Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10-07-2024 20:33

General

  • Target

    364631733620544c8d1f84b2e2be29fe_JaffaCakes118.html

  • Size

    53KB

  • MD5

    364631733620544c8d1f84b2e2be29fe

  • SHA1

    f383c15d1ccb39cd4331de8a596e924c57582e31

  • SHA256

    ca0b592d9ae8dbc967033e2f9304dd4ab12954bb109d7e4c3ddccfc830fe2439

  • SHA512

    b491dd0006d4eaf611962989d8fc9419065c920b29fc70ef38ece630a59f950d24a91dbe554dbe702b544ca21a3e0f47b08606f935e976b7612fe3e4c809bca2

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUurunlYc63Nj+q5VyvR0w2AzTICbb5oh/t9M/dNwIUTDmDl:CkgUiIakTqGivi+PyUurunlYc63Nj+qO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\364631733620544c8d1f84b2e2be29fe_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2088

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c7b94da23d1bfe23ed10de78f0c6544

    SHA1

    269211acfca95038c9a6e777123545daa56ba9b1

    SHA256

    556da44b738e02f66695f799d9be849cf2cfd7e49bd4b059f82aacf4bc8ef7e9

    SHA512

    6327081fa5a8f19648c0f1ddd7eaa3807ebe5bde24b375d488f33af5009f793ded5469a07b668f98b1c7ef094bbbc5e2d42c8a5f116400fbdd666527a4504d20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1426a88e79a706f40c8f2b260b1799dd

    SHA1

    d74715818ce264c8e3e35031c105c0dbac42aab6

    SHA256

    3b70599bceec29ac2d2ca40ab22af1a8be6a9bed28bdd210aa780405181133ef

    SHA512

    da1f0d081d2f2caae0f51d0690cb444df6bf8e3b93699e9cc2202e0444827ba55485d432a12abcada08cc6c03409103e5779214dd91840a3b88d61b04f54d03e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75ae9ed364d0f5df73235f9c9a5aed0f

    SHA1

    f190c8cdc96dbac24385a82174ffca4ab36c0814

    SHA256

    ac4d7b400d31ee5ab64d3fb64ee2e9247f1f7dfbcd7e94ae119bf934f7d282f7

    SHA512

    a7b8a9fd5f8527fbd3b01c69c71c9fba892d48acf4ad28b8ecf3f2ca23e5c090d5dfc137fae1f634927ebe913243ffcca792bee870e4abca27fb791203f646b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5feb4766c84978a81f21df3746f5e63e

    SHA1

    c067470f83597f0c311b463b6a18a8b9c8f31e42

    SHA256

    f692afd60428e9feb6aa30e634052112ecedda04ba48cb631bc74501cfe0200e

    SHA512

    b26e47ac7f541de2ce0aa390aa814d91bd049df65cc39d6390f21992ad8c282ddf9f38bab1f79d3c881d357cd5a66c03290d327e21639da54fc3ccba01793e2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe247a1f9590d158bceeab7332c4ae83

    SHA1

    ee3378cb2e0c2e9ec993bde0e2029d3397750cbf

    SHA256

    f7b936100ede874d3b04e34288fe392e1c10eedc9b73e9fe82b118931be31e53

    SHA512

    31f82f2b38eb1ced9708cdb1ba3e9f01c9ac742ed288f4049d93f567bf6a34a3bb618b58b4eceb79a89c37b934eca685a53e7e87d305d8d986574b7f3f05c460

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcb6b19067855121f5e84dd8b73b1bd4

    SHA1

    ccab4bce43f34038da0fd4ba4c58e12cebda8edb

    SHA256

    26a194fa772494fed52ac99d43cf702246de03d669957c9f240ea84cdf6066c6

    SHA512

    b07a5d2684127503296e26cd9dc491bc0026e31798bb8b90240de45c36c93a888e9d2d1b52d33f40a0ee8c7e1e3c989daf11f89f140621dcc93cba8756a1ad83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7150269a493d9e98e02ab35d85f305c

    SHA1

    bc1332dc6ad40b8e2a2461855b70eb89bcd995b1

    SHA256

    e619fb8370ca50184e307c317f2594d40f228d36467f555431f1bca8953bf09e

    SHA512

    10222d012b290358459781e734663f8a2dfd7b8fed2169921e6efec8a176f1ec6782e9a7b2c74944435e953d6d05318b52036b49a884bdee5d276b6df141de11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36200aae3396cc4229bc82fab6441409

    SHA1

    25ef7c3e96a476ce09222754ae70d30a3114f1dc

    SHA256

    42bdc78983cd9c44c34ed4e4abf64cd33b891ff60fb6c9332b014e3a73a35d4c

    SHA512

    97b15297e0da19a77841b872dae08955b8027f92bd57fef411ac85e5592705570aaff93db754d0ffa224fe516eec0432fdfde7b219732e5088e9330dff10ce56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e581dfea979c53c2af34f71562be70c6

    SHA1

    110996f92e4c30d288b1f30ceb4f98167fd034b8

    SHA256

    c55236149d5457ab91de8aa866ddfab431435534584197b8c71d71f4a7833ecb

    SHA512

    b7ca8e9311e6adbebc76fed999ed8b5c6b93179206ec2c2a614a062154282a9ada774197bb6fd3218f20d4c04cc970c0bdada6a003a32ab56164ffb1b86f3803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34454da947b6440399d89ff3043ddec9

    SHA1

    651a12842aeea9be6fa058193435f83733e2e2c5

    SHA256

    95df0527fe3a7542fe28d787384a8e017da2a87498c553a2a7af8cfda55c452b

    SHA512

    2ed4541d6e55c5fb51a4af2e142300741b4d94c27c2aa4cc8427516b4e6a8bf655fddb7276e0429873b45f829e941cf50bc0f4a2d85bcfcd1dd0c9aa24be108c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e730f5d3fde1206a8de6ccdf56c8334a

    SHA1

    6334964df16d7a685190cd1fd9dfa7148cc347f7

    SHA256

    1230dd6287348594c963ac8b67d24a8cccf8d1fe1341c9b4d5c36f080a6d477c

    SHA512

    c1bc814f43e778009e5bcfa9ee998c79ed7b2596093784a217ce760b7fe2a757d6a3dbafb290c64ea24ed2edaea952d43c1c425e49ac5eff38275e9ff03d8944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    613b760c5520ca49a4df8b9eef2a05f7

    SHA1

    c6646b05bd704032f1d2b184907d7af61adee072

    SHA256

    75b50de8a3672a07ec39d733a342655a3f5c01f7364f3ea8b01354867203e811

    SHA512

    136c20644e01315adb20a6baf46dc105a1d7c46429528eefda885fd85113e4ddb8faefc527135c1492beb1ab328203757d770c3e319563b3e6b6290b7fadb5f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41d86f21e2826ce14a71a88acbf3214e

    SHA1

    b56a801d722b83c126c30e4cc54b485659425135

    SHA256

    b03ee83f647a8ddb4d395924c36334021c2c21b147a0ddb0e327e5f37adbe6e8

    SHA512

    298311c4a44dab55ed3fbcb78419bdbe0032138da10ef38e1c69b5796c1fce913e2071facfc3002e9733c02f17f99149f4915303aed315d98a2fa5af21f2ada1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a17cf02146d887a98b14763e39e6c1a

    SHA1

    3868a2402021e090b083829f0d34ed9323157905

    SHA256

    ee91d7abfb3c2fbf74b9830ec8a2edf127bb31792cd7057da71920040cf7773b

    SHA512

    19ca5ef441d4c93a18d830872c176aedf15b809203e41e71640908c3cfe85212db869fa636cfc628dc3a81032d832edac0f27495764a3b07d2640ab38e9774bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f8f27711478e4de973f65195039eeb2

    SHA1

    165e42e9ca20bc52d94d6ed1c225f27850c8e5e7

    SHA256

    5d544f5c245b1fe08578ff530e376143865252a2b3b9fafc6c4005fb0a03e38c

    SHA512

    4d0a3693176fc80b58a2eb0e0973af7d758a4246b801a8c6de9e369459c158054732b57f38deb447638ef00beeb549b4b0dba28f9534740e312012a688ddcede

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1edc507b879b1adc26eb2efd50442913

    SHA1

    7e6570284ed5c6da37e79c399af71bad9fe3f952

    SHA256

    d1f83824d13d89b7467f2bb0d19ab87c734dd2dca9565615a76d679e56a7ff9d

    SHA512

    b7f215846be2cbf3bb26396d1779669bd6cfd9f26181f8b0a8c32e79315b4a38967f63eaa8ef14a5cb050ce5ba71be26e1be399c3a1bb69263bc1f83535deea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7dad6d67efabfec3f243a1f19d67e7c

    SHA1

    e18ca4e8adc906def0f8bcbcdde8627dfb4dd207

    SHA256

    bd4b61b81ade24f101eb42a0f303742f7899a787bb537d9b0b917a2482ee9117

    SHA512

    d857d2d2054728db5a7f2f6ceb659381e30a887de412efa133e5601865dfae4473706b83a92adb2649cb2b0c787c34d1ce9c3fdd0114e14fa288e1b550b4e9f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e11ef7ca8cef91f05786f1a01d53ba61

    SHA1

    84cb82cfd670d35b266a43ce9bc726c50ffd4de9

    SHA256

    afd6fc259134e28ff984152680ca21159b466a21335d9e27a6b8e48d8109db1e

    SHA512

    e27f006a494af2d13497d70f4d31fcc63235eaf187e8c4ee8d4572938e9bdc55720e4c89ee7d1f3be6c876bc97e0868d4c1deac9a7f9389b5e115a2008d354c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    486fbe6c638173d484560a41deb80c2c

    SHA1

    4aeab1e6fdd39b06791ae6188454bab89e57373b

    SHA256

    331a26e67827803135a4cecdb134cfccf64c176bb87695fb38b8ed2adfcdbb84

    SHA512

    3e5d13c687d3b50664c2d3191b222ed728cfd7a05f01dca0997fb32bd8f82e0350edcdf74a7c1cd4a67af57a89f0a7d05ed3a92ea3040ada8b1f64baeb181069

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2D3H3V6\sha1[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabFEAD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFF4C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b