599b706cf7aefbf745ac31ea8bcb6d17e53fdd9791dbae59fad2021909b883c1bce20710c44e56509f4709c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    75dcae90fb3f428382ea880fe8a456eb

    SHA1

    3badd7b8241bb19a7bf31f95fae2ff7adbe05767

    SHA256

    5a09e780cc6389fb7ee3f1601a1caba6397c2881282c9cccd0b3ece7b431e256

    SHA512

    bd1b6f7138c163878b0cc4dc0efc7c7dc475b935600c93cbec32584cebca252d337f5e60aabe5d28789e4f15a493946dabda412a76e5199008b616f604be066b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a8cad91129a1ff46330142a4670c5cd1

    SHA1

    9295c6b217c912da21c53307b4fc4737c727af57

    SHA256

    24d612ae9e20c353a05699276c0e6050081ed1f5daf9ad2ef9ee35a348d50b3c

    SHA512

    4d52ef498361949e78ca0fe4200c71993002443dc38fe03ce173184905c67fe6c4909bc4cc6628b97dd32080d791835a2e18352f5edf5039156eb3a9c1e5ff42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6e574bea0db59f771698620ad3b7e949

    SHA1

    59037322881c2ecb1af4a771a893575d81a59499

    SHA256

    84b7cb14e32e5e0c8464dc492da0b48800fb65aa95fe687f7a018474f5eb64e3

    SHA512

    719cf51496ef4c41c817e366a735e0f3152a83126e8e22a4670799a17c408d937d05c5f867dfdd248242256b07bac740f7ed84e52e92e75ea7ecc146d14d6ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3c9a5c92b0f582d5f86604f852cdc847

    SHA1

    9b02d13eb98c26775ee1b6c88ce6b5c36a851e87

    SHA256

    2af9cae07a694a07da68ce071a340cfb25ec61d8e6f3b972b2b980590b89bbd2

    SHA512

    4ecbc978f260672eacf53d4f817da33258757aa95b0e888a5409c8471f954993430a4eb5eb804d08399d980f60523be14efb7c7a6663542416d43be990b2eff2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a04c7460568f797228368ef689546e64

    SHA1

    fb6f2e5938d0da6ed503db88f90463d7f3254a7d

    SHA256

    c5684ba36f36ed97fd81d718709f69168307ee4d677b449822c2832b1bfd6082

    SHA512

    1e0ed65640d9d3cca4bffebaf0d06691cdef0b400afb991803d5ae32d8bd682a017509458ea478edb7e6d7ce6909890c3fcf4286c5de09955701d41d05e90c66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    450627ea04f702502871577d626ba5fe

    SHA1

    40aca6d23a359b0df72f8dda22af7d92a398b652

    SHA256

    51fd9124ee3e2929c1ad80703eff110caf00f6604917186c40e576ff1f9269f4

    SHA512

    51f39ad9f2ea23caf564130e5abc1cfe5ea698d7ec32b4f3c916f0d8e04d3fed212c907945eb4d2385254c803227d4d3afad84c1be079eb910858e9ed940b11f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6e4f458149f3b5f54c5e2dcd22083568

    SHA1

    e4b590f2a9ad31378b52508b352deaa21edcedb0

    SHA256

    4ef84ee785a3d4fdec65d6130206c97c92518aee34833b7119785af1746fc686

    SHA512

    fcba7c85a8ba5c062fdcd5650231dbb156cfe33270ff4afd705dc54320138ac524a8cfa859f800f449bedb3f76f5bc0b83edefe1226c74f491be4d19d6b9ab48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3582adbf406219fb3fdc865aab79348a

    SHA1

    48341daf1510d9dad4474a8dc26008ed2b5ab821

    SHA256

    6f7b7d678c02799394d8c03f13a735fe9677b0660274a81241970e757ef9ff37

    SHA512

    a33e5f584214b2ff9a6c000f3f7960bb356db1129a63b7a9ed20ea2f83e273a2d4dcaadf9d40a577432a47377509efb96928905bba5921ae52a7fdbbffc6b5ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    96c7d80f61703c319068a7dc1e0386c0

    SHA1

    85433a52f98c95eb43c3d303de87753f82947c0e

    SHA256

    b6d6302c70bc8c20ad5da851114638d78e71cb0f227cf70055db7ecbb75d6363

    SHA512

    f4a0066d1e6e5b0e6faa38c3d4126c74ab655cbc8fca4993de11964a1573329322bcd2f273a0ef4375eb746a65d38e69a047269a041dc58b76bc09a0bad0b100

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    acab9607fdb551d6f650f08a4700f5a0

    SHA1

    2fca5e74f63a105ab8fb3f47315c0389c46d0dc9

    SHA256

    7b5282711cd2a817325c2592ed91a4978de2ed52d21e4b062c78396336bc2d3b

    SHA512

    2989a69c18ad9243964c08ecf1c16a1c7a58681bb0acf4d36b1864199e918720d150a58fcb22f6d2a3f62c547f9d6a8a52cca099b13c9c6e716a910973b83cb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8a0b309f85003eb463f226af662dabba

    SHA1

    76aa7b7800e8a0ac31d38b9fb3cb35eaac866a7e

    SHA256

    4b91be874f76c1ea7d810af5912863490679872a19b1e05b075b0ffe28144b45

    SHA512

    0c754990019d13301a9975fba50076a4bcf8172921d9c2fd2e5197aec4d5243e45dbbe34a12737c211c60cd94954e2e1054f63e0be5993b0ddc5c46dc40e50d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    884fd435108f55551e58293351e4ec4c

    SHA1

    58ba7c777a3083e46649756ae9606d80f077736f

    SHA256

    3d07d881e02ba31a4ca33d50849071702dcefba04ecf52fce222279c7d09045b

    SHA512

    20d4285b9108f8726721c861f5c21b2714422675cbdec76ed794d084ee38d611cbeb43777ef46063524761a5b58cd6af003293691d11ad61bc9370ee80bd4d65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a4e684282b62dff4aa570adea2111d36

    SHA1

    28d38302b0a225093e4a984ea1da139b5edde96b

    SHA256

    1d04302425bc0d93c1c08d59fd0a28cbc1da610c7b085be6cde546e5aa839b65

    SHA512

    537b993d5ce3785502f64d8a40c87c0bf41c8b8ad05e7e1d86f1e2ada02f481cc06832632ae0e4ac8e5ebea8416536942541aefab8ca44faa2ecce3fb0d156d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7f450576eeee2402d5a7d30400886202

    SHA1

    53c4788f5e06baaddf262a94e3eb59b05c3071e8

    SHA256

    ee27d43c471432cd0ce58ba7be206cbdd7467ad1ddee671f4b694feeaaffd7cf

    SHA512

    e53732f91cb5cae694a7f171e35d0dfe016f852df827cba93e57b33b4c2b866fe2c2dc2c63bfe07748fd93159b045bf619cb12ff59b844aadbc68f786d73d2bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    54c421b15e3ee5654cb1bcb0f742a318

    SHA1

    52ee56aeacc7eb251b8c278275fb825e5bc3894c

    SHA256

    ee52eb41751d83dfebf7281c5f9432b3e6b0a4ac522b7bea9f53c219a6817027

    SHA512

    d3bc30ba7ae0b9e66473c3ce466aee17be75f2c9be4d5fb6fa8916a5d5e6015cc04e1678b3d3770345ea03ba96111c626485bb0eb51c6358d85328922bc577b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    23668ab23290e83cbd85e6c71dbf622a

    SHA1

    b90ddd109fdeda14e62dae85998d8bbbaadb2991

    SHA256

    1608262913df8419d17f324bde52a830d4459d307b46bfc15ba3b407ae8a88fa

    SHA512

    ae40c16cba4c0ef4107d6d31850f3b8dfae4bb146898673923a290854d90515de781d01d9cee0e408a4b427d273f231427a7db1d28122dff131e2866f0e1a08b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3264dfc4ba0a2b4792504b45c2dba09b

    SHA1

    6c8a1fbb0e44e2b4d15465e0ef4653407914cf55

    SHA256

    5416d536a94a4d025f7491af331b538600b2640e779ae79eaf0432312f824e44

    SHA512

    edb21fba5160277457ac75d346384ab3f6e9f6c84750851ca8bb0b091684a5809635cec4982ec960c18edee5e79dec31e62422be981d1f32f5c5aa84aec33987

  • C:\Users\Admin\AppData\Local\Temp\CabBF5B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC00B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b