Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22-07-2024 15:37

General

  • Target

    63c39ddc666975d0b44c27c50a61a2e9_JaffaCakes118.html

  • Size

    8KB

  • MD5

    63c39ddc666975d0b44c27c50a61a2e9

  • SHA1

    fea8f0e5b90f38eb0586744ca2a9ad3b63619d9d

  • SHA256

    de0e0da859e8cb8cdf1f5165897557fbe758e42af0afb12be178d6cc0448dc8a

  • SHA512

    1d2c5131a650896de572dd41fcf002063cd70bf2e133f4b62c0c99e742ea344335b95bff35aa9a1aa7fcac6b077aceee62dda9ffdd56563714a92ea5eb72ac79

  • SSDEEP

    96:uzVs+ux73wXLLY1k9o84d12ef7CSTU3wzfSxG6MURT2/13pX4m6WHXCmCGq8k/lw:csz73oAYS/uDRTg5o3b76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63c39ddc666975d0b44c27c50a61a2e9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1864
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1864 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    308220b55e2cd5040083ed312a6df988

    SHA1

    ef118d2b9a8d90f3e73234211f0cf468e0ed8566

    SHA256

    e6f7db61c464e87ba389fa455920bf34b1c05eeabda6dec3fe901c3f497bef90

    SHA512

    a94100e6528de92f2c28c0331d556e3fec7c498c47a60f37821e0d8700cacda235cc37a9310a90eea2b6b5b22255cef5fe27bbe4675c114c4bb7fa848d5cbe5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ccde38fa0e2f45b4cbec28b68ba2957

    SHA1

    3707391a594f78557905ec3f94d0b8e6c2e7f55a

    SHA256

    4e82bc47afece2f9f004899ca9333e4a07eae824bebf4ee08b88a16c359e5643

    SHA512

    60751b59605d3507fe7960fd5eea95dfd14f99b3cd19df02d9b688f53444f29f4ec86e6e2495886a915beb79fe349a227e043871a2114f6748f1fc1c7acf8e81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad2c450f8d41132c2b662861bb665f90

    SHA1

    b5b8144a141d6dc003c9ed754157fa428373493f

    SHA256

    5024f89eb2f71b01d1dadc4d82d088c3af2d9480b52109fef29ce6158b3de177

    SHA512

    12b1c44f2a93a35048a58a3183ee2502dc1ddcc850a6cd7948e9c2aca2fe696ccce69d34ffa34e75db8377d2a5ce1ded733a1cbe4100b4b2330c27cbd97effcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    448cec433afc8ad30ae2d5074feba606

    SHA1

    4acfd3901e8a1bce980ff33b7d7cdfffcbb978c7

    SHA256

    f55e7ff7a717f952abd6247a6b3f20855c71927ce6f876ee89963ac068e83c71

    SHA512

    3a5cc79ccd743342f210fe41a03233519acbd92b7e276b14ab99b96659d585e5c448b1af52738269fb9e3b533fcdca47b2d5232f08e40181c98046d66a806474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0bbcf80709dd60c3a1bb39634c19197

    SHA1

    f1df081f9ee49e414945bbbb9427619ae259c87b

    SHA256

    49379a06c928abc7a621e5e3f60fa81912670adc1f03fb710de7ac1e4324a5cd

    SHA512

    9793938f9d23ea668ca16d8bd4624fc814b29b5dcc9ff02299769a2f07e5baf1e48d856653354e1ec51488373fe36c14e7d0c5f5341d7bdfab940f3a5621b9ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b1edf82957a57ef90ac2c34c061ab6f

    SHA1

    f7a932bb1f21d08e228d3e28d0c0604c73008a07

    SHA256

    dd1660086cb6eae16bdf193addf160176fe7decd4290266d265ae56c0074f610

    SHA512

    47fd43dfeb24a173a222205b894055304094da76872c1e5b2c06e7c28c348403b5ab6c5705481843c182473cbe8f2cbdb6521038d7d4781603ff77a06c456a4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40b430c2e3abf5836b9515f9e5fb0096

    SHA1

    8e2b14842ba169389f0beea6106cc817ad95bb5b

    SHA256

    4d8e06dad5c001fd76ad984e489271d5b8511de24fbb498359b515361ece80ab

    SHA512

    28e3552cdba6176bf77d7a0c654f334ba74c8715648bf71f16ac115ebf923cf0839c23ef6637a7c048e98491c60198e9691c52ea0b4286ff1faf4dcff321f490

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e5ade2c1ad539f9aecb2da3b5587155

    SHA1

    8093981c254351869e5ebc167732e3eeb58bf622

    SHA256

    ff5dc3d320d2ba56a4996fbd5609868033c42fc78676ff0b15ada17e5dddb138

    SHA512

    93b3cfedb55ca4df03bb6da768e56cc815c20b5d9599db3304ea4b9d495f146f9aeddd9ec9362cb1a5d41d68baf5be20ebc8380c75ed75540d906f927a4cf970

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5989d9d5e37d52e0dd41caa83dab2466

    SHA1

    8f0b019b3c2e68000a43d484bb191e843184a941

    SHA256

    2090616661a887bddcf18cf53f2bbe82588b68e319d7bd3929f628b23d413e90

    SHA512

    1b573b0370645d54a876148980f64dd272d318c15608974a8db41f1fc3f0c01ec82ac8c03378f1a7a8911cd61a59e2cae798d66d7f9aa15d241ac1607e552358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8083ee6567e3c5c199705e8205b953aa

    SHA1

    4ae0e7c0d53c83f6e3cd7aa0f8d757713c3e972f

    SHA256

    58cdd157cee1b67c983414021a1095bf972a4eb690d272f5ea313f2d21889a04

    SHA512

    f3ceea39a318a2748d77d630b4cae1b47f961f428021e9af747ef7b665721537eaa239f37968263b8a81ce83e77c163495cec333c2617eecf37a2b208ebecc65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    999af47f12d4631b068db93d60942606

    SHA1

    2dd499de910b333726e79f5143670363be6c5655

    SHA256

    b355a77c16f9788beea2bdff66a9503c133737a15ea45cb1839b05ab5185fe45

    SHA512

    0c0b64bc39217068749eb55d563249959c2a44e2d1140260e9632216c7fb4f17c8adc336fdfb8bbd5b23396fb1da0c2ea9b73279bef226d5d076258471092031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2e7215c2fe98406ebff852bd8372a6b

    SHA1

    a8caa920e446b3946cb547571c3e70cecf3baa97

    SHA256

    1cf3fc9801f037aa5c0a2476153654c6bd400b2ff0086b2189d2538708c39deb

    SHA512

    c8eb19ed98d5290cf298da6cc8a9fe56817bbd5a1b7258d56d0b6e7c946f1c878f359d1d9bea56f887ca5276b53041f36eab142443d2c5ec96758d8d3ee16572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58147e6d9bad2737206dd15554572785

    SHA1

    103ab7e3eaba3216db72a3dda7f0b0c1e54ddefb

    SHA256

    bc55f04cc1a3962279e3dca773c10f0f683850111b02e97958330295e7228b58

    SHA512

    5d0989364e22fdd2e7da2618cef56cd7da845211d76a5e923adf3ebc19530bc05d402e1404fa1a31ae5ba1411b0b1d5f0fc7bedd44e55a02c5a8dda06184cbdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed328177e07eb849da040cdd961f533d

    SHA1

    b7472d90e89f1c8444f04ff798dee0f6c9955ad4

    SHA256

    5e08460f449c8358a1fc07fa7d097943d45b7e99e63ba15dc66177f671ab52a9

    SHA512

    d6302fddbf83cf435cae6e95cc958aefaa2dca196a50484f215dc0cb3c04183c9e281b888e94bb0b9008af327540817ac8f8f94a53ea6312859dbd7b9c9c33c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88b2d07f1cb0fe1acbe01be6b273e435

    SHA1

    cdd9353d84bc18e929f6804d7b260bc4e4acd44b

    SHA256

    1e4e59ba2395615f4d2817c6f057467bb8c9beccf642f83d58ed4e45b459758c

    SHA512

    617167a479a893eb15a2eb9a35b82d8eee46f12234becf60c5adf4a85af073d0290d80ce31a6819cb525fbe236b787b56a8c5e5b131a993c22cf7a5692370428

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    302df31e9ceb5e283725efdaddf88533

    SHA1

    010c1ff30c975111648ac110d6d20898ec2597fc

    SHA256

    39ba325ead53b04a5f86e7f4d77eae25e39fafa2445ff2057b851420fe7fcb12

    SHA512

    e1748a605e560097b8774d6ba93c1971023ded097925ddea6aaa34133fe9ce0ed92eccd6745668af9686898e6d9909e5a623c7580bf05609fedb64c55377956a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8d7f4621ea8135aa6d8df4e1f7031e7

    SHA1

    557af2b819d4631311cf4bfc8c2c639f4a4e30e5

    SHA256

    57239debc9b71752fb3b2a5717e990310fa8aec4ccc7a4b1096cf2c9a05e6a77

    SHA512

    b56a671df8ddc72eab2da448dc68a577debcf86f4e414bdf0881e25ff268d3eacefbc3e1d526008056d72c729a6b01f1392fdaa6f8caafc087f98e9c8e11f796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec4815542f2b1a69f04c09e983ae0a7d

    SHA1

    6e12c2f4450c3ef7c76bc989d9faa2b341ee3b3d

    SHA256

    e9f15ce009136d4668eab627b38160fcb2d2e2dcd3d4effcfd1b0485af86eeb5

    SHA512

    21f138f85a05109bd0772fe857486e6a303c156479738a0301c15bc91c02c35b330f37c0d0b027991e4ac43e2d3635e189f6bb410259c7d96e172eedd8df6194

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd435d3e343a720647c4ad5a583b1de

    SHA1

    63d7b602a82449302f6f286b84209a73476c3aef

    SHA256

    f731c25bb5330c60a141e5e00f4fcf6a28827352d0a2646939643f48735955d0

    SHA512

    9bb5f5acb80f336e6d5af60a827a352fb187b28c700751931a53afe19f82fcfade2d80c02aa78761a6e5d126edcad04e0a302e9139c69a190bcb9b89528d2fc8

  • C:\Users\Admin\AppData\Local\Temp\CabEF61.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF010.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b