Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    29-04-2024 00:54

General

  • Target

    0675848bdfe20039494706327d892b07_JaffaCakes118.html

  • Size

    461KB

  • MD5

    0675848bdfe20039494706327d892b07

  • SHA1

    20b0c258e3db736f148a93a6178fd8de476ec054

  • SHA256

    66e6fb9a02b41539ebe19215b91f45d4c245d57b9afa48ff216469ed445817e3

  • SHA512

    4aa7d945a84220faa739fbf5ce0eaa367a0b24c54b6de4e3607c0143edf171b2c3b44b351da111b786164ce8d0f5bdd4f077a61520a4954f200e74ea728218a3

  • SSDEEP

    6144:SVsMYod+X3oI+YEsMYod+X3oI+YWsMYod+X3oI+YLsMYod+X3oI+YQ:W5d+X3k5d+X3y5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0675848bdfe20039494706327d892b07_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2944
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2944 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2616

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9fb86cb65bebab7840d3eaa6a7eea24

    SHA1

    1e93293ef0e9c6cdf3274e4018d914bc0f28b54b

    SHA256

    c89679b58f33116a1723e3cba296dc544fdb2e6423ca126f16377a25268eed91

    SHA512

    ac4684f5675bbb34418f0838d5e5c5209e6e77256af2826f2a5110ce71dbc595c08c557ae8517ff33a2620fa88dbbe0f6775e601c40abce50838120b62ea8899

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04b64b57a03b8b257053885cce505ab9

    SHA1

    933678ad93223f929a5eb570cb0183a09a70a5d6

    SHA256

    255071802d539f982447f5eb6774ff42f1e5a7a55efa0c129e3899492618cba1

    SHA512

    092cb56e12b80121e137110d8e213d9aaa33fe69bcfb4f28b57afa4fb9b99a5882b5d652d4e1405276397c3edb7836d1f72d2effb6dcb7dc6c53653a204e1f09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ee35ea05ff5d4ecf4f173bff35b2df2

    SHA1

    d726baffe28ab5e94b1a4d2e3313423682522949

    SHA256

    e5d4487afc48a2bb0883c45c95a469253c4b3f9f68437f4ed75340b92a964fbb

    SHA512

    c746f32e7e9bed83a2ff3bcf4a337a2953ff070ad4c7a5475386580f35da724d3a03cc4a52a67beac77fd6fc08685adba42b612daf9c369da7e5fed9f51fbf91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bea78047ee7958891501531ec0d9e49

    SHA1

    78201a520af407816120b5034468f95d47df1a8d

    SHA256

    0cfc3cf498cb586a463d85e4f114a7b364a40911c0d872365fd70cbfb5a948ff

    SHA512

    4439cedc0eca3458aa940f01d5f7d392d53e9bd07fb497d24638cef181d75bab74cfeb536ec0c8f32bd815e3a239339d190037fb647b2d10cdf8d417e5602072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d47b8f1856d2e182a375a8e3d2e1c74f

    SHA1

    2082f8d43cbd0504a47b2be15aa164ab9099ab5c

    SHA256

    572be7a4ec65e7aaef1053308934e454fc93109dddc1e09ce168da984bd0bbc1

    SHA512

    981bcfc435ff3acec4aa68bb8c6e1923b2cc2dd2f07c4ea493f9f2eaeabb44bad87f0f5d259ceba1c4cc948bd57f863d1e1444303f7cef351326c8410299e5f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3a0935657152be425497fdd90c0dd07

    SHA1

    bb5cdab25677f2706a98c9d403d6ac35d34a8510

    SHA256

    0f2622497b2827b08c9219e9b2c82ba65f6f59d911182fc6353136fa7b9cc881

    SHA512

    97b23a6b6ffd2512fc6f0c588e82bbe87dae9ead5a8db3bf892571754cc381bc42e0b3cd0b3011c7cdf946100b724798a1915064897b843eba07a9cac496bd1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bf5cc502e36a71033b125bc7e2ef81a

    SHA1

    c6c43c6972bf93d47928b49a7d0d332c88e76509

    SHA256

    b00fca89359416c485cd0b3036a8727f06e0ee2b4633306c36bd2434f9593c32

    SHA512

    ba01479dd3151ecd5c823e0243a7de14c7c9438fe8d462ded36b8dff3b06c9b45d3aa855ec0c77d0207d2e75808683cac6a9a22fdfc33434e439bd85e5012524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de08669b7c1d16bae0a10f355eaa2eaa

    SHA1

    bddbb35854b91060d6a680778df5e4fc4492ffca

    SHA256

    adfd4d2149ea61e63b2719c7947637560280075f83128d1d9bfbadc065732f4d

    SHA512

    fb3c7c6102ab009b23529acf894558c1c6a18c24a82d6804145bcd9c0ec1fb9a6718d1c3f23c09881d9437e24a2e67fcf007141a8ae14b3085d470bc17220b2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ae32179c1d0afd9c46f24f907e83a03

    SHA1

    7d70d0c0441d9edd7c0cba75e775b8e7eb80bcd8

    SHA256

    d0eff135d3101160d70e604ac27dc438f47300efb7bb011b522e3a650e8b4b67

    SHA512

    3074c2ba9222c91bb440145ecf3096b0e26a56ca977dde87687196c7d447cbd52d01560272c43740870d229c1cec6aeb3dbb765b5584f5c20290ec1c629d1783

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e2df1dc2795232b563d21321c93936f

    SHA1

    dfb625fdf88a1657d054843d76f2c593ac29e078

    SHA256

    8e67c93d0157ecbe4fe7cc35b12cf408256d939dcc838048edb0ed121c5e8dbf

    SHA512

    301eed752b37117f2ff786881a19425c297decf69ad80174bf455cb9f81a3533604becd273c82b59720b17124e5bc20a1258e4322a3e89f8807240bbb0a66bfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52ff73dfb95bafa62c7af2efc8646216

    SHA1

    bd550f100784572cecc38b24a25cba463c59483b

    SHA256

    9692b1ad8c3d8e9992c7f6f60ddb19cdcc83ecfe3cce56e042cbca7df646e209

    SHA512

    145cf1501d3dc060112ce1bbcd3ab601cc49e8e2a393a7565036a735bc2506fbfac6e639c8d23c4a67fd62f30275a3d750eff9416f74a2a4a8e63c09a5c0288b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bbe4dc3f65173f66cf455e1ab9a54ec

    SHA1

    8594a1217f5330d8c3a5ebf45d280045b31dd746

    SHA256

    752465c0056204fe6246718bf266d2025e64632922ba5eac5746fa8d1e92564e

    SHA512

    225402275e825eb4840c1b78d833d82263a2156904ee6f3ca746bf17079c81558796fc1f6616e7212e7d36d065bd1ae50700fab73d38c0a5c4e649f856abe71a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d9eba9ae20157b96b7f3d42189303d9

    SHA1

    d2d0a0690ac5bb0981083e27eba23203b5540c68

    SHA256

    983b4ac0dbd74647f2854ca0f4c8104bd850652c915b69cd9f67cfbef75d16fa

    SHA512

    3e8a3a8a7e372a896797704c79479945101bdb4eb18ff57365852594b5755aed21bc5e7051700f7edf4604306691fb8297f0e71789b1348980bf8a5cb291f263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    829470a34df99161a36c0d6b17bc52cf

    SHA1

    53ca7529a072581f6b26bdf95b4b87273bed21fd

    SHA256

    fb9d810523ae72dc38c2e62d3e4b1a0b347601f1b621edec5cc576ad57185f2a

    SHA512

    b4eea21c617353d0e06e850e3611c3362671d5fb0b95700764cc01eb23c6c52466eb732aad98aab51f7f424c7732dbc5a4746194fd06d902f8b67da0806ff572

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31c45c87305946a235c363414dc76c31

    SHA1

    40aefc04de1e65b0ea23a7f2f63d03223be200d5

    SHA256

    f5ef2281ff075bed6cebc812364b07333d7dd0cfcdfab37eccee6bd0f931a8f9

    SHA512

    8f97a18f238e02f771109ccaf706682a3a08eedfae22069b799bdde237df211d91ab4682d31d5855d7d306c5eac57f78d3e8b7198d1e295e51e749ed553e0e2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45e0269b3d252b3f236db016f4df2204

    SHA1

    63d9ad6992e0d8ce7cc78e93af26b3e3c38ed2de

    SHA256

    fd7ca231b64117ed9c6d72d73a1447b79b31caafcb39311bce129ac8f7a57888

    SHA512

    5ae3c3a15c511df8ac319c3e3f57c71faff514b20c1db623599b2d90797170d7ede06a40aef8709159f6d5247e8596082f99806bc58c99bd7f8dd5c462739c8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dee4e0dc544b7a8b871e3cfc9eb8de78

    SHA1

    cf9d4b816bfdd406135a067e66210d10e5e6a5c0

    SHA256

    34ec9edcf46f8b0317d28bcd1564001eebb0a63b7023b497910767599ea6282f

    SHA512

    fb527ff351365b6140c1c6729cb1941dde276a4462bc8eb004424d18daa0dc0a58dfbfa14f2c3df9c0bc9ae88b25a7df862a3b6609a4a0abf11ba130a8458cd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8c400fb727458ad6e9dcab3c66a2b7b

    SHA1

    9eda72c3678b70b995d68106d2a30c46dbac47ff

    SHA256

    279e3f43005a3a2a2ecc9bd1de30e39f330bb00625dd3fe7062ab947fc3eb213

    SHA512

    8dc3f9220f1fd525f46b65868481f1c824155024e91828e335081783990f5c608f3c3e8e1b47721ccee59c6b95d1c9dda98e682d11536bbbd19be590c717d0ea

  • C:\Users\Admin\AppData\Local\Temp\Cab40B9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar419C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a