Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30-04-2024 02:07

General

  • Target

    08c899d0f16f9be3e5cad01d3e4c8166_JaffaCakes118.html

  • Size

    460KB

  • MD5

    08c899d0f16f9be3e5cad01d3e4c8166

  • SHA1

    9c7b496f5a210827ac0b11d01d14a88f338f81ab

  • SHA256

    1e6404d9a12b8ce463dfe9ccf2952b0ef74004f1f59d35f3a4ba95879f44b651

  • SHA512

    25ba4f7b3d9a15ce65c843a8a5f2ef97fad4008f4f20b1119423131224fa0a38b2b407680c019453926b315ce8fe7f995e578c43408c51a1e4c919b33ef9267a

  • SSDEEP

    6144:STsMYod+X3oI+YtJQasMYod+X3oI+YvsMYod+X3oI+YLsMYod+X3oI+YQ:w5d+X3Xn5d+X3p5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08c899d0f16f9be3e5cad01d3e4c8166_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9eb8b7f312d35e9f8f51749ba559ac3

    SHA1

    b79d61b299bf4828615ea105a0461bb4c887bbcf

    SHA256

    0d9c0119199d14941d0f8e316ba9fb4a96bd84eb43c19fa50a7bf0cc49d77035

    SHA512

    d6b86bd74e141edfc09c36c63d6c3d42b35012843989beb34b39c88dbafe823631926f4ed3fefe8a0901daa253717f6f7bf059bf216a8fa44b1f64c808d55953

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bbd476328b0c5dbd7db31956b8a7fb6

    SHA1

    17eee2e4f0bd3ba8eebf6cd2e8bdeee7948e162e

    SHA256

    bf9a7f184d53cec12c0b2430345d0f962e49640b2e0e83e43296fbe70d14110d

    SHA512

    69894b6049039b73a4da7c14e418d671c740b2a9836a75c96bb03415b0bbf0925ff809bf5ea8c6e7a8d0aedaf68adcf8d4be39593d5ed15739cdd1c05615bffa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    081d95961650dd0833447f197d75d4ca

    SHA1

    b2b3207a608b2cb322b026927a149169003ba6f2

    SHA256

    6077484ff16590b816d3db8f775d83e33518ea7100148b33c440d04d354f09c2

    SHA512

    c2be5e9b3d23fa55a3cb8f0b023a097e97fa235d6af656b7b0ae990462f835a63a5643eb6818cb7a1afd9facb825e12e94f681a2826fcba78ec03fd5738ef4d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cee84ddd9be745811884d7ee7bbb0f12

    SHA1

    1b6538c10ac07632dedbc97c42626a000f557640

    SHA256

    0931f9c9d69c28fb35617082140f89b900eb7d640749305115ceea235b023903

    SHA512

    ef8f5b34b5a0bd52f1b7da0d1bffd5d097de9516eceb81bd3c69386aa37d4da5f746e8a7ae311903f94c212c20af0a2aeccf5d706896a56d1d308a6700e7670f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d7b76423e64e048c2507e06fab2c28c

    SHA1

    e6c468cb482fd3edfebd366fb1267c7010779363

    SHA256

    9999e512a8fb36691e22a635eb9fdfa92ee6828aa687666043bd507365e2525d

    SHA512

    8f8df69656081ef92752d01f9b5689c53fed95c96daba12c3695ae83224e5ede2e93cc338e39994e271c172723a8b66279e41015f715202f0cc2475d51e586c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    951b66f32f8543864daa512a02707122

    SHA1

    d62d03330294d3d28b933c3594ed02a6d1a2d53d

    SHA256

    f537b734f14ee84b8be1c13aa8ac6e682972914dfd307adcd8ea70893339af38

    SHA512

    d994b725aa75577c49539d50ba0aa4eb0fbb3679203edcf61581b7f8f92ab4eb1a47d33f628e7faa173e7e9ae63ac9bcedf01cde2304cb88593acc4f5f90d07c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5aee0cfaf3d232e42a65fb7abb07ffa

    SHA1

    8eb128bd73f2f4416b2093528164477e25faba45

    SHA256

    c48e6d0250d41515936d6b9933ec643f770a9541c287d34deb00a82967803e71

    SHA512

    d13c6ee569914160ab937c8ababa96e12a74d425438d001f84195cf1765eebdf26d738f793bb9451c7df2f1fa2287305259c92c5e4b9ba94089836dcc9f0e47d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83e660feb04ee341bc93739b388f06a2

    SHA1

    5e6a72810152dbbbbd25fd4b6ebeec152bf69a13

    SHA256

    9821d718f4494c26725aa400608d4f275d43420f3668041ac23f23598c29e5e3

    SHA512

    222d762af498e61694e8d94a0dbe74f2dd8c9e33f957ecc70c306e28e2fbadad3d9ab20b0a52d3b68d12149439fd3a82b043a7527eebb0df678d4ba7dace21ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    427cb2db397c9d1d530f8e0097393c90

    SHA1

    06fb68b1eaa8b7823bfb2edeee6e09e922befaf6

    SHA256

    3a69bd0c2605f4addf61ff4c9487cd8cfe09c7dafa936aadbd744c551b121185

    SHA512

    17a9075d5f6194f08df90ec0cc339bbf72c9c967db5b13aedd43d959f7790b862ec6a04baa233a7635ce879cb3c0f77ff9855e36b2fc35c408bc0905cb3886e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1e5c16903d7de048760a40e19da55bc

    SHA1

    230f2892df71d32a17d7f6580a2b1604255523e7

    SHA256

    af6726c07f274511905c9d26e575bec0c8c423b6dbb12190da6b36169993d24e

    SHA512

    5493f2b9d48684a0b69cf6557e28a86baaf01e629e39b6e8a264393b775af723c41244daf4cee1ace052bb9290fe8332484498d55fa8c0dbb71a5dff4e703e1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d06ddc33ce33645062d83558e7dfbb97

    SHA1

    6e76d841f784a179d7377208bd6cf568745e2e06

    SHA256

    1a60b20c5ea9b5abc345ccd7873aabed8e099ae52e61490ebbe05e2b7752960c

    SHA512

    498a560b4d9e2b12b3a1bd3b8c4e132e8f98bd64bcbe9b841919e673edb78b0e958e4886beb5d0e646076eb9408be577b5bc110a1b97ed758ba6a29476288d94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2527e1168f4617c2cd0a21b0902f7c26

    SHA1

    2aab1d75159475b409f679782317748167d10e6c

    SHA256

    c4c0723846c771ed10ac1e8c22b1f30ca596874d2be153b23a7fc36d86479f25

    SHA512

    ab55ac46948026caf63d976793115231bdba82e4a5407f3e807beeefce6ae73334621233703a4056bbf67a361f112378b4511baa30fa074f38651bf1f28de04b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65860c352b0ac50d53342c7ce20c97e5

    SHA1

    47d4e0456d646ace25963fbf2fbf14e5fafd03fa

    SHA256

    bd564f6601b34a20d3a825e04bf94a115a1b37cbfcb6b6d6e8518108a8d437ba

    SHA512

    380e0603e772d79f51d829a5c1184cae1145d661d0e84d820e4f35e22d0b67fec8f54238e34962974b297f737bcb25c5c9b0ae72515b1f82d1139b598a23d3d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d291724e511b4fa799ba21aad550a99a

    SHA1

    5d7b4d0d4a17c16d3cbf0a51efe4f32681635b91

    SHA256

    a51e0094cd9c660486c36e47be5d481a17cc87e2d6149b3a942415254f3413a3

    SHA512

    e346f01795d076af77464e0553801752c8050c0e1cf60142896b2c09d7c664a6fdfb59350d55949fa64acab8c069181426865c0a1b5ccdd86cff8bda95bcb2b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28e49e0ea1c950913f8d01a0dc456a75

    SHA1

    d3fb0cfcc5fab33847b7ed03ad77b52ecbadd75c

    SHA256

    10db266eab56bee36422defe9bd4f1c12f2c9f1cdabbd3eca37c7d7f65a69dd5

    SHA512

    1da1f7924b1c6c7e4f8f440fb2c35c9c3b036bed1791fcf8ced54364e15f9eb07e44219c2c952fb5078602b8b9887c613b347525b4fe7a7291f973f0a1a28092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2e91309de5d9b68c469b4d44dff5593

    SHA1

    ead8e3b8a45eaba87f1e32172ee76923faa8a178

    SHA256

    1da78ee4d6e452bd5d68e97bd15311a6f75a10422892407ee3e090912a302d23

    SHA512

    f36846b63dfc9e167a6baf2aad53d5e7245c7d88cf65be57cf8089778e1e0d8bb454fffca6637d0283c522b687ba903603468620543b25263b6d93416f34c3b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7c86602712a0e0ad70a3e0161d7c707

    SHA1

    659bded852774437def8a2ad780562ddd752aa99

    SHA256

    3eb2ad29b0d3536126420939b45dc6893979132858e56970c51c6345463e9385

    SHA512

    a3721d1223c7deda1bc3adb376f024d3c34b86655b638609ae3951481316651cc5b25af1b05c4a14e831ad8a05aa945e35e9b4be3e6e3b850d872b251ef30c7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffc14629567f569ca3042b19235f5663

    SHA1

    8d157e0007db48dbe86b9c9b9aa9794e35ea5564

    SHA256

    5b0cb9c39235bc1c8274420735f325fcd22afe0017ad5f727df6e19c4b35893a

    SHA512

    28aa3d04feba7b6be76ee7ec0128868771e3c4ac11e297d577d6cb958e6724a72571ccd0c3ceb8eba863586f53ca9ba5762a6d7c4480e85eb20b324ffccf3e2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8f91b62a6a576d6134b265de868bc11

    SHA1

    bc7dfa2915a6a1e78b040c319e68b7328934e682

    SHA256

    eaa2e72563afdd89cfe2ab5d09d3bdc1d29551655a36b03c0667f4b71dedb7ff

    SHA512

    1c94e27bcea87fd239d7c349fb86dd59e3f60f6701f180fdc852e06cf5c5c297f415c8de7ef4bb4361638e3545172329042c0b8d58c469a615917c2708fa21da

  • C:\Users\Admin\AppData\Local\Temp\Cab3FC1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab406F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4084.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a