Analysis

  • max time kernel
    138s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 22:02

General

  • Target

    0a8378f316c65f27d3f0d876cfdf8cdd_JaffaCakes118.html

  • Size

    159KB

  • MD5

    0a8378f316c65f27d3f0d876cfdf8cdd

  • SHA1

    48964fd682898eb7e5f1d2dfc57e0d6850d2a632

  • SHA256

    3c58e459bad7baffb46a5d9c28a934e61b31f9e4379c8223c8ce00bb2deb4468

  • SHA512

    060024cb8a4e5e17966381a77300c1659a579ca9ce6733370304e5aad75889359cdc5be7d74c7597ddb8e66ae6216538f1a0c29b435e3c277d38a81d6873e3e0

  • SSDEEP

    3072:SWoDDa6iYa3JyfkMY+BES09JXAnyrZalI+YQ:SWwla3ssMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a8378f316c65f27d3f0d876cfdf8cdd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2808
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2808 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e82838e9748d7164e7084b66393a467

    SHA1

    cd775f93f56caed02df8f23e3d026296df8e327b

    SHA256

    8fefb3273ac02584c7acf7c213ccbe3f05b165437fe625b618f8d70079634896

    SHA512

    47d3f3f3f3518b0f9f32f38b7aacb29f9f663a7c9dd752c6c60b6e71ffa36ea5b60826f52fa4f3bc0d8fc67ae1eb07a4daa711d0d50b23f017cda205bded2b89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0f6031df966edb122fc209bf5b0bcff

    SHA1

    8b383a43078d6bd70002f7e6eabb1262499b0e90

    SHA256

    d0871d47d6fa3b7e841c5298d81f3e8c77203e48574765b47f9169e38154ce01

    SHA512

    855ae30bf36401acff69f420693f9ea35fc425bab717e6ef3115c94ca4799c285fe8043ab293331529bd0a0044be38b78ac89249019f20befa5d02d032cea417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44e5667af794951af206740da7fff37b

    SHA1

    426c6f6c5c7f8edc02c8fe87f9c8b06fa79761ff

    SHA256

    233f489a0e5ac2f30963e88c298ec586cf5a2377e44b6693e0c7a8d3ef51c7ab

    SHA512

    8895a09fb6888cd4977cb17f5487fe5393a2fb5bbb66212a124ae1e67dd1e90882106306f1ad7cb82328b56ff20e0fe9ab5319d6adf909723a3a27d799323da6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    916548379c9de8d5d907b66c93fc3171

    SHA1

    a80c0f3ee8593be7d80079ff840e886970f31556

    SHA256

    5552741cee1cf5d10c84c75199cece3d059188571ef212993f8ca2b898ee0b62

    SHA512

    d7ccf7069c2656d55b2c488c305708ff44da75e8f7c7361ff136adc7c9be268244aa04fa1162a5db60fe3a906cd5faef980f34bb40935a2d0118f2da9b8d2597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    703c808268304d34dabcd47570743fd9

    SHA1

    a8990e63a346c90db1b9b4eaff5b2d120492036b

    SHA256

    f92ec2c30ce84bf154b50ca65f3bfea57a0a1f0f875330949fcb23fa41a4c73e

    SHA512

    86c3dc54293e8fd61dcfa2de3328996177ba7d6633fb928d82f9a6180fcb220c8a5ce3897fe9985a327af2fb3256fa122ba9de9b17ae0bb3cff7fd67b0cde342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2982b69e8f2819f2bf18b765c2d2a73

    SHA1

    84b81be68afcd93deef2e1929a1adba86b87af6d

    SHA256

    a1d1b7894fd11f6e0009c8fe6ea9991d928717989c0303b26f9a858b87d82b19

    SHA512

    08f4453120b5a41b265ac9d0aa3ebff2ea241d7a482ec72785c75fee3b3c5d07d4c944e5c8b0b255e8be73453a63e06b7ce5cb561ced9341f39332f9827e2d36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    342640b163b4c3837bcb012ae063133c

    SHA1

    a2d4e1dcf9b4b81faca629493bf0d96a075038cc

    SHA256

    db39f9014ee000615e1f0bb101133dfe8d2a1d651147e9b710a565da6593829e

    SHA512

    d67335b61b777d981d411a8d2b2cbfbd6624015318a7867ad226e1412f9860b32268199a0db5b2875bfcfefe9d896f3d112933e187989c3b7c4a2bb6bdf0005d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6121cb5b4f1019cffbf68fe44b053b2c

    SHA1

    7e9c5ede4d070241e9e94471888a6a52bce45ef5

    SHA256

    f21949838ac9b43a2b82bd41230fee02ab7284827db9054ecd39a257e1c09466

    SHA512

    cdaa9d36cfbaffad457e6c7235527691fb3fba835e78c40391136ba57f057c0467f95ffe265565704340835623774efd229cc3a09e56441d44750158be19a749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f591a5bf1135e6ca03cb290922aca936

    SHA1

    dcee5f644f15d6f5f9ccf185ef1534751a95f34e

    SHA256

    4c31cdcb4ec65697adaacdfc11d252ab9159e86bab3e6379ecd3d9db291a79ff

    SHA512

    92b0d9569c09426d3698c88323c6c97a6edfb9b7382558687d6d43221035f56be1b68cd4da4624b84c76fff246f18d326a46c8ae790cf2eefeb8f72dc25abdc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58fd94bbbc6d169bd6330a175af253f0

    SHA1

    fb7397904234d621b7562814db97dd5b2ad79d0e

    SHA256

    60a24abf80b6d136fe290622537bb450c543041b1e42f7a727472b2cab9ca6cd

    SHA512

    f10aec9cc7e261a59094c507a141de1801577dc9983ba8d6f23348894731b30519241f3f03afa43f9c5a50a7139269f8900b43b46b5f4e496cbc6d9a35634d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7687d0bd1725fe360a5ceb8691436a5f

    SHA1

    dc1d24d19ee8a2a369f39ebcf027c41cdb06940a

    SHA256

    d2ecbcd2f489d258fbc2bce9bf1e3187bee7e4687856c7ea04e7c4643e7888c3

    SHA512

    2551e0b64301c2e7b063232fa4098e5658b3f7f5a1b3e648a1ba25b0c91b6ab52da4fd8184fc2fb8ac08decc60d16af02fad462f9767848e9f26b3c8e70f5c4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bb1a4ccdb84e387354f9bda8cba4e78

    SHA1

    8b22a3d0f93e32613b6a2becb293c4bec4e27cf8

    SHA256

    1ae11f78bb1d20bae0b425540a9fa44426fb8a3cbd016feb2d992a97eb5bd199

    SHA512

    e9c33635a27e0b54a06579dac58a44c3627dcdbe3b77721bf8a7ddfbf3bef955d4ee4afe3a9dee3bcc3042ad9ae117e859c6309f7f3b5a36afed1e572e56bda4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ffcbd625f2dcc63784104305f1ac5fb

    SHA1

    870d909657a1d1ba240ad4451dc6c4ce25244974

    SHA256

    44ac884660175b00fc1a5940f31e0a93ebb12dea1bc9c84564bdedf2d21241a3

    SHA512

    f7304afe196048907b5ba0f2b465a82236a9c4f7cea4e53e167e8950282a3aff39c9f97c4ebdb7e47e0b6ecfad8e6042e5d6d84ee643e20847e87f82f5d227a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac911224b427b400963676e1319a1049

    SHA1

    a14a95b66b4128eefd55e20c3a8b04272d863fd5

    SHA256

    6804a8a0ae26f9d02db4b9ee98bb2281cff10102494427b9f114db8ab9cb294e

    SHA512

    547e50e001aa4759b6ed44972206410fd435efcd115d5a77a8c54f37653878567909e61e7fdb1d1eba5025aed050268675b239c4bcddacb1c61fb3640e73f1fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80e078cb4bc6937a813e3b2560bdf8e7

    SHA1

    80de76d8bcc12ee08f843f74ee1bda07bb069f8a

    SHA256

    8f89c24721eec2d3a0be6a6874a4932b6bbcc0038750e935587ad81dfe398813

    SHA512

    3a492ebd5d4b0b3cf33031670d4556a0c2227ca13d5b88b324afafd320ee6ee9d6db3eb10678879baac7b000301f6d9eb31cf1dee48d51479867d7f3a1afaf4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cc9c64f1eb0431f18fd6e8398cfdf08

    SHA1

    fc7f6398cc4a7c178feb4c5809d4e05777c36fac

    SHA256

    87c2faa52432fc3513d431c7cd00eae42652931d2a50968234054353ff0d028e

    SHA512

    eb04e1403f7d31646c2e9ce9d77e2a67b80952e48ad31a3ff97363a7085eea92dcca8cbd863bf5d2044380e7a9d147c259f5966135cae3f2eb22345c64d96577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eedee75273e83e7dea4b5d053ce9ee2a

    SHA1

    861eeb6e46486222b80c24704b715e4b1e917bd9

    SHA256

    a36bb0ab311a51df5d955b28f61f2445ae6305aa3895a92a6784ed0a69625483

    SHA512

    dbd706c777d19575120383587e5b8eda304f130f3d5aa0bdba19f66dac3f9c77f738e2091c0f40c83e5a8cba3f6c6a2910b83002e9e456ba197f5e56b5a24742

  • C:\Users\Admin\AppData\Local\Temp\Cab78AB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar7A19.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a