Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 08:16

General

  • Target

    5b2291b6cda150a3fa498e6cddc6899b_JaffaCakes118.html

  • Size

    18KB

  • MD5

    5b2291b6cda150a3fa498e6cddc6899b

  • SHA1

    82107f276a877e38262e6c76f7cd2c8a8dc4706f

  • SHA256

    8ac0dfb17f17a16db9c74685be7440873a9f50bf0a8474fa8894f204e8f020c3

  • SHA512

    56be1e8b8e1eb46b16b7cc01293ef07b24509978b5caeecef9b398ae279677b00e7bc3c531739308a9012834ea216d3da9f862a39365d9e578dee3d0e28c01f8

  • SSDEEP

    192:lORNg/WnanFkn21Pj0OfnnQfnffnMfn3QOfnH87fn0WifGl9fG7AfGq+fGJYfGmY:lORrnJ2dj9n4X8hyduhVIVRMJKZN3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b2291b6cda150a3fa498e6cddc6899b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2024 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1952

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68a498566a8d3bb730006bfb929508f7

    SHA1

    3101bbd3c1cba1a2d87096373ad01832e9f0844d

    SHA256

    65979104b93f8aa7c17ff2116f645d254c5e2ee8b157348533cd59a6edcc330b

    SHA512

    d4f9658aa950c0fc24f23ceb5dd365b94fcbc2638fd3e850a284c2f5af342637b41b736e3a2330828fcb7be48dd446beb2d58f9cf58855e6239a36b396dfc42c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    290243415eb43b60c33e0b5594c22fa5

    SHA1

    c5ba788def37022e05231a5ac0a7b85f11d22085

    SHA256

    ed97c42bb7a2dc378e379216614c1b24b403ff200d2350e1e44c7dbccd9349a6

    SHA512

    7284d25f970c1502575c2d3fbe77d5b97e0bf15b8aaa1709f61253953dd4a7f609ed83b824e40e400499ebdc976f6db86749bf8dffafd53b81e5d9361c91b09d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4574da7812d4263597828d3ac94983db

    SHA1

    562aed0380d8f1b7bd07bd5e67bfc730ce597910

    SHA256

    291463a711d7da6ba6bfbd88889713d62915bf7078699023c5ac46889b24da73

    SHA512

    6a5f5702706f5c567489f0ed9c2909d29085e917d8ae2fdb0fcd389a61c7e8285bd313d98318d8d857c6d7e8cdb25a48123959ef5d9592f9569db283cdffaecb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ba2afb1f4010e2eb3a22301a8bdfa96

    SHA1

    f2994234aea6287e16615d4b5ca3f8a6d3575df7

    SHA256

    f5a5836f3cf74010a0c1443a219c806cea63d83bf6dd72d51bd3e0f876ff2799

    SHA512

    f19b8beac951ed21e1a9f09ce8a00f618094c782f11cdf8696dd287885022cc635f048d11e9d9a877c3250691796795f2923762de28e240412687f9220738323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3846e1bfd68137b586c7a47411588c1d

    SHA1

    3189128a1eee31562cade11b211b13d9622dab01

    SHA256

    e02f975611ca80202fe9cb1a4a7fe9f66eec609bf69dd55f6908f1810dd0231f

    SHA512

    dd56febb4e1c9d98328348797a18778d64c9e68778de5f35048aee86a138c08c45261bf17620f97edc8e92be695c4f229fffa631697d71bb8d6c9eb6e1e4f2e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87fc9404ab66136651b295d0d1a1815a

    SHA1

    af951d74e05b2897f5bb8b4208286cb2af95ab94

    SHA256

    666baaff2b45bb8cd319480029291d2f23ec729decf9e269d7b6a0e9e16e7a1d

    SHA512

    cf7e021a231165c7380155da3ba5de4f40951df8b1f7be679312c64de1816733137a1367272e5808b229448492091abc75d3e5a5e741844c8303f67954ce2d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54e11c03c6d243dfe900639eb6cab464

    SHA1

    b8a4702b761a2d7bacb272ad37eb891c47d7a2f8

    SHA256

    ef5ed2c78c29216d5f2d3a1fb4e1789b1615e3980595a7e71db4ab46dddb9e76

    SHA512

    4f8bfcb8fceba83f6d72b2054d06d57268f3c0166b7966679697bf882b3fee00dac4c7d90cb48babb7eb02e6f9effdbf14cf538c6f510d57aede7843fdd6631c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6246cdd72db7aa0beef8de11ed2fa27

    SHA1

    c72b302ba40254cfa42768cf6c36a67e81006004

    SHA256

    c575f90c4e0064e12188ca2564151be79d405ccdd03fe5cf3c184b348cf3fb3d

    SHA512

    1e04a664adba4253046c7d0994826f9602562b1d20d58f6811749fedb0aa806e541feb4d6830b9c95f35387221548b5de1c58a0a0b85cf2fd75778bc1f69b19a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    541a5f24324a2f7fe382ec4be1549e0f

    SHA1

    e38b327ad2c2158c1e2275f852656a42f9d6cbca

    SHA256

    e53f8352fb60d6c72454a3c8eb2f3b6f88eb70bda3d0d3ae5820ccef07d6e1b6

    SHA512

    f53b2270745f2623ab0e740c20b5faffddb6e73f1dee174f4900f1197805c6f3cfa8b5aa60a1a89c53bebd85c88951c996bcdf18893b64970dc13efaa6f59126

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66ceaf7fd0648be91ed9e42760160fd8

    SHA1

    0d2eef65c59e69805ca4f1ce051c6e777f5e029e

    SHA256

    089474def22621237d96d25807cd5e6dafadd10806cb06efd429bc3d37b3fd33

    SHA512

    82101abb43afe977f2d595b8e580039ce053eef4b35bcc677a3416ba6c6fd36d27b92d13bd994fb545dfab3ace9162b46ad2c453e852876735a74c7647f4d30f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54a34852cf65f3cc66fcd1824af5728e

    SHA1

    3e03dac8e38a4320146183281b675d41abe4c93f

    SHA256

    9e208ea3dbbebc30fb46f9c331e1f0c298304ccf17c38500216f09230d97f35a

    SHA512

    69e432b0b5420bf8b45546537fa7b37fde1ea9d5977c43f8394b9195ea31afc63659367801729fa8fb1afaebedd4dc9f91da7defb15f4964a5a146e0e586f868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c2c2dd729a7b3ef08e08680ae05a310

    SHA1

    d24ca0d130ba571aae8e5b52f93995783170f502

    SHA256

    e11cc495a913d037b1054dcbbfc4272fd873bd4a063822635dfc8b6d6aaab0ab

    SHA512

    7ae0ad70ee82aa56a8e0e021811fa07fff391a3eca0622f8a25770f7e220ee510b1f8693781c85aa9f6f91102aaa699f7bf189086e827e0e2e4cbabe3c7f5d19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4c569ba6004f0172eae157429eaeab9

    SHA1

    90a792d425851eafb0207e8ad65f9df4a0797e0e

    SHA256

    318280083156d23941dbb16cc6ffa0ffa596395e60a22aac7ab36dccb2c516e7

    SHA512

    613ca8f8ec54ed01a6371c3bfc08263a242a66f8b382850211ab89e5fd3b162753ce116c4ec87ca50258930b28b420b0ad0a0c2c2d2e6f61404641d061230645

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db2dce73b3c2d1992a758bbf92fb3ecc

    SHA1

    1ba1a92864ff9321c820aa0a79e1eb688f907d08

    SHA256

    9a28be4f3a3f6cf76c3e7d47c6fee7b8016cb0aadf9ed519d343faee42bb2523

    SHA512

    3104ca77c1c9782dbc51e51e3ce88455ac0992b3e08c346c38a14a8ac6eb4717dcd10c57d521c9385a4bdd8b6e34e37315e0cd371c6f8e9629ff53463b83ab12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    381426ecfac7c70587ea828123579fff

    SHA1

    5a887dec4982dfb942f542f90d11433c54302d81

    SHA256

    aac40fcc75a27083bf732df0fa503ca9a476cac4d25a4bb0ab32668fbe48d95b

    SHA512

    40f76867870c070b5c7a104cb27c1cd5c1afe69414a14676f611c95f3612f72dd713c841016abf6289582bd446fa786b57c37848998bcf6d02804e7c91af0f4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b89df2822336dad45366a78d215c44d2

    SHA1

    53e1348e75b14561cdc574732d2111a4065d7999

    SHA256

    519744e38249d0ce6ae6c9419c9977e293b4a196f70f18ed3812774121b83e57

    SHA512

    abf1c6ba38552c74026d0d37e7c5320583d6512c989b4e14acfcbf79ab4f2317ac107337b29a0cd8400e7cbed84776058c8f3b0544c1b918e4da3e1d9367f3da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6a73780aa65deb0e66a96c19453e344

    SHA1

    c8f98fd9d567fee4bd361550452ea6063fd0e921

    SHA256

    8a52949e6cc8fc26d6bbb4c1ceef3776eea6086a550faa9b7560110d78f3aa65

    SHA512

    a5a1babf8e38993332a9f7bee39b8ab50217f143d77029a22474f45f4f84be5705f49f563f0ec1c374e8f270daf1453d560788fc5a0b55cf40a4699ee58fee5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cb58b7f6e3723ba21c41cc94719c18c

    SHA1

    550294e80f05f8d406f330589d9a86df99cc9f9b

    SHA256

    a8c2de702c8efd47502f3ce2148e11af853418371100f7dac5d7a1bb3f28f652

    SHA512

    c8b681ffe083e373a1baccf56e67f8c016f3c631a2f3b31b09f1e938827253dc066ad6401c1187fd619153ae7214daa691ce29211af5b064531d67a9f166fd4e

  • C:\Users\Admin\AppData\Local\Temp\Cab8A19.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8A8A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b