Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 00:30

General

  • Target

    4c12528b497ea34a976198b04a8bf336_JaffaCakes118.html

  • Size

    126KB

  • MD5

    4c12528b497ea34a976198b04a8bf336

  • SHA1

    1218c364dd6d47a28a23ee458779882a60fd67df

  • SHA256

    6244b4aca5eaa0cb271a2e9964a15ef6706c9abfc79cdadbf9c3df235e69152b

  • SHA512

    089e266649a5ff5787ef23184476ded886ff9c4d5bfd4e3bbe861355766bc021d4fbaa99f5aef958cf0dbdee597a582cb616962dd1044f6229db53c0447ed9be

  • SSDEEP

    1536:qS18yuryLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:qS18yuryfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c12528b497ea34a976198b04a8bf336_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1700
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1700 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2488

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d8ae7cb96f4ebf617ecf74a126bc2630

          SHA1

          7808ac4920f4e04c1436e8a06a60a5e5d5c3ad5f

          SHA256

          ef3716f2997c3782ae7f7a0cb6619752d4e68f06e3c00cda6d8cb78caea58eaf

          SHA512

          2ee055d527ece989b1db23272a0701762ff93124600b27dd38df8029c9ffe1292d13a31937717cf66c172a3b64ac9424e5d80ef9de5e8c605272a5c06ec326bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          abe5f20c0a0b6e1a7daf38b16d483556

          SHA1

          bdf95249db22652d494030054ca3af932405c542

          SHA256

          ff9195db3a5da2ed4e324654be9b3e66150fdedbb52fc345643fd336ba8127ae

          SHA512

          9c1c3537d3ee853bfbef2ccaa5ea1eabcbf3ee80f6a58d5df1b755ffa19fe0c2b5c6b699005bff849c77a25c51f7753bb32668a62b3d0c726a55fb2c1254b0c7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          313d5feb92419cb927089ad7a547a54c

          SHA1

          2134425076f6799a8262682eaea7de78f6d643a4

          SHA256

          3065ba265678771ce7891b099c4c629bf5882a72c972fdbd20355b0b261a27ec

          SHA512

          616f4ff1c3bcea5f8c6776944c4019f236661702cd02af767ca2e679f5aa1a1fda16c0b42551a45411bfe588d811d225c3249a261e3ba8361c8c48fd9d747c0f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          92c262985cb298ed9ca33fe1fb235c62

          SHA1

          dad132bbdaf1c9ed2e76a825c0d84adb5138271d

          SHA256

          17f17a18401aa76a4ddb77c5dafe0930a7da20fa70824675fd650596aeed700b

          SHA512

          bcd4f27f54fe8c76924d1026b52851cab7c5fc4d7378e96e241ad594a49009ee8db308b5295592da5d9820d1eee4fa8ed4fa0ec951a42af6ca8c60efb6ebdd23

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fe765d373a1e72f9be9cca1916665e9a

          SHA1

          aa8750aebcaeadac008f9151fe5362e2469d45ae

          SHA256

          c94867f41be3454419d2e627cbf9bbfe806e02eb246050dce602357769258524

          SHA512

          270cb0022eff4bf3c11c21c6d49735c87d97020eb5f0b52ffd726846e51cf028eee10100b905fde5c1205be8f9bbe111d799448f471fbff45a500a93b11ea051

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1435bb7246bdd6c807dfd7edc42b49c3

          SHA1

          c48e04da563fd4debff9a019f74f8e90c84c123d

          SHA256

          5789ee78d8f52376048d5f1b52e45ce17c3b23f6899862119555823fa32c6d59

          SHA512

          d247bec02f950a9c15eae490f390eb7b671f28976eee44542807590db23db1dc03efe2b04101523531fd1367db8c43c8f3ed2d2833cd3f3565c83b714159a8be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1386bd4e6b6f6da48a71b00de743423a

          SHA1

          c75063bd411de86921fe4a112109a2d9ce7ea078

          SHA256

          20831814b8c1b27760147307eacf6d6af57fb8da36911d1e7ca09a34a4106ce4

          SHA512

          04fc448e41513a24d687a064ff13bbcc52979c250a2d19513dd8cc85ea72763e100ad537470deba87db324e07f4796ec76c3ddf80caa9807233dad8cb89b0083

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4fb540521cc6deca0fe9275f82612757

          SHA1

          7e7f15d400e5cc3b91db9d979db28adf302cccc3

          SHA256

          320db2798195d1fdfcf47fb18abc26ddf205a3c1828f76f1f15eb3da8db8b3ce

          SHA512

          de7a84aaef21af08478d14c17f5efedbe9e3c2d4244d8591440e2ac856e1a247e93221b952c6e71579913d1fe1e83c2ec7e3b97ccbd022bb563a6b0dd34ab0d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          50f7f6c325675eb617db3f81e637538e

          SHA1

          7fe8573f8bb950fb6f03c8e14a77b46a600637a3

          SHA256

          3fd8268eeac81a9cd3e10b5cf7ed579664fd2202e4e94d756490caa6e0f405fe

          SHA512

          47e9fb9591bdcb1770b479d8d642bdc46df22e49b895aef65fcf66fcede6cd2682d18a1c1ede225803fe03f0f467bb2d182d017aa6a0a4be067c4e8a7ca0db42

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3eccc4812df328c91690e5e28897b154

          SHA1

          56a7b1dbb70914abcfb83df816ee70638bd17304

          SHA256

          0721450d582ea3e07a90c115c2ede50e96de1cd09ece32f8052c4ba2f26d4b99

          SHA512

          05c35dfe71b7feaabaa58a683540e5b6c9cba3d7437408337cf51b9994d0dd1c0897d8d150501ae620ac8f19e9d642d5652987fc65f3322ccdfc55df7deb41c5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3fd060504091ab8e128e0ca5dc86066

          SHA1

          70e8cb1040e9c79909bb87bb1120684b3b8b6c4f

          SHA256

          a05b68ad917443ac3431c369336e6a366aa2fb1f2726fd64242e88fadaa14c6f

          SHA512

          73b3ad38075b3689ead6d15523cf88f6b5a94426be9a3166a4f20d2e5ab3a5f4bc50585567c67bd8d87e99dc390df10451fe392d8e73b4f1e0aec48d947e5ca9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8e719da711ecb54b621f13d7e77b8c7a

          SHA1

          2198474555248c559ae4a77a90b7a245c5908556

          SHA256

          8144b968a997c87c7cc80702ddddb8ea8b187b7516a14322e58630b97590c294

          SHA512

          492eb0b904d518e088db92c4bb93898ae5f01623a047ea75cef4c29bf8c08d00b5b41c7be5da42a706e1ecf3d5537c4404d10216d4342dabd38bee05040876ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1e82feb8f4c715279170c3a7e31f8213

          SHA1

          00506e44ed6a161ba836a2c3bc0cbc1ff36b68ef

          SHA256

          0dafa3a73be21d961615cf171433121053751e8d2be83c0c86e65b7e13dd7735

          SHA512

          31b05af3df023b2fef71f03edca2e2a4b92e633f091f75ff6df6e441d59f9307a6df96d69f774bb7659065fe69ee85bcab7e2432ad9f35cd1af6e2b4de6c46fd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bacf3907c3ede27e6ea441e7af93f66e

          SHA1

          b434e6cd9ea0d524b0c767202530d8f3d433b971

          SHA256

          2a3a476edfad7fbdd12265031e00d07775e32afde6ce7f5b38e54419e67f7126

          SHA512

          f51daaddb8eb3ee61b4df1bcbd2c5d42bb71bbd61dafa59e88f44102dd71d786f10f8c994f195517b07b8c818bcb7dff7439c14ff940ac133e757f210dafc8be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d015869e2a90067d22191ade4018fa42

          SHA1

          247688b5e1114aae4f1a0e721a00d73e10b4f8da

          SHA256

          78c02432bb7e8bc2f8fce16cbbf7a8ec1c348b1677c5656292683754f9e9981f

          SHA512

          17943f3a63f3dba4088d0fbe633740b42227a4491e058e3d087b3fcd0fd69bce3e84a7a84bc8268cbfb310376a22af24bf280ae330a107f365ba095a42a02d2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          41b6ab428ae7e32dbc9e74a0000c2490

          SHA1

          1d3149d501256b8cb29d255531359bfff8adc33c

          SHA256

          baa80204517a94b60a49f61859854fd1e979660b33f4981d14a9490cea89eaa7

          SHA512

          58850242610828214cbcf18508226955b2b64a35a0ec6c34ca03369e84221ee97617e2da8dc97746299474930e7f4dc08b4bfed46aea9d13a564ada26e1b1862

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          141ac8590a2b19c39c30b5dba059d22e

          SHA1

          f0382ca98041e49be18de1a0d0700f55a5d0de85

          SHA256

          fb37968d5cdfef5706f3e149fbb9d8d7221e13b6a4ca12a355ae58876d021b27

          SHA512

          4a67b426e4e61b8f08d5769b1891d5523cfd7f13019e4e8b7a745b122d686f2fa8910680e9687c6de50051b354bbcd321138f6772190d08364822cc32a0c6ce7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          665b1eb309c53f875d51c74c4a1b6d47

          SHA1

          5e8f4577e1d84beee496f6f5548f3e872b02d879

          SHA256

          a2dca954f1538d4cc426f118ac7758fcd95349cc6cf4e7a514e7bca5b9c2fb85

          SHA512

          036f3fb65fb454b406d1de891d69fab7d3060e417baaa9d58b9ce5f193444f30f3c7040d9298f2853245454ef3cf7538a814bb2fee86219241f4bfd058a51134

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8f22c01ab0d29af40e6d787edfdb639f

          SHA1

          bd57e485332804b2bc7192f2d525752f5454e72c

          SHA256

          0f70b2b738a1f95456d0773187792f17f9e14becb609cca276324893d136e8c8

          SHA512

          640fa664c08c5b8a8491df6a91d62ed66d5d8c7074d01382cf158b328b3391ba9c132c973a042ef42896611aea2c85032f50d144af298b9c202d0128a6273a86

        • C:\Users\Admin\AppData\Local\Temp\CabD8B6.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarD964.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b