Analysis

  • max time kernel
    72s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 06:29

General

  • Target

    5ad1ff2027b61a0ac665d3d8c27e7ebd_JaffaCakes118.html

  • Size

    6KB

  • MD5

    5ad1ff2027b61a0ac665d3d8c27e7ebd

  • SHA1

    dea79c42f858fcd4e7a2f03ed130397864db9e51

  • SHA256

    d7d30399f2b756ac90161aaca06002613b7fd43361d1f9722b2623ef066925db

  • SHA512

    b742b0e04eb69d7dbc6a0f1044d2ad7a9a10be8f8497b0818887f6dd423980f84041de4ff8318f8e1e92fd4b94e42c348fa84fde204d5143821fc71691055c06

  • SSDEEP

    96:uzVs+ux7U/0LLY1k9o84d12ef7CSTUi9/6/NcEZ7ru7f:csz7U/0AYS/h4Nb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5ad1ff2027b61a0ac665d3d8c27e7ebd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3560d2f20089ef2100b3f43f60f282a

    SHA1

    3d131ebd8f59bf1b91b4616b7ce7671cb08698bb

    SHA256

    5398e47a7deb5efd6b0b3182ab59ac616e49ca122916e307d7d337125aad90de

    SHA512

    6c5813c77cbb1e46996f402fc257e53fc9b6824affc93f8b4afcc800140009ccb3457facfb070a7f185eb572b1802ca60b6b5584a7fc9bffeae82e0a58000827

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dffedcb5f2448b5b0d6e9b919106628

    SHA1

    81fcffbacd80e34d140c37ac1511132bc05f160b

    SHA256

    1883c2edb91325eee0782845b4bd1867c5b042bd3017bee954ea54c361ad9a04

    SHA512

    c0202f499331948abb80a4d385b3d730a69a24da83857f5259c76cf0b33df9b88e84ce580d8524164ebcf7a67221d33b49ea72c12948e0935fb9cb619cb94471

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4707f3453c7dfb7fb64de179ba79a5b8

    SHA1

    f57b51fbb4d5f9872889e4a0a02cb15a635f57c0

    SHA256

    81cbe96c8456456afebc9ad7b721dcf75783f3a2ed63bf9273622545d663c3d4

    SHA512

    688f20af4f88ced4267fb3f63b21645dfb2069fe63f5f274f63af01a20b7e1dcdbe6eabf87962c680e0f8f836fbf9d9e40348aeb58d70274d581dd1ef8a70257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1bb9d303faa4a0562fed987d1b9ed7a

    SHA1

    67295fde51889a7f8b9d7c70d6b001d672ffc5e5

    SHA256

    d00de02dc976c10cc5435dda7f8e207a7c41f257fffff4db82a703d2516acf2f

    SHA512

    622a2e473e67df592f500da8f3d76a6a17cc5fe99470cfc75f433af16e8366d828828234800198da09a60a14dd97b881936c735abc6a628c3ecf6c7b7051cf29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65c3d031b9435022e6efd887b062f2a2

    SHA1

    d673e4cc1c12370bc007c60a9c906dd673c004e9

    SHA256

    dd279babf10fc1f84b386554469532150ca4b5d6a924733e31af7a1bdad2da9b

    SHA512

    d922082585a43289a268f718ac1cf1d45de5b38b79318257fb8249647c0196bcb1b29b0e8e77b39e1be0eaf4c4ef9de7d389c07da292ceae4bb91ceb757f068d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28915393edf8a0ffaf6f831c3f9890b7

    SHA1

    1dab2e257ae620f11279aa87c23fcd8107904a3e

    SHA256

    1b6ac3fe76fa4f2e4dd41da767d995ff5a42196dd09c0c938a02eb978dfe6aad

    SHA512

    5c7b5674a1db5436d27785f408b97ac799361fad2cb76151a20f706d670461aed9962d975cba9afe32a45651a8da1341fae30a16830c0195a70313a487b02dae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc6c1e3c5e5a8f628a10309032f2156e

    SHA1

    47c54543f5fe95bce696176dfe680ca558eed8e0

    SHA256

    34a23b0110ae74c3bb98e6c28e994ff32a9547be4c67e99ad126328fc0f5cea5

    SHA512

    1f8808bdee3fad09ee921e09858e30b56848d237173e85489d434b22b682093cc1898674a4b7f07a6a7685a7f1ac2339951c77050f146141b47aab39da61450c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f15baa4bbbbc0ea38355b323eeff6e5

    SHA1

    873019d71a9bf395c2ac258530aa0d867e4bd2b8

    SHA256

    91f08a3d964eab60fe52bd5a361c44ab80ed3e3c58f2c67fd18d6c5d81504870

    SHA512

    724c8c2a401e091cbf828a7c482364cf49caa9a7c7c8d1125cb4d545d70761cd652fd29d63b961a1a4fac7ca20d263c0d2ed31a6e8feaf0c2465568144607e73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c79cdc35184a811a78ccea1f1950fbb

    SHA1

    d4ddbff25fbb24608a2d1811b5791a3ed641b7f7

    SHA256

    ad0f1febb4d099d331700da13fab572738b4aaba0d6ff35abaea5e51a125c157

    SHA512

    d42ef6a812351db4c4f086b27abb7d6a62f5309742c87a03b7aa72b1861dafe024eb73d3bddee0fe59e9df43d70518c9fa72b212d6d4b7be6eb84f3f4b96b141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad3c886017035cb1f23a0372a17cc331

    SHA1

    92897980288dc5284a9fd1bb606e82382e8948f2

    SHA256

    65a463fb45bb230579844557f45ef77e71ca3a4a78f3d2c870d6fc76614661c6

    SHA512

    a6fea35410406fec094387a51955fa4018bd9db58ef50ad1df1ad42be1eb265efc36302b76c04e0e5c9e6d2d0151880c03da06b165de5d4269846801a1a51f79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4f50602908024d945f0f86db6f50458

    SHA1

    1b43669bdd5e80bd8ac02d0f75adfd338373c02c

    SHA256

    1c0bfeebb59db61459d2c0bd366b5fa561a5886edfaa83a443ce661b191e84d7

    SHA512

    5bd708d32a0f36530dab0ee10c23b320a1114e24c0713c625727214fddddf98ae32fb1453e6e7604143b32c68c056bd93ebd6df5b890fa52ad2cfd6d52549f01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95e427e6f97ec9c3262a8421ae796be6

    SHA1

    57d856ee4a9b5146b278c5fcde84f249658bb4d8

    SHA256

    5f84c60b2fc04e3f30be80474334e1418bd264f846eb9e79a2ecf8ede822e881

    SHA512

    b0791dee709a6399f47c5d8f99fc8991d1daf478881e4c5c046e48257cf7285f97324f5364b7ddd8dc53045607988e0b5c90c73b498092ada519fed1537ba1eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c7fd72f8a4684ba30f6d3df70bd7877

    SHA1

    d680b362ec874d8e4c28912dd838f6929c577d87

    SHA256

    10f6c0f010d352d6e4ed392edff857e2d21e638a43e4dae055fc2d4d83e0c5ea

    SHA512

    503298fb43274b2e98f79912c5b0c8abfe52ebf18488a5b3e6b8fb7718a5e7cfed59518d6508ad45a7a90990f780388e0d1d4163403cc5cb7d00b7791d26dc9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f838a399fa5585c1bfa272f56a820937

    SHA1

    816dd0c512e150ceba85c15c9e98eaba2aecaca2

    SHA256

    b96b2aca1143b46057bc19c6f13abd2116e05782b3a634b1255e4c8327ad3812

    SHA512

    ee433bf4aa0ef25176ffe24ce25ab31dac60e12046ae26a0b251dcae09ab4bb45a767b71e17705db5cce3bfbf3d09447e7c693297ae203e31554224d22ed2816

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1689751dc4d1bca47e01869689b94cb2

    SHA1

    516cfb481e361f6e222e501bdee2f1eb75f5f961

    SHA256

    3914275d62665ab708daf8f24c307fabf28ea9f36b24c3d6480f65972e960bc9

    SHA512

    68150645869acd2b44f1bb9c83df075d671c1c7d044e3ae5b9c9bd177096d5b9dae5709d36274681fb05498799f3677717f9cad699daaa866ffb9eaf28cbd43a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    246e67ff4f9397b4edceac576af57120

    SHA1

    786634f205625856830d4cb9f45dc93d63c5f5b1

    SHA256

    05a97e3263f47622fdf693161c7ad49b8bace85f7ad2648370bc7f40ab07322e

    SHA512

    33532c6a9b13ce4c02b84d932cb522a466d4d5a08b12cd4f3a602978dcbe1caaf74ec63771160ba560e1e93c328bae7ccccee5eeabb7af42773e7badf63d7aa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57bbc55c7845b440bdbd06e1d6bafcdc

    SHA1

    9c98fd16b8ae20dc497db03b03fcab4e2c03c725

    SHA256

    85f833db8a4b288daee9658dcbef7af4c23866034c0694c43fdc5d23ef547bd1

    SHA512

    3d69a0e50ffb06dab881d02e3bb14c0c586fcaa839ac5598b7ddb03fce2e0a4adbf5d80a6c0a4dad8314b1c8309d9029178b0b057b3a29ef17bb04b0b205a63b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8228baba70267eed6bc594a115f5aa97

    SHA1

    c1ec09c5c0119a9ef6b3a8c145760a24a11b5d40

    SHA256

    94028fc5f726b29e18595b6946540cc29ae2af37f14fd5dcf7f95b25c5606b13

    SHA512

    38aaebeefddd43dbe3dd5e12f8123d2d3bcf822e8825704cfacfb0035b29a9035cc3ae4136fa8ba19701558b9f6f7a513569dc718cf84bda4a56fd27964ceb93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e336b6d4f94fa3bfb4872186a96c073b

    SHA1

    0405721a08df5d09c54aeda6ac1fa76b658aaa67

    SHA256

    6176aeeaa718734c83cfb0e573df8b8b99bacdf4b9d3d9a8650d91dc599133d4

    SHA512

    d7996d7966bf9045551faaa68d6e83e781a3caccedba5be170df3e922560a218b0cb57ebdf4759b6e122af412024a60882a4558b5fb3882a390ed54334b2b35d

  • C:\Users\Admin\AppData\Local\Temp\Cab62BC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar632C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b