Analysis

  • max time kernel
    137s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-04-2024 14:24

General

  • Target

    07df02c0712156d78d0024a1536a4efb_JaffaCakes118.html

  • Size

    67KB

  • MD5

    07df02c0712156d78d0024a1536a4efb

  • SHA1

    577003dceb67bd82aa206ad6b9c9411dfe6f95c1

  • SHA256

    571fc75c5c430d0160679d84b301ceb574407f31bef951999291838e53f6554b

  • SHA512

    a5a309f7b120d147eed537f71820a064b2bd9f179f343cee05950a3db6e95f35888eb5d9e8576943eb14f2a6d75d8079699d51f9ea8689c03d0012187cf463bd

  • SSDEEP

    768:Ji/gcMiR3sI2PDDnX0g6+56EJh9CoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVh:JdZJLLTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\07df02c0712156d78d0024a1536a4efb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2872
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2872 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0065691fca92126b32d5e9c32e4b5da6

    SHA1

    90cac756b640909d8a391966fa8927483e71f72d

    SHA256

    c57e8de27653405d833ba0c9d0a3833d26eeb1b7ea777f0af6a3c61c06075daa

    SHA512

    955d610dc853e33901659b4b2a4041504b02e2793c043295b94c53cbe8c085e767c25839154b62c4c9fd08f1f3f259d6a8296aca966626cd45ef9e18d90262de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a19fe2a5f67ad857f0094fb2a060ddd

    SHA1

    b8ae4a3e15fb4d116a87e87ed02e0755187c5bdf

    SHA256

    3a070c02964876370967541bf796c07d40248016986637afb1d56b24102e53c7

    SHA512

    c5b134555e450170d90a456ec122f677e1de36bc128bebc6307328cf141cb6d14fb4d80db46a06e7e64ae2ae1db416b64d04122600ca9647d1570bad98dc3580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    711eef223c5de0886501851bbce1e349

    SHA1

    986a03471620bc9e0291834af66933d84deff39c

    SHA256

    857410077f8836f34ee7d5dafe5705a05da17178cf45f63102d01b29a03b12bc

    SHA512

    04237dd777864f1370c87abaea647bf73beca27841faa9f8d51b8d7c1ce42748f11a0972930ddabbc9a1cbfe4885e18888abb9751a546599f362c1cc1055b938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07eca150f132e3fd5ff16c0d13f52d4d

    SHA1

    243cf547f53e2e1b29c2f3c974eab749a0782a7b

    SHA256

    90e604fa5d5946ff67ebc14350e660a10548d1ca106957d109a7778a9c2d79f6

    SHA512

    34f0d652d90ef9e2c013007e7533dd109382495fa3aa6a262c49ca2c05f19cd5530cdde653db2d546d194e6f3a39312ebd7e25944512c625e79e85c179a036c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f346a4dd0f0074a301e909e9c7aebf68

    SHA1

    db9bcb27ad27463ad68e3699be1024983328a558

    SHA256

    03ed8b2a0cd66aed0203edc514f85a960768c60dc51099ab49ffa43ca0332b28

    SHA512

    984ef7b1bc8d1c75ac6de1665efef664fdd2814837450c938c77cc9700f7ffb325e6109f881184d2f5861fa093b0c5d3332d0d12d71b38e8a2e7ef3d2c0b93f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66dbd420607a7c4b6a44bdb8b1cc27d9

    SHA1

    afcf3ba55b2be539b6e1bb653431270428ebeffe

    SHA256

    2df343b04ad35b1dae122835bdfc86a76a5975baa582376466be218763b5e20e

    SHA512

    29310be3183af5e7d2acf8b07c7290f40f0115595b392e52c6655af0e60b82170bbd6ddd07241bbef765d0c496fc7e5d0b69aa0f236eb9178a41127f6679cb1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2305ea07b4203d9702ba4f22ec74398

    SHA1

    68535d1de647b126a51031e0e37cbd31b91f7c86

    SHA256

    4d5c07abaab921badf00ee29fc9fb5b5e09107dcd721c802a378b6b7bdd7de66

    SHA512

    f288f02f67e7d27ddc433cc887909d27f17242a3ac4d67ffa8e846bd729c424ac90314af128569e0163c2457893e1390ad62e83959c33dae6d8b525fb50cb650

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4997df3782bc955d8b7518aecd038e1d

    SHA1

    8c501997efe7343ff50b6e86358f79af8871e0b2

    SHA256

    ba83226a4d4d3efdb2059b6f1399bc4aaffe1943ba8dd1d401acc5f3159ec796

    SHA512

    4b8c870fdbbb8f07bae64fd9eae48071b4d871d34b7a245cac3fccba9939dc7c3b51afe4931a6849762f8a3bf882adef13fec7e6f91103a900d5c5a161cf3cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f2f8c559a946d60d359707e66ecf8ce

    SHA1

    0dfb3e2d266eeaa4bbb5bd8906668c3f276d0a92

    SHA256

    5dfc17a63c5d33709868764f67a5adbcfedba7da8ed92306c19419abb2b97eba

    SHA512

    67da781c595f08c794917cd581ab384e050a3682d8e21e3cf8f1bed6ecac1a6970edd9bb7c032fd96a72ca36b5d27cb71fafa815ec4695f577caccfac36049c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56fd558db309b81ebaee3df69c87324b

    SHA1

    2c0e4e394a0bbb953151321ba07b3585e2bd988d

    SHA256

    ca15230d01d2058958ed603723263b04d991cceb98c15d9b96bdf2ec4cc597ea

    SHA512

    56d93a2ecc426bb14d1a08f045ee875d2e4041f1874a7364d64549bba7b107027fe95b64e575f69f8ac78726703b6501dabd245cb869562d7f7b4fce54abf884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bb15ad13c0cbb5c9d2a02459149f4c8

    SHA1

    a2c37c21eff2023820c50464ac6bb13f18eafb06

    SHA256

    806d39435ebe7a711c88c3ce6ef7c08bc4e397df64b75bad0ec1c66fa54565b8

    SHA512

    2b176d60d25fabf56b6289dd70a99aaee8829ac628616306ab22cdd6bdf28bc1bcc5db63af88b46984f9363a4078048a8c4953dcf8816f42c63a385a6125732f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    137e65289baa5bce3e091fe067ea8488

    SHA1

    c2c1446443bb9924df1606c60e643e96a60f3307

    SHA256

    547eb3f503998601ad6cca023e315a18954dbd759941b2a0ae5dcf18e9d8b248

    SHA512

    60606d751cf6f9938fc261d8ff06983ab1bc501be9aa5308c8138c1296fca2eed25d5b669f25f8953ae4aaaaa2f0c0d60d23ac2d41321d3c51cb8a49a18f9271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6fab2a77e4ee906ea8141a05a45353e

    SHA1

    939148124ab9d92a5f7d5a4dc24dc42d2e921853

    SHA256

    98db263d9e546221dee691215ccc57513094b36742763cca1556a68c1f9fc4c3

    SHA512

    b7d89c937134a40c34d9e7b3b4a56880a3b15ea8bd37e7bab81b373726b73bc85bb867e0323763b056d248e7d611bf15e7a02ff0e4bc9df5146b4d9e45a05219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ecfcd7d9612fbe6302e481e79c3cda7

    SHA1

    1b2a22f73f07f31f146152c94a1d84a6e345dfc5

    SHA256

    9d6049e93760393a7a81e433b20cad73f15c5e2630fb73e73c59eba093920535

    SHA512

    367960269475483fae8bf2bc31f17a3790f2acca5edace840d307b88ab0a638fb61d3e78b6bceb83575db73576b3412c3ec5513da2753757a63d5588cb5fb46f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aee3c25b2d8a224410901270876d1a60

    SHA1

    e14a319820873da07dea26dc2fc068a8038a636c

    SHA256

    c4e8682c17d392bb8f4d722716d32c786731fa99663afa44b147d44d597a6780

    SHA512

    4530cd96deee77357e90059baf037e925157874dbae55395b37b7b16bc7a6426380dc300061b0019fe67a2fced3be30ee6a02e2e9c27a5a7d882a790ea1f155a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    386caab077dfa808dfad7fc210047538

    SHA1

    fd195dc5001bd7938843b71f3c930f5097f23828

    SHA256

    0a1bbc2b71625b9a1a78fa28772599451aca142ee983c3d1ffe28c8f5396b251

    SHA512

    ffc09623deed6e7deb6f106d9b90df43638944a5001c548891c83bbc1fe575c8336b56456888f95f5b5ecb86223bc345c087c1d29c51371ffa5e0a9455e82462

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6800829e87568f5de0608dbc3f9bb33b

    SHA1

    3a21ed3a25f4327616785b188f4f1d309971528c

    SHA256

    2994c5a74809d50a2fd805b1339022ed2e1db34ccaf88366ea4b49337fea1bd9

    SHA512

    3736fd19c0bd779406ff99cfa10a0d601b6d36f37b66062601d5fa0c0ce67d0c76f82ada50db228c19a2cd396b1a420fd03ef501c5e624655d25a114559cdb82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55e7cd7b298cc955aa48c8ccdc5f185a

    SHA1

    6169d10e34becdf2d8d302710d484a65e45d6093

    SHA256

    5271b90ffad0afa2a10e085c79403397fc81c226bcf5186ec79c60eabbecfc2e

    SHA512

    b3b20eeae6f2e549ac1389c18225b1734d88469bfdc663ab7809a4d4c865ca12916e65571dd5ec753cef8c26955a3c907ffcb0ee7897c41464a778c83658306a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6efdf5c01ef3f699aaaf17f1c13a5470

    SHA1

    64bc93c44d3069d2f4bd2a4e9f32f8361f919241

    SHA256

    ab4060add1bca038defa2741b3eb7558953f92b430cef139f16f266aaf4ea951

    SHA512

    a90944715fbd409b8d78ff75fca393f82ecd5927114828d907976406bae039d87f74b616751c4af25b29c38346d212f8858f48e78b991b1d3b7ac336e58468c0

  • C:\Users\Admin\AppData\Local\Temp\Cab36BD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar378E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a