Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 09:49

General

  • Target

    5b6d327964af202158a137e41b197347_JaffaCakes118.html

  • Size

    6KB

  • MD5

    5b6d327964af202158a137e41b197347

  • SHA1

    53681a3d5ee684ccfd452419a36a8ac2439b18e8

  • SHA256

    42dcd421fdaf3d716a0873e40ba3ed37a6f7b31276b650a71f1e543244469f20

  • SHA512

    c6de541fe360dae451e712b0a110cd5c501f7127b571162bb9692a95311d5d1fb0cb644f314d69fc17d5523f12138b555d421772b1c6aa3bbccb7604bfc71895

  • SSDEEP

    96:uzVs+ux7tVrLLY1k9o84d12ef7CSTUjw9ecEZ7ru7f:csz7tVrAYS/qxb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b6d327964af202158a137e41b197347_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2696 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1848

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2bbb5febaa21f81958c6621cf652205c

          SHA1

          f96a1205ee55003456049a53a6480dc0eb8b5357

          SHA256

          8dc59499175adff107c77c0dc9648df4cc074dac07d318a781b3dd24fcf75b22

          SHA512

          dc99a8082fb3c7971d20aba7feecc8c2b929a55815ab01bd4b9902aaed1c30235c12f7b43ad9706f18ea8af8186e22a8fdb2fb8e487d02cf2fddf287d19d8b8f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e2c58145120fdd8c01e108b03b972a66

          SHA1

          5e3d5dfaae6e6dc583baf6f863ed475049b42b0f

          SHA256

          cb4965addbd612a8939985f2abbfd04dc5db5d803152f319ff7f40a56b3b32c0

          SHA512

          ebbb92b6801da3260c9aeea880b98390b4775c906df17807c6b753a6e06938c5740718cabc712c4e9c04809a889bd219c3a9b2a0174a4e97e765e02ce024529b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d1b9826992383ed600a178c6fc27ae15

          SHA1

          f00dc4f5f3b99be2d19051fde4329d55e8dd6d43

          SHA256

          9476b28c40ab87a68d068147243791b623a052237c54475fed5b017f405ec9f4

          SHA512

          b821f41d1374640a60ec5469ae9d42cba84e0f972366501a8737cb411273dde4bb491f2342bca53ab1ecc70ad8cd87192d4d001b346185c5d21733eecdaa7de9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          835b26f69965a4b7a4ad99af52772e3f

          SHA1

          697a357825d6d90d8442cca7a3119ab811803512

          SHA256

          320b1916ea05f32bce579cf1e65b568611652a03969a03c3b91bb01ae41a8ab4

          SHA512

          cd6345f5dce9e53c83c391a8f84d200681b94240ff25f1af84379048a0a9833dc077ea08b4c14fd7a309084610a03e2463ff8b41da61456faeddfd5314bebd1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2b373f25f5a129629b83aa1f79d935d4

          SHA1

          e30d577c4a443c7c2510df020cb7ebcf493117a4

          SHA256

          b96e199c345e85b209fc173036f0784418401772971e60aa9157fa9e786a13c1

          SHA512

          ab1689a26b8a0a5e07367049776899a317078200262d09b789a81c94e84b33fbe8e3a9a0b870a84587dc06dc5e2acfc9ad756c8f86eebbf9325769984f432a14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          06092b7606d8b681e027857d410ee49f

          SHA1

          9e12d327a38c3478c6266262cd898a9c951ad1cc

          SHA256

          dde2200281339be2781265cd77dc53ef08240eacdc963140ae45ea85611b345b

          SHA512

          f8a8c59c209f8db5b960c93b070f9e17a1d376ab65ac2b585fcb1b277b9cbc38aa3a3690a08668f2f1c7edf91c9aa3b4ef52883e7a49c6b7106f940ceab2a4b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d8d18a97ea25d5f47f279d9b860770ed

          SHA1

          725d7e5579c770b17febee189f73cd628a4fae8a

          SHA256

          6cb4873aa25619c7617adfd5ce95008ec185f153457e6e9fb28dc2fc9622db6d

          SHA512

          6162f45053c080706cf870ab6c652b98467d1b38871ef93f33c009701150b7ea22cadc9d276f7a54b0d835df08aa58475b9aa91948d400b4673b05413920729f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          42306fa371e576cdfbfaaab98f9a8e46

          SHA1

          2b2a07411f38e1908cd1aaeb2bf2c7bd13e003ee

          SHA256

          2bc6da5135491b85c14d366b831b4dc55feac63c8e19b06e2065dc3bbb82e59e

          SHA512

          6cb2fa009c9175a5c4a52b38566399862d80d45dd76e094328e5cf06cbbbfa4f6fe12e4d8ac78116c6c16832d0bdf50b33080c3a8baa526d90a19bb303a8e17f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a188f6104f7ee785e3b78ca73fae2a44

          SHA1

          3600b76d743665a1c0bddb7ef49cbee8ee8f3b1e

          SHA256

          d3c6693312f6dff6475529df8305b3e07611bbdd7f12a68a7654be751d64f9a4

          SHA512

          eba9f2d1a2580ef0549008a6857e28b01c4b44c092cdb33aa22e7002262b17f6f431ceb0971bcf1574b58cb354d54e963312891aa6693cdebb5acc6c56c77bf6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d644330a8537c8b34a76cc72008881a

          SHA1

          996835032e9051a8edb189d00b522eef330e1419

          SHA256

          2fde99394880c2e65fbc3685cc4bf6d3364313f9c0e4d958eef61f27d553c71c

          SHA512

          82ca0b8b8f8bc58d14b1a7e47b6f4a4375ddc36e81f97679e68bb7dbff67abbe4e5d2d8689e693ed9fb8199770a315248ec31bb0d6032a5acfde176f8c375d4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cf3d84af2691f80e619b6f7defdb0fab

          SHA1

          cc0b74db1588af270ee55cd03593d9a6093333c8

          SHA256

          fe7647afe5b71980060b49f182bc06d00e43ce62a59842a301e32b98078ae182

          SHA512

          dac5b49c64d89a4b3298d982eae5ed5133e1fefbb2ce2a65fc3f9d632a3d478d1af03efbb1a1df1cba0b41e317ebf16064f957a2feaa136b8ae6aa333d5a7d5c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4523a40dbe74d8214b6a948f5e61fe68

          SHA1

          f85daaf9902404aa367bee90d98fd25629b5431c

          SHA256

          72217282f595d2ac880dc7aa3ba9f176fb2f70c36434c8126ec48d5842b846fd

          SHA512

          88fec15204cfa2533262e243a6eb1d2330ef693c34f32948342040c3bda6a2351d9529a9dd4f0af0eee2103eec636f89913284bf20469e5a8237dcfa2db2f7a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          62c2ef38e6ff2ab15165a7b7758d9090

          SHA1

          7d76ba4923905c5c602f4666cdc8694ee9b7b415

          SHA256

          15c93bb2ad3be6b0ebe5a893e9f6ada64888851b28be96efcea6d71d54ed509c

          SHA512

          7a82dd539d7fb912c043571a53da6c15bdcb784dbd940aed21d6e54a8b2cfe9bebb5d35324a72e5d9cfc4129e597e0d8bccb5639cbaf08baa0834727f078fb14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ffc52f59644f0bafabbf0d4a61044231

          SHA1

          58d9a5dc55b3cc3af20c70d1d1f48deb55291c2a

          SHA256

          edac49d46daa4976c838bf92a0f7ce4df821fbc9c981eb8bf45d4151985acc0a

          SHA512

          ccac95e22045ed251239c35f9e6acd18244bf86c39bf9cd4ce57c3975cef3b58572c23ab194d0af4abc9b9d79d064dd72badb42ee7a85e4c18830fa6f6686b4c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c1585bb14668b1f99e748be66acbd64a

          SHA1

          42712d47dabb92011c359ded6be4f57edd8ce1f5

          SHA256

          fba6637e41b26585ca50d402c2549e48eb1e97c923c5a16a539d2c3b2f6bb551

          SHA512

          8b2537a48eee93b6769a9b5918486445deafedfd8d8afb4269f5b2ac14f451a7f140e1fe80d1206993fbb30284ed40af321fbec28c0c230275ec849c347f605c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dd640363cfea4cbaa869abf24b600024

          SHA1

          cbde2a748f581d4087d4353d8d069eedb124f7f7

          SHA256

          e4710a655d838e8d479812943e3de7bd5244a4e218e52e39809c840b2d9c8790

          SHA512

          04533ad4b7708c9e34e78a9118dc3994838f0bad229ed37ad298763d683da8b2a905d5cf4d8d63f464db728fed7b2cd323e73ef6551691ae40e3098a11c9eb23

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          89234dc244bc659b77b4dec6985bf6b8

          SHA1

          514306358b39a69b0937b54feda0bcddbf3f8bed

          SHA256

          10f1c2299fd1b882a98b31fab44323d644613f489a7854bd7134825e1d8781fe

          SHA512

          2114b6963ce64f95898222dfd6630354ca06c1a2ade601b4a72b87a0a5fa931df03ac933e08cd722f0dffc8df35e409f87f2b5e6578e4617387ff366b6e25cdb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fa0ebdc900e9e841c9a8394cf254f370

          SHA1

          975342f5a6212eb48dfb01c3a96a34e8ca0260b8

          SHA256

          945a37b5096734cdd80224fc4a1c2944511295ee31c78d084ed63ea9c2bdb99a

          SHA512

          727416b470b059db238dd4779a2bfdf62876175add8b538ecaf726b37c46693a73154a124650fc43d11a7528e4c036848132d70eb66db22bcce745dacb52a3e8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9073967b3b5fb081c7fc5f57c2a6b735

          SHA1

          85cc75ca1f5d4b6101c8958f6ffd464bcf2a8895

          SHA256

          6e09164049736f77eaf1632a5907c55a5421cf32031b250d73e6fa89f2567363

          SHA512

          9e137468a18fb8803ebba9c0531f507e1bfb9cc29ce34c115be488398f7e964792365e26d41937ae604fc5d4b8ac497d1369dcf66524ec4fe521a01ab22b97bf

        • C:\Users\Admin\AppData\Local\Temp\CabB6D3.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarB773.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b