Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20-07-2024 05:03

General

  • Target

    5f1f3e9f04dc4ca90d0db7b51be708ef_JaffaCakes118.html

  • Size

    91KB

  • MD5

    5f1f3e9f04dc4ca90d0db7b51be708ef

  • SHA1

    2b0358cc65a41315545cc8a60d5bae1d6b446223

  • SHA256

    c34ba59a95acb6762e0bcb93c47e53c517278b3c16c5abbc723fc1612fc1c06f

  • SHA512

    b054278a0141fda7f8881a0a1c25f3f19b881fd1494ad9ade74d3f8f4db60689cd948ae0d96d1e40df4ecc814f9475c19e465e2695781a80e5cc043af44a8046

  • SSDEEP

    1536:pbMjw2fMk1D3O9Pj2fcAcuHAHi6LCis0cZlUMCMp:s5G9L7c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f1f3e9f04dc4ca90d0db7b51be708ef_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2776
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2776 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2228

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d0e10a1d7eabb3677ff6d66af7c4e28

    SHA1

    4ae128c323640aa6fa137510275d9457c0656596

    SHA256

    204ed553f219a86e47d1c5fe92830c7b028dbd033aa680aca4036a78bc347ac9

    SHA512

    5fe339334aa5a35207eef3eca1892da468e6d4b3826ef84dc46c7b5e51b6e8d6358703cb6dbb4391b07a1d47f3ab8c7def05f0d2e60c665896a73dd7e5f317ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    147a8b6353c8676ffb56ea0d8fc39956

    SHA1

    e8b91b69a88be0c3934fe051c726145687f25cbb

    SHA256

    6ae82af1ff01f06371e8190da1521f503a78353aa2c2a5ab5a3a2a13a530de7c

    SHA512

    a628272f65af5dc14658054dd57e541a7545fe4c3418c428027792f71202471a571b2a7517e7544d49de27b0581117c6d04cd4d064c9538dc9e65654044e2c8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1d2396d87e7179814d772c6e00c0ec3

    SHA1

    33864ca09f3d3c4230342932aa833ce6edbc9a63

    SHA256

    f816b2e3301427a841cc485d7ecf8456ce40e083b2446e761aff95121295b7d8

    SHA512

    f2cb8875694fc5f10774e7eeeca93783da081748ab48040b5724f8147a21cab4c695ef7b39aa48151a8856447d779447cde53d4e0404b75acebcd4f040f87b4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2079f4e81121df1d19e8e4da2f572e07

    SHA1

    586b90b43546c1e93278114f957b9053a6ca988d

    SHA256

    80fb540d877e310bb8c23af14ee28209813ed2ba15118266287a21318cbae8c4

    SHA512

    c0aba690075a5836a48b69686bbc1e7817cb9ffa4b612085308a48d669a51216f7695f2ae8bb658244184ba33681ea269cc1943f56b281e592276a76f441b09a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b3578b244717bf2620b97e71fc35675

    SHA1

    b6635bd539ab252f111ce602c9c36a2e655ea431

    SHA256

    5ae8d1fa741e1040e84935120817266d16dd6d2cc035322599cf25e561e5d51a

    SHA512

    677206b0142a09e8ac6e2226564137c2503d0a3ee173652a561470533739d8574d8210a84678becb7167666b9899501f685ca695b89b0498035e712a1e71c3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1ae9d653c97db05a27d1a8448c00a43

    SHA1

    63dacf9a7d9a9466cdbb2e68d0c6ec90f51e0415

    SHA256

    b1042c5da391f8afdba6f5b6dabbb4d209047482c1e738f426d5f86ccb52751e

    SHA512

    e31cce2d2891cd3365b9516890e9b1a045716b4e8d4d06d50f860dd311801e2d2a7a7398bcba7bc7d00bda7f9c1747368a996d58b95af53926d5a417bd745d53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aa95a16fd4e35aa48beb072a9be4389

    SHA1

    7a062d5828292d5728e8b88cdab2fc5acdb99ed4

    SHA256

    4a894b72b764e0f41c7c064fcc3506173346e5830992a7b22a319e5b43fce6ed

    SHA512

    37c84efa62c10ad5f79d32414dbd975e03bad151819f4254662b51ce71e4e2efa092915abb7438ec7d8fc2d53a3187eedd5ee9b98e3e7c2490ff304bdb4c3ff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d35c3945fa2c24673468153e66d4760

    SHA1

    e2dee95e7b453bf96e325ae7563ac9178c044423

    SHA256

    cbed9169e0bca4bef88b8584626de015f07cf7a7db3fa117c845576de92a63a9

    SHA512

    1ec24d8fe01565988320ad69164c82796cb298469e7e83f5ba658052a4770a8000fb6759f6ee283f5dab6761c94da799d40d946487042d1d20333da444fa0ff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1797d5632f2ba50309a68e38500db905

    SHA1

    501cc945866811d83b491db45bd09d6e7025bae9

    SHA256

    96e11234dc45ee9c4f656dd5ccab7287d58c8cb3dbff88d5fd5d4b21624b16bb

    SHA512

    e2c67c525fc3b6f2f633c9e2f15c1f6c7ce7b4069ae0d08d411cb1ea5b8eb382be67a882c171bae0188217e831c247a0ff42657ea6f855e74b6f5d8623515134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c896960247aa72534e1655d33e0ec24

    SHA1

    458a0a45a4c0144af86c2465421ae9ced0561f55

    SHA256

    a4a8810a1c07042b2c012ae3cfd7786b48943c8d8716d7788f8c848e5be8a2db

    SHA512

    e13a57bf68d9f4f666d24220bb44df0c310561128589a8fc7e259a2abb1ff4c453057b70a841329e1b05d478fc05b02b58489821fe7fc5f0182889afb4c673d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb3c60649c61334fe95a2147a61747ba

    SHA1

    58d7f2699ebfcd38ab316b8bca873df96900cb91

    SHA256

    0ff0792de8dd006e551ae1faa4bc999b969b3775d9dcddea5d5ed7c25ff8d8fd

    SHA512

    e010205a445dcf091259b4a7b71dceaa7262fe4324025e1ea80b1860f3b946e51c59bc8866ee9b6f2b62617589d939bf282fe8ba232fd8336292f91c328a6cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7a5f8bb6b2dcf04730d9818cfe49906

    SHA1

    009ca20ce42e7f1b66b7e348fcd926b8b1545be5

    SHA256

    94a3c0ee2b62fcc3f751d1dcebdb996e577a959f09a40d6e600d5f2ada6ad5c7

    SHA512

    24d0eadf6a7cc0c5225748f6fabaf6a7a22b6e50614edc3a4ca5643a0c348426cb85b1a7ad2719f55cee75d2b331777faed1ff12f7549e8b03412f6fd2e745e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08946749da573abf7dbbd53443803870

    SHA1

    8cc40447d9897917e195f267ee9cb8fb53527d5d

    SHA256

    33fdd1b34aaadf123ab89f26b3334de4a5e8c562a07f6a2f399a71eb505c8a47

    SHA512

    4707fd93f74e6af6f95b40030f9698d2308bc90ab2cc57e01e85e65d1018bd9e1c1b3efc1d07d11fcf4b33cd83e53497c9f320a3f032d2e7df25135f2c649423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9b0cfefd7ab7fc50ff6b3e643823710

    SHA1

    350f8d4683e43dc23acb3fd53eb26f1fd8880010

    SHA256

    99b3303c804f052ee1a0082c836fa96fcfaa208f26c3bbbdcd46fb79a302f761

    SHA512

    db53ab5a6e974f2408b876eae37137d1bf69313c096e13bb062bcd35659ac001a4ce33102e2c93236a188d60787ab0849fe22950805e82227628382d366f5df2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7646ade75df692166a7551da314343e

    SHA1

    7d84e3ecbd41643ed9800e335f718976f2054c82

    SHA256

    3283624db1049ef987a4d1afb73313a059b39beaef65f984a150131dc02692a2

    SHA512

    de31c5e609e763248657c22f9eab51ce24a8dd7b9a8fb2ce53013f82f5efe2fba01411e25feaac875666961a1c8d97cb911b838db2e674a46aee820b0c022797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2990f63245091a95048cb48532b116a

    SHA1

    4a75aab884d1584eb72253b5f25eeb7fb467fae8

    SHA256

    35024750a98b4ad22d7baa253f54636e0b6f6a160ec0f69ddb977bef7ae39482

    SHA512

    ee79271280ac8a1fcb3a4aec8a2d74ad89e89f671e77b0b7e5cfe9035cb93928e2e4b6aed3cf7f3e66e25503f679f29819d46dfc1d31d125adcdba8ecc45aecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ef74dd83500b43f98603d64e9460563

    SHA1

    fcf373b4c9efc55c2df06303299613f822fbe62c

    SHA256

    28158d5f31fc7f5214d302596005a96e8b23c1e0ca27762d87c3024d948d85da

    SHA512

    284c3a4018e0c0e47f0cc44c6f77421b448b54e23477eac6ca995a28018a01f8c0052e9614174e3413e56f11af4d954861220d07e261d84086a65514acd397b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83849d0a1ffa8c979c7eb57a5cda5f58

    SHA1

    85f90dff4f0c1af98962d5362c1042928ebba1a9

    SHA256

    4dcfc7e45d508a16f7eb4f52366d5375a963b54748f8febaccc54961a4ce5890

    SHA512

    80841de3404db078baeebd49d962c63af8685b8867f7b346a4941b488b63607d9f27a1a057bd6306d6d4b50337a6170a568a5ef2bbdf2e718f0ec343c2196629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a39f08d32ce349512073c25a248d5c47

    SHA1

    bfe1dd92960f911510fcc9f89f72ba860cb3fd8b

    SHA256

    767d2d273ad489707b8f7a8aa235e24bde1e5589f16c6170629b865a4c495f6c

    SHA512

    950cf50bf4a2a79a70f261a69a84b553ab6b64e6c13d51ebe63f25c811eafd933a58c6d48924de066c41ceb7867aaf9d66fb37c3cc054caa4065f5683c0d112d

  • C:\Users\Admin\AppData\Local\Temp\Cab7449.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar744A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b