Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23-07-2024 07:57

General

  • Target

    66be67e9c66f030ce04ca36be14d3049_JaffaCakes118.html

  • Size

    10KB

  • MD5

    66be67e9c66f030ce04ca36be14d3049

  • SHA1

    e3d5e8e60ad22fb42209ccd146eb2c80c8f413c4

  • SHA256

    55df67d563dcd5cdfc39b379f372b14d3fa44c5f0108c01f7323b57b9446b8b7

  • SHA512

    79ebd1125612d7c837df4b5a9882ba664f8806a2c67a7e7829e9cced1004a1b384ce3311c4991f660ca86b50be9079fd8fe75129ba3ceb8650d033a866ab2967

  • SSDEEP

    192:csz7uVAYS/IqBJ0IaRX9/cZ1JxV0PHb76f:c5VAY8IqScoHS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66be67e9c66f030ce04ca36be14d3049_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66f030fa080207d550f9ea401252f950

    SHA1

    2f24e7bd2005106a708b7b496d7b68ade470b94e

    SHA256

    5cc767479d0d4ffef87a93ca7890852e56622646874b00a16e27dfecb491e1e9

    SHA512

    a678b3297496dae1eaa575924559ce3a64ddef9b7bb5842e10a11054e02e4ae8226d1e0e7099e589d126f1643e8d159db60a9bdb30971b8df56be2f21b1308eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ff21dc155a43628b450c7188075bebc

    SHA1

    e6a950361e8afb144f558deb06fa4a469caa346c

    SHA256

    13e334aa943e2d9c225c0203822a532fd3b40f4753b2a3d1ae425fec4d15c4dc

    SHA512

    e8be98f1105c77ccf57c1bd37d8bd407e1ff1f58738173660101c6837d85afdd332d4d2aabbeb235578a0a94efd4bd2f4797cffa31370f05148e318c17d908b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c9698fc905a5e113312e5f2fec8c5fe

    SHA1

    e59ec113313a8d71fe4f7df92a4fb9347ed030d9

    SHA256

    0192fb9aca0f554e629561944ee1b2414e97d3f34265ba3d1aa5f93fd40f5c3c

    SHA512

    034e8d9c00d09563996af1d95b3d722e452f8ac372a70f755c6c7d8b4ca70ae94d63c531bf77e073ef5cbfafce2373501f9b10825f1e5965e7ed1ee9d2285183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a48a5eda830721afa5032fef3d0dd03

    SHA1

    69ac8cc2dbba01ea2aebc8a6b2cc330c21c7fbd8

    SHA256

    5cdabdad4c2590161a263275c725811b822e9a866e20049a5d92d147ec666a2d

    SHA512

    057e8439311ddab7b9ea011cb6b0b3beaf29817f34e0b23ee5898fd9cdca40ca196750988c48692a989595c2d94dd5d33ab90367c85bf7e90819e082d38537bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01b7023b10b82551fb310a521f97d2b2

    SHA1

    72ddbb7d959832abe39ed707e6ad0b88f39c64a5

    SHA256

    9516e64f91276291eae8ff02d9515f3192fe2661e333a6a2d45312cc8d339ad4

    SHA512

    2835ccd2e057ceda9a2a9a37cadddc7dfaee5ee849753308aa868f8bf6eaa8c48c0019c49729783962ec0d3db92909d6d45e5344f09bce42e46126afeda4d378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    787b3443f18fd86b55a38c25f75645af

    SHA1

    dc60e5003e4ff84e6bf9024aab1ec7b82c6dd6c9

    SHA256

    057dbe138980c34acf499a14a038943ccf3bf2b773764916fe8a31d5aa0542fc

    SHA512

    fc62cb92439df711260f5128e0c69bc586f305d2d314f1558604e913731541093991b45462adf57b363cb73c29673637c604f7940ff44b7c97603a04692b0ff0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4b932760bfff7446b9438e45c2ae60a

    SHA1

    6932bda65662b4f0d5907aa69fbf639e98c35937

    SHA256

    9a02a9f84fe2036df949d381523b4eeeb2a51cd58a0921e198d311c6583a74b3

    SHA512

    08117e0a8efb27435629dbd72a59e56b0d6cb31fcf3685ad9cf8905efb7db6b1b1e5f97b0b62a096936a82836c466b1a2c34f94f65f0b787a86584ed6b175c72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd9594675276553c1abbc83f7bf4fc2f

    SHA1

    2d98830e1fec1aaceb3c200408ce23f59d391ed7

    SHA256

    6a330faa7bdcbe4c025b2ba06347863086dc2aba826d1fc54829b7fc78a3f0e6

    SHA512

    a5b13c7208864de57df2f0a2931bca8b444412a89069430c9d2d9f06b719ff1e00ad6f7bc075572f17dfb56bf8bf6493e25f1e7844e731798da1eb1f1ca373c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94fe8f40456544c725fdde8a97afbb8b

    SHA1

    4521c84c3bb090ed593072ab6818b40f47d3cbf9

    SHA256

    cd044f950d626248b1c346977d02578f7b86ef80dcaddf11dbdc29977f91dbf0

    SHA512

    087d3762a4f06746cfd694eb431eee34b465d80954bf0808c9a8038349f5afc8b4820a596439ea150e065f7be82b59978dcdec1af732fcff3ee0b9f31c602ba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cebdd2565cd1208a6a18d04c5ec8f1d

    SHA1

    ee01dd8739055d5bd08bb178bb18f6a4a72e7d11

    SHA256

    eb4479c51f1925f3bf8112855ba4270828246c40cb6a9c3157bead599f8f1ec5

    SHA512

    0bb5fa2b978c155dcf7911bbcf295ba1047992d8e8f5cf27aa782663b47a82cce1c252e54e7dfae063cada7ba743b97bf2faf3323d2f442c9228e0b4e4502dd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81bb22c91f05fda8594f1c3ac42e61d1

    SHA1

    7fed1b5d858ed3477d9c5477e9b949feff853666

    SHA256

    f2ed951e7fe4aa5bdd5ad5893d72133da3113847c3f5e55cdb789b1c5179ab1e

    SHA512

    4c74472a1ba804994fd83214adc0f1d6211c4148b555e49f14db7c4270f125f3442ce0e24a2bc57ce32172bc4be5910a9be2852dd2ff3d37d55cb2c8fdcd5085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    216cde39f67c72d3a37c4ff21769094a

    SHA1

    95ca7136926242240751e2ffbeac68157f4f40dd

    SHA256

    a7a3853cae77414e5959d59d7306d52d7cee5f9acf7a4c04b9da40bd400e3bb7

    SHA512

    c97be7d43e6ff7690940dfc67513729c466814d66fc2dd25ed59684230c0427012b242c16aa5a6ae4b29ee263b7a39df873aa79759c7453e82cccdfdea37829d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    debe0a2abc5fbacf03bc471f50e01a5a

    SHA1

    57f0293f1b6cb89a0cca31af56c04b8a9eff4b0b

    SHA256

    db1571d590b148bea1e5a96e24cb480c70809190e6d73ed0c9166808b826ffcf

    SHA512

    f2ae7b0fa7693979c7d2b07ba0b7437f90c42fe35785e198e6b65eb7b512f2f2d9c80f45c328fed268e1557f0a2774d95d54f937058bde113f5d5645c2fb01bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d34c375db8dcd65e09fab3c6dc2f5bf2

    SHA1

    1473b0d68edfd4fdb61557de91454f90a3850058

    SHA256

    c36dcc69caec93dd74b44689d7eba1130c77c51dbe20cdecb43539d353a6a8a5

    SHA512

    64be5dfe456edf7047b2e46ad34f2e78ef17ae62f845dc2d84e803c5d954c21692a1fe366a50bac0d0334cd71ce6474f841f52f472a217bb1e6bc4a979ac24a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21b0cbb6d3346747d4bff7fde3787c4c

    SHA1

    443cf0ae7c4d12e41a46d56e43555795794958c2

    SHA256

    3f310b5e70c36da872a2bcdd5f817143b7854e63e193bd9579b7056587517a8b

    SHA512

    30027984590e6873615a59202c662fcf74f4faee1ed59e2d9d061acfa6487e61a482a0a8687d8662da90f4d03b0754456d188848c169c5a930e382eec91ba85f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f71a37bfd4be0415607b72011a9a267

    SHA1

    a3487d7db589c00c51ee6527efa9fd98a65dae7e

    SHA256

    fff5d54fe33713bb9f8b12f452a873c703be6e8912175ed3db68dbc31cd843ac

    SHA512

    95575781ab3e5f818da54435b6c90a6515b8937a8bb05edd91175a9b596884092f05549bc41edbdf40f6b0641d2a8d664f790a6975c0b355a9fdc1c76ea81cea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c76fb60c74f2e1717702b2d1edd8410c

    SHA1

    32e6cc5c93789c05d6e306dff4d0e65835e6d416

    SHA256

    368234afc9682def38f6326e12e9af7e59c70f3462202dffbd16391bd25b6254

    SHA512

    c659e86311bc15e1449e0270013350a72ba312b3acad6d5515e287599d58b0fcc38de1873c3794fe8a5439ae3f2117fa43b1cfff6166a86ed39d27d3ad47e527

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0504a1c45799563966281d33d3b6de50

    SHA1

    c03ae313b5412bbb799baa05881e15e42b395a81

    SHA256

    a8e4977b4fc740a8a5c376ee9875aac73709a4448b9addf250a305ca3357fa72

    SHA512

    46b5163f3abaa9e7f811deaabda9c3f94dd2c700635f88228c36d371ca52757c5f86450befd0def6959caf25c8b58ac7f4f44e2c6191b899b1521659bd8a4e6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69bb6e3f51e060fd40821342c605fdd1

    SHA1

    a6c45888bef080d97208f773868c9a92199d5ef8

    SHA256

    2712fd7917dabb4fc5c82ac858ee3736ed935e4e96a8ac6c888c91f110e3f399

    SHA512

    11972f6b1ad21ba21f46b2142d2a4438c18428144282ee905b3228808eba82eeb18ff3d2028fa29d3ebfd2a69f1901b1c101bc7a4e2bd70b637331e21be4f786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    182468cd2a47efedc4ddfae0dc16ad8a

    SHA1

    4382614af0f1e93f4dcc9accb07057f1e59b1625

    SHA256

    d7706c12b3a5e87e9922997866e30715c4ec2d01fec6d01326afc48042ddad87

    SHA512

    542ec568742c458620214221e580d46de7c9eb0d971ef91f3e4947c1fd804db6bd4dfcbf2cd36abef10ce6d8c7ef5f931b58549e3d3ccf53222140ff6d1905d7

  • C:\Users\Admin\AppData\Local\Temp\CabAF.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar15E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b