Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12-07-2024 00:08

General

  • Target

    3b430f4d5d661c0994f52e26f93ad33a_JaffaCakes118.html

  • Size

    81KB

  • MD5

    3b430f4d5d661c0994f52e26f93ad33a

  • SHA1

    1635ca8f539f55162e77c8cb429f8dea5211610b

  • SHA256

    d84efe8403342fe066af78c0bc6dc1e41d8a09c30911984a8e3a6749e14b8964

  • SHA512

    bc00614f3d39a929bd16686424bc9f0215ac3b19635f60787506d4d351f19e898d37f81f7002cdb6d3199dcbb6b83b6e024254d8db423ac54bbdc626ca3704c3

  • SSDEEP

    1536:S03SItIDyIPaFKG60B9rNEjw3+pF96+XYAMiaLN4zhF24H1+JPgz9nIKF/EvgPVQ:SckEwmW2h2y

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b430f4d5d661c0994f52e26f93ad33a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1720

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03f20619e8a5dcf954a1074bc7900b40

    SHA1

    cc7ec96903217683f64127941c50092e2c1e90e3

    SHA256

    ea322915256fd05c2833aeb588534701a4c8809b10811e2ab3135c9818c1792a

    SHA512

    a654adf692bc570ee92399022546071b946edee2eb4da8b8046968b510ee89bca6365d843c99e1dbf28912aa7aea7a0ae397386322f70bafe5d9fc4fed935ebf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea3b0d1ef83e18c94c35745b9712f499

    SHA1

    8d2f5c15dc013eb178c088d3f7385875ce747e08

    SHA256

    3917344481c8732e87b65c7dd093c9d4c2dabd66c024b8c977a36a881f192130

    SHA512

    426119f25b64e97cba52a5db905cc9f710719d5f16e2702549f819b9c19118840fc7e06ba33fd03dc8485eba714b4d4dec191f3dbb0d0a1eb7b5f05b769637ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b35d03bdbcb7b7929361c8bda1d4fb6

    SHA1

    bf622ee36011ba368218983eeac67decea5df993

    SHA256

    4efb44a9fc3465e1cb7a1b79133be344a0b94330822972546907e4ab08c96b90

    SHA512

    8debb4349213102a4976c9a3adf2edac8225e693e948eed864930a67a6153a1cedfb6539fde20cefacc62f1a3d36a07b6e85d35b373ccabd8407c7a12abf8814

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29edb140daadd18ec1c5c75ac73f7352

    SHA1

    29aaa3580730f401b2b134d01e3005655fe34b44

    SHA256

    fd39f777d0ab72487a38ec55310e757fbdcffc625a2e1ae8d9f10f3e02e3207e

    SHA512

    e443b2d968ec601cc69355525f1ef0bc90d24bb8a308359c8e795dfb4d85d00428d86b3c376d7eb8611629e80d90a2e2343e7a1f907b9ef29f60bc4c0e2aba88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73ad83702a1e41b9843d68359c28ac7f

    SHA1

    b5ec2dc5dd457ed2e8ed7f50cfed8e8af520ad4d

    SHA256

    5c9daf0a325eaf9735196564ea206efea45d515d7cd155d4790965d2a0e837e8

    SHA512

    be4ecacd80579b4e7d8f6ef083f97a62432050c3dca18159a450f13becbafdeb687fe5aa1311cb14c2cd42b485351289eccd9338802b9c2f7e28b2b94046e43d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b05c91eb085848bb8e09aa313c9b3c9

    SHA1

    dd0fc26db7ded21e6272f5eb22f61f3e91a6eaef

    SHA256

    b6bdab58c77a000bced25171f5410a515729dbdb32e1b046329e9032a5a6514c

    SHA512

    deeddd9b768e4c66766ace5f08f322b7db9803ff05164824f8df00f786d55e15ef5b637b61f3f07a832334658bc4238234f3ae06db0ae7124b3b6b1e44f4ad83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9299a38f656e2348626b4b47bc8400ff

    SHA1

    97dca0355f133ea4a9d3cdd49d32432a750a2934

    SHA256

    6beca627c92c7ffd1eafd1efe5fdbed03a214643b79f5487b3cc64a4a22c37da

    SHA512

    17b1897bb68be2b984c3ee9c43c520ebddfcd56da75e3ee8051998f34dd47f1e74b87711e11ffcc918dcf171078745576d94915b89ab1adc24f6762c23bce0ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcd137a4504b6520b51dc731f9838db8

    SHA1

    acf06c2ef2d45a56eee370410f34be4298d325fa

    SHA256

    0f1105a7b5e2303d12f0be0e2a897bc55cc8c87cb35c9637206c5f6d420d6357

    SHA512

    f7a01e758a1486ccfbe0e2a3df4577a79cecc6482616d50263cbb5e71b2ad8829b7dd97753ee666638bb0cf7b61c31d095d3d2c076988b95f4bd18c4890ca629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d09f6a3f13f1dd6644773dd5be616b2

    SHA1

    998ad4118c306d14e377655deabe80ecaefb5561

    SHA256

    2138418e209d57abd239c7958bfeb488da0c6be51ecb208d9c765c7824cf2c81

    SHA512

    3daeb3091b4af53a50fe0c609a7939bc699f90df23f458b415457021c53acf135cb7303285192362c5e423b0d90bd92d2489ce8d7f466851f44f55b3fe829a64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95f46cc35d11eaa9dbe0888bb4a1b272

    SHA1

    42972baaede4872dcbad533937945cf6c39949e3

    SHA256

    151b7cf8a66b3b5749aacdd0d5a4eff776fd8d01b47039b03a4b420195744c8d

    SHA512

    1e0d518faabb7b7f2b6bdb5e47a209be6f87cfa528487ec945e4d458ec3e495a118b2cc9bc32274252907d34643a4acd6f4b571808bd4672c9aa85fe8bb1f5c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0143ccbeaca4d241401e013342efa078

    SHA1

    75d94a6f21a28c5d591dcab1585e982748d063e3

    SHA256

    15518cdf278ad7172e49339d1cf2a08d524df42d488f21dcd4e096ace9b42275

    SHA512

    e380f135dcb3da58682eb70ec5a1481bb1bf7ed0e8cb1c1cc42595cfdf099a7ab5879611a502ab1c9816fefa748cefccf27aed3b5097ed880ce93fa2e960b68e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90f9fc192c1ed6b693475abaeae9aed8

    SHA1

    53db2a26fa3011ba5ff8e50b98fd22834cd52e22

    SHA256

    633c8ed01cb5dd338dfaaf60c98807b12a024b0d36274b02ee295dd6adbaddb1

    SHA512

    2b30595e9f33d0d397e07e0b2c7db4910e15ed7fd0672f9ecd28d4e356ec3e062f1b3cce3ac3296d96440cadbc0493215e2ab0298ee8fac3d57a801c08eb0457

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5f3611d9d8eec727846b90235320319

    SHA1

    bd16526a5f2ce946de9ffe395428ae164a05c275

    SHA256

    f03160d5ba32f15bd50b4f1e0aca360b357c5b643bafe5c395c8df79aa2578b4

    SHA512

    a0c21e730cc44bf1899081505ab8a110cd1863c33ab337f72c8ecfc38a48e0d46a96ddf904d2b5b38d57c5c0c259a6894849e2273e59f7f1eed5745e52e4b4f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    082ad20c7bbb75517b88ba3898c7f830

    SHA1

    5bae72f9df4f79d5aefed5e80b63e37c1f29b1b0

    SHA256

    b90ed3c9e666718ba6c03e107a042b980d5d018a24160b592585421e26636441

    SHA512

    2be7510978f4222a408e357de2f326bedef0452520c2ad29d8a84b3a4303966b2c3a4fd9905e61df3b1c0c7c10ee9e8943d3d04d2ee33cab98747a9b155b32df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21965436e3640b54d49e8f030cd76c3c

    SHA1

    49f90f2c9deed6c93bc108c945674a91106626a7

    SHA256

    3c05980783b067e83ca3753cd0a8c12ed461007ad59a96f1e156164d7e391e9e

    SHA512

    5de33f418d69bb76d89ebf73255a8fbfa07d43363bc76e14c7c3473aef07807f66b5661b966a52313f1739488d3701084e519d2e4f7b1b3d531c21ad82f59fc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a5d42c72662667760772e02392cbe17

    SHA1

    aef3bfd0fd166f4e64332f30d314af81a39c4f92

    SHA256

    760ff40ae50c9f6ec9bfe2fcaef2f4e1d7ae791f5c498039666d5981c33caec2

    SHA512

    aba2467d758b029869c314ac60221f11a795972fc2555464d35b7203de0815a3afbe169cedcbf3f27a812c27bf14d2e26eb0fa6659c472acd74de5e182d04eba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1e5ad51b7596be70873bc6ef22c0747

    SHA1

    f91179894c6c571be362b1dd66bf217ce8269d81

    SHA256

    6d32be503fae84c748116eb688ea63a956476fb1026ebee9daf201e347fce0e8

    SHA512

    9d0233bb538075fe74ef3c8203925087f5c6cc2cf086cafa88b9377f2d96f6d755d1178074247ba7d7c921cfe1322603b91f44d627822b4785121bdeb17f7125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4481643bf7690ec641d0597819c8b724

    SHA1

    8c8c786f1543529e85aae85bd262cb3522953aac

    SHA256

    62ace6c483e4082fdb7a60007a863ebf2f827afdd6adf4811ccf6bae28ff00d9

    SHA512

    8d9eb74884ff5d65f6441670cd7f02d797707c6325b8311e8670f2192ffbc49b9d879623ece515a12cd8515f9f09d20904f7cfd4c2c542656de24d7b097a2e08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dba5a9051b4e0710e1cdf9405305fb71

    SHA1

    0476147e816225b27808ae536255b7d796d36e4a

    SHA256

    85e7fea260f59aa7796bc0061ffb3ea0caf0be99580da1fbc9149901701cedb9

    SHA512

    db95569cfd91508c32a7574bb7f4980ed88ceea0986c25c84ec7cef3730e28b0c825b978b315856a482610c1b1aa4cd842ccba61bdbb079f17cde61bcaee43af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    697f4b121ec4c65dc52c58a7f469aa8b

    SHA1

    6b81aea4c269d6564be5386e7e5461c32d0afdd4

    SHA256

    7b30458fcfffc0563e664873f122ba6fac5d60802ce89d9f4ce6d7a80a0a8d34

    SHA512

    76e647a6dd83dd62f8dadaaeac72bd239130416e58771dbc01f4dd28682979f408599fbe551f22308734fb07436ead21a3f5038d9d849af7463c6dc33cbc050e

  • C:\Users\Admin\AppData\Local\Temp\CabF26C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF26D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b