Analysis

  • max time kernel
    69s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 16:03

General

  • Target

    5ca4c5cf91382956b047664d704e3033_JaffaCakes118.html

  • Size

    6KB

  • MD5

    5ca4c5cf91382956b047664d704e3033

  • SHA1

    5a2b33daa7999b7175d895a4d69a79542943fed8

  • SHA256

    5174e5b1e13883df7319e89e1034bb829c1dd4027729534332b5866130281883

  • SHA512

    cb03bf0281c46955b95b122d0e080f151472174ac5f2dc6c9251c640bcc70edcc85d9e4b30705c4c6bb26461e81ac7077b2bd3360c198330ebf6b4aec5667f59

  • SSDEEP

    96:uzVs+ux70i0LLY1k9o84d12ef7CSTUzZcEZ7ru7f:csz70i0AYS/Cb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5ca4c5cf91382956b047664d704e3033_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1484

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f22b725c641713a040a6f55e2b1dc43

    SHA1

    b30d0c34ee2b1131897990eb42e1805a89c00573

    SHA256

    032f089ef79b8e192d8b940edfc3bb8c4f42cec21981b9fa8a84de98f1c8c1ae

    SHA512

    9a7b61f2d18cccae28a1ab5f0a67d72073acacbb73709b73be0b60f8f81940e54b4a391643ecdf57ae6182ae30dceab5057ddf25449fa6e4b2124e671f0ae954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84063ca56bd916a3e4197288fabcbdb3

    SHA1

    173d97548d6d7c8cac969e37c58b1e97b6525e5d

    SHA256

    63678d43a7eea43c850fff593dacdea4b2198c9f28ccfc4c7eb67ef92f2a9685

    SHA512

    701e863c8f80c8ba3d5212f7f73665558acc08e33a325025b652bc5ceafba9f6ac02d53b9ed0a7fa88e83a8a27c4e2c94bae92739ba06bdb6e348198069553a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e41bbdb75a315b19c15b58980468977

    SHA1

    d6beb4f2cacd8ec402c5156bf86bc546ba02eaf5

    SHA256

    aeeb814f7c58f512590c0cb5dfbab62a77c695683c1a8b23d4b8ab628912f261

    SHA512

    7d7a087382bbc8b0c760e66fa30ae88c45a0012d7f11bc319c82ec991e5a53d23dd12e070eaefb5b0803b99b1259da5b7570581a54daf9b19c491120ce2cfb12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    affd2fea419318a738cd493f9bdd15e7

    SHA1

    8b21852fc388f241a613f08380eeaa7171e940bf

    SHA256

    7911e828cd7424af7e6bfb24ccae1b0780144e86e8f0af5ff770f641f22d00fd

    SHA512

    db1a14793041ae0a73c967afe11ef503a38aba37eeeddf0c2e5264db73a18315e350156927905c30aeee421418ba87d35a708530d4337df99ad050639f678ada

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e19dd0ff047e499daf4e71cd03b98a4

    SHA1

    7e72a780df9dc100b28f9419896caa01c52205ac

    SHA256

    f4314802db57695d42333df977fa0cbba45f3f057914eeccd316e5ad47c8851f

    SHA512

    4863fb9f942549de44af9bba7333d8b449ebc306f7411c82f73665b25321f3e8d9a3b885765321a7b8bd6b7c8c14359720f595649c5034dc951f0d11cc92853a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74d18356616eb8992789cec6c9f8bbcb

    SHA1

    40040e00ba0ee184d15090b95a85de7a38d3a31c

    SHA256

    869efc5719606058bddbf9427eb452d9dab09c9f4883fffe3295c26e0b424285

    SHA512

    39a9af01415f620c01c8b5b121f676f980ae60731b95e97de02846a9f1e40bbe6cade407f759f9dbd46612124be55d241380abfad1904a4c92e5c40969b96912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c866806ee18d4ea1d3e88745024a5f1c

    SHA1

    60aec358cbaa0ebe8856edb06da7ad5de519b006

    SHA256

    a3ad8c0f1121e210bb6d07b3c747100a47ea94be2637c0f35afc2b0fdd323093

    SHA512

    15188a4ba71466859cd498ad1c0c5b385b4c21377ee46639c209c4541f99c4b19f3b2e4facc472e374dd539e06762530687ea90d6172592ad9638e763631f9b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e061dacb5e8827abfb1f41da79a8f044

    SHA1

    de13bb637f8494c0d8be5a3a42671a0b4a4fda9e

    SHA256

    3c583460a93f1e05a50410565838bc79c6909a449ef95187a99703728d0498ca

    SHA512

    b8ca2f4d5f6a1a8242a8e8068a74640b09a888525e604011bf266258a625cbcb8406f8b463b97a4e3166ae01ea3d68e2b772f98f1a75ad64520034bd0e4c2b7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96c7d243ef3c4946da04e034946ba211

    SHA1

    537de762b425e204ca492fd13f4d29bce1df35b9

    SHA256

    9411a6ef0352b90af4be072bd29911dd5f37b9a295a0f31b6aab74de633de489

    SHA512

    eb89b21eced7dbddffce909a9866ba9571746a14f0a75bcad96fdc5cf4a98b3bfd8dc6f06626e5aa326e58818e8651d30fb77496a013732be35b6a8198c92bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52c34067e320961d2993786283be79f9

    SHA1

    8d4ab7f8855cc39a8c4d2884106bacf1a9899792

    SHA256

    5cf332d91e43be52496ce76570a777deef298fbd776e7f522050fe9c570656de

    SHA512

    c341c0a3a7addf0ecd4ed7d84897c04a8e2e749fc86a9ab13b2b02b949298f08dd95786324bca6ca48d5d19ed369063fde522deb7cbccdc3bda18bc6ae8afa8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    443c0f787369bf68d55011a4e4e1bade

    SHA1

    b8ab24d24f447bfe0ee1fc85cfd0d35dae6530da

    SHA256

    b134dee68d86e5a33306799193f543d36d12eb8e93a97e6a2ee09970f02d60e6

    SHA512

    6f58e02b0e1cbeb2b04d58a5fe3d5fc05a64787ea3f418e7fa12eea716e1dd95b98e38255cb6051bbb8f44d6c777401c26524398a46ebbd5ce8c881e47d4b8df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd4dc2a4b80f69dbf687786ce4d18480

    SHA1

    947effde11ed9b6f2da84e74c0109715c0434b87

    SHA256

    66822eec5ad4f55a9454223fe943998b81291120de3492b163b1923c5bc33554

    SHA512

    ddb27b22f6b3274de6a93d6a1727cc0528235151db2d3eeeb2a887236261887a0af484ff9c29d6da8c6cfd5e19c30a087212ca32a0e5b07030b455d574297618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c60f050ffdc74f00671d724ff0c29a13

    SHA1

    b6779d38b90019188ca53b38637eeefcf0eb6cc1

    SHA256

    f6b46f3568c2b498cf947027ef0dbd7727f6d5b7f73b020a2d2c8e2dfdbaa481

    SHA512

    c341232dfac037978bcb5dce80c822218dbb825e62b1ac473254862509ee05099cd6672dc840f3176b21b7c18fc97d09cec4443a8588cccdf0085ee0784c1d8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b21072888707ec8cb3fff911e89c9588

    SHA1

    c4c4e5afafac61cb30784d81064c746e6c3722cd

    SHA256

    47f7953d20efe8378e91f6aa40fadb3de51d0cff065c129f526d0b7065d04756

    SHA512

    2d9032e25752ac41182e57a5ef3e0c0d1f4e0b17e9e8748f0692b20221aa37a79162672839f1865f8d78670f82f9f9c5b7766ad90de70310a71ec09778ad1399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49334215f6fa26259e62e477c4ff4e16

    SHA1

    a63f0d83d72998dee07be8d35b448ac98600020a

    SHA256

    5a92a397425613687da9e890c7e3a24930a5479d855258aae08d9d902ae94018

    SHA512

    dc4aaed4dd7876c65261323d8541a47d19e53a3e5d5f3fedacd107ddc9c3a593e8052aadc3d8564aef9f83561b676d9ba3ca7117691e849fdcf1d4569a4bbd62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f00bf78dd05932c4b229e3ccbdda4d98

    SHA1

    05756d621ee99849afd507ef1f28ef7386283749

    SHA256

    a7e72a0ef13e9adbc260d2dcad9cd073151ddf090080fd19648726a19607cf93

    SHA512

    45a3b81318fc13a9f8a0beada48d7256081abef6706b49c612d3c43078a307f60a35124ed184c141741ae02a1deea572a1e6c7f65f332fb4b42a4471e54e65f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1499d318c4b8241f4bd329d1059071c

    SHA1

    202dfc7e918609649137c62df715fb776a553d24

    SHA256

    b68eb2b3a5c83c476576cda655019a807dc28d59f447b5f8ddaa4a99c38accfe

    SHA512

    a9a3882b5935eb317b4a805cc720afd7c00ccb06cc1cbc56049360bf18fafb61143884eb75c34c1def98aa1b169d4683f6b9afd51fe407f0e314d3d556ea4a43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6188ef29c1a81935abd7cd91727a81f

    SHA1

    18a80e18bcd9fc2215da63af5a6fb4633947e0cc

    SHA256

    8d03486e1b53985cdd80677fb7f44334c145119de75db746c5345df67e149d7d

    SHA512

    52537d084ac012b9790b0391d7ee8cb72554e7da049407af3cfc4fc1bd50bcdbac67713f38ed4b2c1842dc48acd6608750514cb8c94befbc4530a660691a2c58

  • C:\Users\Admin\AppData\Local\Temp\Cab3E7A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3F38.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b