Analysis

  • max time kernel
    134s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 15:56

General

  • Target

    4a5e09866b7fe06a36956cbe4cc3820d_JaffaCakes118.html

  • Size

    120KB

  • MD5

    4a5e09866b7fe06a36956cbe4cc3820d

  • SHA1

    d81e3d4d0b1d8f74b1fc6d546754ee55544a7684

  • SHA256

    58f2e1801fe46e8c4e722cd47fedf8d5635400334b3288b67685756f90cf04b5

  • SHA512

    3584ad4f476a2667022e2a46a5c6a4181215429274edbb4bef1c2de395ed0e1bb10d9c538666a92e87c30f59728f35682ce174f651a056b550a4655e8f74fb4b

  • SSDEEP

    768:Exi/nfV87lvSXhOvHT/uYxH6YqM5BcJnCQtWVEIL3Y7HnLEKRyMnotrrz:EAfMeI7/usHewuxtClo7HnLxyM8z

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a5e09866b7fe06a36956cbe4cc3820d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d3d8bc71a40cf1e6b68b3fe2868350a

    SHA1

    cb0ad5a0746cf698654a31fb760acbd21e89d4c3

    SHA256

    5633b38ad691cd2d9d00bc9494f44442fdb3371cadb6b319c6702ba3e5fe6f31

    SHA512

    af717df433ea0a6feb9c4d26a9773d89ae39fabb4987a5a5b0e720031383eb4a15eb7945a1617db63191951a71c92d76d60555c07151e67529f1158a855f08a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e772fafdbf147f1c6718815ce4293c49

    SHA1

    40a6158f9b41ca0408b700d109232e4bbaed0a5b

    SHA256

    ef7ff574622037ea86f196a0b372bd4db6abb37c7fc9ad19f23dbb275d1a5ff0

    SHA512

    3bd15c8501def089ab44c92d0c266b30a82143a0ba2f57bed098028e1899282bee0485d6e6f53ce73a56e9820e4affd6f980ff8874651d19419160b7ae9db99a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8c2582c57c066ecd343a5f3a6e6ca0e

    SHA1

    89209b8f694660bb1e2fc195dfcf5f1dce44940e

    SHA256

    9313ef861e703a4af4769d1158a0b1a219b8644f6ce4259682e7177bc86f5cba

    SHA512

    d63bf4397a5ae8523001c6534662ce3c72954b1a55afee712ebbb34f3bc0eb1deb2712d155f5dfa1efef4bceeb7f7268781b4a9b6d232f6b29a9d4c9bf431667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d00a82bc7aeb6bdfd26a362b0acb62a3

    SHA1

    0c4104a2ec50fdba101d710e6ade87ddd9f33ac4

    SHA256

    122f8b53bfb8d9b59aecdb9ded16af9d897b1ff3d91ba5938b736f889bd33be4

    SHA512

    0aea756855031d86151d0a55ffc0a14b7893efc313ccec93bf3fdef50f96ce7caa6e0b21581d8e7570f4bf8022e4bbe70dbf33503f4c1fa58a4f356d9c9a38bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd50d97366d3869f9fbb0661b5db36a2

    SHA1

    2e29a2f112fbd9764ccd8ea037efe775a0549fe5

    SHA256

    ec6ccbc1624d8ef635ef112103b05f6a8b9deaf134bf2365a403e29cfcfdafb6

    SHA512

    5b0d9349ce2766dd2404535a03d408b30622ffab5817b9525a1e12a5f7e7b5ab3158b426acd585a2b5f37c5596fef616be1d016d85881952b04614a50108e34b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f6a49679539ba426ba4a67b15b7e1e3

    SHA1

    5f0a7f65ea8970e0710a5e3040f71e86b01084b9

    SHA256

    41d3928b87b755f65c91635b233d8766bb41ab051d1fadea71f3314de96f7825

    SHA512

    8f2ded996eaa7d508358ce04632fefa33a1e696a0b78e4389b8bcb119425a9d3af68290ce8174a789514ca3f6716e49dbe2ffa3d5c9f4987fe3562a39e35c30f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfcce688c3f05c045b4f3dec41b0bf80

    SHA1

    adb205232c1c8fed775810ca9a2a06a4b25cfe07

    SHA256

    d4468e9f048eec88da683b4532d19ac6b27cdd330eab11a4682801345c28279e

    SHA512

    4e5042fcf69baef8fd8392fb8f044644e4ba20b603c86ec534a5e073576131ca6d8193fd7df580fe866856ff736b677c6e0a14062c9a1918dcbf5e54a5b1e514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    814dbc4ce05c94b30bc6ca20f5e81ddf

    SHA1

    074c51ff726b0cd09541b50da68e557843268982

    SHA256

    df82aeec0406886b78935574c3c814657919df0b345e0da60cc52494ef6f0a47

    SHA512

    927c8dae7d29c1d7cc4650ebd24d77e4b7f2728d0b90215a788c237f5bb9ec49db37062dbf981105c86c5fb0674ccbcc0d33238083b78f3afff44b6744bd8610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78ba75977deecd06653f737d7b7b7280

    SHA1

    fb28baabf2509efbf140d57cfc482e17f39e8885

    SHA256

    78d823eafbd17968ac85e4067f94adc8864c19ef833a1e98ff85b8529330e9db

    SHA512

    4fab31fb1b766757c56296207df808b0ea59de64f3dce164cd865a4ff21d9f7ce52d46c558b248d86dc819063bb6a86945b213836f7a4eb98105f00ce861ff70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85829224e475f2db3da929faebe29b74

    SHA1

    5104e2b54e713d533c62802f848b3b285e8c5fd6

    SHA256

    e79a9a73fc46bda53889d2fc78d31e167440abe271e73f16a9d7a2aff5880b13

    SHA512

    5070df742acc6fbf98a73615e072197dd9fc6f4fd623f6fcda661552834d282ee100e8dad65e9024febb5a45abccb0ca25b70f5696e7f79f4e9cc640bf4d6d92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e52313521fcaeff677931bd9bdb299f

    SHA1

    ae31f1c9cd486368077d4a26e3e8c9db9a22804a

    SHA256

    45976b13311aadaa96038cd3598f3676a190001b118430f685680252692d935f

    SHA512

    0f307237028efb2ecdab578acd53b83a3956d72a662f4a051282ba5b5211dfb6233b008e4943254e27199025c2752aca118d31a5a8bb595c50f70b2280825d47

  • C:\Users\Admin\AppData\Local\Temp\Cab8F28.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8F27.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b