Analysis

  • max time kernel
    138s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-04-2024 07:02

General

  • Target

    04a1e30b0b771bf597f845c0d20a2097_JaffaCakes118.html

  • Size

    11KB

  • MD5

    04a1e30b0b771bf597f845c0d20a2097

  • SHA1

    1f3a39f2c9318a04931fa0e8f23343ba2236a430

  • SHA256

    f517bf1313ebff75e2ba7678040abdf273cfee366469694626683b823007066b

  • SHA512

    b49e978626206210f79c9d387dc713e7980421bcab0117cabd4ea1aa6f6be0b49927744c682f1b346d9409194a4518f0fbd2e8effa68eb9faf4d0914b48b4193

  • SSDEEP

    192:SIkrmc4Ezj1NudwqVj4QZfwS1ifPjq9nI4nUfMbZA3y02+1TZx4anL:SIkrmc4qj1oUQZfwS1ZnI4nUEDm9L

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\04a1e30b0b771bf597f845c0d20a2097_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0509a9455bb24c2d5406f9c910e331e3

    SHA1

    e7b480f8597a27c7889d4fec9cab8fe4131656c6

    SHA256

    9a994d9a8b8aa1be0b301c30273cac6a4301d5e11ae28e73b2d1a2a001a1fcc6

    SHA512

    2910d3549950a60006f491400a698156b468f5bb849abd4066a012df7646499ea8f1902df75c37416ffeb1f3622428788f98aec4ac3a3560f9ad7c02feb29abf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fa09e7d6aca5fc5c440b5833db4cf2c

    SHA1

    24c6e6a368c3b75e73a7b589645e97e3771c299a

    SHA256

    6eead992fa6228449b5318afd3cdf4d97de54f24fb2f4501c6ac85fe294a1f04

    SHA512

    c5fc85199c672e96ca2db22f1d38b8b433642c9794bff883195ca03d1bff30f47bd8b06431ba888d8ca627e9de45ead3090b991ce8afcd873b859e963636953d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    356e0ca9e69b58bc5280138087917a1d

    SHA1

    6999854c5c74cdc160eeea394713ede2697b9368

    SHA256

    763859ca2734d9f63a4c73d80296e5de2cac27868763c293629f5811fe0a683e

    SHA512

    80a06965bd85aa693597a20ba7333359478adb5e770bde8bb88596f07df70070d1146904941e3f9fe75fbd30877cb8ec4532b13084c6f92fa69ad43b9b06b6e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efb3ae9fd8fb3ecbeb46625bc4386a6a

    SHA1

    52b70a47b47dda0b8e134c5e046bcfe9df387a29

    SHA256

    f4378bdf02d1a1807e638c224b09e81ff8eaa28db7d9ff247df621d7945673fb

    SHA512

    f32c0bd2ac79fc2def8ed1b3918a27d5d65373761495f98a371fd5ea3c81ba3e9e27203def64f18f38fa6821e0093f84bfd5f8498fdd25d7d4f21642ecc209df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b0b1037f0ee5f9c4489a7bc16e5ff63

    SHA1

    a2b63c8f642fcf64817d4a03db37b8bb629a7d2a

    SHA256

    89b597441165d4d78687f16a1aa4e6aef09d5543eba690bd26e8c7a325f232df

    SHA512

    a85966509abdf03be525708701c3672d1d528aedd70c0baa7fe07d0954df5e938a065b5ca1bc88f29e5f37a3a95845edd119a381ab01be9292f4445bad638da6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4bfe062459ee7a160fb39aa480f0e8f

    SHA1

    6caaebf889a04db258059a807eec23c8f6ef03d3

    SHA256

    e8d8f9275be4f5dcc60d55fde812bc54c8ff71f680b6b84bd408baadf37f0213

    SHA512

    d5d8c52b1d1f6fb8a8ea966a9367da0c488e23918b34f9827d4b87f4ca691aa8b711a43c24a6810616d9edd3fc9842d0fb0e09b88739ea7c4764bb824942a155

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0e03a594bbb303ca0db97f00c02ee1f

    SHA1

    aa746288ccea747d17b5e3dc3dc97d1c8ea2abdb

    SHA256

    4e97dade8ab521a67c28410d15a8178344ed240581fe3b71416eb1f67d28640c

    SHA512

    0d6fc412da49bd5b5de79d033c964eb630731517ad56c5e7e30449568f6c978755bbd387e104b41fe80f36eab9c79d96a0e441fcc63f7ee45b52846bc6360009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c919bb8497702b4380749a42ebb394c

    SHA1

    b1e3c92a766afe820e51025345d03b6aa05483a2

    SHA256

    2f788091674b2e41ab0de074990755c859f94fc66fc201fdd5a5f5279f7553d5

    SHA512

    d9936274813dc19ccd6bd66598412b3acf8664c80a976e736fe088d6a45261904c7b577eb96b802bf113d3be65124c4e637019804022472aec68b1d50f69b24d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ec23659351f9e2dc2e6e6341c034948

    SHA1

    5731b64e93aa3da99ac2fd72a2280c23ea992f18

    SHA256

    bff280de54558d09a812af3b251dff9647ce001c132a6c983d829963ce585d13

    SHA512

    d6c60677a5cd83c551422249d1136acf854572eb0098afe54aa98d317ef73b7d1618fd228db1a229b433ad76887edd1a208a9512757641602f68718d991ff9c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba278afb3a19ae5974f7a012d96d9377

    SHA1

    dbb9f869ffdfad35ea10ee94973db8899a10fd1b

    SHA256

    ea064a3ad9ed3bb365f5e616552c018802ef8799048a183c3d8eb6a3f5dec4e2

    SHA512

    cbcdc811d7059b5b3b7e835e78f1e80ede225c8b537047117549c5b07c791914576ca9311ac4d8eec07d44e53167c7136979c5c64956a414fe481fa849144da0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cc5b7527e3fe42afe86c0eba9c6cad3

    SHA1

    008ef3b1f82035e495f466983a000e19e30c682a

    SHA256

    546bf24105a833fcc84e8c9f02f59f45fd43e1c7238f235cea56a65f5cd2c813

    SHA512

    f9efdfc97cb700d6fc2c2d4567f932bf7152c3fadb83fafc8cd4515ddb23288ce0a310dc9a24780c457a090a2d1d76b42a2316840ed3deebc31e54ea0890ca87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f5a9b246529871db2265008971f6815

    SHA1

    2e7cc42236873f13faf65a602114416ce46ec40e

    SHA256

    f328ec64e23cd33e40cef59262e1da1835c3a708fd28522a4c4394bf9f9f1fec

    SHA512

    a2da50332fa111156fef38dd31eca79985765b79f68752cb23bdc96ff73adad7cf296d776174aa5bd12a2cd365eb9b0d3b4f56a9ce282d444ccdb126cfce9441

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15ac4e2899344f31b3b57d35ff497920

    SHA1

    e9e7a221505a037806102081440c8e6fa63cc144

    SHA256

    660c414e7a5387bcb2b71fcb5aca0640292865cf45a840e0b7c7cd23214088e5

    SHA512

    ffe919fdaa49720e1bb1020e89b15c1ecaaa24944a0c23a3fce543475340b568c73648246267d4a9ca62ca3d50d07023bf17686050e377762861a09c95faed8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fa03506d0636217293c99f976d1d54f

    SHA1

    9a6875fa122af695d53a38f455890cc2abe06551

    SHA256

    bf09502281ca6b3c613f68fe6bdb62611497cd17e491ab050f9064ba4406250c

    SHA512

    c4d8ffab3011038bd4b01d8a608a50511910dc1a413511df847ebe70b6fd55de40ab00c6bfb46304ca6b45cf0933b4e7f93e7ee11300c358414c1bd61d2950d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7800261e234e43762ee4fa4afb0185b

    SHA1

    760562c877a29d260aefd559ed782086c580d73f

    SHA256

    7c660f85643ec492afb54b1d17a3a7d28cf76ac405053f26928c5aa469da35f8

    SHA512

    8f86205f0fed96b6ee075bd9539b2c8b0994b804c604a7cdde436fe4986095c430c65e01faeca374d1c8d7ccbe81781651a28dc07822003ba0c566d3a95339fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5938bf1c730875b3fef39c3b476fa15a

    SHA1

    aaf54ede3d310d4b2ec8659fbecb080894e1d3a6

    SHA256

    e847b95d1abe6722c6764c230d90bbde543809d34578e469a2d16bd103eba958

    SHA512

    68395a6c62badd587ac3ec51caa8f151df081d647dc1ed18e6616bab89e7525c4f1dcd2ab50e5c22873d59a6b8a5a9f1f6f3e98c87dfdf7cf32d5e801ca2ff68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ffb1988c023442c49ccd50bd7bf11f3

    SHA1

    1c8e10a4adf975c28dedafb9675b3f18275c8415

    SHA256

    903d3c6aac353142db87b0aad501be371e0755ee4ecc146edf2006b912fe5c9e

    SHA512

    2437ea727b94ce263354a9e0167a47a19971317d0b1ce997b3c36d5e2571d8ab51d44597185ed6b16f8a88658f6c1bdbfadc2d22a9b4fa5b3f966ac5852f0732

  • C:\Users\Admin\AppData\Local\Temp\Cab80F5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8243.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a