Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2024 11:07

General

  • Target

    4e09bfe3dc23d50f92daa5e6fb685db5_JaffaCakes118.html

  • Size

    53KB

  • MD5

    4e09bfe3dc23d50f92daa5e6fb685db5

  • SHA1

    1ca506fafe350949f66c5e478915139875e1b13b

  • SHA256

    d5f6b9ad767489986b20151ce120e3b8ba0f141906bd5a11d8d49104916d125c

  • SHA512

    0eb993ebb1d9ef6237416e74d83d803050857a2de4bfe7f4b1c77b9d35d981fea1ecaa74d999be91cc78a83d7db81274b198d6c5c1e34701fa7a57b05b7e0274

  • SSDEEP

    1536:CkgUiIakTqGivi+PyU+runlYl63Nj+q5VyvR0w2AzTICbbSoK/t9M/dNwIUEDmDZ:CkgUiIakTqGivi+PyU+runlYl63Nj+qz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4e09bfe3dc23d50f92daa5e6fb685db5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    317eb08d7d8304456f02dd8632fa12ad

    SHA1

    9e4c7954fc099b8c3852fb2e629476c32d41cc76

    SHA256

    db6cae4bb807160722c351339cc11d48568036f8469c84111c040419c20ea747

    SHA512

    cbb7aa97822a0a3a086f6eff33e602face83a5373dae7c23a70fbe5f6fddb692ad97d9adbecc5918f29a53eb37d609acd4079e6931973a94b9e4dee6c1cae42e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45b5a3bac5bd74aa92b87394bf36dfe2

    SHA1

    f786ef53da1a3b03a933af68819797b1b713869c

    SHA256

    5e186f59b035cfc4d9b1c4693358f62fde35accbad8b5550699f3a9dce70a042

    SHA512

    4c2ecd551565f61735621476cdc615f98ff8085796ce2e4950e927abd286880f39667d93edf9fa083d3ce80d6fa5af3b7a14776df5038775018b3bae2b11fc4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ad7961d9dd386305e246eec6da137c0

    SHA1

    d4bf276a77b3eab7853e389e6c13912e2e4be1ad

    SHA256

    cf665953857d799433cc2bc0149a1f721eae83a843fd2ec3d817561eac19f51c

    SHA512

    48195a5f1c14d9435f16116e516a2688330d845d4ff3711f717bbb31fbe47dd172363a7a9bbbd45353046f78024894d5f0825386545484af8df826f32c00ebc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a90ced5d6502238771d34272cf9209a

    SHA1

    45a8b1e3df9b930150d77fb8e338804965a2beb0

    SHA256

    ac193651d5e43b89824b69c8a465e1b1aa5b2742a9f3a23166b9ccbb166948db

    SHA512

    521f26a6ee6afb5a73ad7959a621ab8ed50b64b1bfd963f52b894005dd556e58bf859a49be5ced635f995d31952b106c8794288b0298f7ed96afba14bd70f82f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64e9b493cf7041e902caba393bf1aa7e

    SHA1

    d5079bf7ace99db7974fa9a10fb0f3ada2de4d3b

    SHA256

    6815d4338a5570c9c3d2107e5072198896cc3fc6546ddb1a35bf657e9ab46404

    SHA512

    30251ced6c55f202903501f4f13b7858d296161bd62fe3342729a9563c7bdbd4ac3f34b84ba6cd7138abe86eaa75007a361b025fb856a967186007242017eafe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce9ced89527116f10b745ce3ce9af556

    SHA1

    c7bb53ddd8adda5ad58e409c851dea15cd64f713

    SHA256

    49b23fa5dccff6d694295e323bd05775ddf9ef50b048bb7c97f19cbc4fb9bccd

    SHA512

    10b6a133b25e5b49ac2c47f3ad8f6cd5fa4bb5d8038c78ace671095988b43746e643f64e560d6457bc96192ba1ced5e6b2b1d2a3eae2b03a7c8471bbbb51a397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c5b8dc5d5f956d89ed82f10e5024864

    SHA1

    1ac3ada5aa05a1a312bf9f971632a3ead273cc77

    SHA256

    b9393072a2237d123215388ff5f63f7ba6821dc8eabd1343daa9a422af3459b2

    SHA512

    1033939be617f8694078843c18d99130b9d1b75ebf4a3b778b6bc5740bf8927113f89b8c8f5ad5432084c6910585944ea79e23e95d74b8d6ac4ddf6aeed47a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef1adff69a3b42d0c9829d1f9c45a8c7

    SHA1

    a1c7592b6ce19fc46830b2605cb0a066bea7830e

    SHA256

    6aa11640137e6e9a000d0cd93663a5891f58e0fa879a3bdfe9e1044690df85a2

    SHA512

    355454301932766b6fe0617530d03d3f875e5338f1c3700851e1e7b07d6755732da31c46bbf3b509511ed2de1a90751af60f6d46373a48e8131f3d6dc2578f17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d644245a8413172db84d4a617a62b1b5

    SHA1

    6814488a3004ad7bb9e5bddaa4d5f45b5d03b62c

    SHA256

    9c9ab5cad4e76a4e71f92aeeee40b6c2584001eff0148cc9b71f40379e717f18

    SHA512

    98f8090d25d37f4e0c02193fd695cc2a2d8e32c44f585ac40a2e21c83f3e5bdeed285f6032d54464cbdaca6264ef35fa478620d75a975c766c094d30360ab5a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    523b188b3f240ade529ff6ccc7ff1d8f

    SHA1

    618642262cfe957aac6646024dcc1bd754a0070f

    SHA256

    60964fe089c0818d7c6146ac5bd90266ced104a8941cd272be94068ceefd55ae

    SHA512

    c2ee32a93b331874af2410671d25070ee6fcd74d0387f9679a9dc78606c143e5d67aea441419cb63bec19cce7bf35ee6a8dbd177794426bc365280fa56675187

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a2764fc372339fb0fffa05963af3c87

    SHA1

    91202eb37ce24e90a983fed49d93a5a2d18266ea

    SHA256

    e6ef96cddfe15fd2776b512a583a5d6293bad23d1ce29a16465d53adaf11d1dc

    SHA512

    4462837b659b1922328b2836dcfdfcf5c05f8988b8ac4a627ce8f2fb23de111a1565f09146e39490e62c825c7d7a862038935c8f96c3540526c2aa51d4fe3b75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83a97c9ab46a8a9f03c1cc212bd29768

    SHA1

    faec33090c43dd69e90b138bac9a9e84db4a12a5

    SHA256

    4004540b4bae5a8257c05c79812929a54e2459c1e63689ceacafabb526bcd824

    SHA512

    f6f92b5e1d6349ad53f414fa861582873ada7d2071d999d0ab8c20a05e2b7102575bfc8f025d508c6424cfd40a2c34bdf7ec505c2fd38652a7966afec51aa27b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73ae488fcd18df21b126323ee068be16

    SHA1

    3fa6dcef461bb417e5686f1906935883b049e645

    SHA256

    6f4954ed255850470141b20f6f76625671df31f7c0cd3c64848d60c7f065b3d6

    SHA512

    2b61a8ce68e803b95c5803496e214284932100c348220a6affcfabecf9c1ddf54a9f1370f20a7c0617cf5ec6750e9386b22a8fd006534089d0d36b2151425882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c02b098def40c4bd71c3ed39aebdffc4

    SHA1

    d3777b4b61d0fdcf61ca61d0899a3fa8e75690d2

    SHA256

    9deaac4da24d5fdb25646c5e73ccf4498e229bdfff495a04e7b480604e27fd36

    SHA512

    f13b71f83418d6788810c16ab8c1301b672582b72cbc192b874821da9cbd15780951ab578317fdcd7819fae32509b5e88f5fd3f2aec1c28dbf68ceb7e692c4df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23c316cfb75c28a8d4d4ddb8c0887850

    SHA1

    a2cedfdc39fd389ad96ecb3f5b91f4c14322a42d

    SHA256

    e92f1ae2d6a08f38a379c89cb212e5b228a9ad0ce6ea431919d28d9865382fc7

    SHA512

    57a1fad5716302a0164e4a902c08cfffa716fe3fe7570229c0316981cb7c60f94f5e91cb7b75ee1913340d7d2a6c0922ebf48e6ed7f4325463adbecbcb56d972

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    613ad44bae6a78d73687332271718e22

    SHA1

    06617b54e0ebbd1342772056f4f23f3b297a8f4d

    SHA256

    e87d0d0a8aba01982d17a4d0a67e4c4d0518e41c97e9a2170bc87531c1db4cc3

    SHA512

    76b40c8f97e7bf5b909aa8cea061e14bf1d15f8194492c65a29e56ee32b384d511484a4b5b72bbd43c7c2ae19cb1714d050880dc48a30c648d3c670f235f057b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a79e33199c08b23f5c3a06213a99bf4

    SHA1

    b93d09fe8345d70c3e49e6c13be332784adb3737

    SHA256

    6906c82cad6b097df3b606b40cef4ad11b460febb5af412a622846c8ebdb8a1a

    SHA512

    a4b2fad82d3fb6534ef66446cab880a5b9a917199cb96f7393f1a2552f0058fabe59a0b7c8c25788ad9df8d1b3793f109ba2ad0f46b76ad7f8dddf2a171f4894

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0381082b7aba5b672a3a5c6b5750f863

    SHA1

    bd27ca2a496676f29db914ffc63827582d81147c

    SHA256

    077ee8eb51e0e3add9276bef3a4c3acd001e38e9d9ae7cd61fbbf29cdea6908d

    SHA512

    9a2a3f203a23e210ceb3f6414be68351e833855d839d7ac6e58df6e2f0460a63c1f2dfb6dc982fea8f3a6599fced91c0b7504a3bb4248c82694c6012e1f7c75f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccec695e2eb62d93c8f6814102e1773f

    SHA1

    d2288f49d76f8173ac0c4ecf412a3e6402376182

    SHA256

    e5d095fd0a1608c2243441f734261d2abb1bf65ef9afc02927114f87c295cc3b

    SHA512

    0e1676af499e5bc6ea744e259dc08e3f53f776571d9575bf64fd3f2913a3e8cc85d68233bbf2004c7b2222397577bfb07c3420c0ee24cfa79a8fecfbffebc5f6

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z2D3H3V6\style[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab403D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar409F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b