Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 12:19

General

  • Target

    3d59dfd9c63bd019a44aec74f5f8622d_JaffaCakes118.html

  • Size

    15KB

  • MD5

    3d59dfd9c63bd019a44aec74f5f8622d

  • SHA1

    78f628f9459aff61bb79fa97cba368a313e7cd63

  • SHA256

    19d794827e94922d2bdd13663cc159743936cf169baa0b4320a602eab099c7cf

  • SHA512

    23bf2300491575b51f5694c1fd3386da28fc5199a991c43e5ca35f1a31cc3980ef1eeab25ea0913cd4d89ab82ccd31febd9d1c4eedf282568b99ec2764e4d583

  • SSDEEP

    384:5I/ZdzQ9Ve36SOOkHshaXlyNyI8YZFPHR:+/ZdM9MKSOOlaXEMI8YT5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3d59dfd9c63bd019a44aec74f5f8622d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2052
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2052 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8eeecde1a3a2bbbc227991d0ad12725f

    SHA1

    19c303ef16a0be6cf527060582b44cc6a24cda5d

    SHA256

    453bb9d9fc0cafef0cd53c32a73fefa9ca4226145916f6fae50a2681f6361624

    SHA512

    8244e035de6d5eb157f3dfee1033399eeeba2303ee311ca93c5002d9d10dfea4c64e7a713df521831141113cf7d0a7b888da4cc2ff78fc08bb878c5c20ab3494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fab24087f2c78d8351b08302f92d1f1e

    SHA1

    7a1d5fb8a1d8eafc704d6dba3fbaf4b339077436

    SHA256

    5561b853da4e529aed133fcf07b568160c87fc4b3a9f6375c43fb2c937a3f353

    SHA512

    82b900a2523f99816aca10f26061911f01863857ca0971f230879053026a3135b0d1d2a58e5dd95d9872d0d9eb099b5df8a5cea46394f5e08fe04b169a115270

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e27129d8691ffc3119c41503840d97c9

    SHA1

    d2a57cba728f9073a8074b8510ad4169881d3499

    SHA256

    a3526be5f62bdc239c0f8442fb1c268238e886e555921dacdd1df794f9ea4d71

    SHA512

    f6cc7a7eab71434abff1784902154fb12d49111b3db97124eeb6e894ae99cf116ec0d2ca628bf3a628b8d69d97991fd6a881d342a43454c29bf2840165dd85d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    919488c34d3690e989f6b37a6a85dab1

    SHA1

    2be915cf2898861e05e01c160b43862021c01c44

    SHA256

    f834eabd5fe592131304b7d346823461a9cd247376d70bc7d7a5536129f1fc88

    SHA512

    90e8a0030ec505b1b68739e1554e23adcc6d9b114e03c3cd34b3ca879ae46cd17b1a15a360758fb1cee8ac9f384c0a07398d3c154123c3b0923765e18f9a25fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1e1f8c27daae2847cc11a70e6badc7ad

    SHA1

    8cc2b09a12af4ad6c41220d3bed4536cf5a1b42f

    SHA256

    251ae354b12d4e6a4cb1af7ddc64e00d9bd18b7c823693da4f2e3e6608e66e24

    SHA512

    2eaf20980aac324890fae676aca69b44637890d56b45dbdef855fd752b36dfccdb7c18d4ed27c9e88995061f3500d8f606104a04115e055e1f5531a5c454ab43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6b321a1c90365f851d5ea5a33cfb13d2

    SHA1

    027d6af95cf1048b58016058218311b9a3850317

    SHA256

    f65f8b37a3346902f5afb73f8c7548fbedc00df93eafc524498d6818bccc86bb

    SHA512

    68c0b18d77233bca4d025f458081e6d5280252763944ff810982dc05ed2ae0656774c758f024aae4863b04918357af4bade7163b80fb9f2ebe24893d097198b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3e5613361c1508f3dd6942102b0c49f1

    SHA1

    f4a163b8f9d8bad0a1ed6f449f36129c0893b233

    SHA256

    67fa14ca617402851239a9f30619c3cce933b2a0eeeebdc98bc9f7e4d7639bf2

    SHA512

    fdfd674f283a5d76e609564352857d07dfd0854db41d51e473244c4f1b52ce3daca483f76e805bb212ed84a3e690e0a91f60b706bc0adc611e6b2715f2ee1824

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    73ac47aabf7db172ba82c16d4dbc8746

    SHA1

    12012291d5075dc1996250a51ef40312d97b570e

    SHA256

    364e4391cac2aaaaa684f6b722b60356ae0001ca344db57b8d8093035b61d642

    SHA512

    9e49192c643c579e8fceb09f18cd37d93007cb38619981b9cd1c22b87639266630b6cbda558b62022358f3b4b9d3634010efc7b939c05e982e27d8c02e2255ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5f6172b176ea9d8a0b5b571946d29231

    SHA1

    fed11f00e56b3206286d2efdcf573d53ed699723

    SHA256

    93758d2d2c1eb983cfca02d1ea3908ee41c7b9ee780cac2b74edb70fad2315fb

    SHA512

    e605c57d6d8a85b14993477ca555a7bbab5b488c26b7391f070552c38a5c3d74a941ab9d4586c0476e8d8fe6e1410daca31fc91922a704a9f4be11e739f1e54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d4b66728b6e86c5e60d3146e77c7edb3

    SHA1

    e64c2ae5e3d3d2c1e0c41b1475f8acf8bc81fdd6

    SHA256

    e23fe2b4c35cf50c7377397c025c8a8e207acddb38be5f8cc6c6b3ffe54df1f6

    SHA512

    0d40f8c48c5762640655ee3476ae0267c04660af4e1a5215e2abc093a2e9656170826d7d44b7f72fb5d42dca269125a268f6fc1199feede22947ead60027a7e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    57324dbfdee8e1c07c464062f11bda6e

    SHA1

    78134945eba7959e61ee0a0efd4f43158184b61a

    SHA256

    e3f7d7396eece95d4efccac192ee2fd8ca29705bbc752dda0e0538faa0d81ab0

    SHA512

    0f8a4e9f6b6c8f47265aa1341f90fb41c79c4b921804a14c7282f2517c0f42ca36be3b7566e417113369a8e7bd5fd5aa90aec5be8acb7c469dbeb9c64fde7f38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    67c95a9c263b61bcb0b3494dfa3d0683

    SHA1

    69fabc1e37684dd127eff997c360cea976f7e4ba

    SHA256

    b9a930acb47ac95b45b9d6adc90e87d2b3345c14aeebf5e891ce6fc3703ca3d7

    SHA512

    e99006377e2045384bf311226e4f64c2f48a865a6b880b3e6d5ec014c1912528e23522df6d28af4b35063083d4be0a0aba4c5fad3c2e3011b9cb221bb1999a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    99e54a9e0f30cd91824d4cec89203aea

    SHA1

    ee315373595716bc248da76ff99cf0b721647eb2

    SHA256

    7700ce3ea94abd40911d16c2a2b938d9b26fbab4ee82af29eaa214ce21ef3c07

    SHA512

    60bfc5e15cbd51192d33907e0b975f3218de4f6b5c02f7b9efd470a16f0be498230528a3aa2332a79bf2157399636545fcc97516aec9c3fbf8334c66811768d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5a12fbdd2688f22aae3b7e69df5da9d1

    SHA1

    4a3c44085097f7333dfb99c506c12c63e6a87c1c

    SHA256

    28f011564ac272acab98aa971717ed3ede8411e3bc18d2c1bc267596248321f3

    SHA512

    4f9a3aa1d331effc316ec1f421fb85922d7f9e184ef0ab9ffc9576292212448f5d9299f74e4ce9965732455d322e641d2f3818611b3039483fd088220d46305b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c5211ee28043aac0bb08443a2c8edb96

    SHA1

    27fe3758692229873961e2392cfd68f75d778f62

    SHA256

    3312b67b05b02303d54063d197eb8b2cded23f8a22209a42f26a7200e235eb99

    SHA512

    ed522fea5e790b52658457e30342cd17feb351c81e2d53af074277118a765947f23eb4677842f59c7f400b93a596e9639c2b33a089eb36cb0961667a959982b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    eea1a854da45531053abaffa0fc8c977

    SHA1

    409fb56f68ca2e4c3ec9fd2dd567d770a8c350a0

    SHA256

    4423095228234184de9627baca93f85f7c266ddee2fd871d9528cab7f92e7815

    SHA512

    18996f263bda97e88ddcd6e7f006a82ccefef3e83e83a30b4649e9d6a344ce34476415b5d861408ce3918b279d15a93d0b8407040ab6ed3b2e6d840f59122122

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    242468538a19d2f5a2fba410195a9d89

    SHA1

    de23715ff19f7c039fd93b401deea11d62f56c4d

    SHA256

    8cd411812a7358c79d2ce9bda28499df32902a8600339c9cdaa705ae3eddbc53

    SHA512

    a27324fa41709bf1b44201fa5f25e0c89fe73c59f185dfe558b71b1cdd0f6481bdcdf8bad17af54ff5145755fcef5570783f9f0c3c7fa04d67f8f1c5039c9df4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8401b9d5e24bb77adb90024a1eaae9b4

    SHA1

    b17a55bbe8d857c72d044e2b26add24e7b59413c

    SHA256

    d1bb0215ad7604f93c6b9755af7536a36a876f1e48bd7cbc1aa9061cbd9346c3

    SHA512

    c8b05464457d3956e3b49cafc2b3fca3fb9ea42dd869804bbb6927a5d4d2015ac0b269c74c66c9f2812879d7879b2f6584330b86c9fbd55fdadb25dbe321bd9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    15ff2b7f9790ce1f080390bec1c96b49

    SHA1

    23dadfa9501cad9aece6a46817d7c6b3e36edc36

    SHA256

    53c8e9a4912f9df87fc2eeb1aed80706c9bf4c12ea45a8c9cdff34d5c7fa253c

    SHA512

    8b28c5f01f8abe29ea8efc9d2ab942ad7f045e342f2e442733538b2c262924f080dc011c6e5e8e52bc52e977734be5b2c943aba0802ad52f12ddf737ba88598e

  • C:\Users\Admin\AppData\Local\Temp\CabBD78.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBE27.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b