Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 15:16

General

  • Target

    39a8e43a0e6e2fae14451e08947c3d33_JaffaCakes118.html

  • Size

    6KB

  • MD5

    39a8e43a0e6e2fae14451e08947c3d33

  • SHA1

    498ce324c5d6e84b3a4a8edad09a076e7c752153

  • SHA256

    d2abac8bf0f1bb532c13730dc9e1221a44dd3680f7734d063bf3a636a378de82

  • SHA512

    b14a30c1e8e258adeb04daaacc97f9266808864251ddec1fdd983a9c5856acdda9020f99f72bdcb4f804398ea1220e7ce6ffab9aec88951df8707c43afe0002f

  • SSDEEP

    96:uzVs+ux7XtLLY1k9o84d12ef7CSTUBZcEZ7ru7f:csz7XtAYS/8b76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\39a8e43a0e6e2fae14451e08947c3d33_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2316
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2316 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3068

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9cbb833836e727d10c286d01e985a8ea

          SHA1

          7bf15732e21c95dae95a5b4ac77e87b298745b3a

          SHA256

          fa097960792bbd935706784fc686ee3171b2ab4aa95ad69c976278e6372febe3

          SHA512

          5d930d7bd5ea746be4e09cd2c60ddc6a5adc0a333b76ecc44ff00d4ba43bd7bbc6b2b8db78c540515cbbd1f912c3f186dcf969b634fd9763f1669acec58f327c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6898094b8b2a0a8184b61ed188c3fc3c

          SHA1

          f0139f96d100a61297a0f02e2e8538e69ed4de43

          SHA256

          453fcff7f5e2ee4f951cb69d28a5167afb7259c57e735765ffb1078110f4490d

          SHA512

          3d16d6c41a59e9d5c6783cf0d1727a053d8afbb62134022d7079a8e6096b4a8db547b3ebc140efcd0007c8dcc6cf05ce03e3ad7eea642ff250191f5956d2cd12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a5c6186f83c3d38e652f6a618967c158

          SHA1

          fb5faf41f1585942efef9fdde0fb4e18c4368554

          SHA256

          95e795d1eba97f262b334da80be97c33fc9a7a778f7654bcb9f178c5f35d6127

          SHA512

          446bddbbe83189f9b6d8ab9f600cf75d4935befaa280336d82f05e3ea27e6926151f4fb23c3e52c59edbba37c02a0c5ec9b04299c3f353a53d121237b653c933

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3926685e5c9245ed09d9b3fec524c58d

          SHA1

          d811f1cd750c55270b9b1c1bd766deb5e49a0b2e

          SHA256

          92c840197fa9739d776b8047abd8cc3f0ac100b197a4a8909ad85d4531926b9f

          SHA512

          31e8ea361076899c12c945eaa6cc53c9128913bd86fd8eb52ffbd2399cf61f733d2c9a27b980bb0dd85f59911ce9f9b66506a43e87e109b3073354bdbe1cb5cb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1ba5d702065c2017b1abb6020cba1f62

          SHA1

          3f60dedf202d1632fdd5de60385aa80cd88c7e76

          SHA256

          8d95ae9994b1a5cf12665e1e02c432d23a573c1a61b0db789ddf4aaf194dec8f

          SHA512

          bbf4585e17e6b5d327a9c9c106db211142e8ea23520c429fa062f938080abf306aaa730ade9f15eaa5ae431f14dc27e5393b89b59e4a153f1f6c2fe577f6201c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cc072695030ce0aadbc24c642bcc8b3c

          SHA1

          f18d0c824f942c3676db7bb6a607d94d4c27e458

          SHA256

          0afab6ba603365fab66248b7ec73ab4a86f5f603b0f13de5f62974b5b5bb180b

          SHA512

          a3af2d73b39374f50bbaab6381cf669f93d27c5aaabb3c2deb91328fdb2c31a82f22f11f3a4f3dcbe589b3d722e7554b209cb96f077f7f57040be76236d5deb3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1353a26405874fc3c3872bed31e28ff1

          SHA1

          5f848e9a5972ec58ed48172a25fa300525c970d6

          SHA256

          7d2205b7f74ea2c4fffcacf4199ae4170f10e581ada175f7933f28b70c150ad3

          SHA512

          7b3ceccf1c93b24d479a8e286d309d302b7a51ff65b1dc8c9069eeed2088b481306ea9005d4b7416fa37d77452cbec81b4844bc235216ec4c499def5272f523b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4ccfd2b046f10d879ca2786d5dff095f

          SHA1

          8a7a4f56639b594ca388bd6a35020273efbaab1f

          SHA256

          35c6572a918b18d0d080c2f7aeffa71ad9de980d280620bbc897160fb501bf7e

          SHA512

          06c47189a659de6c53b0bdc65b86c942ea8b26489f3fdea7a65beca86c4e05775cee6f7a1853584563701a17f6d5038200c2767b54cad4fd3121f8bd057a286d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c8c718715095343efbb26610afbe4341

          SHA1

          f89d2248aa76d3b7b9c469fb43de67dbc008cb8c

          SHA256

          bf24fd9497ef8c58b7da62f53439c4e3cee412322a409fdeadd3f9560a905231

          SHA512

          c7d58070e895669ce1171d582bc3c3eea1461b7f36d2d4af8f8487a81f86015d7983611f8e0e333bb01155c486bc57cf38d2654ec23ab69a762f9229eab07d1e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f2f4fafbd4c920cbe2ef1199b8eaf548

          SHA1

          6bb779584300e60d970393be2b76bd6928e64911

          SHA256

          c4d24881bf658187a07b78f7007f74c7bdaebd8cb7fe6d9a0e7f888bec747309

          SHA512

          dd91a8627634b12f2a9be21ce657c5e7f38764072454426f170b37ecadb9d220fa32c4038b57b7356bf57257cc7c79491c09dfca7fedd4351072071a060d30fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          06241a5994ed1575427683fb32c364dc

          SHA1

          57f0c3812f3b1f6ef3aa95ed9a8faf2249ded3cd

          SHA256

          9226dff2580a8107be60ae1d7cdfa5324739c11eb4759c1a17749d6ab1e2e844

          SHA512

          043728e4ca046d864a87545fc800a4c1940944dde2b6c2aa92daedae4c7a03f26b78205f9b6d3724a8430c09087194fdc5726e0a2feef04a7a8fb3a90714ca46

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dcf3ca8ac473a2268bdd322d504a475c

          SHA1

          cdc30d735a0b5a973e1e7de7af681756bd11d57c

          SHA256

          f0f5139b515fd135b3f6f326569a1eb1236fef8bf29c9d7ca1478a2673e71cfa

          SHA512

          f3d446103501ada4e1cdd49df5e529ad89de2a81cd1297ea0aa4726ccc51b58b0b5c74469fdc5d0a6521f51b179794ae8c2eaf71c1eeb31311013347d2963973

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1cedb264e3712d74ab20fe7fb74c717e

          SHA1

          f75724cf60afb68c0257d32623452964a2abcf53

          SHA256

          0c4b6292a98ceed00636bfd7e4cf6e6a29387bcf46319db5e3c8f6901bdca393

          SHA512

          b462dd9c7ca32560ce579818dafb25d7b11d4314b5f1b468933e94e8302a37124035a32b70bf63a608d69572a956fabf5d956d9e01d6d5bbef1324c3fee0c0eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          84e9ae550cac3191a904d90182cbf150

          SHA1

          e8ee5b9fe4f750a29045815307fc032272c273bc

          SHA256

          1e466ac903d730d48c3c12b61d697acf1a0bc227a0c92e096beae443bdb125db

          SHA512

          caa19cc709f3eb46826ce4d74438619f5aa25f845c15e38b3e21d00aaac1480adc7d28f86d422049cf43df25523db0faa4331e74b381e27894c23bd8ab12e0bb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d9cd61a42a26ac1d8b2d375ba9bf9858

          SHA1

          685983ab765e6c34147ca0b032b69ef4ae6ed269

          SHA256

          de65c55539b0baf175356a88f0cec3b71599f06652fcfe36a9a40d25d386c540

          SHA512

          0fd8933f187996c7dc8d7ad10ada33fe9d5ff430382c88fc4da94599ce2cdac5276517adb0c391ce5627a35da61951fac292620caf957d715203193f9c856a41

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf4aafefe0d8bf99d0cce4c3c48efc6b

          SHA1

          4855bea97398f1de498f3dfeff5a303fa5d505dd

          SHA256

          e4ac2182dded2f88c92bd28fadc0c6ae7444b495c2f37a50d2edeab4161f96ca

          SHA512

          61e504232fc9a280f79f096efca548fc21acd0c1c76bd02d0da76dce854744254e51afcff308f061d1a8127a3d1bf6168ca12f7b07120946ea484d2c4562782c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a82dc9cfbb2f3d59ccd458997a57be22

          SHA1

          b3b922dc81bea6b9e2fd88cc5901c4913d27d40f

          SHA256

          733ffc162e18e1d73d1e58241b6159afa1056700ca011a89867c1c05a64bdb02

          SHA512

          99be89a0af60cee88600a9622c7ecf75e240d986a48ec9c4a6033789329d1c407540ff996e63791d2551dd1b6eecfa292b1b1beebd717844b4faea9852d3be6c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4cfa3f8fd111955aabaf5e3916a61b2b

          SHA1

          50428724f82dad9a4310c9d0038b8f81727b396c

          SHA256

          f2fc47abce7ea63700f3fccf42d512c06a278079b9f29557399bdacd3f67e743

          SHA512

          f8611b8f88567ab921a7b2dfee508b7b2a00e44d4ca218bfc6f5e55aa168ed7f3ec14c1d0108dfa50bd1d19386ae7ea799100c0fe094f401b623e7cb86ea0e03

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          434618033d72ab69e13429db1a877475

          SHA1

          3e8edbab79a3ee433254b6a9bca258cdafe00f8f

          SHA256

          dcb08f118c6a9c77f102d7acf569013d2527ecb49f45ba171d027584f0fb23d3

          SHA512

          7d55684937b834d0879c45e385f8432997fb0bb271d5e33b16820e7cdade0293b675949db82f93fda4e50a0d4b49defb00b2a49ae6ba47ac3768c1980215fda1

        • C:\Users\Admin\AppData\Local\Temp\Cab4231.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar42FF.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b