Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 01:05

General

  • Target

    3b6d02617356c301b0f7420c238229dc_JaffaCakes118.html

  • Size

    11KB

  • MD5

    3b6d02617356c301b0f7420c238229dc

  • SHA1

    65b0f7dc8599f30e38ba0f515182647bf357fe2d

  • SHA256

    49f081a47368fc1201bcdb81442efac582bff1f917919fa267feeeb6a68fb679

  • SHA512

    2791ef10b4fd46eb9261ac5fae77185d05d368b2370ba24ab4dde762ae686dacdae6cb6c0c2c58b2cddec70a89af2b10f50dcb702e75b8bc4735fea41a89e914

  • SSDEEP

    192:csz7wKDAYS/ug8JSpmHJVHJGFWdPHb76f:cvKDAY8ug84iHS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b6d02617356c301b0f7420c238229dc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4b5e58090e166188c9be4f05669d2301

          SHA1

          1fcf0611d510e7b671b4b0673009555c0e7395f8

          SHA256

          124c47dfd8f90e1d602c58d8b27cf729e1b7d9da3d39c1158d100a73a5958eac

          SHA512

          bed205f57b2a4a617347d45ee4978b812e85b6e0890b028c04e3b79a5e17510c0b0143be9fe3bed98f14975678b0ea4c5ee48314b0abb71a633c38a8f684b93a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b4954529954244db5863599d47a56024

          SHA1

          03ddfa3cd44f034aa3475edb1b0758a05d675f1b

          SHA256

          daf5722803472fe03456f0bae491b00745dfc3ae20c6dc604a680cbed709e826

          SHA512

          4dda004b73299801577b29bbe9d0c68766b7486b5b7f189d8219a2e1150454f604d0360516bb30faaaf16cc556d831bf496a1bb004f545a6ec56fb65b96041b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b5ff53b578acb3492fabcd99e1345e91

          SHA1

          d6a9479800556808ea027f424b4ffb866a1aa1b2

          SHA256

          9c410947e2dcff0c1ec99154f710d8d210fbf9d2417e1115c671a2a3a07e03e3

          SHA512

          520bd1f08a5e140c18c12302dab8cd7516bac91e616c7d99a5a338807c69d897347547c8af9551ccfb8da261efd41260e8cdce72a6422d0a7971e100a62dcd45

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c60dc5d9d27a41f895488ba3100de497

          SHA1

          a1eaad28c1bf0a5ec0d396d3db6d08ec7727f4da

          SHA256

          7f0d19c31de5860460ea39a331d530448a65e48b1aa5702b46980da82aff518b

          SHA512

          9b815e183d6adfeb9342144c94e715e4ed6db3aaae6750426679b99ed9c5a4a0f96d72aec915c47d3f9deea9fe4d6c74d934bc25edcd09da249f78edcbc66895

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6c16f2fa23570b241a3d4aa34c70a42e

          SHA1

          d2ff4bb686838feb36eaef521dd251928b1c6bb7

          SHA256

          bc2a37c181e658c78e90f089bc7e63c2c60036468c95e63cedcfc27749c8a96d

          SHA512

          1cd94d6c9a05263a13c9ced9ec2854d2a97d6f8a46bf1c255efab18a463719e9d179bbfa9c3fee63108d262c296b2f3d4db49f0ba473d785064e55b70adf84f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3dc07e025fe8eaabd866d1bcaedeca3c

          SHA1

          0edbcb8bb2385e1d1c1eee5c540e150a6bac2a5e

          SHA256

          fce98d92f004454c2ff81a602377f76a498491d03dddb695a341cb9ac3fa029f

          SHA512

          2deaa98a301397ca8fae4c423fd5abb158c90a82235d6ed620ae612122f73d159ed5e5b6123abb0173a6b15abc3148dd38c6d5f379288d7130e84ffe8f8fd6cf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dd35971009ee2c0294f8b9e8861680c4

          SHA1

          6dc8228dff2b75e8bc7cf3914d6a588c059afd06

          SHA256

          777c9ad6f74a203e7ce8423a608def17fe6eb7d63165985d9d858fcb49ff068e

          SHA512

          1c19930e3e14344fcc361d4e5b413168a098b552eb36695e6978e655661d514d28df31c58b4164dde5cc56fd66ce588731bf9a70c384397dca2c2fd889e0c729

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          860fc4e178e8eff39e47f371ef5da6b6

          SHA1

          262d003c268b9aeeddbc4bca36d0b7a39d518ba3

          SHA256

          4750ba598ff1439f969e2db1df76494d118e7e4b6f592d6a924a33e28360b2e9

          SHA512

          241d1036a9c99f3e00a523e1ddae761274e8e23a8747b76d6df8de7e963ecb24eb6d4e964a65c04155e0ee779f01ade93a929e595b74322a3b844f9b342d6a73

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bdc2894e1cf4246536decd6832754124

          SHA1

          68421d5ab3ee9754bfd209d0ea825098048dc83b

          SHA256

          824f965c1636dfc39891a0fadea66c2bb61804795db578f83d13f0f22cef41f6

          SHA512

          1f528798f3f3f97987fa177eb39a07de85e1c577101c11a889ed12770d9a41ad3774657e4be3aea3380aa8a39c319c3feac16e51b6fb78e1e2add21124fda33f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          65223db840503d26897b7472041203a9

          SHA1

          70cb9e9eb84bd5bdf9441588e19f734713057dac

          SHA256

          0276c0c5348a2292ef55a05188e2f1873be1d508bc4f6b0476c3a95bb452e3ec

          SHA512

          e87104e2e8e688d73e8be410e0f234137296b7c1af343b2807a135ca5cbc626dc0d6f6d0938287db86f6a0eddfa99efe1efa181a06f9243503721fbec6bebc8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          59ae9e9cd7bceaa0b560441bc11ae89a

          SHA1

          8ee7f26faad3b487dc040aafe3fe92b1acf6e542

          SHA256

          b5c36d4d97a5745259d1bc8bd9302f86f8c1368867afdf55f74ac1685f1d2bda

          SHA512

          3e8423e6ea22ae05b3c169552cd972ca720730829f2baafa05e1a7eaa4712257109ac95611e9d4a78e1bd3f77739b029088e5abddcef1c87f691e427a77cb20f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b14f61fc621d1d07a89bc9da024b90e6

          SHA1

          75127e8bb5de55d3eb6aed4c5e3355365c347d86

          SHA256

          2267ed11e1a4384fb919c060fc4ee18d7a3590047e89611865e49fa815bf8937

          SHA512

          e660f162c516b456e2666df9f11dbbf40e041d483c18a9c5aa9662bfad557b4fcc6e45fb18cce785cebcdcc2955f6723f4fd748827ab096220829385d0d68abd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f7a3940aaf50b65644847986d5f26f8c

          SHA1

          fa265d78e868dc2efa0e3d8e36674f9c623d6bd5

          SHA256

          ac7382e74047944fc88a99b83b6718abcd90769d2bc47b6a8701dcf56f659fe3

          SHA512

          9d62c7b169a3341f52440804c73dd85ae7417903a357d5244340887645d024a631dc7ecd2c6cc85da5c0061828d8cf5117860eb0763397c09a57506870b3dabe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7474b6b940c1d117988a27451020bef7

          SHA1

          da30ec53f9fd60db45bca8b16f0304e7e66a258c

          SHA256

          7bc96f5a33f53695bd086f6505924f4dd70900e3ddcd5e65153f3497a69fab0a

          SHA512

          2eb1e3cd6126d05c037f21dfa400b6934027e7a1c8559966c2c9457d47db2561b06533a62bfec760f4b652a3affd60a52119eff0ef675c7a4c9e7f5dcf2b4e34

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          581d5613a5d40a9fc1c4aebbb2b9b0e8

          SHA1

          ac97c4f70d6ce7cea201ea1090b24eebe9b4d5a7

          SHA256

          b970d0f86dcff5cdb2bfe78d633d51d57ad2c9b6c43531c4e29a2b34296e8ee0

          SHA512

          9658fb8210680fb7744213fd8cec0e464160c8e0b38df8b688fd92381d521e1d90b96256be2aaab4d126c4b84a1558520846da3e9f2d249b4240682db4f73dbe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4fa3e9f3a31021b71378f7b4c632d174

          SHA1

          424a38fc1da7bcf5a0bb1c80152d7dbbaef5c202

          SHA256

          61f812879efaa144005ad68257ac64c0f24824c0d251be376bbe09cd2a71506e

          SHA512

          715ce36f999f48b66755d1fee4fc8e586bec07dc1170405032f9a56762a71153943f4080b5671363cabb0d05e75926bc901de81d5d639fff212af1f434fcaf21

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          69b0652109a36531532487504495d89f

          SHA1

          3b90835f82d96a08e226417b3d6629158a48bd60

          SHA256

          331fb023670521a400cd23ea448225ade3f5f0e5fa5a88531281a73836041054

          SHA512

          b2d3ad1d3cb9e3732659a1b547c20fc65a68f464cc5429fba8ad3c4a77bfe3c9c675a24a55fca2ef68ceefaa06a20b2e8fb8fe43c2bdb23172db4839e326776b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          18b841dc2346893dfe985f683e4590b4

          SHA1

          a2fc9af8af10c0457438cf28c6137f34bf2a3cea

          SHA256

          536cd57bcc03ba6815b57c6c5101eff0b90dba0772e518a3b632a8c507d52294

          SHA512

          1fc763fd452f16219ff8c0bf393a316bac2fa626995e824a51531393321b39be466ed9d32c2e9ce5373147de2a38c2b7801555be2679e1a997f601740bc0353e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ac34d99210161c309b0f76cbe24aa236

          SHA1

          44466394fb4e2265e1173e153b9f30353794a780

          SHA256

          fd19e61297414c3a318faac8423d9266b57fa563b004fcafd96a5c66b1a9b6f1

          SHA512

          d1df5b88a475298d5e67ecb0c6722ff5f9f64a02accae0de90dd91d6e22c4fb3aadcd92e213c0c989d6705ce3300c9f734a715cb4fdb58269da96301aeedf301

        • C:\Users\Admin\AppData\Local\Temp\CabF8D3.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarF972.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b