Analysis

  • max time kernel
    117s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 07:09

General

  • Target

    4d473d206244a4a1f34d713a949d077d_JaffaCakes118.html

  • Size

    16KB

  • MD5

    4d473d206244a4a1f34d713a949d077d

  • SHA1

    0b18657c7b90bc4d625275da0e56499e004b6b7f

  • SHA256

    fba7667c9629d2a7966fad269cfe4954994f98f4831383360675f7fdbd001132

  • SHA512

    5f080bfde8bf5d030f0dbd5a0ea8fe096aa1b8a2fb3699d877bb9f9c5969f5a1b333a339e97b69b29f08e69a23eb5db41ff0c779ccc5aa29c37f3c6a857729e8

  • SSDEEP

    384:So2TGd8h1iveTLF9jSSzSeP/aKDhHmTdPVBG+m/:Sa8hhf1SePi1T1+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4d473d206244a4a1f34d713a949d077d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2640 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1716

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          951b6df2f56342c08141f56ccf97f350

          SHA1

          a10c09cbea663d83a7b60287622195c5dac5b696

          SHA256

          f0a7408dfa9eba70daf67b822b0631724abb73e6e94c671d32e2916f1cd5b72b

          SHA512

          586887a385293930aba464e1048275f5113a4ad63cdc691697c61666d49d54032343409cac9263b07835534b00c211a0b860e7275471aa71bd5e3f867048afce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3cfb0f6ef24b1e4048497ae961566088

          SHA1

          da44c3b09362644bfaa3a47e87ce6e30349307f3

          SHA256

          252fbde39c292b845dd34a4c778e98e7f404feec1d96644f736691c411bddae9

          SHA512

          c4ff12542244460274d99021e08b8fa8b221af4e7cbef2d00b31e7b1ef66b36ff98dd28bbc67fd0596ab9b95e3be7d3081503011100bd2a9333fafbbd0729d8b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1d523911176aa4f61c549048686d4fdb

          SHA1

          bdea454b3e11e6c98f9cf7a9558712fffe532011

          SHA256

          a50ca5cae62c5221f945ff228a0ab3bc0f24388c00a6b2569d733f1360b895c7

          SHA512

          369889814e438f34697580391ac0e884bce4f8fdb4730342dace9aa1b27c8193d1593d493fcd7258e7976dab3316fbcc30acb79015e7266d6f68faa805c2b5b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          87b3b6d0df1da0cad69dd93d660267af

          SHA1

          c566227a64d632a4a79cb1117fed83acc7b9615d

          SHA256

          8bca967009808c366d2eef08d90709029d75e3e92c3723df2c1a5c747dc0d1ae

          SHA512

          c0b245a6e0ac74bdd20a761eab7d3f671926c804233cfb1cdad8122cbd14e1972961bcd2350183b04db33d02c4bb1d811f42d103ebfe27a166842568e2fb32a1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7f00fcb28dd8a7441bb474558aa6c2f2

          SHA1

          aae65298c57068681e7e8f74884188c0fb603915

          SHA256

          898712de70e7665967f3bd0d0fb141f03042d41a57e088c8dfe8175bc2ea750f

          SHA512

          143cb573e3b38fe03972f444dc8cee171d4da9e2599a9980d8dad944193187d85cd3b839ccc54b2796c43529baaf9baacf080739bb3f38863b854c0f059b5215

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          071abda4097b45e5956ac4b164915f93

          SHA1

          256e99e0cd8c2c57a2cff68d9f927682b63c9a87

          SHA256

          f47ad0d013919b52e1653cc1e6c88d05c8c3b32ae9b6777d07f5b6934ed80df7

          SHA512

          64167a329272dc89d4684c08f93fefc05611b6c67be11487aba6602304ca14fe96b3b00d481246cfbb358b031453198e2ec91498629aea1875fdd1760860bac2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1a5cc0d4039ddb3f7d175c2fb63c16e8

          SHA1

          7a8b04a27b26727d7a17dc85f8342d52fd850cd4

          SHA256

          7d90c2e23bf951cc7343c74ad757bea89986bca536fc36888542ece000315ef3

          SHA512

          6423246ca4fc331c64fe36c0f40998d41d1c4cfca9dcb046ac4369ad4909ac12ca4cba7c256d292705bb7399187712c2d63cb978e96e01d3d1728946fb02d320

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d8f3c4232c544916c15ab7b8de488278

          SHA1

          38db65496163bf9295d1a5052f11b697d71bcbda

          SHA256

          1c2f10f0df4748147b80821b04000dd13a2d2998c894ca8d9553fccc6d768776

          SHA512

          485e0d3be68a418584004d1807bf40c8c81370436813f2806e67cb4f0847f37b63901f326b8eedefd48c12ebab5172a91b082e16d9d33813227a190f41ffd11b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          efd243943813cc8f0e77636cd29220a9

          SHA1

          476400823da5ea2ebc3827a1b0e217a94ee4b794

          SHA256

          605d948d5619a2f982a028c7575ba0d8388b4b9c591f241905b5f2c1dd82fc35

          SHA512

          d3e0bb42ecd3004718fa871ece6532cd357a85e46593ade278d31b3a8a6411f8da920391f4807e494577f81ff1cf0e87c98912c41a3cb7277536a497da8776a5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5835d2fd84b2f2d6c249d5c20ff21987

          SHA1

          cabff80a86fc2a2af86058475564b9da658ba4f4

          SHA256

          5879826534aed901b5b62c354de4b89187298e195b989bbff92f315d1510202d

          SHA512

          d8862e450cff79cd13c0820e0b2e9cf78fea0f296af437872326165c37d09593215b4bd6fd9f155bb95220f5c9ef2b672935f03c0a48da4abb0c5a00ee9a9053

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f2eceab8d4e9c8b6b355586f5a439482

          SHA1

          c38b088e3dcb4cfccdc679a2e713c46e82e83fe3

          SHA256

          23effaf98da08dd63873eac42236092494f72b26ef22e92028282de0d4e666bd

          SHA512

          a055f26063126457b6162b9761a70b461e3c9c600985afbee8c4caa32e6a2a49f4490af4f89dafb42b9ab5c72eee6f2d303c101418710a397ec706faa4f3a213

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3ffb1d25867c8d6286ec776a049ab0e

          SHA1

          c979f4e9f8c392d5cd9ea2b9d3711172351f2ec7

          SHA256

          0ec7fe1699c1b4c5c6cfea403a5f8e8799171b2654381bac4b2cbb423780c3d0

          SHA512

          6ce5e90905803b0fca4b9fec798ec2a342ffb00c98e3f13307c4f3f8305f7a75b8674b1db1d08ab70ca664112576baadd4d069a8c820e3b5b4fd6fb7902a6549

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ac6b991fe2f3bcdb8f2ac81cf856480a

          SHA1

          a660712d5c488b133f1fcf034dc01833b58ccdcd

          SHA256

          be6ee78e39bf1b5d17a09734facb6067054e69e15cd6e8b53c57eaa3b0c34b25

          SHA512

          77116b83258bc5be62fd39d5447b1e2af6c49afd40b38ee16d9de1f67f627ec06d5704ae1a8fcbaf906d5ab5e3410bf1fe0501ff609ccd7287076126110b56bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          33a850147448a81999aa65e94c672fae

          SHA1

          82f867d6a7bfd7f4c8e1d096d26831449eacd2e4

          SHA256

          0e81208677469190fc313ef9a1861538f9e02a3a0dda02526be21ffd8d26b141

          SHA512

          83c2cc424b091321d4fe29cc960ed24ff00b74fc4a9c539fbd810f4b599b844831f0b4a5ad03eae3f63ca81fc4fb0b621fdb2c0fa770ada5fa103b1f968d18dc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c5966ce6a6909e6162e3d94ec0f0e178

          SHA1

          df5c6259b3b19a2a46f0d949a70f8d084cc3a6d0

          SHA256

          9bf1a526a7b88296b4ae3363eb8a83ec16f1941ce9128432d8c222adeb2bb465

          SHA512

          dd8b60c2059afba15336c07e17d02c573e4325f4f12811a720e0426be41c3229a423c4d60226d9f0a30c475bb0bfd701280d56633ed234de98e495f157bb9e5c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a995a367c89c27eabe96ce9f8829a337

          SHA1

          184f21fc53706e3c89bb24c998d035e64b28ee45

          SHA256

          332991c8b0f2a419e513a361abca46a00190667f2d6bee665ba95b71715fc085

          SHA512

          165e3d1a4fc004d5d984e8c8f6352d6c0b4fc41328c62f4643835d2021db6886026cdd7e0e2deb2666c653419824aa48b0dfd5f99db37206bd5fe2d3a46cc7a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          60413402d93e2c0984515b5afde395df

          SHA1

          96d98a1043e9401663463e4dd3569f8b30ff0d5e

          SHA256

          05a289932b9ffe727767a8eebeb07778d83b9ffb67209cb3f47d60c881a13d89

          SHA512

          75d2e7b4748288c4dbdb8433b51a21ddb97ed549ffab1e01e2ec9430169c7a488689947626dd63f40f532be150b81b9973b307a391238d6df6b20cb265c05af3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fa3ab980647772a3326d61e125a86061

          SHA1

          bbbcfaeb1abe8eb2936bf7d47ab035e036776733

          SHA256

          23c28e3f937c8bb6aa304eb73e162a9dfb27770208a84b2b5e63a1ac9f027ace

          SHA512

          ff77721b81849c8b1e1b905a2cc6bd47cd677af5e24130c91ab06bb939087f163db3527174b81736bf5e753c262e80f3ed9ab1d650f7bf8ae428ffec486ef3e4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cb10a46753fb6b33e5f768d8af066819

          SHA1

          eb33b857bdce03aff6dbda62f518f8a5bd4d9ae5

          SHA256

          ba1c192f3628174e3ed3b69b6a1d9d2b3710e630ae2ef8c0646656ac97f1cb9d

          SHA512

          95a526b5fffa4a3129e32d828416a0ce2f84da4ff359888c1a75ebea58808018c11705cfed8218647ec655ff99f0887ed6b036b53230ee9f3cd0d1d2ddd28c41

        • C:\Users\Admin\AppData\Local\Temp\CabC2D4.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarC384.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b