Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 00:41

General

  • Target

    6576d2196c6f94149737287e3c1c503d_JaffaCakes118.html

  • Size

    6KB

  • MD5

    6576d2196c6f94149737287e3c1c503d

  • SHA1

    1b44e8173fb1cebf10f82cfd532944a8385478e9

  • SHA256

    17dbcc48b13c8340d7a591a3ba76a04dfbfe39993df05125f3ea7970003c871c

  • SHA512

    70022112c7110c774b46635771a00d49d4c36d238839b73d68263f9c4ae1ea36897d103772130a6367e5b2b667bf965a3bfc130e26549b60c56460727b304d92

  • SSDEEP

    96:uzVs+ux7LHLLY1k9o84d12ef7CSTUarHcEZ7ru7f:csz7LHAYS/Lb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6576d2196c6f94149737287e3c1c503d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb94b83717ab6cccff2c683534bce25a

    SHA1

    80c0e3d9ba2f79623cc32e2ab5980da03e8666b3

    SHA256

    ff44d038d4ed9ff1131fa91272c7fe642ef8c3bc71e84bf6d1012c86830b7962

    SHA512

    3e4366467bb259ce18cd36524d484d91904a2eca72053ff3e6ca2eaffaf7f73fad1c9caccbece16e3b9398632d58cf00885a8959a1e9f85f4737067ac5c7ed44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d8bb1e96929af03100b1307fa768d47

    SHA1

    6e3d3ea76cb27775a7eb32c814f6bae0cc468d55

    SHA256

    439cf4d147a0262e78decfa05703729bd6505a17c537e2191cbeed2d58dea60d

    SHA512

    3225bb34ac9c381c57c053ee12dcda6ed5d14fe6368829dcc0e54a18625094b3b69797a72d112b168fcb9b113bca8417f7a29ddb77816925ee0fcce079f80e8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bd51203bce973a8ad7141e48ae4dab4

    SHA1

    9e09f70eb0256bfa722cc3858a894b26acfe7a40

    SHA256

    97ab5d58fba98b5fdbfcd2fc6cac3509e2a5a901f1893114b324591799776d2b

    SHA512

    8f26f62a36f042cc0594c58a21a4bc76d8ff40ef25eaa4a6f9272067507c8f9385411b56ddce4258f92566b5e9c70a4a40e10753a66421124af7767417578903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    881821c00e9742a8d64420737ce7cd13

    SHA1

    a5b4af2bd4a0f0d31bb42ddfa509bb0497aa071e

    SHA256

    d9d2210b3715d308803b3a3ea994c24b6d68e6d8e6510080dab76b17252715ee

    SHA512

    8dee9b73921cbbaa2f89631d3044bd42b45ece2a10a566971e693e15d90b22db24def3bd4ca79129d09b46583f76e80c68d43f169a23078f105ece919e219ae9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acc9d35b5873d3ce2a14eea60d2ce5d3

    SHA1

    04bfb42b5872c63c147f9dc449b0f0ccb21df081

    SHA256

    780c6dcbc09c42fd2c0694b11af25ad6595e7d5f9aae97e516468ce807f30506

    SHA512

    ec7851cd0018082bcb73b8ed99a345d46c6c2ce446c0c82bdf91802450e18d330cdc955a3425346bdb0189dfc8fe1fbd6da2ea65971a66a8b7c4abcc5240d7f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4450c7617d14360777432863112b69ec

    SHA1

    c84b29121a42610e6b63c7f4b177049e60779a42

    SHA256

    19547e28ee959256fab5f21ce4c2b5cecfc11bd83552ba72e5f0e979b6ff4630

    SHA512

    0cc274baaeedfcab5b3cea04a39ffa23f740444fa2b9372b261f02af143dce10c9081c823f82faa603c371854d3ed99fb5be748d4e7672b648071fd6d783ab76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7847e1b588dbbed3360675c8578aa12f

    SHA1

    a1006e750a6b97d38bdc89b3db70ea4ac894dcb5

    SHA256

    2aa2dbc287cfc43da375ebc001c5c225a4119d16d70fea7b91a048809b926cce

    SHA512

    55d6f43139f70eecfe75827795bc7404716db17f6943fad52e0424d7391f9745f3359b5fe4da07b832555632e908cf684c6598dd4c4690f9c3ec8093ea63b4b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    135df6989410146226958a75972430de

    SHA1

    e5a8d1d441ae59e1b958027b1e219dddc69183b9

    SHA256

    b247af7976039fa64988d8f21f2c46cb091478a58eb99bb0faff5c84838c36f0

    SHA512

    f7e462c4bd8b6918e571ffd4f0c597c52f66b14bb3f0b8b976c6e0d637029f7c35e4de7154bb919489fe98f824c3531164f589d24f0c04c2f5dbd2670e585bbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    affdcaa3f2d5a9642587b5f68f42bf6c

    SHA1

    eb8a31c3eb897170c5a51265b08744772fd7d425

    SHA256

    49fa2dcfdc1aa85d221ba36619c5df7504290cff8c654a675ecc1dfebb1a5861

    SHA512

    0934a5367af3fb501372f498e2a9c08de08846895f5677e32e69705226c339abd6580d3a7f7b078abee1c537631f3dced948a45ada620b2493c9fdfca27c21f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    679f9c80710b1888536043917d9a4dc9

    SHA1

    0229f24881916899abd16c69456400c0c0b61a5a

    SHA256

    5e4133e5af279d1719d380f6cd9412f941d1f28e474bb11ce046746c91cfbfc6

    SHA512

    fea2817f874f47474c4eba17bc0c26ecd1929633a4720791d963ab7b422cbca8e811ad49b665440eb500090fa6bb370acd2b467787ba101831b38f6a83707a58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7942267c9b2afcea399f7b8093cab395

    SHA1

    caf71caa37a222cc0623c2b35d6d6cee6cdc2763

    SHA256

    1e8bbfd834ffee9545e6f4509db0373c63cbcb809d63f364e68684d8b5de5408

    SHA512

    2145ce7f981f62cbaabfc2cd732b009fe7b5990285d6bc4faed92018fae9ff55ea05e99cd1e441e1eb709aeb2028ff4161f7a45f2102d107dc8b5daae4952842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    846c69de7fdd2798694ba4e758244f7c

    SHA1

    59ac20378ec160bd25ac6d6b349955775de2815d

    SHA256

    3b0a9bcf6143753a6f70d76075b392e898bc1e204ada98aa4408e6586a7be595

    SHA512

    95be267e63166199b8d13aea9e890a623290a3cf2d4a2ab7a08f220f692cf2c60cc67b58232513ea5a5653a68e824182cfff852683ad6ce1784192ee0748f47b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    746dd2f170419eeedcc9e23f2ab24046

    SHA1

    7cf13fcb65246e5a6c400505f2e88b348d46698f

    SHA256

    c99ac56d1e55cf0cadd6473dc1a96df050b3070b9a82b420947b64939f93b5a1

    SHA512

    50e3d23b8046a6ef1e0803053bbabeecdd8e2e34e4c1c93b6d0c1d837993631692444c425d3b4988b55e0937e469c18ed23d4d0c254fb22530d16ba75a9819db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f1ec1204f877c427e4fbbe3429c9418

    SHA1

    c23489034fe487ba8027aa9359f66ed54c277967

    SHA256

    b6ae8116e1e77783e98866aef48d54f83343d5b46a3f3a7d1871b224845d3912

    SHA512

    c4cf908cc9bf2927df956bd49ce10a915eee6356e985e8dc1863929d569e6c9a0feb144177762d5a76435a6d30e5192f12660af723a957090ad5d265f9cfcdfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e79b7064fec287079769d56ac72e726b

    SHA1

    80f2acd446a4a621a05d2dc6eda1b0ba3b490d80

    SHA256

    d5036d9a7d85ef58d8ae4a3fe2bd0dba973d7cb1c8278de66ca326ce88b89ba5

    SHA512

    9a7759a18825f3c5336dcb528f26b95bf4c8d8db85e16bb07bd7bab2f27eef72eee49a139a3ab51ac6995e87440f426d5c32ff08158c9e09b758781860b2045f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82548d8ecbe0e4f2cc0edf50225cfd15

    SHA1

    3dddec0fd63aa438559a1575c192ccdf63ed5976

    SHA256

    509742cc7abb3cf27eb3cecb7e9781f13360ca839955f30baf5bb61d408bf8fc

    SHA512

    14ba56bbf4c9bba59e864ea52c01c73ad014c967236259946d857cb92fd68d013eea054b90a2ba9200a83ba6312b53dbfa90e5ab298dd75201186b7bccceb1bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b5ec7b162c1d923c078e4744d2b6e5c

    SHA1

    a87bc8f7cbfd7654b27a6007e8b4ed9922d9dfc1

    SHA256

    1dd6cc1544374d6118101f9d98d4c460d42a5d5139bbec868dc29899a4bb26b0

    SHA512

    a4a3c9be60f50e572eafbccc02b5071ccc976e70f660039863aa09f580b4c52af3a09b197e318ba3e7dde68d97409e5a850741c1e1b4f675148a62860dbec615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcd98861069e30eeba0fcbaf6a5593c3

    SHA1

    7eef99bfb9930258c54b573c5b9574b2d4e7b161

    SHA256

    46d89595fa27f8434a844fd4876b9fe2953cd58580e82538dc9a56acc12990a5

    SHA512

    ce5706e0ac598c3e5ed505bb406bc6b7e7f613a56ece11914d22f32e5aebbb143b0ab80ce0132f56ee8ad34e2e91865082219da31a6242f8c50eee62ff72d39c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1067e2ca2bbe46a40b57f2bd1ecab3a6

    SHA1

    7287b1cf621af0166f2aa461b430c5b329733fc9

    SHA256

    05b5717f4cfb5f23073888c4fca26c73571b895115cdb4fdd4b84bc6183633ba

    SHA512

    040db4056d7116ed47f48a98dcadf514e891ef4680e8cd03f78cacc890dc681e235191da158772901ccbbef9c58a83f57d1c4bc882df57e008e52a602a62ee86

  • C:\Users\Admin\AppData\Local\Temp\CabCB3C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCBDD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b