Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    30-04-2024 06:57

General

  • Target

    0946b4a005479eb7a22858880d8832aa_JaffaCakes118.html

  • Size

    25KB

  • MD5

    0946b4a005479eb7a22858880d8832aa

  • SHA1

    0fe10ac4b0382f5efee320a0299ebaa571735343

  • SHA256

    6c3667bafa4af3ee3b399bc28cbf86eccf642f998be83869286bc43dca3c13a7

  • SHA512

    c278d91d1e53e171c4a7693058d16a7bcd754ed0f7a4cfdc18a6c805b93d957f1413278aef45a5bf2431b7892032831fab0f84834c08c716f743de0b79b70c4d

  • SSDEEP

    192:NULoZt8b5nAnQjLntQ/onQieOn2lYnQOkrntitnQTbnYnQnMChAWpdEOwuXMynFj:qLo/KQ/3lKYr3/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0946b4a005479eb7a22858880d8832aa_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6800e6bd020832ca50fc07c56a698c25

    SHA1

    441424ca47e3556254d4d02f8de601d6f0a8587b

    SHA256

    543906c6be2f22900cb1dd8b15f4863a582e0d8601268c7efb8a7650ee1edf4a

    SHA512

    7bbbe678193b06c87124fee0186d6d85d295d51a2ad3b25228b2f7d596f0fc23bcdb1bdf2d08f6b59058603ee9044d84a773f657077e6f0b9ca71a352ed91f7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2920eb51a5fafd03eb383551056da8b

    SHA1

    9894b77d0580cfed01b3c1faff36f1212b017dc7

    SHA256

    c61c4c4566210113a0a963b315fa0ebdc24fbc63ad58828f78fb2e849669531f

    SHA512

    53053fff20053439c340252a11d5dec2d247a3ff1cc804e1ebd193e51c58654642d37bb6856486357861417f884499acfafcf5cd251cbe812f45be98a8756665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ce92b95deedb69c168d8413f91f51b0

    SHA1

    20f70e19c6891a7520e2fd1804d9d156b0711710

    SHA256

    5c7547b436c8374aee1fec379eb9274d43f1e30f286431818b1ecafe144a0399

    SHA512

    0e3b338f9e8850d49cefc11c5d5704018824573ab095c0a6dd82cc7582002e6d9c277b25674436c7fa509b3eca983a3f140a26e440cdf2bc1772d8a13125edf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29186cea596ba40c77e18aef7764e156

    SHA1

    6e0dda507403da8e9c83cf522b9019926f9d3534

    SHA256

    3ef979092f980f4c3b08f5434c458e2b53260723bc5860cc24094d7307bedd74

    SHA512

    c0d5594726d059ffb2609c54686d8284ade49cd48d556fcc434de0bf11e79fbc920ec64c742943334f8981693d8ee8fdbc9af68c291a087f91911f5dcd371825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19adb1cfee3539e08c70630cef0ed831

    SHA1

    92c2d84ba1c7dc625c0eefc330a624a53ca64551

    SHA256

    0a019eff9d3460f025b04f82ee68cbf430d2c4745740a58f4203e27f866a3c47

    SHA512

    709d04cf2f0421dd8638259010454b91c1348c0139722825e7d70224881472095f9d7731a6b824f355093c80eb758834dbd8bb67bdd7e03e305e5a2c7f6a6247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ce8a5a8956a04822b95dcb816a7094d

    SHA1

    c191599612522703e8aa76921567880e1147717e

    SHA256

    38477340a39bc998b0be21a1d2a4adaa29e3f2756dd2fabb74bce418db6e5423

    SHA512

    9a134ae950c5f3ede440a48fd425d4943a3ed0488f47fea804a5448661b2b3222920544b86a319b56820bac9768d508604e144a06de1e64f546ae505588a0afa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2266e1a05a543fa5ce932105098623c5

    SHA1

    ce2a4161ca228a2227da763e07654f0c02443863

    SHA256

    0b0fa9145f964e41b332e99aba761b1c8ba9464f401ef8f7d14a6ab16ecb0451

    SHA512

    fb9c21ebbe561a2ab21cb1de047cf2343de49c92897a29ff15154ddcf476f0094b01b3c3c664074649240667c2663f9b53f59408cf7eabc2e97ded0ba8c82a0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8c05361656cc498534b1af6357b09a1

    SHA1

    7abe453b44c6c6b5fa7de529b0447da36dec68a8

    SHA256

    2ebef71bdc5f70aec5044ab1e123700fc35a30002f2c5bb9d89c88403cd3f239

    SHA512

    7a58f0a01b47a74686388d3ba6b5405e520e490622580ea913383679cc1a3878991d83a5ac3a97942b9fefe40e9fa6c4ae93d8f23bde7fc3f77144eb2a1ac3fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    699a466b2f7bc17866a7415a90a1c7be

    SHA1

    5e672e9108cc7c9c365510c13e7c733245adbeb0

    SHA256

    7d6260148e052c79a73c304e276c2b9de31b7b63a142b2faf2e46ac860de05b7

    SHA512

    705f2600381a81d0230f331b966b4617dc3d7af622b59ec36e0f0d8e6111d33d01edc2b04c4f56ee33c9a6abe689890416ede079bfd8398f7cbd0e5ddb794d9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64eff7e7655833a3051bb6db0943f358

    SHA1

    b4a5c7358ef08c80e64d85e463581cfa8124fdb9

    SHA256

    eda90fe4882b2b89b0f697c9c04f42b7fda8e200036326db1b0dab124b25cdd7

    SHA512

    9c2cc43567f444bdaef7ca6d32476ff894ca1b4f7209d881e56f3495cd44e7209cf4f3daf68fd51f0c8f473d0144fe3a9856fbe41d0455597e6257ac8ca3cb9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c263c128ef86e4d66f7118b785eea7a

    SHA1

    e394e543c0ffa9cb0d4207cffa8e2ce2e5d0c654

    SHA256

    2f31f4fb15468e59c2360a32afdd61d44dd8513ff7619b58c49a440f9e045f13

    SHA512

    a646f3ede2bd37a70097fada09a3554d612254e4ac882fc6d7b84e4f85cccdfc44ea9637ce3912d819623b9a6816c6155b6d24034384495f953a2be10a3a8306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b68c54e419a621b9fea092921beae63

    SHA1

    cff771441a41fbc9e968013c0a1f4f40bdc05141

    SHA256

    5ee2f25a014ba82ddc43ddd773e2e437c8bd634811c176fbdce49292e2f86d1a

    SHA512

    765a54b98a7f8c37deccd0e10df873aa1accee5410856210d658ed7bbc787d8d5b2f7fc3661b26247a1123d406acfc873d6fd3bd11f0c59c23b22418d2ddc7f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3db6e4a65186aa85e923e2fc126b1d58

    SHA1

    3703ce49c0a94454ce62c4c64c0bb9b082267a73

    SHA256

    3eba5dcc7b1c2b53963748cc965383ffd9b8a28cef5137229d72c3cc80969c8e

    SHA512

    018cbc6c07b2766e421720b044fb4c2d4f38d024b6a5b147c0073df491fb995dac1251f3339acd6b02049994316100f6b385cd378bb4ec9b03a9a8d55d967bda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1f018138cd0ba0dffa30eb930d1d707

    SHA1

    0ad7639c1831b00cac6f9dc5c1d3b39a7110931e

    SHA256

    a37f6bdd5e77fd3c2df00199eda8402d0a5fcefdd0d8cb988de2de17a68201bf

    SHA512

    cdd8980d205618ce543157ac1809b9e4bbe5f992e8bd030953f00a4a621505a5732b9ac661fc67c05807075441aad976599009082e6dcea1a7155a708d3d119d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3465dbd516273c8c8319f6bca8846897

    SHA1

    05096251d89d5b9b6bed1aeb1ef41b5b36b487b6

    SHA256

    39bf562fd24f63639219eef7d88a433a9ce52b7952bc488c700082f5208431da

    SHA512

    0a9d198d2f9bb2eebbec8d33d8298299f553bfa223fe8bc62c5a7c11471438e85eba1139f2374f29dc647d4a12cf21b3fdc58b9cefd0a5668d6fd5ea64e89ec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9a78c61069da5471064823c163311f8

    SHA1

    c7c6db083fa1cc4dc92019d803beeb27252bd61b

    SHA256

    4399d7abd6298e8af950e6537e6448458d3ac3e2c19d42a58a26d2782613c38d

    SHA512

    c9f5d7527ce5e0e44b0c9619de1e67c2663181b7fcf5d7a92845dead9b12dc66a307c84445e85f6eca5353cc6455710314978a591c3f61d881831e03d264f6b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    102e64533769f3a4c22ccccd18a293fc

    SHA1

    9a5d72655a2e2030c2b56637e9a6145b2ba8b816

    SHA256

    3ee50d35ed5c831e66f85272c668faf0543a3915358207b5de193b114145af70

    SHA512

    5a4fc9a2c4b43980b81ac9f8b94b72436948e47c72a4c852f28cbe310f8b679e4fbd3526b587935308c887b228e858d6028a34caa5f46777feaaf58d87d50543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29964c8713e11dc32aba5f653d7d9935

    SHA1

    1f46ce85eb9c3f16a81cb59f1eb719c7870a323d

    SHA256

    c51c91af69871213ae1aa2b7a14a0c85d859505de413128c9c4a47c76b1d86fb

    SHA512

    3c5c1638ed563ee5ecd592d426cf7a29d30e9a495c32cce22c83cd9599dbcede627100f97452283fcff44ea94c4f14b0b961bb780c2921034fd0fea8c13330c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0519e9232fc2685cea49a400f921f71

    SHA1

    7b25aaf173d39bac47694228579fbfd6200e93cb

    SHA256

    8a2c44facc0eed2488bf5df5655250ba94f2982f2942b2822d80d8fb3f236892

    SHA512

    45cace3ce9e7520146bf4c3a9a542853b1680c40195b00f0af290cf785259cb21cfb8a74533823245525b3543f2180e2e23913de526bef8dbab286f419776b34

  • C:\Users\Admin\AppData\Local\Temp\Cab22A1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2382.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a