Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 10:23

General

  • Target

    672fbb11f188d06d3a6206a87c6338b0_JaffaCakes118.html

  • Size

    55KB

  • MD5

    672fbb11f188d06d3a6206a87c6338b0

  • SHA1

    d38a98b94c6ee9d3a363a731cc242b6922ef69ce

  • SHA256

    0b82b90ef89efac6258c1a2eb22abf985cb8e937eeaa66b5c49f5234cc535eb1

  • SHA512

    54872431744d7fa06f44b7d958a37629df5d9615186ac8f1e5257fd66bc19d989e74372039c7967ac5a20dbcd5586b4b88a493398c4ecb1d01f68a32c924ec21

  • SSDEEP

    1536:SBk9hncpFm6iAbl8leszQuisSN9dWKw6Z:SAbisSbdWKnZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\672fbb11f188d06d3a6206a87c6338b0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2332 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b867589b3a17e85ca792ae51091fc20

    SHA1

    13cabf57a1765a72409fb2af5aef1e44b03a1c37

    SHA256

    ea0ccf5ec7fa3704df89384c1c7326c4787691e996029d911afa5374475d3631

    SHA512

    1b01ffbd99bd31851dd05977fe074740242d6252266f4ae7e210accd2ef2b6bfeccc8954b516c46509e4682a1c8f368502a9a71d1e401881aead2a0a38d3c15b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b335523914a466983f1c1b899b30dc14

    SHA1

    7a32d0df5c29e111743a5fd728b04c9717ff3e9d

    SHA256

    3cbf31a59d54848b30760a31edbd8f746228c78aa047055ab7ab9bfb19c49493

    SHA512

    7eba9b9e5d18ee32e6d5742f4afbd95056b89dd3d2cff6ca37d8421ef8792ce0e5bba70137cfd16bf173b37bee7478905fb49ed01ad3932d1c2b86e1ccc7a6a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec4639e5a0c52621db5b2b10034d6005

    SHA1

    7e654ef03b854d3cdd6437a6fb08e90480c32087

    SHA256

    bf7f0e1fe4b065c8755ecfe63dfb926bc690a0b1213d1da27faeea05e7ab669b

    SHA512

    c3fa42c3a9a89fedc5e0a32e6381843b6c3c61941be01c0f419f281c111ab73b1bf33712a0a9d30b8988a8dacd331a4079f438ba72021f551088eeca6e4a9afb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2441af529c38fc5b3f680f80fc9039fc

    SHA1

    27e785b8dfd41e088a5bf047f44f968cd310d187

    SHA256

    6931c21805d82d22c9ef23f2b46ec421b3a1162e0ec049f7492bd6f6491f0cbe

    SHA512

    ce654d562eadb4d9385a2fdb9e77f5729dce6e584eb3db05f8d2d81c58808bde25c9bb3a4a4beac920b2d3e3b377995b18057015e498a26207d1736ad38d3233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb5e8cd47281694c8bf48c5a5495c5b1

    SHA1

    eb8ebbab75332dc60f3896fcf1ab87d80de27dd5

    SHA256

    01d2ca7789e811d500d8b528257a7c5b814afd6c19036e6ce8cd1395cfe7d21c

    SHA512

    44854cdf8748381d40a9aa0d260172146ea84524b1184cca6fd526a584300d8eb4908a1cadee0f249e49387c4fe78d96bdd1e466ebfcec139b82b5c994e2329b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f77e0f94656e5eb1f03a35007ea7d25

    SHA1

    76044040b5ef33a53518e829bb7f6473caa7bfdf

    SHA256

    1b0909883692dbe4a5af7fc7841fbd9fa1fc9eb893ccde05f99d97e2dd8b4fa9

    SHA512

    34b6d1186a8a459f6c9c59319e460b5f6652ad6f9b926e2da0bf7f509cff272b0f8301357f181f6da710931da08208ec2c852b4354214616d8367701d5b99cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b53b4536d476d3cc6a4d0d553ad3398d

    SHA1

    d1ad8d3b963bb3c651773ac0b20cbce49108cc2b

    SHA256

    f79489875c6b8f55573a36c0c65b634e8f2d2867e04890186f957a4e4e75039a

    SHA512

    dc0ce52740791accc2c4e1fc04fefce435e70094a923921df1538845688172c27ff86d1d9a1627bfef5536bf997262d9e148201c70f98efa7a91eb840cf3e597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e7e176141dc7f3003442c62f435fdc9

    SHA1

    731053e538c23d7632945ce0140631c9ff50bf52

    SHA256

    bce1c4bcc3562f82c245662eaaf3307688981660775bf5b80b7127257b610d87

    SHA512

    fb3fff50100c717039fbfda7cabc20c7489b9346d0226f8efbf00357d5e75a6a09dfbac149ea319d9aee775567e58823ba67c073999a8d4b9839d3b576627e22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef9e3f93486029fc0caa3362cc510b69

    SHA1

    0a18e42f4b4c7dfa4377f2ea79d14e814e32c3ba

    SHA256

    2ec3a36d1ad1614c78273c7886e208aad5b2910e31fd3d9b5519485919bccf2e

    SHA512

    9b42249fa7c3d4b5e19ee901ef55a8008132304895437ba58ee1a3b708692bda6cb356c7f9860c1d3669422ef5850bef4a5060f463736c0c43291a9dfcfd93b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ae1e155da312186b4a9091639810f25

    SHA1

    c3b32080a77462b34b8719b254f52d8fc9248948

    SHA256

    112655d245cfb61ec55226028e2ba41d8ad1ea788d00918e22f73b6b1098341c

    SHA512

    15cc23916eeeeda13f1cb69a0b797526e7446258c1aa733012a33d753f8bd5aeffebe51180d4c987eb515003e9a175b26cd72760f0b13b02c54f7df6517d939d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e194a4216599e54b7e3ea4a4eb290bc

    SHA1

    627d365c2232276b2343ec71ac885b2978efbebc

    SHA256

    e71544eaa67065fd11b4b7a6e90c0e7f1f8cf91a0055bed555da24809dafd9b0

    SHA512

    09c03fc57497ea0987dbe1ff80bb677d6ce686bcf9bac46d7800d7689e9d8fd7cb8708118546ab8a233a176bb262f23a64f9b6394ada6d03ddf34487e281d8f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    019ec3cf8bd7e536e455b36e906c8d8c

    SHA1

    b09788bcfc5c47a68c8fa662cd15a993df31b38f

    SHA256

    9dbf8c10cb97022acc75c9e83d73af2e7813edf68aae9c896bebbb5c7ff5018b

    SHA512

    56c3d0c9e21e57c34e4ad3c74bee5355ce1abace6f8589a1a65daf9ea70bf47fddc8c318936b4e74bdb6c73d5c5ab65d81f49c07dd32384bd072b2138942a151

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    564cdb88f7ffb83ec8f56047d485ef4e

    SHA1

    f6c4c0fbe304c8b382efc737d614ed6a6eae9eef

    SHA256

    da1492064bd8fcbf906861b9d8f82abdabe83edd333951b7e2d54bbdfd58edc3

    SHA512

    a482947443c52b9145ef5135787350c0f87fab959b24a45771f586e81798b309a0866c589da82c46c42acff708f01d2870b6dbcf232418842586fd6b2c819ec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c2defae17f3cbe5d0c55421ea6d15a8

    SHA1

    693df0fd4159fcfff80ec35357046520d0eab0d0

    SHA256

    bc2acc0620fb34354d34497eb92fb845601e8db320ddcf4a6d516a4619803924

    SHA512

    b6b272c408f52eca2d64131a000446bab753a1a0e43bc91c5a7bc6111c5a6fcd67b9ca59d2245155f33fe8a11236275ed91a99d6280f1938be33cf002d5920a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b1664a3f05e944e6e343451e3981a68

    SHA1

    d90e1fa1352793372fb6d17089c7630e7b7b07dd

    SHA256

    706fa6a21f83a24994481b0f6d84c8d9c496609208a850cadd7f9edee0ef7402

    SHA512

    72b77a1603bf3147a769905cefdcb4fc527ae3bad043a6fb53e8877fa91b1e9c5f46784c82e9bbb829901f999c01a80b23bbeace864faf9a0fc18064d1b0a538

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea3978eec6ffef723774416bd354d147

    SHA1

    8737bba0daf3b3e4b42da01ec63bb3260b8bb763

    SHA256

    64a1d65571067ff2f0d468356302a3decfb17a0be7e0badf73fef2ffb3020f1a

    SHA512

    c6f1e7e45e890bfd4bc31348574b660da75a3c714cfc42c199906debdc03ac89d32a449bec3abec5827242e8982d346d99599d254ca2ecef5c0294f9fe57a2ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e301abceb007bf482c994c6f1883fb02

    SHA1

    5b8f8a6ff20403753a9cdfef5f82d7d18fd4dddb

    SHA256

    78442f90ac5c08b3153973640a9f3bf579501a58f885e481ac44a85bb4ee8113

    SHA512

    bc664af9ff80653286f234a3f4622413418564db9c45e52b657cb28eb30fc1b1ecd6479c190f7c507deea8f7b0a0e0904af1bd72665f4b49f8db3cbeacfffbeb

  • C:\Users\Admin\AppData\Local\Temp\Cab9060.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar911F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b