Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 01:30

General

  • Target

    3733ff5d02ac97df975368d58fb142cb_JaffaCakes118.html

  • Size

    6KB

  • MD5

    3733ff5d02ac97df975368d58fb142cb

  • SHA1

    6ce22ff94eee05ff6b3583bdad5fe4a0bbeaf933

  • SHA256

    45a2651cecc9b044ab26f38eac102d48b6eb98da9e9ae7c64b506147e4bfb1f2

  • SHA512

    634a2838245783988f8fd0f459c1aac8fcbe2d8b02913639aead2c72fba2112be85978093355317fcb606b387547a1174843296664bd00219b01a08a205dea92

  • SSDEEP

    96:uzVs+ux7pHLLY1k9o84d12ef7CSTUSZcEZ7ru7f:csz7pHAYS/Rb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3733ff5d02ac97df975368d58fb142cb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ea04e04e1d7785eec1eda48ebd5f711

    SHA1

    374427a49041a24d7838153568121114ab9cf5ee

    SHA256

    a3e530ee0ecfd34b0dc6fd6616ac447e4213591b3f33fcc2c503f489ba9c4b6a

    SHA512

    0529f3828e75046ed4290969ff5cde978593bb751d604eee53631ad4c2264cc62f851c4c8f48affa87a00e2f4a0a4d278bbe9ded08a50a9b66f70b654839697f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b23cd5287cf9a7bd50c77fbbe78882e

    SHA1

    fdbd8dea6ee9dd079a2c0a9c812370d2b7bacea0

    SHA256

    1a0a29bc0b2abd44f3700f17bd280ccfcdafc5d75fe787c12d606fe2868143b4

    SHA512

    3b234aa360076148b25a5197cdcea84764efdcabd061c6ac2ad02c7c281c2888c75bdfe8d0d6e157457d7f032f767179937db59305f24fc9222993e383c916ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0cc1e04927f2110309936e7645e7c28

    SHA1

    c3cd2ea1cd451c656d900d0adbb5562836534741

    SHA256

    5d6ed295ff3bbbea1d0b3caaeeef41405f1a3afe4cb776e60350c4be40863079

    SHA512

    2e3c4744e6e227e01c2490f62a198cb26ce5eaad859753c4daa73ce19e1fbd396035cbbf9e597a100a4ee9e85002252978001503890987c09640ec04d3716565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cc315a53cb9a2979a7d9ae35ef94b60

    SHA1

    c1195cc8466dc749eefab7ac17d25d3dd8b4a2dd

    SHA256

    e538a9ab2a12eab443159d8aa4b6901ff98c2586770474b9e62c23d74f192eb7

    SHA512

    b01e0c87357963ac600c721feb727056abfc33dc9dd0e90c29657488b0b3a0a44121790cacb50b616692877d5c12270dea70ea3d5f0b8568dfd8f3ae49691d13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c938ee6923c9a2d9b9c1d420e6df201

    SHA1

    fd27f9d2e44b4fc47d18d1d3dd01c0b890c4adcd

    SHA256

    aa4c45094d6ab44ea136e95fac1d299b6e54a7d72d9934d7d3584dde642596a2

    SHA512

    6429741a644689964760891ac6ddc636e1cb94ed994685d255dade5b50bc6b894fd9c8bbb9f0c83862ddc18c5145dae7a2028efd3be738df31059087acd99ef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89e3fd3ad55c18d679e2a15acb2cab93

    SHA1

    d17f71caa62e49fc6ecfd10ea91f905912a169cc

    SHA256

    f95b46591581dcfced70755fb515bffb974c3c48a4eb5558a6d66a2fe6bad81d

    SHA512

    a6361117e4086895639c9828b16532a4f047ec4993430437dfaa6650cd57a7109a23c11b4ed59627ded99c9080dfb81704884066aa17f97a730120f2e65505dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f50698e9fcc66dee37c4d6a5f15983b

    SHA1

    5b958747640b68a2794914a47bbe76f6d8d5f351

    SHA256

    45d35b65ecc437d3034689ba1a57ba7c773b7a52b77b570d183018fa20b1e80d

    SHA512

    f2093c6c7caa98581a5683eff3765a7fdc755dc6fa7679305618b59fd5705cc19b8785faa1c931547814a8f143d2b7d6846a366d5423e74dba4cb87f5996d360

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1de12e157f5559fc448797895e8785f8

    SHA1

    b1ea52c8cebc4ddf692c2508ba9e17e8e9377b19

    SHA256

    c5734c5ab06829e8a4b483c1f35aa102dbe439b0eae569abb1623e758d5ba3dd

    SHA512

    40b37a2919a557f4f984725f3237676675a6b50a74b42a8cfedd4764c8dc6186e4657aceb9ca8b131d488379f4071175f564c6a7d29c4609bf3d3f4b72f4b05f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9411abce1facbffd6eea051adb810431

    SHA1

    bd0ec1c4a6162f71af9092ea9da00e672d970c33

    SHA256

    227494580869a2b65411c7997a59a04dd6e5980f5cc118182a5dd51f63e5531a

    SHA512

    bf717ca905624a4b9cd8b2283ac43cce064c70be9bffada7c7115ea78217cf7bdf8c8c139e347f5a6db21d0b5a65c7553a8dfc11ae6d4cbb4677c61346a5a330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b58ddb1f8bbfdd42e5b2e57e27b4f8b

    SHA1

    bbabf7c3adf6c97f6a902695ffe639bf6d3ad245

    SHA256

    e0d8c195cf992fa9f9f76194f51d67a9fa5b1ee29587008426b18b476c375d0d

    SHA512

    63fe1397142efd5a691ee10fa75c81f6b576dc9ba5f0f9a4d2ec42a5f7d8fb8af08eed9fc5addd2211dcdd00ab4866eb1312b65ed08fccfa568528b681a6bab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    059e3f1f4dc22fff764b583722438b51

    SHA1

    35b7ad2337dcdc17de6ab18f514bcbdb8a237b8b

    SHA256

    fd42df97c560a46533c7a8fa4a4679e2fc6701c822e428025b77f47f072026c0

    SHA512

    0b0c8edff0a471e8010d4d2ff2cc19dd0efe8c39b2b4a0ee07fd55dfd15dbda78acfadd908652b299f62316f39fbf2667e08f9f1de5b1e3e4ea9fa7d2a972ad0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a800e9aeb4b3ea440bb8023fec4b846e

    SHA1

    5552758199e152deffbab84d66e545a1035f92de

    SHA256

    45f67d1cd00ed8c16a258f7f401e152619d4e7c6fb736891e79bea8b0bd00f29

    SHA512

    85f217225312bb308d2b0908bd2eea42f18ef33ff1ad8db607379eb73393255839f5bcb19bcd12251e3bb14833e0e68609ed8c1c0391c5d6a820dba467eaa175

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ec852390d504637ddaddc225456e11b

    SHA1

    52363083ea2f0cb2e0542333de7108096b616296

    SHA256

    1e48718678e026d01e2782ed0fe4366c2810c6770e13a4d057b4c5a7bf8d68ba

    SHA512

    c65d811b7b47c19d06ce73c4c04631ded60268112e6575a771205fa59eab4253cc45a8977aac44a30b294c2142baf8ab842fa04b1213d4f8f4f9fdb578896ce8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1cf2a20cf1156e57cc44d0390bf7761

    SHA1

    0feb1f94c520463188bf77e3532cd9f1348bb71a

    SHA256

    e22026d53988ef599b95682acba15ee1a18a39ffcc053e4fb743c102be7bed73

    SHA512

    a3daf96daa36ca5c6b0f683fc85f03e1a57eb6fb1eb93a502667764c8968df37a82f8598b2ce134897667d9f95977b6fc76b7304b7bb30f36361a483b18f5ad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9797d3f01024acc1bed0938078e16e66

    SHA1

    534145fa1f840ec7b129b565c596cc82572a1e2f

    SHA256

    866f0e3b36b10a8a072c6d09080b3b26ca8f72a3507a977164fe8bda2a2a7d41

    SHA512

    5dea335dc4bf40a4f784849e5c0011fa5b48e4bbce5eda241657184970596750a7b9091d2512db235d6ff5fe9bfc8da809af1c45c57dccf42845dc9e059112c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95a2e0ab75247aac5003ee4ad84cac39

    SHA1

    649fc54e2946ed6f4bf3fb0465ce0a017e20385e

    SHA256

    241f83d18318109497c56e68663c755d7485dad5cee277e8b3da213717eaa8a8

    SHA512

    767888d5cebf530599ab0fb6dd1c2779beb38b9513e3904cc2ea3e408fc5d7c5b2572bf22da12b61f4d9e39944ba936474b1ea4892ecb364a48a7209f0c9b6a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8198800d8a32a069fc610a6d26522464

    SHA1

    f92e7734663b24c00e9c0a4f5a79446d559b0c7f

    SHA256

    de71ff56b1f150ac270098fb0fca918c48b2e970c6531ef5797b4b635db3b5c4

    SHA512

    f7963d7cc49f366ab9981f2d4b0ab54c39b24b5569d45e309e0811b8485ac15ccb637ff47eb7a000fef8c5998c5bdb40b13ac7fd2d9ba31fb39987ef415f4273

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d47d13a3ddc7d4a1cfdde150a1441b05

    SHA1

    98a85649578c40ffacce805aa9024ba90b814b05

    SHA256

    90bfedda67b889f8991ef0d09915d54cb51fc50c9eeee274f9c4ad28a55be040

    SHA512

    1f245b55201d344ca0878f0e697034419e191ae43f43b4b2e1219a593f37144a038a4598a14751b3ffc87fabba84ba5219454ceb9cc53183cdff03a091ec7462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e575bfa3747b422dd129f38bedb733b

    SHA1

    e0980f4276275483aa593066bd3522d76dc12b1e

    SHA256

    057c43f372fee0cb0bc5cfa689df68853ca00b281957d8dc64e7fb397fd4d22d

    SHA512

    a8367cc44905086bcadfd6f39a9c9f9c4b77414c33d2c7b14f3f70127e195f22c2998af35f3812059cfffd81c0a57777a90df0a6298da7806a6f5173b77cbda5

  • C:\Users\Admin\AppData\Local\Temp\CabB250.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB300.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b