Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 21:59

General

  • Target

    3f09aa590ebd20a0caa48c2731120b69_JaffaCakes118.html

  • Size

    9KB

  • MD5

    3f09aa590ebd20a0caa48c2731120b69

  • SHA1

    2aaa20eb7141d26db707a9b17febcf79999d89bd

  • SHA256

    da19d38feb5ce97209a4542eea575212067a9badf891a57cc6b36336c6620ebf

  • SHA512

    5a9277a29b01b9f76608f71ab7daa030714bbe2f2f5df169ab28e3721c6f77440764d53fb2811d0548aa077e35ca47344fad80e15000945daab3ecabf7f809bc

  • SSDEEP

    96:uzVs+ux7ffLLY1k9o84d12ef7CSTUSGT/kPs6pUlVHcEZ7ru7f:csz7ffAYS/zfUPHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f09aa590ebd20a0caa48c2731120b69_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2708

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          b4f83e2209945eaab9c34fd1bcef2193

          SHA1

          70beb986ab313ec6110af75dad3f65902b6f845e

          SHA256

          bafa7ffced072fff9dd36ca3cfc12be7c64025b0781247e1c3b88317d8e07513

          SHA512

          8d04f0db26069828ceb9fc1198d2c789afc5994eb5d971fa0c90ace7932ad77a1d849b4bec8a9839365eaf1942ef76ecc8969d92fcc430166c75d19d3e3b9d5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          9e5fa1bb3c18a5805f4e45e960500108

          SHA1

          bd639d636cafb54f0e90b9b6316c05421085c30d

          SHA256

          ec1e6b5855bdde4946e708815921abc02da5c73531af6f8dfb79dff75297ff69

          SHA512

          881e9b4ebd341e36177c8bb31317865136f8edb21f7101b4c821ad9c86f920899ffbb5a7df0c63b76b0919b85cb7314ff8afd5da8f797a30629d5bd10ee26b0d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          90fc3d19fd67553ede160cc1057c2b9f

          SHA1

          9c7a19e0803287f4e34e5daaf054fa67b21ea96f

          SHA256

          69ea30f6f44858cdbd1c9061b694116caa2a4cf9a84ecbe2cc5da8792a762198

          SHA512

          63078304d73dee32b163d516f99046c458e17849f6b6f3c97052129cc3a4f9557788a8712ce37fb8ad599f14b7c69997346647f86fd35827edc5651b5ae12a6a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          5e74ce568ee763bf7216e1871be7a7f4

          SHA1

          d09c3aa9df58112b4cce6a00330ca740db0fe9a5

          SHA256

          86fcd3ca13abdacba983aa438857b32115b60dd84fd5ab94d651c41dbed91987

          SHA512

          e2c4e757e71043a872d5b56316ac8184fc41d2ef345755e9c452e7c1e0a5286ff8bbd47cc91562cba1fb8dea3220c2f6181c734c6d2a51c27e39f44f6075e03a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          514412cf8d2b04e77cfbf7009295f77f

          SHA1

          778deeb8221db6e40697e0b5e5fb4deec150d7a4

          SHA256

          ea3d6b8f158d18ac9dfbfe7c453043baad3b493f939bfa18993e9df02aacc336

          SHA512

          c7316d9ecfffaf4bd322fe76ef2bd5e788c6c0d9a15fd27fc37808518d1bb03395dde0914b4184d2269ae6af7dccb6fbecdd0aa6ed6dbe643c612ce221fac1f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          dc706138c1d60b826753fcff24c34295

          SHA1

          5a7feb9f7ee28fd4b435004f931e088293c3208d

          SHA256

          5bdf32a88a1fd03cd4fec87b413031a7120688cd1fa1b98b819eaee5d622e540

          SHA512

          755d60fe02f31358ce3d67024fbfad3274ac675263a1e96c10442c731229a2074eb2a2fec026abef81af8ff31d3e1ba6a35007a8f5f3c1ef4b1ce970838b9782

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          be9aecb7e4cc014e540e6b7ed8c0edbf

          SHA1

          c8733862d979959fd00964a3d5ea09dc5f31db1f

          SHA256

          f355831cc2fda9274b325731c109fa62c56e49cef859dd13667f498c9159b282

          SHA512

          f14e925cd6b0c2b695a8bf8008b8419aa30ab60a7c52064a167cbe6b14b55aab00eba883e2abc98af823ef8c3800110e778a09b62e701f118e84e22faf008033

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          a7e2147149aa1deff1fcaf3b15feeebc

          SHA1

          e4a1b993f46a3ad3400a24f4582b0123019d9edb

          SHA256

          7042c932b8a90f4c3476300728127d679560380fbbabc870361373811353c04b

          SHA512

          13ca53868fcccc8e8eeca7543635aabcc75a1e851c5daa4182cfff546dfa4551e207efe8f43b7bd4545ee83bc11faab315eea28e5e9482b40792eca25bb6d308

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          a3e2a23bd09f2386ff809ea359cfedeb

          SHA1

          e99677861fbbec2674858cba96711fbee3aa80bf

          SHA256

          ec4ce84754986df9ec4df89123fd358a1b48f67491163708e64691263ee0cc9d

          SHA512

          012cc2ddfc9e110fa3c21dd817681cf322d7064dba2347626790a05dd0df34f8cbb4c5249c5476112cc38c8e96e16d31fb589c0d1f6520b82814a851e4809071

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          47c22da49a538039c1e6f2655fbae5ef

          SHA1

          e6b60e39bffabde1c2e71a90d9f5277dd0aca540

          SHA256

          d231817263bd63df31c0f98d12d5640da5d8787c8b494a78db967c492c2baef0

          SHA512

          67410f319e4765ecca221b28691c6e67da507b8b38cba17bf2bac419368fc5b97982e07e5097f0da739809c43f673202a4cb5a94488980eb7f38cd2c02a8619c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          555e30a92535372057fb9233261d50b6

          SHA1

          b3477b81746b18c217128887014872448d0d186d

          SHA256

          5b06f1a7279bc767ac0bb8bb0bc37e307fe56720a027225d93c97d4ed53d8c9e

          SHA512

          6c3f3db74e418edda805de5cc751002f54811307e7d74711f4c7378c0cd6bfd991cf80982c80b287462635d82bc56a29ce80886b4392353cc40f239fefb7547c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          28f3859e240e40e2f2c241f646139cc9

          SHA1

          fee6808ead03202a380faa7c473254a60c88bc25

          SHA256

          99a64e0582bce379caafb3c06362a3fe780beaa1ef958a9ba2ed602990d0d64d

          SHA512

          5dba545e5f79d4855e77a4d3dfc4d750e5450b9030ec766be090ff4835d037dcf890d245619848af41504297f72e61787ee9068d66fcc36aad787183818a3f72

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          e91831249ea19b74e7c9a62410de89d3

          SHA1

          e5ac5ca88de82780d8584c3f6dfe27a4af2e2d8b

          SHA256

          da5b33bb517f6be237fa199f57731e1557d746994f40351218b7bf52ed4f5b4a

          SHA512

          f07ccf19d39f2e2e9dea550abf3820253df97b20c052291070cdb5c98f6293cccf7e947d28e83f1083370ff2f00458907d5916fc01a276cd06bdfd07f462338e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          581740aa35f6b3e43486301e25ab4faf

          SHA1

          09515dba31d7840746621b0ad3e38d483fb0a7c9

          SHA256

          23833011850bc54a387b193b53b843fd535771747367579356fa6af93528a896

          SHA512

          dab800da3698b2e206336bfb47cf6103ed7162322979bf96b9894ef032c9f105e93a34b2141ec647409dde4a012882a14d2a4d43174dc97f425c07d4ad8ff443

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          119a47452a013f08dd1531ab9893c771

          SHA1

          9878c7540b99ece33a41acbe15cf9676bb23132d

          SHA256

          d5b127cbc7bbe5c9bc41a7e60d4af1628b3f110e5d19657eba0a868110c8ddd1

          SHA512

          1d418d1b642cc89642fe9c48fcfbd2092ac433c31c06fadef974f0b3b1e9ccba2d69a2633191a84855bc687dd3221d258d416fd3e5b9ff7430ab215b0b5a5d96

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          c5c8902eec8544176e1c990adb2a2f5c

          SHA1

          443cc887a01d95e36d48a2500e258ddee4e145cb

          SHA256

          84afc8d77d9bec897d2ebb4e07be90a33b5f0c9cc8a424c0359e62ed67335828

          SHA512

          205aa4660239e6bbef46f55cd9137eafda532135cf2ed252e3eee2dc34ba104c42042d1b91d9b41d59ec1e70d8843dacb3fc854b7307213c9a30baf3f9dac307

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          2d14bc3ef1660c233310d955ae1a98a5

          SHA1

          3749163672ff8e0ffcd7d445cac173ba7fbf52dd

          SHA256

          6bf9b35b201c4154eeb9deec50629d6ebbdca31061f76c9a0cdf636634152d62

          SHA512

          586653728457d2457f7c083686b74d4d0cc776507ce401a00961afa295a3c2b665e8840c63884f4c9dcf759e4c1b604679306fca4db50e30ff8a96b76a9481cb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          304B

          MD5

          e0feb8a9e113763dc9d8e3ddc3e7a945

          SHA1

          41b94cbc1e0f2af150597c4e2ff20ef6965a531d

          SHA256

          787b2522d81f0ccb934754f15a36bd3951f6f278247793bb4281a933f9ba3d99

          SHA512

          2e84a7bd534b221375376e87cc793fedb50b4324eafdad0f52567bd1579fb8990eb854825e31eeae9fed7dc79bb2fb37b4da1f8e590ed9e34f154b678ca58815

        • C:\Users\Admin\AppData\Local\Temp\Cab4C5.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar564.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b