Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 05:05

General

  • Target

    37ce0264192586a3dbef73de62e30ad7_JaffaCakes118.html

  • Size

    9KB

  • MD5

    37ce0264192586a3dbef73de62e30ad7

  • SHA1

    53959834470d5f215dcada17ad9889d7e2bfd5d2

  • SHA256

    b6d2be6c568b4eb6ea45c066a282bdea24239d4c3060a542246c8278934f3af6

  • SHA512

    63b396f5b10b33e04269036972781d3000b22ab653aa176d75745dcb6701549b8a28a1f3d55025ade64ad51ff8e2dca1096f8d90b3a0a67820ad4adf744f7033

  • SSDEEP

    96:uzVs+ux7CKLLY1k9o84d12ef7CSTU/GT/kgYcpV9oHVklVHcEZ7ru7f:csz7CKAYS/+ziV9o1kPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37ce0264192586a3dbef73de62e30ad7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2448
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2448 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2440

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6b5df23819d75393dabcd28f4e011785

          SHA1

          3c1636829230befdaf4938efa691d177a0bf7527

          SHA256

          20a9417e20b715f92ab8ef9e639fbd778bca60b3fbd523b55cecf4dc17be9f43

          SHA512

          1c5e6eb8aaa701626ce441bfca2fcdecce3b4afb423f172ff3ce6ba0d2d12b92d4416b81d8107ebb1208f90ce145de317c83402686c5efcde8c5a5eb5d0073b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b78356b003ff6010299ad1c00d101974

          SHA1

          6d5a28a3ddbf75dddae65f2706bb57ebbe566a02

          SHA256

          0a21c07f908a12f97083cb4c1ecb68b8f99b66e304a1e2dfd2d211bc7ace7b64

          SHA512

          8db4b5fc8b24db5dfed699810d453805ab0d0a4878f1505e5e906e0e1fbe7cd23eef3c16a8bf625981225fd9859cbe9d8be1531fb5d69e92b0c6c036b66df5bb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          64af6e203aaebd653828408cc354ab7d

          SHA1

          3638505605ac0bf5ca5dc074c2774da77ee5be1b

          SHA256

          44ac72013296f693fac854365abb023ed2a4d7b185df62a705cbb4a0fb307174

          SHA512

          c554c5590a3e8575b6c90037eb4dfc6fbb86be1bc94b7616ebe48a58538bcc14ab0de85e52829e1893dbdb03f8864da774426dad90b5624b3fe94b336d79fc4c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00198731e42246848cc13ad44cb6dea5

          SHA1

          ad3d8a565cbc15ac830e2630822f34673ced96f5

          SHA256

          760676daf6f8087a564802587173e9d814b940cd1064ae654a6202e0d832b3f6

          SHA512

          8f1275ac7957bf7a05df9cead6b15af63af444789405d010836c657580a54cf670e5e6b191b8ab97ca69852eba29e50b1dd3d213e4083926534f0927f64dbaa7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          248a3fdd3befecdd5bf15906e06fbf2a

          SHA1

          51bafbafb099af396aebb631a0433d269a77249e

          SHA256

          7d0832b0bdaa2acb82b8c97d8625613bbe7b7121d36cab3f3148c8360b0c85ef

          SHA512

          76f7bf9e62ad345a19f83370777fffe6a43c61596136e8edd2f3ecffc370cafc5e0a2299901290181f8b554ad682712b726ae3a203c578ac3bfd1acd61c1abfd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          24126728ee00f534fd4e0987fa0741a2

          SHA1

          0d04b50890ab041573c5c5c14bfd3ccd86b0711e

          SHA256

          713141fc7ca11284c2ee36ce4e7feb21dc525dac087428bc822b9515f41e8e34

          SHA512

          2984e2d976a85d6cd8fe6db2cb74dbd3e4ad3a1c006e66e58ebdb92b99ee63205a6833d95c6e3d8ca9200f0526f45ea1705e86f5f36af3446a1b098dff0668d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5e1e1afd3ff540f59d357668f34569b3

          SHA1

          b86f3dc3f30aef43b873d3de97f0efbfe9a036f0

          SHA256

          4e422d6a3f7b8a2c27d659d4af3070c394faf64a08985b5d76ec16c5407b1131

          SHA512

          f428827b9b90008f374640f54c034a5e5f3c5306525bb31f2dfb631fee85273c2413c1f877c6ca2a16a1238ca31adb10726b8484db3b8b99c792b4276330e8ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f8c1d6382d799a1c4197184c7260012e

          SHA1

          c7383b00f155650432315ddd48b2096e3cce5062

          SHA256

          82ef96cabb56c863fa3af78dce1b6385e35851a043948988a605cb6fad6a593a

          SHA512

          e6afe772720760d783b6618d1a84d0dd3a24e47e96b2957f80ba85c3654127490194c6122323c01237849c6858c853b04234b61b7f03788f02a03dc91646aec0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e39ef18b46d37175eb267449b8be4aa0

          SHA1

          e82278b5afab9d03003c337398fadb246b139dee

          SHA256

          44f52cdebaa83fcfcb603865c924d122badb655be812a4b4212584880c0d254f

          SHA512

          79aaadc82ea7252c04c78cbe1da795e37a01266f10f6686b6ce9f543bd8675a602b8efebb34042664581dfc53977839268449fc8b5e5837f1d76154d85d269e4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e79e3b2cdbb523583c8980ae8d2a21cb

          SHA1

          5d5ea717913d4a7260b13ef68fae8d272a1bf1fc

          SHA256

          fc1b8138c9833039d6028442bfc7fd87c8b9d87ae4df28692d59383ebfd1a28a

          SHA512

          7f04c03a0d485d92f74efbe738938127ed88418e97b093e82c7049a67728ea2dd5618aea4c76b48d072a1c46877605432419cba446dc1d1b753782b643b60472

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          af73c2a2ad178a43c85cac42e02ea2af

          SHA1

          0a2f9cb7aaa5b475a80ef54257934e211aafe06a

          SHA256

          6fbae22c3348a60a2813d256f5b53a7604d9fce646da26f7daf15d5f258a2e89

          SHA512

          e5e971baa3a5f99e87320c95000f885c3efab3847c80bad29ab251a0714ed045dd19632052e18dfc2be64aa7919bb205d740cae107421b6302e480ef079ddfe7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          599fc7ed0aeb2c99171d3bfd5d7350d7

          SHA1

          41d77bccba5f39a6bbdc57a747bb86c0966b2f2e

          SHA256

          8a3c0cdb69b3904abb2e3960b983e1f1c15c8a812b7955ecf03f9c9e97eb0208

          SHA512

          870aaced8f4e7facf323abc3aaf5c03260bb9a990c594f0ffb830242a62b81f80347e02382d9d217075f7163f4f89b049291691e9ec39ba3d30bf5c72e24c1dc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8fb22604325783a28421d6c8fe572be3

          SHA1

          547617cd7787f37917a9aa72284b4de03a451b8c

          SHA256

          db21c4b1e0aa76eff5082e6aeedbe84934fd3eea4f253c4ef09f9a221d7980e4

          SHA512

          1d256dc15b21b0d362e49973ab0b0d00ed8a4dc5066c4497c44dcf4229a0d7c15d799b10771535a30d19ca08c177191cf47c895c8a33b7a118edd7ad524c6fcb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4995ebc4029d1633e9232023489f45b3

          SHA1

          c06f9c4354ff6e1e22b7c5650a10352a3fae2e2c

          SHA256

          b5a15fb1a925dd0516929c76b22ac102f473e6f437a2169418e9722b3e19a6f6

          SHA512

          95617a6178cedb030cc4efe56f5e087efd2c5e6019aa4f24fa00d67bc313c45f60a5615563b981a9ecd81628b0813ba9aa0fa5801488b0b09927360878fdd3ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          45da39e2c53a2358fb4616b88380a358

          SHA1

          026e5a97ed1d1c14d28f0cd393997d9b45254639

          SHA256

          7c4b2f9632cb668337f9d418ab9fe9768c7b228b2dbbdfa36f0dd4b031ac3efd

          SHA512

          601afaa924e442aab8752dcb1c3748de15b5021083f0eea63340a0032add81a1fb1ff47e5304f1df54097b2e395a6599f0d58f09117bff99df32ca7c2fdedc57

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e7f2e268fbd73d0f3f88225132d834b6

          SHA1

          f61b252e615e77472e3cfaf4706cb960619a79dc

          SHA256

          5757f4879edff9e1868e01e3aa49b33bbd942e2a5863c3d081e60ddaf9eb725f

          SHA512

          95b207c65a8fbc0c5e596180725d519df0063289b8ed144f1b45de0b9e247fd06637e713605857aa269c1449d96adb575e4192fe2dc5b41560e26c44d20b3bec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7e82ea2d2d4376625f5c109b4f876174

          SHA1

          aa32fa50f8f518a50c1455fe54556f8cf90f5f21

          SHA256

          fa339f5d9c69a2a440533804f25777ed82548d24626cc10bd8e477485867a424

          SHA512

          6c53a3f60920382156052448368f1ce0b8af0d0195310ff51a08613fe5d698bb2217a37687425115511ed862906fa416fb8dfc9e97aeafbfd89fb47909f8e3f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c23715ba986bc0fe3a94fd4a52dde5c8

          SHA1

          030327dd6b4ae72f270e1664c658a4e7d04c2b0b

          SHA256

          7cf002e4dc94198c4de0435a4e576f9adbad607c1e585cf2692e79bfbb0ae1af

          SHA512

          17ab54d3709b2f09bcdb07b674abae147085150e0e063671a6b4b672b0461aa3d83923c24df1b47a4e8142b5386643b6e2021f648693a4a3d7c905779cd8e4fb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e052a763a385b68b09a7a3fb3d984326

          SHA1

          1f03fc0943dcc7a43bbfc5b69f13e4bac2ff5c8a

          SHA256

          47467ae8613c389712f936e9861b6fcd69364d5dcd338ebd58f63be9a5412e85

          SHA512

          f5c595147bcc074843e2f9a8c95a3375c8381ee95b5a8b9b9a5fd4de06611451b12fe8273b6600cef15217e155631819ba6099bccac54727d575867557435d20

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f74e9c75b79956b8a8a79db3a6601dde

          SHA1

          bb5daa3f22c9639641910f2aa18a756e9862c689

          SHA256

          e2d75cf077fb8024b6c071aa25132e69ced6a88674fb8e412fd1da291c88574a

          SHA512

          9c6350b696a1536d2a0deb0cb63863bf43fb94971ed901855830b32378aab763f680e243bf82d897550f6b6594b498e3a437e9d435e41aabcc9cc45410d76156

        • C:\Users\Admin\AppData\Local\Temp\Cab4711.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar47DF.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b