Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 23:55

General

  • Target

    4754fd380bc21ed838d5d1ccf24729a6_JaffaCakes118.html

  • Size

    53KB

  • MD5

    4754fd380bc21ed838d5d1ccf24729a6

  • SHA1

    f3c72703dd025cc35d58a6c28d898ca479062ffc

  • SHA256

    182218bcdd17493de7651d8d6b49bca3404ba3be4eaf2c3e4182394f29cf99c1

  • SHA512

    df7cdccd8953a6a678239870f19e51527b587ce3614cabd1d883f38efd32b85cd0bc6a3fa589c186ef1172009dc7025b1d7c013d3aa638445b44de6707a6a635

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUErunlYX63Nj+q5Vy0R0w2AzTICbbeo8/t9M/dNwIUTDmDO:CkgUiIakTqGivi+PyUErunlYX63Nj+qO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4754fd380bc21ed838d5d1ccf24729a6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2632 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1408

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5c7035fc572a4bc7a0dad29b2790b4fa

          SHA1

          5968a03d2e45e3c8431d08a7024162821dc69fe0

          SHA256

          a13a88cf18915e7bd7c4f580a0c4e1496b1698ef5f485487d009ff81efeedf44

          SHA512

          3fc02c189f2ecf51409c4a764610d9041b06f43e2bcdfe3a6f5941d6dda0a5aa2041780fdf3d2c0d127bb8a2fac499de3ef41bd51403cc493bb3fff50506c388

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          586ff6724c34c79a1e8c3e25b4a53e37

          SHA1

          69e1f62a24e5607357ed6f8148ac3ad2f5890e1f

          SHA256

          4bd42dd70f88a67a019b18cdacb71e5d18fc195c010157c9a6049c7b64a07d68

          SHA512

          fe0d64e9700fd728b0244cfddee1ba1c1ea1af1f6ede08176bab51812f0a6dc977e5836feba47acaa12832c18c8919564d54384621e9324e02d9a1a4ef356ae9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          08982c912c9419462b8028dbf0f9bae4

          SHA1

          022308dc16580e4d0d536a24f53ff351cb08eba3

          SHA256

          49079cafbbd20c57f1639627355369e7b2a979f137c5dac8a66b12bb27cb56bf

          SHA512

          54ad039d4d3bbc52b2981706325b3849587fd4252dd1aa463b776653f85029f70105441f01f33c0eca38ff5e50f6ac848913e51ac3af54a19976b277c53f6ec2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          55126fcc04df9f597571d6ecc657960d

          SHA1

          4c33b6047eebb046c58b70dd0e7921aebd6c433f

          SHA256

          3fd6ce8b53fcebcf9c00e08c96e8f537849d04b4e276d41ae8090acdfb560877

          SHA512

          14c822ec19a3db91e0b41b3349e3766cba63943808d1c7799505041cf7594bb459798721d021fa25194d3c722a955378574da3f919582b4205ca79c4bf2c7ef9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          276d63d7de7c8b6ec2fd3aa10998298c

          SHA1

          7d43bd809d457ed4c93249694d4c3efabfcf8151

          SHA256

          eb82cd625ef6d76beb2d0734cc8d1c2261fb13dd521002e0e907abfa2cebfc6c

          SHA512

          b7706dcf722a6c20b8c15a77a992faef43a4f2c47c8e0b3a578fe6240611882b0d1a1fc27e06bdbb260e5cef4e10f032ffb19e091aa78396a998135e792222a7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d380e173d79eb58ebe83df9900fdf34a

          SHA1

          1cb0eeee3fd6781882fe3d3e1ed7c1dafcab2d20

          SHA256

          030f287237969b83a4e0f617f835b2f66b5168d866c4023cab2c226e8bbe1eeb

          SHA512

          4a5975f08292fbea3409f577cbb9f24145afce5e6b0c62d7120f8ea24db266c05afb2406209efeaa952fd9ebb6193588c0ca014d26f231d194d4c806c684c909

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cb8e05ebd834c57a7acf14f9017243ff

          SHA1

          2d80000c67a4f59812f7fcaa5679443ce8dadd8c

          SHA256

          4e4e5a519bfe27db7d26a5cd61f8432eee0fa3f2d261ee35181338f4fbd62c91

          SHA512

          8f37f9e8525a7250ce307beadac49a49f7ffbf892af7562eb5cd455adcec33835d178ba05ec812466f946e984f58d08077823d9f0f04545eaa514156d2f4aa14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d4b4172c0cd0653c924478aafcef7eb4

          SHA1

          81fb8b86b104f168760a378684afec0d6fb81a83

          SHA256

          9bfc59588725d601102eb370e10925a8469d637aded18d6aa1dc1729eeeedbc6

          SHA512

          009c595484e382339cf015f7775a764bdf8072c8d5bba3f578e3ad59df2c6fef0d4d4926b7d52dd7f22ee50e75c0e04457b4cd75ca4e8c9567e147262433e337

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1e27b78b0de8c213ea6c68a89fc468d3

          SHA1

          71634c42ffe9067c850d6cdac5e6afff1d524d0a

          SHA256

          92d9e0a69318053ceeb3139b664ded364c54761c4b38abcde4b0324e1cbd7ff3

          SHA512

          fbaafcb777a31df7b096650c4d6bfa76bba7ba56ddc3319dce5697b6dd3ca197c96111a3a9fa76366231d82c95040971a01b2d9262391ae5e4a3a1966ef6cd7b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          453b717d15bb75cbce38562dd6bce758

          SHA1

          255b34d3101d27c2c6d24f72c3111712ff339ae2

          SHA256

          b65568357b9e2ff5908850471fc8b40bbbbbb00e686cac7c0522ee0497e13764

          SHA512

          e97bfc4a9defbed42d29ac66d200c7d2b2ebeab6db398b10453192e7d56eaa520203411329f2528a0b2ea01e4add55302115cf98273ee9a69f9068d67385253c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          917e6056fd3eab43b87dbe3e0fb693a6

          SHA1

          14b9356f5dadf1fce9437c4461dab98eb7707676

          SHA256

          38672e9749b4df04591dcb96bc7010385570fe35a8deec4b477ab30ffc568a34

          SHA512

          92f19eb62ffd8aa95f12b51be9347ace2e94aeaf78a2f09e76ae0d01e275ded5235f3c34e5bd0462bfb35ae59722f6e7057084cdbf01b31874d0123cce0480be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          892faa3ac36f984594505f5b87efdbe9

          SHA1

          7a61ca580f12334c4dc5424c065036e80dbc5c21

          SHA256

          19a7f7a64f84e8a3b7ce2e82bc8f50516e0d477831344758625e74f10459baef

          SHA512

          c1268b35c84e2add94ca4321ab40e36cf09865254bd3d66daae42e5a1f65faecb95b8c8e66e132b32ea20b2c826650ff6d18dc743f41da32ae0a0e71c6996dd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          da5314175c033eff920a9e576db14902

          SHA1

          e0fec0f320adcea61ee783f591da0687c4079f54

          SHA256

          25a19022f5157788482ecbd3d3cc5aab51b7a0d86716e575d3703146b52d38bc

          SHA512

          700c32b140057a587f4cbcf0b4db9d34fdb1b357ca7a915ddc5ae2df511bd78b95596a8e713b785770e525bb62c67e0933475d35137ac4e4768e265d8ad9478c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c77f3ef6de810cc32e063c0d6c67600a

          SHA1

          ff87a04431067e8ece728319284440665566fc12

          SHA256

          4a9d754784a5aa66ae7d83aea1959e33180a0d3350586d5002de18f93761cd5c

          SHA512

          27e47c5618a0bc0b0eb795b072fe3ecc211bf88bd2884bfd201a3f0d47c11255395657bc78998c6c6885d21377c41f72ad04584049c159ab7474152806570a7a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          318d8ac075ff34e09d26a6426dfa79ee

          SHA1

          d2cc1a19d6ad0e3b52b86982ffcdca97d98c2a8b

          SHA256

          a55c68610767e8fe1c819111186c228552df38dc8fba7536f078794603afa0c7

          SHA512

          7aa5c8f00edf66d88fe4d797b784e9128bbeb904e3c24a69660f88a4843d61756bd54289eded0566f9e11c268febac81dde16c3729a51df16eedea16ce7030e9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0a146b8c139427561c6ae00fa76ecb03

          SHA1

          51115979ecdfafb0f8c9715057373a4c5c3e19fd

          SHA256

          364208358645552f20d6ed1a7d1b47746695d381cded9817f05aa56ba2f4684b

          SHA512

          fe9af6789da149c28f52b8516b2fd370efb7ec02cefd4ae8800a6d1c675106f4c1db2428d244d29c65cd99ba5ef9663bc5d0f05eeba27a9ab613ed2660a3de8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9a0a2c920f0ea3b8eb91847557d7cae7

          SHA1

          271bb16a9be6486cd1f34edba2fe7d143ff860c7

          SHA256

          67bf7ac22bab01ed6e010ab0f683d140ef97e3be8b3c9d7c0f8541867b430442

          SHA512

          179539680d51beebb60a75bead1272c43ac197e4ebab7df6ce906ebffae77a60ca1bad8d65efe280e86f3b5e9ee93e3b341df660eea3c15b79501c3fb8e18766

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d1d5b27422a3f23b898390ce9fb576c0

          SHA1

          3c1d6cc8723a31520da2c78d5c572d086ca29f36

          SHA256

          a79e1c3bc410694872ee6785482a0d82f774e195398a3347811aacfe892fa63a

          SHA512

          85dd8bba1736b9901fbdc47607a779545a9e53ce7a1ec866259a97fd0d831ed47df177229eedd0c4e14e597474c098b63a58459e8a465c8c7bedb2ae6805315c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1917c5a7d3391abc674e54f145120de5

          SHA1

          acb74667cc4f23305df7085f5b382716a85d7cc2

          SHA256

          d8fb065aee003804bc3d7e4e097bfb1fc1e1823cc4e977df43daf50cc94a9cc5

          SHA512

          447181e99cded1f606f96c9b3756d12c277fa2613a849caeb6c878013f0c2481c44b3abe021bd8e4fe547f4183986508d96cf23b9be708f4231686d9c6e17a23

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YUF3ZB4A\print[1].htm

          Filesize

          706B

          MD5

          67f3a5933c17b3ab044826d3927d0ba9

          SHA1

          5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

          SHA256

          97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

          SHA512

          03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

        • C:\Users\Admin\AppData\Local\Temp\Cab12B7.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar1329.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b