Analysis

  • max time kernel
    146s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 14:02

General

  • Target

    5c3f46b8a4153279ce481e5965ac60f6_JaffaCakes118.html

  • Size

    21KB

  • MD5

    5c3f46b8a4153279ce481e5965ac60f6

  • SHA1

    e8c1e0f517c517675b4685e79e29c1779977f164

  • SHA256

    7987c298182a9b93b98b99b960cd0b9215d8a380ffb0f7ad80332a492599f259

  • SHA512

    07f4a258c8bd9106b24cb72554e2897112592f1954c98177e009c36c787e0551bd47e40588d5bde71ad0db69e9d8e1f89e1e4ff712f5458c73f29da5cc20247e

  • SSDEEP

    384:VGLvyG2USpYP2rRkFl+e7cMk8NqDMD3BNS4:4LvNXp8T8w4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c3f46b8a4153279ce481e5965ac60f6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2188

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b99e65a36d1c91b38fd9d5b92c0ca4f5

    SHA1

    157277c3063c3bb7788ac0fcedeedc3e5876d24f

    SHA256

    4ac2cbc0870b44cc7cee111507bff1343d44f74ad6f4e7d46d0e6f1f32c0ba03

    SHA512

    0b5e792acb93996f5b44ae90a5f287830864c8c7a166d77db5761427f10e47678278331d80e0d8747f6fa031fa36aa94a2773257c57bee21c0e9d6060b796f75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc2fc780867b7ee932e2f75cf601027a

    SHA1

    ced52e529ab9f8eaffbd8155bee23a59717ef979

    SHA256

    a0d64e56f8b65215b0e2ea4f3c0c40e43a76006af4d27280fa8e546dc7ce5082

    SHA512

    90a3c4e53b41c0c0acb771c6eae40bfca35544b9395c297a3cdb39dd0443676a65e05d96a3e4762edd186440e3054f5ca9e49e13ad3c56f299d9f2ddcf986b74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36b3c168d9534cd996e2ec8b6c78bf81

    SHA1

    5f353350779fa2648db94e32a0d66af6a68e5959

    SHA256

    0c393c9a095fe261f5f7d0e33d7bec9bdd82611ee50b46edc2c84112a17dfda1

    SHA512

    f701137c40a96165265aa67f4c46f4db8a56dd1987f51a6e24f3ea4ec1357869e428c06457bbcbd596823e50829d048fb6c26b20f6db5b63844a0e3398a4e2b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e04cf108b1fea6ed3851466912858859

    SHA1

    0204d905e7ba3036d48a4396c75bb5a356795b4a

    SHA256

    4f16466c2b60316bbb578f0e348ec10c19ad9ed0fc7bbbe523caba117c20c2dd

    SHA512

    6543d7f2cb75c7f526a6cddc05d9fb8a647c609da5a38646c274fc5a9c04b0077d6d0d8772e87b0b78cbc331c43cbb6b81b791a4a23f03c078cf208c18eae33c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07d119fa9a9f6f278bfeb57bb1b906e6

    SHA1

    82c449a7a9ac6115c10b2ebadc57b175fb362b71

    SHA256

    d33309007c7ae0bdb80c8f0b846a352a88833b7215094e73028f46c58e8cd3c6

    SHA512

    807bca8a478d31ecb8ad8b48c080b9bb96c2ecc935dc2d17465fa99871510583977c5638c0f9c3bdde296c231c2f54586f6f5a35898f6977b78d1a08fb4de05c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46cd1b172984eff0f6e7cb12ecde9507

    SHA1

    b7fef25c40b7361d35fc2e1e4c40dac4ab828878

    SHA256

    6c4ac04c3aa00048090f1a2d284e95dca9bc9f2571c3e83e60d1632b764474c6

    SHA512

    005682e6ee2e118aca7d075280575940780ed44f5d645e63621586d45d82f0c8921100c9eb16e558b82ed7c0214975f27ec41d8a00581eac4ffcc4131f15e45d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdd240db21c397d321d7cd83509460c8

    SHA1

    90edb987e2bb0c08328002a168a06135fdbc46c3

    SHA256

    2fe7c17f79f4414ffd93c035897c9ca6522c397920f36ba2c2310e4153013225

    SHA512

    7942969d3375639b9e5f3cce4c346d39cfe31915c99d20b478d65bd60231d2d2da2baa3858290cf1a1d07b02b54fed2a7ef0f65780eb8dfce42f612cf3769231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe44d539e2148b70f0b22dd24f0300fd

    SHA1

    6eae4abdc59fd38eae546520007b9e9ca47f51e2

    SHA256

    3fbdfccae9bf9bdbc17075d720e3146e852de7870eed2f25d5441a9ac3ca23aa

    SHA512

    5d294e363039e2d03918b32086ede36784e0effd4ad699f5c62549e022c9027f7a8fc1e4aab4225f2ec59001374a5fd8e6fd604251708ae677644b38970837ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fa1ff5bd2006115d024857caddf359c

    SHA1

    103f2e2d19d69a3a9f4854b7b04f07a7e8073add

    SHA256

    e8e21d138340d828d6d8bd33ae41d42a68aca96dd6cccdd9ba3d0e36cd4ce491

    SHA512

    2cb8e5e45e9221a6d81a7fbd6137f7ba85b500a7e1b8aa7661fd045968461ea14df6f855d528b8c921dd3791ab0bfae6a6424572142861f381b6332bac50d75e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd8cb3e2239a385959381e30cc31a6b4

    SHA1

    f3e103c7f5e7a5193dea705e350a0c481a88eead

    SHA256

    f68afe6cc118674bed69e6eb31c96d6300ee316ae18a6ae1dcd80378f57e9fbc

    SHA512

    a22c25bf22fa8ac1520b6508798ba10fa70e04460b1ff2318aa8dfc9673696d0af09c795c203edf3af4a7e42c25c274d69dc012ba4d4c5b5655fff4ae5fa0f7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfb1195a94b33fd4a9197605405de088

    SHA1

    ceeaced8dd252bcbeabcd809352645c2a9618d8a

    SHA256

    be6212b5d09fa35201643833c85de9382ca6e8345c342989412a48073eb88d9e

    SHA512

    93b1937044a20acc537364bbcc5ef030be71beff3e19ebccc6d26a2fde0b91995b3efb3f82c414fde38b19dae1fb86bf99d24e910abfeb4f84c8b78b14f6990c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e74e7821521df3063c20e616daf38a7

    SHA1

    d111b053e591f080d5048f86f133e61323f43ae1

    SHA256

    b7bd22395fb53f8c1b1a0a6a2608a0c38c6216b11782805795c51a08ab1145c3

    SHA512

    771132389100a07a725261068069a7966332c1cca8d8f326a64796599c8ec1f9e32c2c7d95a7e7edc6ede8c998e0232d1b14f6049171a4daffe1088a69df10fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed05e72fdd492d82989092e27706015a

    SHA1

    79c14cf70cf26f951eb89b3b7d5810fe5b8ae5cc

    SHA256

    86f727f89099ebbbb609f7821ad9e97ae715158de89e9be48b623b9c00375003

    SHA512

    02d6990d5d734d8a6f394485f7f5279d6ff84e5776c4cdca46deca212b9c1668673abd616523f92726a1a4441470899b18e720decab9e42eec7863296ed2c64a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71d6fe9bd843a04a6ecd42ebfd99ded4

    SHA1

    f151ad4032858a4201784ecba6dc3cc8e2a9021c

    SHA256

    6efbf58df9f5774d723711d9998c28e86bc0dce95839a56067b13079e5c59bc4

    SHA512

    a0cb267d07587ccb11cb54bd8627b13bdb9e1de664e6e3b247e9ac79d36d08656c568eb04566fff86c8e486670f37940cfac99a20abc5f4b8cf462fd8dc7b466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f460a513ed40a2d11555df2f439a714

    SHA1

    ceb19111b24fdb53b0d24c774360894093f2fa92

    SHA256

    36ea2888e82f1d3dab5c8274d0848777a35f1d2fe1d2f79e240b059f9c38b28f

    SHA512

    f1033f814899c2a922e20f79931c03280eda9035832dea2a6b1827df5cbe18d60cdc74f77ec07c8c1005431b27722126a9f6d8bc4b6f8ef9d5dbffbfb1a6614e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0b0f1d427c744f6ff1df8c1a7a71370

    SHA1

    1984d70b3a816debf845bfe92db752c8c2202160

    SHA256

    8b268a095d184966ad2c550e26abc7e6829f2ca8aed93b83739b6a460247310b

    SHA512

    bb5004ca5bcfd26ae34d1450e7fef4cf3846c7cb5ddee7b05e7e714f2f45b0ebe626956b504f168c954e94f26ad63cdfca9d5ee028bf4a502a50a624c2b533ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    697a3afd06da0b45b47a7c9ad053c54c

    SHA1

    c1f22a26e2ea46e1cc8812a556a851a10d700613

    SHA256

    749a14f81f105e1fe7ad54f893a3da44454202132961108a7475518b32fc8312

    SHA512

    207ff568fd3c10e6e6c2a64c71232a84286e8c4c5b5896b9f03df361e8be21e72b4b9c2ee0345e1f3abee17d0744e3c7043fcf9808436133a24dab7167b0835b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63d8d3808ad04bc6c6af70d1c31ef0bd

    SHA1

    caf855750ba1e19df709f956871d4eed6bccbabe

    SHA256

    19d54444b965b87aa9ae37f610d58f02f90f7444921877b95ab9d8699b9d4eb7

    SHA512

    46a09b9fd126117730aef2addc0d99074bd062f078597af1eb33fabddb833ccf512d656cf7d0c85a601689c611947192aa9ba1cd4061bf8c207f77fe69ee8883

  • C:\Users\Admin\AppData\Local\Temp\CabD664.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD696.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b