Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    11-07-2024 03:47

General

  • Target

    379740b0317b51adb398eb587050dd2c_JaffaCakes118.html

  • Size

    6KB

  • MD5

    379740b0317b51adb398eb587050dd2c

  • SHA1

    b7b43239bcfc0eea37c7dddfdf71667a98177df8

  • SHA256

    8c44b356a37eb058f0b56baf925535941da133c60c132161212a1a4a06babc92

  • SHA512

    0e389edab115e172ab96c6175259503f9a249bfe51d39babe3e1419d607a48d615933b989a829ca422413a4fdf58d1dc2077ad29cbe7e9ebbca8275d44e9281b

  • SSDEEP

    96:pe5WY3BJis4mAx9KMb38rLRMRfBHGvD+Yfk:pe5HLi/uJmHx2k

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\379740b0317b51adb398eb587050dd2c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2764

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e7691242064ef7bdec0440867c199c2

    SHA1

    2ab1dd222bb7d015422b0849ef9fb30311308a87

    SHA256

    9c1ea472411f654785b09a94fd88800404a97a7f5fc09de2abbf713b93d8fa8f

    SHA512

    78c4387c91ec79894b847628aa59210254ffec5d58a232b74e0701a2d987503b9e14d295a09fcfcce697610109690c909d481428e05a5072407a3b7e19c1ede0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c288c9a5a0743f8c3d3cf27e9fe1473

    SHA1

    036c41fe14dc69563e50c2b0bbed84236476bfc4

    SHA256

    35c601ced10cb0119efc29aca2a80ebd2445a8ccde6f914a0d020840baf9e3cc

    SHA512

    afc221319dc1f84409d3da95ec753e114935cc059cd9f3a53e34c4ed67465ef5d3988c026e7f982ad47792fe7abd3cbc6bceb64401de2db2528d27a359434218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    799937eaf62e313ea8e5bf8cbdfeb405

    SHA1

    4c1ded031596f29897162457d1d76224a8638182

    SHA256

    3f4ef873b8005548974dc2ce830e4f136173e7921ff39ecadbb43df83c68614c

    SHA512

    0e1549a728b6a46d7c449679c0ea7ec1412ea39e44facdbc5398ea238aae04bc1607c6f35dc3ad1d7657fcc7dd89a3039f7b85e4fe8b3dbb1c400b97a0ddbe51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e11cc7fa1391cad0a4f3f410e90869a1

    SHA1

    e886341a66269627b3f3403178bdc35ff0b8131c

    SHA256

    4af090aa42367f8caca1a3a2a4663393079cfa638dbc31e38ea24ecf2ffddb99

    SHA512

    3fec59abbf4bd47b15f57007df617d3956b7f11028b265ea0bb7897c678ec7458e3fbf39a6423219b797fd9d17ca41ccfc54a13d25f8415d0037ba32f0147f9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5387d9cede1d33ca6711da7cc5c3007

    SHA1

    a7d8481ac92136282068118462b7c962f3139f0e

    SHA256

    c46467571734777014b38da43e6d9faf0990e5395819dddde259274f5ca17d82

    SHA512

    efdf75dc93ef1e6107b67899a8233f8144dd91525b5a6c9f999defae44c092f6c30ed6fdfbf32306cb8219baaf1d23c64d7f9c46a01219391e77cb0e4208cf55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10f44ad36f89b5949373386b45b2cb67

    SHA1

    10ba8b9754d0b78e105ee75886c2caa56c2da93c

    SHA256

    154c25db7a2045b29a0a78b8c2e5865b349a6bfbfd1b8fc83454fc6304af8280

    SHA512

    3f61f20c59d93543555e878c0d1c5d7c0df8736515dd2d735475dc25d0a6432d3db7d074a783f93d4c0006c585a26cf64f20ba5e6bf70982ba3fbfeb4486c853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ecb8042ccf91af10539bb31ba38c117

    SHA1

    686ed1dca03ed4535b0074f892de1939132b707d

    SHA256

    d3a76130c09b0a9c128340e32018fe85e0236352881c4694ece2b4ff8d58aabf

    SHA512

    26318e6c6647def9ea332259f5db6f8374a5697afd31f5e4e8e20fd249ed31ce40ab383bf5c4141c768bfc7421338d90114d723b00cf2dac6ff7502f66e2684c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca955e51acbf99c1aede52d3a563dcb5

    SHA1

    b31c7b53111c79ad9bc2e73418cb65064b21cc8c

    SHA256

    7fcbe334bccd31e1cd9e6aab148475bb594802ab8e4c3491d8b33d4c76885b2a

    SHA512

    3fdb78c759ca13d11c54eccb2ddd88cdb5d89f211e523e5ac97002ef7aa7c5442b7fc61d09c6caf848cc175047aa903991d74e90eca81d31116c12f736bad4eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0126df931bb4e459092386be9466a0c2

    SHA1

    c303756f90ca8d0749ead64d4240b1d31686d925

    SHA256

    ae3786bb1350719c373b445f18eb5958c66985420972cf8d12844874e5d91fd0

    SHA512

    2129f0e4dd91e27be399553771206a2488e50d109f4f7a4517f7a4ab0318fb18b98a405d04a67ca42427e6e94ab806477eb5767a0bdf7fef5ef69ba4e3075f75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d1ae14b3ecb1953b60f91ec27235047

    SHA1

    4eb92ca6e725ce269642be1a900e0e16c24a7a2b

    SHA256

    e84a7ad24d37e6793db62148479cec2f7891d48ac7e1b8cc3f8cb44c76bd6526

    SHA512

    6b68b66a1e31d044d27fd4313cb28031631dceab224cf15c7d838a214a7b3e9dc5e84e54d478496f02b0a44eea5ce03d5f792e6f962204e45c5f4af8df21f6f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc7fd26805f9464f6791115473770cda

    SHA1

    7d735e4e2d0911809801b4bbd2ba73fb59a5599f

    SHA256

    d8aa70c842bd0830449006fa010fd59eb3642f8c2b3933365156248c426a1360

    SHA512

    de22c919d587fae19d2029ed087cc0385acc3fc25ca2f2afde63b8eab89c122ed7b0f69eaff0bb1a1805a16832842d667a238f9c9cddaedddae0355014358e5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fef53913154311755dcd8804875711f7

    SHA1

    9599b206d940a08a00ad5c25401de7583e279225

    SHA256

    a6f06008497735d815a4ab23a5832477d603b6230da052c5f036639b10f06b39

    SHA512

    4065f8e24653f4576ab0358abd6afa718b631cf994f2f8788b4b6f8380569545c0fbabeee5e99e63505f73e4d443bb5c5f481937002115f55f5a5d052ed0ae28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03b19638c2aa5ed1dcd4aff287ba77af

    SHA1

    eb192d50db82e505e9252384c7005c8ef398b6cd

    SHA256

    08f1ec522d59644f56c3e1e90dee4670188bb2205b1fa5f6461a61df3094506d

    SHA512

    8240dcf445a45f444bc155a2b9b34ecf83fdf93ab84db962380e3bc0b79e57a64a97c5a6f748f9a41d4ce0cc28b2ab718014ba734668e88fe6b55b8897630a7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3c26953465b2036ec6021842b3efa97

    SHA1

    142f5239418f8ba2c0de7dcacb8716f55b1ee91c

    SHA256

    323dcb74e2f6cff63f63b548392fab330c9ee853d734dcde5424898bb47a9c2a

    SHA512

    e6716f4d2158cf71c9072173fdc7362ead82348b3730f46e251b2dfd38f74c49fa1a670f5e8a5c903e81c2775b74fc67e5b75df82566e16d52b6d82046db5542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20969b1fef43b8d380ede5d96b50368e

    SHA1

    3b76d8aea05ff94b5af7a9080c0af7fb4c85f40f

    SHA256

    71d979b41f4f5ee50385fdebcec9133808bb9b685b077d3411ad0fffaac0d138

    SHA512

    83c7517bc541b0ffa3d5ba32c92cf4a49e19e163cd8c46fbd322ba20fc052ad09238bfc55c5f198fff08fe1cb20235d350a4284861780383de31acd9b77fe34d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dde01e3d4e070c4263e15bce36290bed

    SHA1

    805e901aa41c9e768e481f869f340cfba532003f

    SHA256

    0f7560b5f6055f442e9c586d56fc94b009cc57cb160a965f790c79fa610d159c

    SHA512

    d40fa32ef4834be2389e08944b4a3794dc4db6af4ec63a13544b9d8963c2cbc580eb8ee33cc64059bee119193396d6065134d18643afeb7fc33cbe52e8373794

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aa551ba1b2dbb31d54c2f1fd26593fb

    SHA1

    6b25484644606e1af1b06fe917705b47542feae9

    SHA256

    3604ad5fe78a8baf739efe4804f38818d9a05a79c2e749ed62b90df2beddf7e5

    SHA512

    67c725be7c2afcc704914757a6428c62a24cd19a229e609cd99300736dba50f0ac47a1610c55705136b5b2ab26ab938c9a7b50d98bc27f63763557e67d62256c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a2a037ff0de8dbd54fa9d13023997b4

    SHA1

    6284dce1ab773b3ad701384d69fb5f2d7debe701

    SHA256

    e76fc13a1f44558f578d9da94d109b969162ad54fe87496119c61c53562027c0

    SHA512

    ee44033caff3fd0e400f21ca153a931e9a0019f03c7ca9624addd64169f5ed774acad14c3b39fd99142644e1906600ed2af4327d2045f56ed17a4854b856f2e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e926131238837336842d67393be4e86

    SHA1

    f9ca3c474c86f073b9e88bfc3115f6f03888e2f4

    SHA256

    13f14637c5f6ebefb3abf968dcddb805d363897ef0fc08bf934078405fde81f2

    SHA512

    a3733e51d96eccd9f91983a98b48e03f58200be5376793b4970f8e6385627d9738c15fb0337f2f4041b3a659741f7e47f23a0a43647e109ceafd7a1bd1841d3e

  • C:\Users\Admin\AppData\Local\Temp\Cab2445.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2504.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b