Analysis

  • max time kernel
    136s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27-04-2024 08:18

General

  • Target

    02d03a4f335d3ad6fe802a236d39db8a_JaffaCakes118.html

  • Size

    348KB

  • MD5

    02d03a4f335d3ad6fe802a236d39db8a

  • SHA1

    54412278ae1e5dfbdac9b0492f89498d45826230

  • SHA256

    14b3966e7745224b4e1af720283f3a1bdbae700f7f3383c41c91ccc6fa59d65e

  • SHA512

    7cbf02ad807cb6407c6a775aa2be3bb821654424d56886d506cb8e5e5a3c8e12c2b674f24f7ea0154702682968f4a41266410802da55458fee3e5950809b01f5

  • SSDEEP

    6144:ysMYod+X3oI+Yn86/U9jFijsMYod+X3oI+Yn86/U9jFiI:w5d+X3R8mU9jFm5d+X3R8mU9jFd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\02d03a4f335d3ad6fe802a236d39db8a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a427abd55e8efb56c92e782466e845dc

    SHA1

    6717cbfbee1c9e7db383e67de6a963480a45451b

    SHA256

    c923fb1f7f7a31c14c95580151713c0e663ee8b8bdac777c81a0b4b04832006b

    SHA512

    8660667de743efa61b683189044f167806abe93d4b9dc3ecdd7865d6ad4ec84eafde3fbcddf79ff7248b9f302a5f35308ae858f2fcb36cf0a3fe3435d07b320d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55a9a48d81e4c9e4a6452aeb9805cbf3

    SHA1

    df14585b94e26cc813553a69e4dc75d3355bd7b4

    SHA256

    769d79bf22131874217d0301eba187e021c864207bebed14acea86ae4ea16090

    SHA512

    7ed42b86185f8a54ec06ba2dce9b708907a50467b111b4c5b4862271da3b8e3937ec50ed2ac7debeb57d94ca5ccadbaf90e53c8fcee2a28bd35067b40001f3c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b9bc16358e2f47f79362a601a598eab

    SHA1

    a9a7738c864b37a923a68aa45a0b9f909ccd3fca

    SHA256

    89c50a1f3d021d01e42bb1b45ef4b021961a815fe797b4d1c8025733c706cc5d

    SHA512

    a20a3ada2677dbb0244114aa914fcc60c5bd7dec573bb8a76f6982814b231560cfbcab03b709f39bec054177c174f7757d51eacf802baa746471a2307115b7f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76e6f0f3ee356ba4420d3b8655a41b7d

    SHA1

    2ce058af105f5ac4649682addc744e37088d7c11

    SHA256

    fc30bd006a0da23d6b0e15a6be70f14badab972be10bab47687fd436e7b1133e

    SHA512

    a2ea03c05469f0cca4a129cd85328ecdddca987c10afd39120ec0ec3497b64a4b912869dcebfe2c6784afed6c412776b1dfa4720756b74e9e1c9839b53903801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    330d32c698f54be7c1805987f6dc8177

    SHA1

    dd425b39f85ca098b6ef265f440a4ae0e4b1eacb

    SHA256

    2ae1ee0d33a6669f14eb783d397a422693f81ab241c788a3f426504f54610a60

    SHA512

    4ba0475182efc625bf10a94d46af0efb90489ac8d626efaaef3722a7b29ae85111f6e14ed27569733a595b61cfbba65f2117bf550a113c9486f8a557f3373464

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ece44d7ed61dafaf6ff2125844ecd57

    SHA1

    3e17bf679384f9b9b2c59551c6734c5552397129

    SHA256

    b40cfa3deeeaa6f45888016b1fd206af7e562198a7c96697fdcca68fed1e1e98

    SHA512

    2819fffaeaac0ba4683041e1be765ca5a1e3481be7cd0c28079c496fc0665308c78929615efdbb6e39716128e16b70af569796ddd1c1dcc96f73031f9eb9c811

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39412899bc0165410673e3244cb888f7

    SHA1

    deb57bc79886b1992565559277ff282167b5d62a

    SHA256

    ba047d89c556ac786159e9276aa21b5ccdee4b452953b37c89d1782360107017

    SHA512

    b07f7e6c7d0b5ed57f4f97b085a29739a688a63df16689ac0a94a36ba925adecbafd7e8f4a956a1bd2e6cf39a421d9e20ca17e4e34423b895dfedae5bb39c6ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    251515fde9ed56f3daed68cab5b71827

    SHA1

    a073c70a7c8238fb158cb433f0481d771f3ec45f

    SHA256

    f06ec51681f9822260d7a7a7ebfecd63168b07ea035056dbc7e037ccec6e246e

    SHA512

    9e01597d27d429cd3e50f058c919fd617771460a93d3f842c454b2346d3cf77fe3dfe81a4801b9aa66eb69c264918b26f406a0523ca120ebab038f1c973ad02e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85534dd17b76e22f97b34bc1fe56c080

    SHA1

    19605919ff3db38fe25c9f086eb2144c491055b1

    SHA256

    a424f71da4ca753a5fb09a73477d431e3b144839380ccf2850631f4456c0751a

    SHA512

    3a866ae41bb75d2eb22e18782c9bd7d5390334c5dbbfc8ca191c0b16011019e70c63fb788be34237657b9077d37502a4da7f53423c986c980e3363241a08e682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1be0cf9421b1d39e5699aabcca7abef9

    SHA1

    b6ebf95526d49da3b50cbb2fc292fa30196cd7ff

    SHA256

    d826ed83e257f51b1ff5a754fb091ae19fb5029ec5960946f0329d01cabf14dc

    SHA512

    61e4d5603c1dfe525aeffe374694b5163a1ed99e0bdc5f2dc76d9e607e56d8c6aae0f916d43358a5de8eab569413ba4156d28f9c166a1d0e6c96dbf4b389a1a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1568d87a2f14d7d0f27fa87e0550f57

    SHA1

    a2ea644d44dfe2a1c580b0445f73214149dd1997

    SHA256

    353c523415ce250c854c9e317b4ed7fdb2fd53d9c23eeaf66c56433ec0593a58

    SHA512

    6162756bccd21af59798b8255f3a127726557a89faa7a8db80f0e53ffd3aec714a863db65d2e901a79675fb7112c1c745c886b5036adc9c59205cf14b3a0c8a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    669cd464e748d276c6dff49cb551baa1

    SHA1

    22c46885f99fbb19b64ce9d1864c03ca4ad45095

    SHA256

    6a2a7c77c6dc18a52711157ad6b1fecf1cd10c23c85acb1a226979997b47ec66

    SHA512

    9d4d70c049dd58aef68a8704b408cbea777a1129a08e58aed214f907f5f5a8916ded2b250e566aac99c137490524a3cdbfdde78a66755b356fe8161ec518c5d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    038bddd844efcddf2cf2c2c5e5bee7d2

    SHA1

    375fe29d783cddb8aeb808f535200a775fbf6cbb

    SHA256

    609be937f8d100708cda817a754374af3f5bb2155290e5eb3c4f64955a808901

    SHA512

    a95d5adde394def35d6c7f3049a37edc84b63bbb8dcee44241fa82264a84bfbffa36ebfe3bb41b264476032f81c4a1a073582ec0c1780fae0b635c624c0121a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc2f43073ff7feda317a6b3f065d6adb

    SHA1

    5cb3d8a48266a35aa7a95ab54abc3cf277ed3a3a

    SHA256

    05308f51866033c5da3188a850972285750dde1c839b5a223b103e6d37ba600c

    SHA512

    2d2cee03abd17dd8481ebc345a0dc6df4eb000e34cea1fbc7e43f6fc2c3047647d88a78af79b016277c48a8fdfa1093b8dd0237b3a7211d01a6633d89f71505d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e81455c30ce9eda5113c66a18a6ff00

    SHA1

    c45794763b14596860c9eeeb4dc9ac04814f0c68

    SHA256

    9c679b8feb461675976cecc0078126d003c580abe02b70bd2be01885c1ecb657

    SHA512

    f9f6d5917804b0c5abc04917578fbf67cdc540f0c1e771d4316fea7edf97163829c86244ab5b2ac01f03eab34b8896849f128bc5561be9cd773a09d2e6249411

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a553e49f5722b0a58eb605bf00951697

    SHA1

    021340f5f80bb4763ea944674791c9f50478637f

    SHA256

    df1a801e643fe041ba53f71432dcd5f9f50e9e4570ce2e79cbf40b174f8b24cc

    SHA512

    a88d51d0feffa1f5efd7168313da4152196b0d59d8746bda3a369e144ecd90e501d9f723b6e83382a27ccdcfa60b79de6c72688355c693fdadedb3e9773fb763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    588dd348339cb0e3ab137f0bff7b8002

    SHA1

    cd2e2586c65cd167d4fd706029ff85163d952c67

    SHA256

    bd09a5f21b96abc59f7797a29df0515949ed8c3717c7ffcfa1435459f5afc5a9

    SHA512

    797625e9d20dca3db26a02ea48ac8a09a7bdd4cb55de7580aaf1f8c658dc9dc14eedea0fd2f3927ef84d0f0fce4de52d3b33f4ad49415816329198651bbb78c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bb8702493464e5260a090c7a1e99b82

    SHA1

    b926ade02e68f72e4b548baff102a2a93aa685c8

    SHA256

    053a4c1eb5821a70407d5227ae902180502eae1d8bce6ac437858aa29bb65d78

    SHA512

    d8c8d0ff22a36dbd467b6b3104e62c85bb34e1404260d18648685665a4e12dcc8df112256875c7425e66c844d70a15b0ae8f8b2dac5b591a01eedb4955e2f086

  • C:\Users\Admin\AppData\Local\Temp\Cab1631.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1722.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a