Analysis

  • max time kernel
    118s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 09:30

General

  • Target

    5feeec647ee360d65a2606aebcd268c9_JaffaCakes118.html

  • Size

    57KB

  • MD5

    5feeec647ee360d65a2606aebcd268c9

  • SHA1

    17ed4811e500e5f2c3b185435654a20ce6d743d3

  • SHA256

    914275ce46d70f63b5819bd0887c6afc0ac48db5116b1a1151ca5c8d1c087843

  • SHA512

    451e59159c4ee57374322f540bc9d4b8dbd64f15111d985198f300581384bb6c8b1f5f775c1db3a45d3f3b3b22ca6c0c8cbb59d3f6eea55571aa983864feb212

  • SSDEEP

    1536:gQZBCCOdK0IxClB61lkCSVePTqxteOnlpysmWgiSuL6ckAJ96yG4Wb2yL8hkxeDx:gk2s0IxJ1lkCSVePTqxteOnlpysmWgit

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5feeec647ee360d65a2606aebcd268c9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e794867aa66cc878a41b0c69710f861

    SHA1

    1784f2f0812aefadb3b9f3f928fbd54fe61722d6

    SHA256

    af8210138759b4cf40bfcde32c445b011770d7f6fbbe96c1d09dbdadc022c719

    SHA512

    59a57be466c059a6b5b82f42b8fae7d613acf90ddb21c229598bf42bf0dcb53535e438ab5d36ca36cb19241f0512da3e4b0a114aae597ee6ea0fff60ec9401e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfd0fba0e6c876ebf1d73489cef55735

    SHA1

    fbfb837e3ae98291ac3206a77bb3e4eba1df452f

    SHA256

    c3f9052ae4df8ab7cb0032c146db9cd106968b9555d71cd9f51653b23ff50467

    SHA512

    45f69e2ff13e2c3c5fccec22f968744bf159ad373b41fd6f72f8633618c41ec78019487b9f72591638580a33641d5166dc45fe7fa207f1b23456311170deffae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    beacecdb0d469a766857a57301e3248a

    SHA1

    ff0a1d980e76b9cae2d712236160885d618a0b9d

    SHA256

    ef17ec9400a1d453123a74d93e8f42b17b0772c88c79de1a5d3cb94a51cc0327

    SHA512

    48e7ee7e214b226eff1eec9926d279002fb198044609f7b24bb8671943d00d807a818433eaae390c62c28b4cd4d2bec5a829edf886fd90b5186b861c42b4fda9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b78a48709561ed589a53e9c0f6f83832

    SHA1

    0fc9359bb3196115653a78df87ffb1e57d153b78

    SHA256

    49af31e832b1f444256e9c6f92189f9e69e0e6b1a35ee330763b60b026e9ccb7

    SHA512

    32df2c188e5c5fec33928e3d707b6c3ceff85b55e5977beba7ba82059e4ba53d463c393c703b68b4ac74f646f58c8261b53e01ad9b7dc3b1fd9b184b65efd4e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54eea12086b2232ef50f645c20d8e68b

    SHA1

    811d603609e53269e13bbf7eaedeb4d0d47990f9

    SHA256

    8f79b0afd845148065445497c024ce8274ef6cef8023bb20e4e2369a8871d1a1

    SHA512

    efc9d2a63f8e362dfa4716a4838e96fa7007f3cb50befa945c46a15617fbed7a2c5c34c639e4e2f983142826484566905b9a7b5ca2daac9912ece68c4c02fa7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    540b17dcaa120c70d17bef67de6ae7f1

    SHA1

    7844ac2fd731f05bef81875a6c36bad1e9f72165

    SHA256

    5c757e2321f7c7c12c963de83a7ec202d817f4eadfa79321b722cd7a48493751

    SHA512

    2a37cda826a8c791f9301f209a97b13d9f167757834b382cde41320707f6b1efd9e1303f34e37fba255d440744fa6673469f3afb704f9f6670ed7b1caa39d287

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    091aac8b4c53f7f65f801da293e003c6

    SHA1

    4fa04c578364718ebc3cca880de63261c199ddea

    SHA256

    4de916755e304bb34d637741ec7fc38babf58ae58f85af6e6bdd537be1954103

    SHA512

    dcf81259cea1d49cadab3c5d2f76aef02f3f1ef23266836a9bc3b0814f2bf1d5881eb50a1b8e0710e2855773f692bad181071d321ff721fb6c9571d828ea8a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0eeba7a46e4f7b343ea634404886ebba

    SHA1

    4af51b3062fae7891bafd2176c880c2fc5675361

    SHA256

    78023e4335a101991d5973026815584b01e2dd36a5c411e0c0b3260dfcc4bc45

    SHA512

    42a6720bb791c2c120dc3926696b90eb297f5af275b14769ca0b1fe1a004b8f4886bef658d5057f50ad14890891f6748e0920d87fc9236695a4f653d7e4ca2fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab2a02c6794ef34dd6d52cf9aa24e5ef

    SHA1

    61548914b78ab82393572dbeb12f44e420f3e626

    SHA256

    bc586b88ecdf085d7198315d7844c6307ab7bd654fab7ac2430326aadeb0c693

    SHA512

    e089bdd210917bb18cae25d8a7f325e228f544598eb18589e27a447be26cad7f2a6c0198ede3de8a355cbe3098688cdb53d95db5eab38f45dc76cbc9c555eca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4355df5e9cd421183bb7342f4076c2ee

    SHA1

    50cc6a9dcbd479cfe08b899794fe7dbecf773919

    SHA256

    1e66c366fad67ee24a563261f784071df4b30baa6994033760988fafffe9e0f3

    SHA512

    8e0bcab8cab5831461a985e11d8853ab8d16d7790c193d18e4dcd7f6c44c4c03de4c162c40b6cee49fc70c0f8ed8211001f2c3fee50c1a71d3a47618ac1ce1eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ad5a7b5240f81c4a52f71a7f89ff012

    SHA1

    a1276cf9830b82141cd72d7ba8f85bbf1aea9f38

    SHA256

    ad6dbfba4f5d66f33f9263a86630fcc1f18c51474646694d48260483d15bcfe5

    SHA512

    07a094ec35eb4009be798d9d9b6d0f8a14823137b5c8aa38af74e8f6dfeb8d7c7300ed1d37a5a13cf980a65803095e2ae5cba3a3f7d50f6c390a3043cdcf7b56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21f7040f3d4cc9187c7c8fefdd3ff2c1

    SHA1

    647f1c8431ef052284d7d276d546f32b2a768da2

    SHA256

    72423d806f55e042c00c0979c0261e0d52fabd93c769d1e3e325917552a08539

    SHA512

    6b787368c775fa97f36b02fc2a6f7553bccf417a1a228b642b25b01cb08b7deaa9fa59c45614b47bde3ed8e4b60abeabc9fab40f9389734a89a99fe6c65dc565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb529a07cf23908fa7937c378dd3a375

    SHA1

    928422cd878ef70853acdd8fa95fe2d264b3bb75

    SHA256

    5f6f5511d58754ee6b73b4fa6be03fce9e6ff89fe1e2d3b65f5a17b741b42822

    SHA512

    fe502ff50858764933f19d6b17afb6ded2b1aa4365ec6ebf363450edb9a153b61e24c15d9670e93378ee789b1f3188db52799f03803ca280a78d9c41f4064dc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf32ad34e61962cd80905abf658ddfa9

    SHA1

    5d45305b356a3b1ca91283d29d49b1b3ef871775

    SHA256

    553b94016f10e34c6875a0892c66bd8ae49d0ba9eac45f2372b67c9eefd74584

    SHA512

    81d34c29c09843b31d348f903a7046c63e33369bb25119b8ccc8f74cda25bd0ba19699a66a69e78afcfd445e6fc4865848d75dd14d686b4e6807354551475661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    065446ef8d22d32c8cec43198a41f68e

    SHA1

    c02edd0905f6be74cabc77ce200324cee2a0dcca

    SHA256

    3f9539c34126d410668ae831244a4f0e14dc01416580103c6aa73e6e3f2fe6e2

    SHA512

    7bf62200e7c6299e9e1ced7ef3738090a437db518d6fa4e2da82405b36a9c1ca27419e7a61b2a53ebaba57686167343b943a9632f05ecf08958e627362cdc6a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daf569dd9bea707f413c1f846c3b046e

    SHA1

    6138606bf9f2590e3c2438be4c375fa8307ba0dc

    SHA256

    b2dc242a24dc19c673942899cac83bb23f0ec01c0805db201b3710146c625f38

    SHA512

    97abde16f38058fc1981b876525c9a632917a1b06a75c3e316b4c91848a5c8cd28280aab9013ed9051c76e7c3883c21363f9e8de518505c1013bb7296a257bea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6018b680e0a53e74faed3eb98015225

    SHA1

    0e38e20477a86abd455dd4f276915e74aee75e53

    SHA256

    98dc9a0255f294f816ceb74b9b7f5024b9806ccdaaddc6d7dc06427a01b3fa30

    SHA512

    5b8b4fbf3c336bbdb8151fb96b47372288ee6d4869b93eaf615ae4a024f8dd1bfce56b2a9a0aae30a323411683e8b6843831aba64575f1ac6dbdf1d61f83e8e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd9e5e8b2fb487bcc3de4b90ba0e5d4a

    SHA1

    da30c859df238fba3ba8a7c15c39dc83c0c9c0da

    SHA256

    4476280a2ed08e17234ed3ff66bae64c156826fd01abd1cba7606537dbb54d76

    SHA512

    5f6f1352796555f87929351d3adfe6c40575ce8dce07514044ea3e09b9094a22524acd31cf750f2dcdee60f7f74555ba4cc57514ff211d564e54c5734408c1b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    959410af249fcc3e739a079f8bd78afb

    SHA1

    798d1033030ba28647b9093fac6e12ee311eb737

    SHA256

    06d236cbbaa8bd7b2a96bfa2b34d029fb119ea91d3de7d594c132faabff34b28

    SHA512

    90d41af50e6c67cdd3ab5ed2ed6227c937589d54df8c77b58b5fecf542239f9cd5f47fa4deb407bac9a5da977cc4c3940a666e4ae07553f0a36a4c4e6f900a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    268a45e9ca24659cc7c22e4d5cff2a66

    SHA1

    e37ef30b19035f07bd6e2501a578db2394513751

    SHA256

    15169e9f3dd5134843e17fedd231a52a305daaee00e050318856b439ca1a1e7d

    SHA512

    4d9b673a4825a2710a6c79739a45b1c6e02f9326f5e8355adb218e84eb04f75701fa6eb2104307f3978c8f92727528769c81575bb3aa9a9f26c85a88d83075e9

  • C:\Users\Admin\AppData\Local\Temp\Cab934B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar935E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b