Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2024 00:38

General

  • Target

    4c18a4381355c3fe8bedb3bf3b10e702_JaffaCakes118.html

  • Size

    57KB

  • MD5

    4c18a4381355c3fe8bedb3bf3b10e702

  • SHA1

    0251f236de05173680684f477cfb53d8a3587286

  • SHA256

    1a1b052d28ab08a031305fb3638a286aa10d9566570764006309e4096c4e07ec

  • SHA512

    074e0001ad07f77b7604b402f7842e4f73329badf6ee2809e45d2a6fbb4ab411932950b97fe334b1e55a5b37820308f9677b539121c43b31c54671c006963263

  • SSDEEP

    1536:gQZBCCOdu0IxCqbUMRqQ6esNUxAU+4Wa/uJLgGeu4U+tc74odv+lvYqMWObUDWTv:gk2c0IxWMRqQ6esNUxAU+4Wa/uJLgGeA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c18a4381355c3fe8bedb3bf3b10e702_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2828

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89b6e5936129f3dad6877a16c228aca4

    SHA1

    cfa2b854652a2a494401faf3e7a0faceba6505c4

    SHA256

    1a7350acf55296053dce764aa16d04593d9358c88a4e6b5745fb5f48948af47b

    SHA512

    a29935edebe85eb3ac0cb29b0912ccb42beba85e684bcfcc48245cb935a76bdb2d3c58483e92213888ff45fd147e9fc79d82b00c7d768d5d3a89789f50818587

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    898f6e70aa1de069f30da2d911408116

    SHA1

    1bd93061c128a953ce569beb85a367d1a2241110

    SHA256

    65319b4901e8fd898512702bcfb64edb2e39891306bd973b386ef57b1c7f72a3

    SHA512

    847e2ca3a42ae0dc724ae8a580ef9c57383693afa8e22a537e5ba29c4b8b8880ac61d1fc81dd719a0272897528489a33e0b82043a013a35ac011910a542eb3ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f66f25abd3ca89e79dd57c4a348d1b5

    SHA1

    219a16351e4a907868892ec56186571d979f1f16

    SHA256

    ec95135f77c7c6c795dec2934a439d2e3e6ace596c29b2b5fddf1933158ed966

    SHA512

    d9b866fd570f81ceb8c6574f08a9404233f24ad444a979d8bd1b7f6d5fb732967fbd40ec7c127781d09eb7a9382ea3e5074f8d8c44e99e524e8bb20ae69ebbf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec3ca795410f32e17bf34ff3c08f48bb

    SHA1

    d8c84ada6b4ee8b908c8ebe7123d71eca6bb34e8

    SHA256

    a96248b728ce047e4c61a3fb6636810b385fd3d2b5b39f3ca4b054c22ebb97c6

    SHA512

    6abd897a43353b4715f1a5b1baa6cfd35fc31011442d4d938b995a7512a4851ea2d7110350494b903537a8edace07acfe1a4bef80468d480b4b18b14f8945bc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d38d1d00c834b2fa06b5814b532074b8

    SHA1

    3fc9839e49a2d4d6c7aa49f4157e6572815a6f8f

    SHA256

    d98a9039a8bad0593b3489f50824a6068331fc813dfeec22230f75ac37bfdcc7

    SHA512

    df2da295558c3d63eaf319a5d727b58e90ca6def1aae8e4fee8231b7d690a357b3e651afc836bd869552a0e09725b7e70882f059c7bc193737d097e902f46da8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5003a6af237f5ef060419aa7c7abc4d9

    SHA1

    af563565275276046d73db66536c9b32a8e1eee6

    SHA256

    076f9c4a76db0d14c63c70e6347b26249f30d6404f2f23cba5fde7df707b5384

    SHA512

    558ea3703233a70b35a0be32b8a3920645591bacfaf4b1120663557ee38b2264ddd65283ebf71494317647f4f3dec4ae362a490da6fdd21c7c3e27460765b5b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f68625afe23aab9172bd782039f03553

    SHA1

    314833a0f0dd7137ebc3a161c1d1d63874d09b4a

    SHA256

    71d447b46ec0dd511a914ca73b75899e9652dded2b43a41f7abebcb53772fa13

    SHA512

    9e82c1bb8dade56dca0a345df8bcf3d6e8d26cffe61d1925810fa35dd32a64ff8ac82e6884298f5c268ddd6daf99db9e434b0712854d7c18c77493ede0e9ab8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09fb230a2d2618d548085894064d9501

    SHA1

    3df9ce4e45c0c9563f31dfcd19e8c3758ccdaa53

    SHA256

    0276c39dd21ef1842b18b18fb1a79e590fc3b6ea843f64149d057e09d09b35b7

    SHA512

    a2906894539491db904a4c4015d972c756dfc80f798170670348de95d7f6e39ade3c02c115d2ae0e2f2b5b6d9143bdbe9c6220339e15c44c2eeca274bead4ae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88e892b1a6f5447cf62e179bfa59dac4

    SHA1

    1809c2ff44f3e560d60cd6ffa532ca1b3995a60e

    SHA256

    770be99713a5ffcae4ab555540c9eb6b340042575d6a8b228326f837af512f9b

    SHA512

    7b76955707d302261d831c6512b29279deaf0d88db1a4dc491f631e7dc0ff59622e0712042a19c5c5636b63b49878c55a63aba9002ada1dad83b8a989d8f6748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    496287865d1a40ee3bdb7d1a2f56c836

    SHA1

    78d94e5a11756508533c204968e85fe780a9c0c7

    SHA256

    78e6ce79f62179878795cc44a384db5cb63ad9546dba34eba9843bf71cb5de0e

    SHA512

    0bf2ff43c61d59cc09948b0b5d5b66a3d2712798c80acfacf286bab773a35a9d7e6ff9f3bf9251e3fd0235f770ce547c622cdd39daa5c1f89a8d69f2e0582528

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c04a53b5cea116aa162e88711d9cd897

    SHA1

    75b9e9fb4403336388b5513ebc82bdbb66563604

    SHA256

    c7606732eefe20558da7418d30d37f68cea94486585d5aff65cc4945af5fac41

    SHA512

    e70a01cac5fc3ed169c67f4e880d951a88976440f675019bfdaa270638cda03e3090a05f947a44f1334e8fd8f8431c037b5c0878ecbf049229e5617250a5779e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a16519fdb40f3f3fa2bfb4c274cacc5

    SHA1

    47290de3d020bd98c89f17e8bbf0e92b9807aa46

    SHA256

    6e86cbd5f9a29a2e45c1b1855ef82f5ec8fdf12743c5948909a33b0246b76fa8

    SHA512

    41945f4fbb58d2544fd0f3b8008096633192a874e4662fa838089c60683a559a08da6ea2137a792d25a130c44d71fdb3c28865a06fc497ad51020e4528d643d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b174f130c6b47c7cff9799d24602b0f

    SHA1

    b85f56e02a18e88439699ed3103c192ed0bd5731

    SHA256

    260bb6761022624cd877b93f63e2fd20e45ba8050a232a58833338f8860e98ef

    SHA512

    6f327e1218e84639e19f576377ecea876abc1b8749f7938788fa3f9aa8c886bd835434c7bea803a378815fb763d39b3aabadd6ea990624ebb3c7734874ea2aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88b2f262ebf69c1a853836e37a249457

    SHA1

    003b3af80e7e3a88f77a78c1493173c949a54432

    SHA256

    bb984742406412dfc7a830fb13e00c82f8663cd36bc8982273c953eaea62fe51

    SHA512

    7d456365829810f5a9fcfe1d8f81398cd819d060828862bc8fc74253a991169cec572d02f2bb8760e7c4419d13d4aabf6b77756b49fc6da030e7164c3c34da7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b71e9ac7d6d000ceab548215db3c8f9a

    SHA1

    cbbefbb4f4814cbb46a3387f60594edd0f198b2a

    SHA256

    1f760638949c931cab892ddee278727192334a15bbd86add0cd927a9116bcc7e

    SHA512

    72cce3bc6268508c8922fcc5d46c9bed49a582ae38cad73e2759aec60e1d25eb59eb0d268fd5145be27ae4c872377a87e6ec2e93e30bdb1f4ad9fb195071139a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b8d74b710f5150f7c767d9e27aac335

    SHA1

    b2ddafc1660d2253f1fa432cc461cbd183f075a0

    SHA256

    ed9cc85d873dafc1b9fac450154bda86b66a4d6a9759284949a34d6cd5e3110b

    SHA512

    8ed2fc87a9cad770574800e13a0ef98c307c26d5e7c9a04fba3418b983e34e20a87a819a58e0d3cb5fa5f482dec0f2f21a8d05fc71bf0b40e48f3e3cafaf3334

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abc737a9d444288318b7af1881b816c7

    SHA1

    7dc9fc88f749031e13255b21cfcdf85bb6aefb0b

    SHA256

    6b848021f29709f0fd10757fc860dd0e90ddd50c9659c1a6ac389167ee2f3522

    SHA512

    d8589ed586c0fc6b9fe43250ab02be9c6953a3bc8d9325f9835b024652df7358753e1fa0a5c63331a1663ca6e46619fb9cced76325000e70ded045c412788b65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5954d1e9973917288bc519e883f9949c

    SHA1

    b963173ada47610d9f03a3bcc919f34d16474eb6

    SHA256

    3804e78097378ade7ab2a375b60f78d8a9a4bcd05bdc17b2514861bca0631615

    SHA512

    1066198e45b254cef16207b2b85843934c6c3996fd6f54d4d529f2a94bc08144d06edecedb6517ff0fbef66314c3f6ef0ca15d6ad60aafcd13480bbe44a3cc34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    172a30d32453c343175cb5462e8fcd2c

    SHA1

    2987d2d5905a2062b5ab73835b4dbbc8e0ab5202

    SHA256

    20e401f3c04de84e62b381184321fdde53b7ea6f763f0b16f67f5debb2555e3b

    SHA512

    bade95f57417e6ee667a71af432fe5cd447db860c45d22d23a5e9cb6fea3943d1d29757ee79f952d8e6d27b772eed35ddcb5fab33a4375cc20f3f0bdc4494dfd

  • C:\Users\Admin\AppData\Local\Temp\Cab273.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar275.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b