Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 00:08

General

  • Target

    59ab439806155f28b3198e7081b19ec9_JaffaCakes118.html

  • Size

    53KB

  • MD5

    59ab439806155f28b3198e7081b19ec9

  • SHA1

    36c2d627a6b217289d21b1b5c303a19d9cde6a42

  • SHA256

    445f958568cba9e5c3261d14abbb9bc441debe8bd17adb938712a41fd7db4ed5

  • SHA512

    fbab87b9deebde91b1d2cba76ebf05d15b9c14c9dfc5081577d11a164c184584cc98cfa342a3986dfb8838127ce3ce074b75de2c2a4a90b2ebbad5421af646ab

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUirunlYL63Nj+q5Vy0R0w2AzTICbbzoA/t9M/dNwIUTDmDT:CkgUiIakTqGivi+PyUirunlYL63Nj+q0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\59ab439806155f28b3198e7081b19ec9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2680
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2680 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd57bbd4ba9a575bc5d85e9d979543bb

    SHA1

    cc53c5074fb8ea12afe3f06a5b77a6beffb67fe6

    SHA256

    067efb666f858dcd6c76611d1f26dbefdee4c7be44a1cf5cfa1b800cfa34c29b

    SHA512

    d1ca7b82ad5ade62ac542900e8baf2de3ec38877c74392bf0b2360b97adc9b4f5c44063042fe3b04f02bdb8349ccd468efa20cf82b463673570716752617c1e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7b621c687ca6ac9d4373b63a23ed288

    SHA1

    6676dbecb57c7c54086a6bb86affb895ac5c8c7d

    SHA256

    f22691c7ea9d2fb1f93f0ade6b3e0da2133ed96a432ce4222a168ebb00be5b77

    SHA512

    04147b19906969eaed958635b93b1179a60d3c6f7e5acfd80d309199755e255848dbd083d738ed16239c0de2ed83a6f7831674768e7157c261d4cfe101b63b5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e9aa40b75792b888d88cdfdad223363

    SHA1

    07fd0b40d6b4a7d4994d56830d0028de6595166e

    SHA256

    5dceddd4525d38efd9d6210b22e4128267a7c1324cb04f2096a98b3aae394874

    SHA512

    5ef0f0acd08d07f8abd75458833baea78996b5b75e07f0c25f8bf6023e3bdcb74e4c45a657fdc9cc43520d2743020fcf6e43aacd5859aebbd10458bad40047f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    929a0d9b5d187e911d2cace938e49f99

    SHA1

    41742afa83eaadf64f764a12b7bd0cf402332c91

    SHA256

    6f5de71d2c85bcdbd9fd10b9c6490b49f1aa0dd7938e917ce14893a11b00444b

    SHA512

    1162dba2c58bcba576b17f87605208b33f046cb65f4d7e4b9eaa8b9ce53f026229e679326c580bafef5503ea8724c696aea4a64ef2c8238db30073a11b73adbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e22041bac4c2100151b064b6054317b

    SHA1

    6e2d681bcfaa88f5c3040adc8851ea23064475fc

    SHA256

    0175b9a87094feba4cc743ef22963c0687184849066294be03fac04d505be5e2

    SHA512

    127bd46396c172f2e7f4a7e24fb1a0f40d31d1d5a94e7027d2443ef5f0ed1ef720c25bd9923497b4971d4de367615db121cbe633b8cd7faee60e8c20608a54b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f11fab6357c2e4afb5fa27927aa556d

    SHA1

    2969f2bc070a8d74251eb31ac3afe8dcb5ec3357

    SHA256

    bc386c5c84942d1a8983e8554b22c65efdbbfe367ef4f1fd0cc287e6c4aba377

    SHA512

    50b74c3999f87845e1c5fa99d4f3026ab32626fc451dbd87b34604a6139de3f1ebee43dffeaaa89af803807371acc386d95b32e324faa8c56e92dc4b053df244

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    617eb9a727e5fac260301c21428be3f0

    SHA1

    60453053fc8ca6520cd191d3bac4955a8297c6bd

    SHA256

    c2160e2ba67f71121f271b1ca33e61a8a86a4928fbf42876eba3436009d73762

    SHA512

    1150ee5582b676636edf5ce510b91b26d777d4ffdef8533caa93cfc191048fbc425fe2c510d20a49ccdc9b4870d7c182308587a0278591b4eef5bd87f1153868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3776f972a8189521adc97316ba7d91ac

    SHA1

    0d1f3be69f0d203fcded8c2125a22ba2bdad13cf

    SHA256

    de0130464a72746039b0e31fcff58e7cc53948284bfa6a686d8acce139d7d320

    SHA512

    206aa895fe4b7651aa80653e7b520ce84a7d96976aeb62ff6e976444c3f5527a3a5003dc4f3f0c1f56654178f0c40e591fcca4c2ee70eed139495466d63ea1e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36f843f85d780d7294fe3baf5d303d53

    SHA1

    87595fbd9e11d15c645d9b6876ff788ad117fb1b

    SHA256

    6dbc2e8b78a9ecf2d4ba073a95e584a455ed97e7dfb03ef281d2745174fe7461

    SHA512

    a431bc03d349ef7df59459e8399cc67ec05ab3844082a77fac62e82be74e95d83191d2f39d894f8eb49f2d1c7cc36c99f8a20473e6c40fc4096bf46b7f9cdfcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc0f0cca3d837888fc2629ef69a43adb

    SHA1

    c2b929268e6dd3b9181144ed1dd36f92e491594a

    SHA256

    9f0c636737a861819bfff0062ee532f2b39db78ce1d96535a3db77669d0c5bd6

    SHA512

    d1784bb64c7e1f8956130b89f45999522877327cc855aa7415cb381882cbfa09ee83a7bf6d8f8d4eea0e067f0e0b950b6ce5fe494ea62e390ef4d0c301d7c3e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1bf466018dfe2b3a7b73d870e8a13d7

    SHA1

    3b63ac2b9d43c20e2c1082d1f2fc473fe31612e3

    SHA256

    a93c4efd4f650355002fdf35933e4c527a8b969952e1f1dc45ba77643ee7f39d

    SHA512

    13e888c614855bfc34c3661ba7e666f1fa5f202f82120c224dc40c6e42332b03aeefcf587e4250b88a410b91dff3a7428ef0cf5c68519f27cfcfd9af04922050

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    956c4d537f0c8e0d008c1719d6f13c6e

    SHA1

    42f8a0b009dd876c4307dc3ff702312e6ef7e284

    SHA256

    b86faa4d3ca7525f331f344535be5fae3914c7755e8533cc52d426c02e3ed284

    SHA512

    b863f505d574b7112cf4947c9ab73c355cb691d17a92f16f3d909d240c0da30858ead49a032b2f68b1417a32167ae87d98f52a2aa80726781965657a8d809150

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    675f0e41e3725fb9b510b55d7afad180

    SHA1

    79d4ff69636eebcb7305900f50435538781c47bc

    SHA256

    81557c1c07e2cfab06705021f44567c5da0caf14b6329e375a689491f9a91180

    SHA512

    ad8d5eb14c42384527ea2345de31790b55ca59aa4b8a24c21e16dc023b7a3069d02145e411d86877ee1e2d5d0fdf2428fe58f2938f014092a64ab804a6b2df02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be5d91bdc59cb714c8601d149cd1d335

    SHA1

    f7be909af605a1fc7e216119e7f0f5f39452e38a

    SHA256

    6562332721ec27e77dc72fbd9f73bda98b46a6d793cbccd1b3bf2fbd18bc4143

    SHA512

    1268ce61a20ea2073ad513ac79c87812f9b2587e47d273c4a021e69c07165d05c60d9d709f2f6928e0fb688111d118301f3ebd8fe86dd4a4b4318efb5fd98097

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47eb0754bf4cb27c9669221827abff5c

    SHA1

    0823d7a8d23cf28998233774b6a057de0c4b6be4

    SHA256

    acad2de704f17ad2ea3278059c72b3c508686ab338b4f17c3492236f660c6824

    SHA512

    fc0e9367c000502852465da2ecd9adc425328d65a178bf5e1ef283df6edc930726804947e6882e00a3a440e5d5ab8d8b5537c02d6a4adc4228e9b927783dda2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9690b85f50d218c9e14a2417a2f6e04a

    SHA1

    1b8bd94f8b6ed330c828a35d353b1594fe58dedb

    SHA256

    c4cb56de370796663d6c5b84102fa99eb8d5c763fc3704006a23f7a9fcdd781a

    SHA512

    868eef98b79f413e1735cb8b64ec3f67e9b004bcd9eabae2ab6134772aa9c459608d6deb7fa580e3cc2d6b6919c4e1c43d1d518aa5eb8a42bf592640d0e1ad25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22387a460a60c15e67533d15c76b75af

    SHA1

    330e513428e06f873b3333221ffa7f10963ee1da

    SHA256

    2fa4bd136ddbd2ef199b2a834d562b6ae971b8c8c994e6940a2214075b183251

    SHA512

    4f6cbb4e4784bebaa1270fef82a279f4e1d2620ee2467c1499ffeb9643bbddd32dbdfc70db2b580bca44cbcf84cdd23c352926a931537743a8e9aaec91f31d8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14d957fd889161d1d660474ecfb18e84

    SHA1

    0f881eb2c84783d73032b5a4a59ae431a7726388

    SHA256

    0b3d7723235cad53fbfef77c35619bcd031f747a9d7f932389a8e4126e1648bb

    SHA512

    8754a3e2dfb5c3e014fa560c8cf68464fa565b36ed3b72ecb375b594646e51db7cd6b0f17936d193ffef451e1eeb1885e502f07401449607b7803f0e48535e8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5a3cf0db2ebfffb5413e7e91f9115f2

    SHA1

    afa8ddf67662aad57a6ede3c518b5b3291ba5715

    SHA256

    ee87426b1f90b57f627cf0a89216ca1fe1f60a92e0c9221c849ecdf61ca5c2a4

    SHA512

    3ac6bc4ecee61d85aafd7872540c1370bcf9a82bc56147fdf64bc61e08edc0e2d5a683d282e0af317c932b754f8addc857aca2deba58aa3b41f87962907b5d98

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X761FPIN\glossar-js[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\CabEA52.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEAB3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b