Analysis

  • max time kernel
    141s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 13:57

General

  • Target

    e79d04c095093e330017e1d9274a8da4_JaffaCakes118.html

  • Size

    85KB

  • MD5

    e79d04c095093e330017e1d9274a8da4

  • SHA1

    5a6bd9bae584ec86a4ab2b6d8c8d1aad73a37d10

  • SHA256

    e3bb2a2039b36325bcb56756f77c03ee69130df86faf8cbfb23f47bda08e54fd

  • SHA512

    8c67a9e11fcb1b6b25401f9d6250244eaabe58531ec2e89c40e0828df36d655077b9526379900f8cad9ec4e6ac19b6229bfced6692e29bd57effc55c69b91e1e

  • SSDEEP

    1536:bbOUo8vFRUvaoXcRGYFqEwLBuOdO1KSDXLnFn0MVxF65HHhgP9sGRR8LJPQdYt7j:baUom0BQUXSw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e79d04c095093e330017e1d9274a8da4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2c8fb459aa80c1cd9ff40ed3b3789b8

    SHA1

    46f333979d02ad8050ce87194532cc1fa2e46c3e

    SHA256

    046ee5daf1c67b54f362d5f7dedabd10333e5ff3649f0465372d304c00cd79d5

    SHA512

    107170b583202f609a26e20baf4a1e0bf581b2e5a2afb2d67a6e9a8479722557c7bf51eb005ca57b843ea6793dfc7d1974713ebdeae7b3da5f4c0f1831b044f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b77d8d7f7e4960685bfd2039d7f471d9

    SHA1

    1cfc7b9e6470cbe23bfb4042da9eda9ee23014ef

    SHA256

    0f31940c831d011554ca00454bbcc48d886fb7bf1b481e4e6fca7500579b5d7c

    SHA512

    5129943d8347d9880c22aa2adb0ecfd65bd0f1e169b973b9cbb024132f4db26d5d856d5e2084524cbbb72c634dbdcf653dcccef9ee2cc9d14c7b66217555cdda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57d5c80e9e8a4133e63dceb0a2633f36

    SHA1

    263d0c339910c738015fbd4a10789d63c87da82c

    SHA256

    86de1858ce4df93dfefe58bcb24bd4a449b6476cc94f1f75c7f5cfdc0e239e28

    SHA512

    b6b33c0c601ca0f3a6bdacbe1ed3dd8a35fd17df3620eb57f4cf4cc955a302164eec1ca6405b0073b08c8a31255a1d41572a753a3715a8e80c9505aee733860f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e849a509fe0715796b371bee6235164d

    SHA1

    de0f8a185a68d1ae9b1b317a9abc1fcf28da8e78

    SHA256

    2a19b9e317970c197180ed389b37fd9ffbfe9e7802dadf4ffff9a7c8514a05d8

    SHA512

    e592843fae7c2d41f8cefebc73a100b0c7630cbbc01befb05bbb72a5b0d88768953bc40f5afc6db0a71ecdc949f8c9eb3070f269ea6134e4c35a00a4b39a6f21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3cabb01485ca64dff42564ed4332a16

    SHA1

    a513049cd56deafa87da113a11d319454301b34d

    SHA256

    027c2e243a91c11b3c45182d11a5122e719d78c9b6457eee275f1da3e3f95de4

    SHA512

    36a1a6b51b2574fadfb1660542bdd36ced8f86930cd2022a5384622b7a5e5adf45f4211e75cced9e83a71f8923b8f5176164cdbf129c25c540ddfd62487f7522

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ed621c283d7d01a012046048414c7ab

    SHA1

    a6cb5a8d7bccc92b695ec11820c07e59ba6efea9

    SHA256

    5390f034d1064f61d8c23a2af1f358b6dc942d919ebdc42a99dc91b32a76cad0

    SHA512

    890ae9bc13aecdbaffc9313a8044c746f370ff984a0479f16d4c3d1cae00f0beb30765e6323231302f6f529d4959f1d598a17bf5f49d8decbede84801ca1aa48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47e514cef417b3b1a08f0c929baf796f

    SHA1

    1732ed250a3a0da817fb48e5c0a7cb493a2b0911

    SHA256

    6d81a0d3e7818a04eb4e4661f059b45c5c41232a6c1f01cb1c69da7aea496fe5

    SHA512

    445aad6b0fef557367406e6a48f4b0614c5380d66b4c492505df460f9c4a7288adc9fbfa4fca957e75902374383a97370883d93a35c3470a22e27d8b1c5b8dd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50fa55dd67d6fd25eb3abba4bfb05212

    SHA1

    58724567b84f637e7ea402304594bbafa6bb15e2

    SHA256

    e6f66b9ed7826efd01f40156e282dc79d7f84a8c01f13b8f6bcb9e36691f70f3

    SHA512

    7cee849ec1a9b6248f4e55c09927f10f94734b8a99c10bfbcf4a8ee573dc7eab562080ad148ee5b6ace92014c9938b3a43974b588e1c47e0a89b6ee9eb1aafd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f44a35ca01a439e24b68b8e06ebbeda7

    SHA1

    2acc456676b23a427625aab96bc549d6ec91ef91

    SHA256

    f7b9bab1463e6199024f3d7244d97736acce7e090ed085d617c1eff83dd8c2d4

    SHA512

    54daf375d61b0dd3b30262af497e1668ef24203bad2403df2d5db2d509cba2bb8c0c0c7885a9c103f491d50373cd4805d06906cae892d40282932c205e88acb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c49be753c361941060e0d6ade97d37a

    SHA1

    fc9089fea615d9b97de8d15b3d41b01e955deb7c

    SHA256

    92bd07febf3112a6f12bc6f66bdf0e9f482e0645c45ba32f0714f701763a7255

    SHA512

    dcb86336c13a672a6f5c6323bd74089fab0b5db43880e31bbed2571c053623064e6f30e1667b204d8c03531e4bc8734b336dab7d01edf728d5afc73af6a3a375

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c9fcf07824fe4f86e5e65a56162648a

    SHA1

    159e0c3f4d76c6b3178ff8184d2a5d4aa65b0bc3

    SHA256

    23c47916241dcc1e72d98c92b019e77107af5f5d425364285dea41742dc72d34

    SHA512

    01529a19e5e396a5e377844f44217c5f20d779cb9344342c7d553fcfb0e6aeed2b2652eadac30be3fac2c15698f5b4fe4268530fb070d6db92890b33a372c77b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b77d1fe7b2687a4dec8a3213150e784d

    SHA1

    930bb07cc316603383550ec07cf2200eb9b11cb3

    SHA256

    859eec194d5fe8cb029dd8647978c40ffae99f46efecfdd6d927600f31aa5b8e

    SHA512

    b43bc3514b4cbcd92a0e754c5426f51c61cf9e04db8269e91fb6d1674de35f3cf3a3e0829fb994c2ed622015d2fdecca5d394c320878fdcff8b7c1c0308478de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66e1701d66a57ba2ad4518244941a260

    SHA1

    4f0729b65824d746f2761035b556490ba7793744

    SHA256

    3949141c8308989a95de2fd2a2e41d7146a1db9fdaf85da4dbe13466d3c8a7ca

    SHA512

    fefbdf81f765e350d07b2189f80626435221514fe3c57dd19ab474f69da8d5bbfd35b41e35f40fdd42adb940c7de18e84e48e055880535b8c20f381ee1069594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10f3ea27a71fa01b2e1869d0138b4986

    SHA1

    99b17aec08269063f2d7b704c10dcedc5a7417aa

    SHA256

    57b878f247c7b024b83833e0683e837248433bb2e6ddac2cd4d07ed5a7b83e3f

    SHA512

    51377667c2859dd59a922a41b1e74557fade326e3e691fcb194c74227080a7691bded691a1d9bf64e82e5f856090e344842d323680db1ce467eb85d9b1bacb6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8af721b8ce3c2cfdf06530a170298a7b

    SHA1

    de13750a759f5f72adc3b60c578dc7ecc97488c5

    SHA256

    1b7a916b0bf81962f5b9c0ad4defc064d4a78f33fa0ae165f1adeb2daa36a290

    SHA512

    2c1df78bfba5e0099bea22eba92079af07dc7600c7a18e87869a775c0bfedd642dec2015bb4156baecc3be7bfa54331c7bdb8b777df882e70cd0004015fd71d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d90e9e9f241f86277d70f7772330dc24

    SHA1

    13c991993be7512f280174a835fcd3a0c7376638

    SHA256

    05b4fc2925e4a879a9a8f5be6efdc94ec82017d09db0a62580a9ad428240caf4

    SHA512

    dee1396c9b48af4d89a5b85131829d29993a1f09d2af9fc05263e5fcb57a401c1c80bde95dad921dd7c6c2d98a17e1cadf8d3212997dcf90d28780fd252c458f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5e1cdd2a1be335317fa2deb5cb11834

    SHA1

    ca0c6bfcdcebca0cac497eb5ff9fb316172fd0ef

    SHA256

    8bf3df06626b91e2a3a80c521e9608f5a1effd96728b919734d78922c5be3474

    SHA512

    da778b58fb23567c2929ed1c81b63285ec619ffcde6f0bc244df6f24d51b48f9fcccca5f09942ef5eafc49e8bb79acf525bc0a811e749706c8764338af7b5db5

  • C:\Users\Admin\AppData\Local\Temp\Cab4AD9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4C08.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a