Analysis

  • max time kernel
    117s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 21:18

General

  • Target

    ec0369017b2e84504e3a0f476dbeeb47_JaffaCakes118.html

  • Size

    4KB

  • MD5

    ec0369017b2e84504e3a0f476dbeeb47

  • SHA1

    e1c15aee1c0e60d3f110e8b5c10c179249e1d0a5

  • SHA256

    f3fd4f3b9552282a422f7cec0061c931d4f13b31c904cf57a88f788574e9dc5d

  • SHA512

    6714dda7aefbb264a27e958a64755a3eb4a6e98e8b2c7794f56d00a0b3e7f40695742d87df667222731aec7dda0fba1a90dfd1485692a90edd73c0bc31b41c45

  • SSDEEP

    96:rf9seakGiwLsvfpFFOxUEwvBUqsOeN0Eg9jag0MwU:rf9FaL7LQFIazvBRlVEg9+g0MwU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ec0369017b2e84504e3a0f476dbeeb47_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1296

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7b61af9942f60d536ccb9907611d351

    SHA1

    07bf2e15ced3a63775f1feab238681551458d83a

    SHA256

    94a60a6469b673daf0c4c5a680f334ffb39bf550bea3980e92e4d6a5b51166f7

    SHA512

    1b9aaf110ab7e96330f809ea607fe2c7bf1b61a30f5730737ca5f38740cf0eb3ce265240ed723d4c439e8e616b609f4d2d85f5258671e55870083acd7ad6971b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    771306375a5fd8316182b11421917630

    SHA1

    2fcc13650c5284199beac0f4eefb6872aee4ee88

    SHA256

    ba93cf2de27a8164aa2e9aad1dcee6f5d588714b7f26c200b6685f235651eb62

    SHA512

    ac648a485682a9d4b142f962a53e6d676f8dfec346af7bbb7c24113be66f9243e996ba77fabbcbefb1a1c376d14a1d9276cf326bedfecf93b05c0357eb2af629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aeac2b1d93c2b427c230b99e711c765

    SHA1

    56db57ae7fa8ab2ee3bf2489950b12301a919acc

    SHA256

    c48106afcc6ab6ca0c8ae8f1372a3eadfc6c1bf62bfcbd87d606ef9c345f4fce

    SHA512

    31bbf268089015d5ab4bd0257e0f42aae0a60cee40d41da9fc50502f34a4154c00be40e503f6d338bf430232d64b40b1f055c09f8e961f31b6c71328d3f90750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e8b4bf56fe151861c3f38a0f0dfee23

    SHA1

    817f38d399682a6613db3d82f7ad9171cb84dfa7

    SHA256

    efae7eedb308537d83303363fad6bc3888bcf40248387811cd911807940960c5

    SHA512

    5f9958e64d41753ba7dd05b6a67b04b9b107ea1ec6cacace0cfc6d0de77c15ad56c6e1c342786f1385857e3e374b692924f5c5e6d83d6537febdb654a28d43d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b06f02a89c117aab8ff693012ed2b843

    SHA1

    d8c32e02a1526f734457f841884a85cd45df96e2

    SHA256

    76c293465569002527e02df59d3d519f478b09cce2a4663057c388206e5c618b

    SHA512

    56518881b41dfb520baf893b01771be4ad6f92005060cc2811bacc7f3f97b8f1591981bd39f94298799884c6299c58242ab72e05cb8385eeec8b2f244746e944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd6445c387f3f09e9ffcceb8a4f651df

    SHA1

    b4124217a5b71b7056f880fdc55a2b33c720877f

    SHA256

    69b9624d55a99f0705217adfcb4d4bc25bda59887626492fb55479d4048cb825

    SHA512

    d618efc92c52c0bd444a2611c8fd9537ea85aba7986e50edd391214e7a918b00980cec67c5b39a53c90fd2c9569be4898a517119acef58fd39b2289a96dc4557

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e5b21b90d9b0bb4a518dfd03a381819

    SHA1

    2fe0e611a964945afe6c3c4184678714fae9ad7f

    SHA256

    dc2ad93184340ba4c7ef16903e6053b3299618df3647afc6fba4e22a36fae033

    SHA512

    62f0e707855de99e5879ef05bd8bd09979428ca49ccf12672dade5de0f56acf39c5a156526388d0ce3cc1013f75af21d23b8fd0c4d2fbe0054aa58a8b849d019

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b14bb7c6da0b9e6631a01fac59721ea2

    SHA1

    041f225e0ccad2f4835bdeeab89a6a954c8c06a1

    SHA256

    7fc75d0a8b2fe2675046053d19e51106fdfec1fa943baaaea61041c79ace0788

    SHA512

    a91d4b8cf61f0a4a2554ecea80a2fad5bcde46d7a4f5b7c18a21ac15099ce7de3fd776d5ce39b618071d22f8165936b8ec70ff9c9f400529863e69ea85dfa978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f57d15a242de322d703350dd8d679ac

    SHA1

    221b8811d8a73622006953e5d5cfea6aad779991

    SHA256

    68673b60fbed439ba9a738697ec9bfb2954a9cb0ebfbf2b5b90c27fa06b589b6

    SHA512

    c3537dcd1e0889707e63f113f07b51c8de324fc8028981e3ed4dde534948539778387b772ca795798cbc111557c83253abb2ff97f2cbe1a908138c04ab6ae40b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    879312edd6d3a6473539ffb92bb41671

    SHA1

    15d5e4cf851063e213991eb379c914a8162f7aa1

    SHA256

    41078c53272207fb64b3faecc2749ec6dcdf6772369ca7388ff5d806df11e6d3

    SHA512

    9c3d9dfc65c5caac0f1695db7cb06d83fcb13c873790363cf3a1d7b5f4928b34d0ab76cb498bc0a34b12020c672b84217e11af938cf02d0b48a061b61582b9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    680f6c8a956b646d6c4ca8b9541c1ca9

    SHA1

    2c5badb1dd7a4c5a21bff277fcb8eb02021b7a83

    SHA256

    4080f224ab09a5b6f47ad793c47c5877b2356470157d7bba5c51043a734c330c

    SHA512

    4ebb3eb852cc6b4945e18c2cdfd7583af2c146968e1308346ac03ff5a5a0bc96e9fe6e531b9538f17b0d17a702aeaf4b47f2ee7e1d5b61460de7a49717ed0267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e30776e6380df92a31c7f6e997b21b4

    SHA1

    7ade2d33cf44bf724995d15515ed9971566347fa

    SHA256

    854a5dee6ff8db5c724010014d4aef3fa5ee9f2356a65e5d788aacec75004b77

    SHA512

    2240c87767040ee2e184cf461c692a4de1b2b14191aab3d8b0c587042136a945ed48e0e777cbc1df2e55692d5569fcd0ca526ebfbbb09a5d28c22521989d1872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09509bc99a66bfe00f5ce6288c8072ef

    SHA1

    cd63f2f3d537acc5d9d2a3d9de461c38d88a419c

    SHA256

    d2b914bc3c58d1ef9317eaef9035bce3d50944d0e957c0dccee1f133c4ab1aca

    SHA512

    70066707bd8227bd792c990575a45b6bbb4b8bd508f0fef26609dc01d733b5fb1b1c4c4172c7b9e0245fdff982287bb2dbd4d8f2b80c712c81891f01380bfaf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48f511c38836b1d6582ae75619d94de6

    SHA1

    c871b74661f3e2420b9ae6150793a15b9e70215d

    SHA256

    037f75400b157ef0f8584ef31aa30f5cf474131f15a4f4af072fa906859f63e3

    SHA512

    07234140d4b920a243e7018f7139e99842e0035c3f6ac5a78c5e17a8652a83f7c8867e05deadc40a35d0c3c54bffec6ec23e69e03bebeb56191742e58463fc28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4d1ba09ee67f87d0872a591aef3e4e3

    SHA1

    7929de7e3e7e04ced1112f4aedd3a9afb305bdb6

    SHA256

    b9fadd1e22b0b5383bbcd251150f07347d3a9539b1ddeff9ef7347c5419c5025

    SHA512

    17ce91a84c2e11e77e718a72d7440619802a857b815792200f834414f9c8784107e949f5aa7b87df462b3405f5fabf32cc8fc1729d43d5c376dd716b383e447f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0913f261e363ced3a5187c1f52ebbcd7

    SHA1

    f2593cac3696c904f6e8c24a7290fa4f0f767636

    SHA256

    23f160e1b53f5af57599e424d83a6b60890ce7190f9b8f87d51d6ae8b8c1188c

    SHA512

    b6347c36bb001cc39c3056775e89200977028ed7726c831ec64b00d219e828dc5255f8b3a62c1e56f3fc65063dbf60b72170a856f1ade11e8cd727568f8dbaea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c98d2bb71babe15cd81764e911ae11f3

    SHA1

    025458680e251ae9fefdf554a45cf9ad26e6f426

    SHA256

    d1d8f8050da3bc62a9c0a653f3a153b006efe18ff0438498688dcfdca527e35a

    SHA512

    ed9cfd417c6841da92d676c4dd4d64d9496b8571d1dd15556392f6202a5978fad1e2461f6a47e07439220ff451b271e54225b4bd33f2fbadb6404f10ab18a831

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb75a05169c57ae64b6dd57a68893e82

    SHA1

    b234aa27ebfeef7326d4102b1eacedbb9c8f2fb9

    SHA256

    a5db64b8c5e12d473762fdff8b31444baae845d6d1e104c8b51d1d937f9a7f2c

    SHA512

    7e34fe7cf5d65e0bc81b0f89c482931f608604b0ca308dc997c51cf67a7120cf4acab8d6a38f1435accfce399fa7109164c1347a44e82f29b59be07b7e5f8d55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34d63c3cd1de59de53ef3f14efd6e00d

    SHA1

    baaba0e1835fa8ab1cbe0213ba42307c78694608

    SHA256

    52528be536a8f2aaa1c03d6db1315e57fca7417388193cf7f2b9fa2379ceac8c

    SHA512

    9a7343b6505182ca38399dfaca54a27c1cdf7296bcf8bee1c6e1483c2f5af6df61e385f93ee44140e3ebcd7c2d3ff15fc6b2ae0b3427566a89853e135a8615b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0d380898012092380da9c6630343711

    SHA1

    3e21fb6d8bcef435bde2d7276cd51376b97e8ae8

    SHA256

    ab5bc17d784189d955fc30be3795c25d1bd3e6c56f986cb2dfcde5aca60328bd

    SHA512

    fb41e7e3d430196833ccbb71cd504f095962ce6b51fbc9de8a32a629d617e2aa255b51d253bc558074f162e0367f4f3f27ba7e9f9d04ddc4dc9b0a7f47cae626

  • C:\Users\Admin\AppData\Local\Temp\Cab956F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9660.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a