Analysis

  • max time kernel
    122s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 13:41

General

  • Target

    41e840a9d9f020c7b4b294459adb3ea9_JaffaCakes118.html

  • Size

    6KB

  • MD5

    41e840a9d9f020c7b4b294459adb3ea9

  • SHA1

    46064dd984a1d020facebbb400cab9b5f28c5565

  • SHA256

    492c0c351c3052d06f5462a4506e9fd1d2561912d7023eae43e06f91f404b83c

  • SHA512

    21e5c4ae82b50172dfed7bd89c76ccf74a4785451c31063617a0d4a275f120354e9a5e9c7e456da3e70a4dfa07def070f1ecaf653e941a513323bcf01c98b982

  • SSDEEP

    96:uzVs+ux7XHLLY1k9o84d12ef7CSTUSv/6/NcEZ7ru7f:csz7XHAYS/f4Nb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\41e840a9d9f020c7b4b294459adb3ea9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1e8d533cc61c41b05a20e25dea70d76

    SHA1

    a98285cc440c3e915dd2b958b06ccc6284f5253f

    SHA256

    3866a1b9320ee9de896140178c597b1b82f6357cffccebdf00696b4d174b8887

    SHA512

    4aa4ccda7e5c6a767668c0d5d69181ec1a4c373b2cd4f981d153aa50d32082ab0929f6ac6b12afc41dcb2e216ca303e5651e2f3c8e9a553a3edbd16314f6394c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    804b1f79b2fcee2e43ca165c7f9b33a3

    SHA1

    b3ef3f6bc7a4c87f8224b86a7edb1bcdbc3f7ab2

    SHA256

    a7f8e15fc1d872b7c7e8562373a0899207c279476a4a1dd25022199e5eb11442

    SHA512

    9eb2dbcc9aed1dd0a5bb7f642bde4b76750a2140a1367bbfe3818e813eca16f0dd0a7f81fdc7f27c3da43e018c6205043d8a6b77e5ce419e56502bda196de768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12373451c828bc5bf793217104f5e91f

    SHA1

    2d60d82e4d40c0ac5b5c6ff9911793791da3abe8

    SHA256

    6b67a6e9f5e4a999823fad4e0ca2014cf41b6df91088da250b9a06f14cd66802

    SHA512

    abe85bcd168b538fbf1fe261a91e6456291c9a50fba7ce06c3665628c29608bf5b70daf16a02bfbf64ff2ede9e1ed23a12164e588f9bc2476ee27e46f5a6aef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75e20bad244e23e8166e1dfcfcf9f12f

    SHA1

    98851b8a11ee9262175c62277246a541a54e8857

    SHA256

    d4256b69e702f26f384d62307063779992cc5dc3eaf5cfdc08ae16cc42e50633

    SHA512

    922f473cad2b845926ed82ca40988298cac163734bc2393c8b1071608a1624a46ce621f3004f94b87df5a6c4afa727b0d793248d744655a6231e875dc0e16cd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76d276568e0b08fe5d52a1a52d4b95ba

    SHA1

    ce1952bd3a8c8a21b8dbb88b48dafd5af71953b2

    SHA256

    efdb65d3cc5dd14718321b63e144eb5eb85aaf0ab6cd2708f58ab8553ccbb26a

    SHA512

    c465f98c07f8b771978ceed1272b7101b0a54aa6ba48dafa2a18380d5697396f6f973c8835fbf377ae16c7c64029df01dc1f49847552b1852423d43bed0f1414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f18f14b0ead2af06f195ffb801c0331

    SHA1

    02b300b71da289e9792c60c9837494f1f2022c46

    SHA256

    e6b68faa936caa5d7e544700e4bf75bbd6aa53beaadf7e69016a13e0dda2b84c

    SHA512

    130bdf9a3ff099dd732381d24ecf7748bbe3edefd600c54672ae123f786e9ceb0bc155d7f01ead00e09bd51fe89bb94b557b650491a9cde77a9a8427e079773d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c51ae014ceb4e5995287c73fcdcee803

    SHA1

    5dcdb29306b08d87dac28c0ba556cfab5ea63865

    SHA256

    07cd0ca28cdd3d0bd830c22212567d76f44097dfe8ed18e502b7a3dcfe553509

    SHA512

    e896f69117e797e8925d8fa88c1658825ca18595bb70ae627120f7cfcfa3725a065c753ee74d1bacc1bc976e40114996c90dcb7c58e646bf55a6584828963c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    345ac6c4af0074f86a8b38595397b91d

    SHA1

    bd89306345b480c0c83f350002af2012f871be71

    SHA256

    2f36f583972dd7a2d2221f18c6293b68b69b662d112655cdb11f689ed4f26213

    SHA512

    3e0a9c8081d0ec502476f55bdf4b81c62380fa211bf8b02c4f57f5159d9f995aedfae612cb6cf6c3907dea65e53fc265e9436bc5c598682e6a6a892f66afacac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc86b91adb9d38a9c20d0eb2737f5ea7

    SHA1

    1e1ba3871d9f0d915e40b8d6bd6a21fae1c52805

    SHA256

    3f93c5e4ad10b3cecdd119b47faeae87dc099c5b2879fb30019e8a19fa2e7123

    SHA512

    213ead96d603cb2e756412cbd4f76c2baa1d5a2e139088a25effc793276b092cbbcc2e59baf6aca744d1b3cf30db9d09c15789dd799f6077faa5337d5067a978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84effecf6b35064079b0b1d79b4e6156

    SHA1

    16c67ef11c852370c7ba5cf5c15c1f6653b19899

    SHA256

    ae1f925871d78a60df54fcfe4ce575ac49f56836a52d68c431d1b7092632d521

    SHA512

    37ecfa54d5bf2454815b5558a36732aa7c717cd3227ec5e97b89946892201bc92ce63e646a2ea6b587dd283034f16f8b4559f8d89921dc905b7eed562e73712c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e07a5125629869f4ad6fd8986b1bb88

    SHA1

    3055573175a7a10b447713eed9313f56428442c6

    SHA256

    e05710a14cce75e97ad83757d625c019d874e5a485f7e4bb0531a5d1fbbe9589

    SHA512

    c9c78505f511561840fc37d7999172ecfb071ab8b6503358e401528a4470d85535e783026b7735c14f03ae1cc4ab17888d8218bac818e8fb6c33625294eff069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df920f76df296fffffa4e32635bf7918

    SHA1

    eb3ee09b6708fbf8d7e861244177d3fff52b4181

    SHA256

    6f859eef5e1e2575f7f4f8bbefe076cf0f49c8338dcf1360af9227f1402712fa

    SHA512

    9ff86b86bb48be5147f341ac56cb114d0131cc637a41b009903cb246959101fadd5b2e8853e6c4af9f52339d9871eda7f60b8ddc4b24343f7f2817495be5571d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8c0787f25dcea6b4e0d7c6323cb34a9

    SHA1

    0c1a0d4fa2f83be0f46d1b413459d33623c71ba1

    SHA256

    e1943ad770b0ff8e481636c24cf378e8b9d6638dbb9af08fbe4754a03f058c23

    SHA512

    f0d1a2593a2f11ad0a9e858b17442c4582d4859f81f3fed6e726c8049b68d95cc944827b1af6e7c15c6e2562e0bb1f5b372ff791454b38b1164173e206e6b177

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39291dbae6b166c44dd5c622b6e76854

    SHA1

    d127b648b1fd77950876d73636f76d9e87b07223

    SHA256

    ae490e208120d7a04144d96d54a007f6084b099366b79e9d01137365503239ec

    SHA512

    88a4998758a02e07ba8d9b55b605c5b56408f88bc2977650145223155dfeb372f17d521528a19de6eade5cc4fc151444bae03c38e1a7117f200035601d86a7c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9508fdabe05abf5c705a59990cd578e0

    SHA1

    6b25f7fe94b4c8d8b140397fbcb8c456f833f979

    SHA256

    3f004dc83c9b6e29703abe196baac56059fb096e2a8c2963165388bc4ad5dba4

    SHA512

    83326e5eaeded344b679ea26dbc3825227872578b2281b3f3e7663cfd7909c3802cc593b82ddca5dcd9fbfa7b1b04c210f913da004cbc37769d4df398decf78d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb37d4d17d1bd6cbb7240dcad47107a7

    SHA1

    9c73ef5e33e44b0fbe888a60c32543339359f5f5

    SHA256

    c151786e0179a207311a34da7776cd0fc6217869bb755f4288d11499399995af

    SHA512

    7c3bcc6c47350f4f03b75a8075e3f06c1eb2d179c3e12061a3513fc350bca1ccf882454a4eaab81a351d4fe9f1615eb626e739d30726122802dbb8adb244ed9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e41073790b64eccc8a6e325f6901486

    SHA1

    ca08ba4c3dcb0508485a3c9c7826a0ce5b636e57

    SHA256

    2ef017dfa4c544b114a0c5180e0e957421b4b114096c7322191de794e9733c43

    SHA512

    04a632c5354c9981eef773ca79131d457ddaaa22e97efd8cdcff3ff9ba8b23efc9f72142c42886317d0be9ccfc3deac836fa35ea760d046df02958b8ef771e2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8b95914afd1e633da95ec4d486b9aeb

    SHA1

    aae5900ae0b58d4c4bee6fe0b6b2e73eda6b2a16

    SHA256

    f9cf91500e65ffeb38d2ec9ecf61c090dacc3cc271a935973997e2b0f3445091

    SHA512

    ce2485ff5a112d89ce23ff9d51878937849b04ec86ddc6e92c3c12de4612ddd05b190e8745b877485a33acc3c0061450356aa647b8c96b5df1fcdf297a9f71df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e86ea6d8678fc3088eb8fa3b29e9bf6f

    SHA1

    58d41e1fda0ff7df807d1b517e8865f3adbfb74f

    SHA256

    48bc389b020a83a32376294b49c5ad9bfc7dd9cbfc1e1bddecfd3801961cc9e9

    SHA512

    2660a40e3dbe45651e25174e37e3d80c365da05f0a5fca3c4107f0a9eb0e43318403fe970e18aa5865a8dc25d77a72e56609bdae707442d970c5a3176ca4a272

  • C:\Users\Admin\AppData\Local\Temp\CabBEBF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarBF6F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b