Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 13:22

General

  • Target

    394b902051e2aae0de0d9010ee770b92_JaffaCakes118.html

  • Size

    57KB

  • MD5

    394b902051e2aae0de0d9010ee770b92

  • SHA1

    c77d864d1c403eea3130ba05bc006dba1396af9f

  • SHA256

    5bbb4c49becf905bd10421216d4bab09f5f961dbe5ae590b4c5b78da3aba4ee7

  • SHA512

    f48ec7700accd305a572ca2d1eb581f5b6c27cd9686a9133721c176d2484d8c8c5694933781ef65fddec94c6c062423ddb460f74a9ceeb616afc2f81ee651ce3

  • SSDEEP

    1536:gQZBCCOdn0IxC6+bZfDfffgMf2fZf0fZf/fqfefnf9flfnfXfkfgfCfUfBfHfzfJ:gk2l0Ix+rXTuxMxXSmvldfPMo6M5PbSu

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\394b902051e2aae0de0d9010ee770b92_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fddcacfeaebb66ee4160602e8245531

    SHA1

    aa9568972cc942f1cd7490176f51c763bfd55d24

    SHA256

    db684774653db8ad0027b63bcdcf683b09bb2aa21956584a0ac7b41b96bf41d8

    SHA512

    46dd657f394a222ebb95135f634120886794e7d5d7e09b30575dfe2ca030286b7d8ec4cd7819d26c15351520df1afd99d042a6173d04121cba42a23998a2be44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8aa45f4eab787763a91de323b8021aa3

    SHA1

    0b1466188197cda9d083040ecf51ad42cab8f00c

    SHA256

    c83826dbadbe41b9fc8d6ead981aaf9ad42fd8e894ee3e1d3d08a327585a2c3e

    SHA512

    f5b8e8907e5fb1ca623da736bc36264d94f2f7e5472bc244750a0c9c468aed76c2b2c92481fe7ff655dd7d4b6ecf2fdb36c120845f404522bec6078146fe7d08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44b073fcb5cca07e252ed936a467b9e1

    SHA1

    90527c9cbccdfa2cc7f7e38228ecbeac2ec9bc73

    SHA256

    97fc458ff1cc947792d4b33f7f88008345e891eac331dbe8a36f50feef69283a

    SHA512

    0697bb2aff36cb4ca54ec3dadd6a94d0fb6fdec642b1f0542565cb76039fa63188d0443bb9672529390381b20407586cedd6051fc94f5ae012981e2fa5258068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ecd15c1d44d9f80e5858753d66225b5

    SHA1

    3a97edf31781c74f9355ffa705df81f9d804862a

    SHA256

    9d1cc2ece9fe58a3289fd7f720488618f838bad641cb4e9db37b01e20837e2ab

    SHA512

    c172e9ecfd5d0f21623ab5d954a3b66f13b414d39a4d5dfd7df8db77e92c035ff50e3823acd8e122670b3cb02da254fba1a429cbd3aa26c5aa58222adaa83a9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de641c83ef39be4430b8db15a33c584f

    SHA1

    12a1b4bf1490b6ff3f12118532b93d1d342b8f88

    SHA256

    acc346619087deb53846deaf88245320cee96480a43f6bd49bdd4736fea14479

    SHA512

    3e22358b6e02a77033396ca5e262556ca9ad4711824666936cb95e75f5c2af146b672a61be85426c64ded1644ab180a30fc1c0c555cb851601bb74eab0ab1f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a97a38f5fcdbbd1932da08b90725399

    SHA1

    8af66cbdac77c3c226483b9f824ea5bfef630c6b

    SHA256

    f9e070e9e82799d448f9bcafd2bd5e073e787c87772add5c39d43c4dc87888c0

    SHA512

    1a75d102472c81d286bff527a9583ebdf1f99ee143aecae8831388f44f8452c5f587e22748d0ab004eeac910e1ff16203616d3449fa9c6a71bd530c3985bf4e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f7642224a09a4db65bbd47fabcdecaa

    SHA1

    ee6bd6941a3675dd22e50988a2241ec9e4c0e4f5

    SHA256

    5c16ec5107ccbbe7e493c4e740d61baea3996969a45d2de87ab959b6b2feda5d

    SHA512

    7c423f1e2a4efa8379ac99c1ea64a309ee4a72d0766eae816f3136ca2d6834179b1e1089326761e9541a003193f784a5ec362e1fb4a38f496c3d2c5c4f7560c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4e42f4fbb13ecb2e637c7eb70211204

    SHA1

    c2e843b489ab33032361a07459fe31b535fc5be1

    SHA256

    f5b8a4ad80ea2e580a1af3e08bdf4072a97afabaef8806517022a9f952b43f7d

    SHA512

    7a45c46eb3a6901d28dfe93134345090876bb469a6dea4009dbe2360109643f1c3a048fec00122d70a78372a7877fb928aad4eed3b546181e617790bd1926407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1fc43c46129484fb70a65f24ae27a47

    SHA1

    cd89b9aaa8dddeae528c70681ad0bb5b75134032

    SHA256

    ef0a3968204e61834045884600be96e40335074e83c4527d915eccfe84e0ac64

    SHA512

    4db8d529341fe36d16b93d9687b72f427cfbcc9b172d628dd1b84ed580f44e41d91085d582a22966ae46f4a35cee4a12f78a5a551aec31b6c459c0cfe5000473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7529871a2008497eda608d15c12eb149

    SHA1

    9ef75986c9d67028872f16be4451022692e074f2

    SHA256

    332ff41ead53773271d9efef591d117d34ca087ef8e03f55e8c4ad340ffffdd0

    SHA512

    c677f1b95fe5fbcc8bced8f896724fd3caeec7dd929ddc23740c32c3056d18b69d423f4f0ec399040d5391bda0f0156f5dc879924bf681dbac6561c5bc4b71c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30425a1f1e4aec54c03c78a4132519ee

    SHA1

    8206dcb3445bc0770843f321e8b98a5cebc7cb99

    SHA256

    54242c11e9dbbe6ea3ea44dbf68a79ef15ec3bcb832c80e84ce7b9fd00adbe6f

    SHA512

    59c930a803bd0ebb68860d9444a227d0e0eb426356b293f069fc684729bcbc437b4db5aaae62ce5676bdc8c664cdcd7c842160f325d5f9f1715a6f70293231dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c23af1390f60ed909c14a94349df96c

    SHA1

    ee3fee2dd528c94fd771f8015a230a377706534c

    SHA256

    9ee2ca3d200df230f78b3b96a0aa5577c953774988d3ea8bac124fa7d33223f7

    SHA512

    1845e91efc3de1a1a730c8cac009a34e46424377748cd97218af4448a5f2d538cf9e6d8a425f8dbade87d32ddfeadd718257d0bf9e20e8aa28861dbc727bbdb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    866456f8ee87139b74a97e3a8ca693dc

    SHA1

    56cb8dd6ef041332992c942bccd05e5e688df6a0

    SHA256

    ff606f709224bae27e16bf501180b01efb4a991bf2dc419af8e65abe2cc3c091

    SHA512

    3f37400a16aaa97cdde94121250030fbcd860c79efe8877d28dc661f60404ec4d4f4ffbb030ceaa9dc6693da47abb980f244a1f224798a8fbd72f29799935143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fee2fd6261f32d7b742ad998bffcf3b

    SHA1

    1e34575ba0dbe43af24797619be7065035d86de0

    SHA256

    34a3fa5c06a3c5fe11cf6945c427f3d4be8c8f607c7e64f8ab85fbd4f56d032b

    SHA512

    f52e1da8777985b1cb45fca86e48404c581cdfd8bfa282595523665dc83c676a9a7f42877bc8a296beeca2f3065a8114eefd59b7d4911066f70a02f4968c7d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd597e86384ee88f5dfde8f37918d684

    SHA1

    97d158a785716720e60a7d648f44334981aac399

    SHA256

    19d784d4ee630a789d7ac577bb5fd68de07ec78c08ffdc5c4e32d400de425fde

    SHA512

    191f5c1a535e5d68197c21e9f5c38220a2aae2f8a047242c5e4795def66ee3511ab72fb49861e591e0fa9bebf39bb1c822c274e7182d9ce6a70dcf72d6738697

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68caf4d86eb6ee06a4c2500b59a64356

    SHA1

    64a99c1fcad6e60b595547c5f94c749a2110338e

    SHA256

    04436d257306292184b8274b5a843a209ce3456a0f8e0ef2360b5ad86a6c3ba8

    SHA512

    3de675ba216471c740751c451d7d41d64f126331b5a41565ae76ecf43ef45b252038f7909e6f88dac8e0def87f773d3df844d8f55cd9a081136a7ef39e5e7948

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f17ec82c673510a972b12baaf619736

    SHA1

    3b327716b5315e09f844a5e8d895b0c4e27bd1be

    SHA256

    b628d566bbd69979790679107aa1a2ba91d8c654df4407a332bfcbdc20bb50d3

    SHA512

    1ce6c93e5d8a07bd0c5f8a4af0f539137dccd55f7cf62e51846db2e0cbc839968aa53f5e6ec4cb6eef786322a735adebfbf0abda1e09e3066c36691ca9cbafba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e275a5e5f6ef1d33329e9bda44b58e4

    SHA1

    c4c80ecd38ed2b9a4a437bae2842c812794f77f2

    SHA256

    71243a8811dcad1699ccffb86cd6a3d0203e26a04222020bf4d589629deab559

    SHA512

    ead2727af25e99de9b1c58e6273a538ea8b111606676c6808f4d5d99b114975acd20d7789c28673195f6c743ae4a3829685ba3ff29dcda5b75d831e62c922380

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e3f75fa3a9b23026bb499af4e8627ac

    SHA1

    b6a37fcce094641c3d69c069ed9c54ce4c733def

    SHA256

    3d04c0fd9c095e7957b644f1bc15d26362a353b726c22fb3cbf953a1a5ec5e69

    SHA512

    fbbbc728d1607697bf03b4f194d55522cddb266c73e847a950584d3e5b417db5ecf47cb85a5d9fb7ed7e0d293f95dbb74f1ef98579e3ad3f2f0672207da8edf2

  • C:\Users\Admin\AppData\Local\Temp\Cab1558.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1559.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b