Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 09:43

General

  • Target

    4128271e90f9a86fea20a834dd88b084_JaffaCakes118.html

  • Size

    6KB

  • MD5

    4128271e90f9a86fea20a834dd88b084

  • SHA1

    319d5ed5bca4e15dc8dbd3c5b02c75a69e65e534

  • SHA256

    9279fc731dfceccac09c42420c144e6cfecf729e7c80f2e4b527932eafa3acd2

  • SHA512

    3c740a828f9f85e9d42b4b7824f1a5a0512ad71044db20be9ae7f298e44562e80a482156f3e415f99294d1ee27da930141faf371df1bee80669e5892715a9755

  • SSDEEP

    96:uzVs+ux7tkLLY1k9o84d12ef7CSTUoZcEZ7ru7f:csz7tkAYS/jb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4128271e90f9a86fea20a834dd88b084_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2804

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    869b42c71561b23b09977502c554a47d

    SHA1

    8dfca38a48efd6622ad9a44ee46f6fb06f1aa7f1

    SHA256

    0eede40f3b599e747e15fd21a70b5e76601111fdcf1e46eeab0e21128a9c381f

    SHA512

    3c18a558e561f18c65b94db9a5bf57c072e150cbafb667e2fc9f08cb8af7d6b9591824d22b6f61eb5b6821df00d8f9f86a6f04f4d7c9352715c6b617cf989987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb0e7e587268cc1691b8ced0763b1b52

    SHA1

    e694786b9de159d2e859d1678b2495d35a4257ad

    SHA256

    a0783336ccb21cab55bd047c199dce6622b70a7108085d5ea430c75b6b080e01

    SHA512

    cc80ab01911777caea17549ff28795ecaf5f8a0632bd079d34966eccc266f6b7819ee3158c15e59a80691529e0b481fa69450a2e1aaaa3562f536a5559b77b34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf7c4435fcff68ef92fe9c3b48020d0e

    SHA1

    332ef83ef8008f27a0af18698079501c680ce71a

    SHA256

    06b93d086a08689453bb303a935d775066e350a896c80660f492d801f8ea58e8

    SHA512

    f2ed04cd73ada6ff25f2bbb1c11d6c3e15c3e3d2e75444e3d18c754ab29d4d473c4f38f7920d5dfaa38316ba1c1287806b6b1c253e469f4cadc1eb5a2b88aa98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bde173bbf4033251ba3712020a9a2f86

    SHA1

    ae2c1138c82782884dff78ac6e32b41228a56f59

    SHA256

    4c264dd7c9fc6d260bd38b53c87558e511426d80ea01412b100c9a6359e30b36

    SHA512

    cb5f465748cf5b15107ab19fad51fa46c0f76b30c1cc133f0ab3388e90d1e7a452826461685b0efda4ca28e7ac1d37786584bf998d39d462825a9b8af4a345ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45f16cf44c4c2f9312befdfba788c768

    SHA1

    30d503657ccf12c3b91888f8b13d729e9404f36a

    SHA256

    968fc3acae43185963ef35fd371fc6a98734be3966ecfc5565c72588d00ba98c

    SHA512

    0407dfbd7b98d35929b58b7f97599f1e2d66b83e8f1333a9705021da2f2fa7b37f03bcd8aae8439a9f3b715125d60477fc082b3eb7b65a217f816f1f38153944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24d19022401537a50f0f1fc09fc4f0fc

    SHA1

    78c916d64dbc796a33b2aadeda4821371a1eefb6

    SHA256

    a12563ecfdcc00ef7f1f275fc0d1f3ee20edc047e99ddab0942a5d49d9602f9e

    SHA512

    8bd13f3ad363fac7ba2f0789b5a44bd6dee622b11e724d0f10b3a6c622bde0cb53b8ab6bf8e168b420f71f6faf7cb936d9c32089cfed863469ce5d27459aa5db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ed2095d4627aa03b8ce574887c0f8b6

    SHA1

    89a7ea6f39f3d684e258bd449b09a0ade6e26a9b

    SHA256

    a8eb3d99f422efc80e4ae755898cb4c6b8c7433ad0c45fee754dbc7981a9fdbe

    SHA512

    59d64dd93fbbf6c46d1602029409b45cf511e6be7dfb636f32920436e386bfd34614c55d52036585fd6763d6ac799b8500b99f663f84e89165bef09cd1b29cca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    844faab40fbda3c13ea03e5314478595

    SHA1

    339ee4ba6dac0ff1cb7eeb20146245081a264a67

    SHA256

    453e9b4906a3ce3dcb0e0a24bd719413f132c6bcb48741da91f562b72e5ded88

    SHA512

    e118e5877e0ec9d123d659ddae4c5224beb8dcca34131d6a3da586b8f79daa48ecb98dd978415f36572785179d93e9f86d403c6ff9273805d46cbd8431dfd834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25cf69a8aedbd449efcaf0d5eaa010fb

    SHA1

    7b110abadfc91a0f1ea3b1a4d9f1aa8bb32a13e1

    SHA256

    f428006c17f360e87b6324d68f8efb77fc124ccb6ccd98d4aae1c9e1203924b4

    SHA512

    d6a4c24bbf9383c084f9684d5476be4d7288309a1dd7f5f2b45fe688236196d0a9cb4ce8adcff86170fa233c303a3cfa7ad70dffdc55f6f8d8f82ee14b7fdbed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f719f363babbd5ec781dec2be51fa507

    SHA1

    dd0be2a5041e5cda39e5d882f75108a0b7cb6dd2

    SHA256

    773a8583f622cacb6878daa412637bd232ef1bd971c78709d3a186f76fe01bd1

    SHA512

    da233c709edda77c4e0474e44a3003a575aa43495442696f7d9adc2ad1981db32feea9f84f40ba26fbe863d1d1ee5ddf52a65092cc92c45c98977bb0d5240b76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95eb8da66a3be574862a1c62d27884f4

    SHA1

    c1f7bc9b35091ac3d0446cee8505ad72e570cf7c

    SHA256

    c911e57e89e98e717ea3332240fb7ebd90a23d36cca9c2f0567efec0288f983c

    SHA512

    62d6873fb48065f5ab1c4dfa91d44c3e9294884e6b1bb49983af27527e8e220550fd4b8b7a1dfc686d0701ec0b379cb90202501e3540e10aaed6bff713601370

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d8f79dc8174cd88b1e966651a029b61

    SHA1

    9ea70c18d2a5f4242b974781a7eccc42a83fe0b2

    SHA256

    db732acd360f3d1f992a599010ecca436921bd818a6b790392edf64fc949db3f

    SHA512

    79ff75686dacda13942458d89c1ada60cfe529d4a955c85759cbb41db6e6405feaf5d34a3c12d4af240f739dcc84f533163dd0c0da99e177e2770c14d0f04407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5055a2cfb1e6c0990099295d6b03570a

    SHA1

    8625aa884f875de392a6443acfc88b2876d0a079

    SHA256

    a5259d79c2131ac599808ba6b284974d20398f761f818836e85a01f1f06a02a8

    SHA512

    b5283d2ee0b4cdc612eacf0f53b7bc8074d4ae10129a808d905f5102f4d28116c960c7a3b572727eb3c259bc54210e3d28bfa1143deb47eef499e9e0a4fac74f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a412cea50c4ed44c03caf86c0b46d514

    SHA1

    11c1d2a228a3f21e78e956ffa2aca3992664f9a4

    SHA256

    de11d3f187c6000043b3c86645942ddfc6cb38e5d1d6c60489fe681b0fdd1e06

    SHA512

    c39c2f0ba04a47fe2ca24dcdda0a8fe132979b0b60c87e8743a1a48c8ca8827d45852be5d3c5e48e25d598b0ef614ae7c47a340b7f4c0b72ce02f7557ab74abd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c99b1a6141aeda7f1c5a2ddbca7eee7b

    SHA1

    770598aa128bb233f4c4d5ff1ce9d289ef854859

    SHA256

    43ab67d505aea08a55f20be6d2b612c12b86795713228617913ed2f9c6fb689c

    SHA512

    31d781699ae7841bd108526afa75d239350d2539b9f8910feb35b742569e75d3e5afc27847788de833729281ea0f56c37417ad94ee1ec5765856b9274c91da54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c86b26e5f2ab94cbe33f12634aaded6

    SHA1

    9a04d80548d998af39c77d686e169d30552126f3

    SHA256

    37df3bd2dbd3eddc54e0afff1f078a03a5eae939f0039e2b42811d1f7ad058f9

    SHA512

    39c3147f4e7fd52a3eb3369bd2877dc2d6b79bf8c95f836982a22ef965bca936faf4ba41ed5bb8f81ef51ce2cf8015c3454eec8301753be1ccdb306058f0299e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3916f2789d9491b5cb9e00e84534010d

    SHA1

    e2792a69f1103e44b0730401a4104e609d450be1

    SHA256

    bf451ce4f3935c512615a34362df2a48a1a42a56b29c8f79a9bd7104b831abdc

    SHA512

    ebcee8269435ff8005a6b47215822723ee8b3f3abb1613e886ea0c52534f194a4b748923390eef6003b0e77cb270861f46de1fb1667df815c1cb2fddf270fcd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eaa96194c583d50088e765bd1fd8c734

    SHA1

    567cb42ad95cd3c2775459a428ecf1df38a6b5e3

    SHA256

    0ccface9f1c9b7a95063f6463c7d99676b2bb081acb8ac556f9be86e94278b0c

    SHA512

    03831f254a3c3b4bdb84dd040a1d543f7cb839ffcdf2cb8e6ce43d077c7bd98a6971616764c69e919513d33ff7616f71cb4fc26fbc09e15d103c18376f757837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f5a4e9515ff54df1218e89b8d7ad80d

    SHA1

    c345703396464b4273189b454642ee466fea6863

    SHA256

    c9530d83465c3e3d01813c57fd4c26fc12ee0afc4931d50f938684b5e7860024

    SHA512

    57ca4a9038ce879b1d410dae26333617f77b15e6b5d88822675cb733bc5c80d826f8573efdd4a1fd8204b7c7896d4f08c958d1ce754bc6cacb1996327673917c

  • C:\Users\Admin\AppData\Local\Temp\Cab6837.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar68A8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b