Analysis

  • max time kernel
    143s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 07:31

General

  • Target

    09579e8c75102c7565a7d290c576114e_JaffaCakes118.html

  • Size

    139KB

  • MD5

    09579e8c75102c7565a7d290c576114e

  • SHA1

    eac4435498876d6acfd2af908ca0aea0342b2faa

  • SHA256

    46ad6da0d7e212f20392b84933cf2a188661acee4597ad1451cca93b06ad64e5

  • SHA512

    87999d4073c5598d4a171f450784dc372a6ece8a7f3f8057dd21d6468331c8c962500244b5f9d03072c4c7a7f23b465ca35111ab977b779fb8a38004d48c259a

  • SSDEEP

    1536:SkzNK4laWGyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:SkzEvyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\09579e8c75102c7565a7d290c576114e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00b103cd26f0944ad767e618c01f36a6

    SHA1

    443e4a46a489f25ddf292923fc907387da2c53e2

    SHA256

    2324ea29ec7d620bd0c8216b0ed138d94562232c162fe61ace4fc2a00c65597a

    SHA512

    188ea17ed07dd6ca74aa43ed2609a8ed011f1850e34a724fe7fc2beab139ed7966999373c99f22abfb78885387173d6ebd450ecfab48029c08c99ed74955b9e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ce4920afa4902528d1cc7970ae14a1b

    SHA1

    082a8fc5d2a2534f888607c1ed9c585ed2fb44c5

    SHA256

    028803f4c597efa740d7cd9676ecdf5be5d22e39f25bfeb21801d82fcf790847

    SHA512

    746b67c72cac8ee90feff87586582bce341e38f39042c499e32b9948d8afdb185ad366533146740bcdd233cbae1b4f8b3f7daf4ce9b2d6288a104e4dc8211982

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33d88e9ba9f4396b19aaf418ab9c546d

    SHA1

    fe3690a9035d77fce5695a3bec10c4410d7b8d40

    SHA256

    6c51e17625e0e20cbf2ea86d3a0e19fa5341545b2f9e359d723f0752f2548de9

    SHA512

    115a78532b2582cccb5eb90b5e7715b79c9735c284e4be9564d196b4f8920d2502b76ff52126102d2e42fc1a182407360f0d60441d853bf1d4b10b802a3f1a6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78293a17a81c084de19b72a926517930

    SHA1

    3005da1833eeaa4b322251ff704996d51f2a4483

    SHA256

    e9b1b6e78d60417022054f8e3b6a1eafe207bafcc6f666d6a35ff6372b47378a

    SHA512

    963236b818105f4211fcd80d86bf94877625335a8eff91a9d90db3463b86efeb15d693e89644c2fc24610a3a13c7ae77c54c584e21e60a18b74417b07ddb093b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    275db85f8b82e9c80f88c4fbbcec6727

    SHA1

    f245afae3cac431e1e09e5898cbff98095da1821

    SHA256

    c0080e66c5467a90dc08a2ee51219039bbc516740655f81442d83d0f2b876024

    SHA512

    d4826a54a8803e0996f5ebac99916b49e32ba4c28ddd303c969a37d67e104b0e2918a1b48b73801915413f2bb5e117e0657bd7a873d459da9b5d315db274d54b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d60af487b44a1f23e04d10fffd819c43

    SHA1

    15572050d669bb8a1421d378d93ddc7754123d58

    SHA256

    daef9b410173154fe4a0a66d19cc7fdd00d80213387bade0dd19a408b84c85fd

    SHA512

    1e0cf1a0e5f07f0b0ba8697affe27424a3a04fcd65c38b86ebb52c96fe17fc188f711e1058cb91bcc875304584f28a8340710dd969810e815bc2a6a7259d5826

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a8571086ba35dcbfef0c3ca5cf5a507

    SHA1

    97c3fc121281484a912c2c5720d0c0c572a89cb2

    SHA256

    fdfafeec83359adb3342e162d57a15f296b641cd6df6802fd797a8819295aa6e

    SHA512

    cf05e47ebaee20d6c520220f3d93f8cc9daf5a1395e20e7514f95414553bfc7a75c5c7a85de3f59693137857e51d2d951a947f7a48b4faca2226cb3154eb9716

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb0098d9319c0f26e23f4280192cf5de

    SHA1

    e070247e08660a384737f8dbdb15c8a950d296a0

    SHA256

    3eae6e122ac66756beb6f7ea2198903b8118fb7a6bf6cebb3e38adfa9a9d1f9b

    SHA512

    dad76fcd52e47ac0f0828bd6b975ba053a77b287f32610351059250972a74dc4a179cea6599dac8e56b486e4849277d9be27697b0242a012a0088559eb8b8599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bf212e65c6e7c3fbf3d9a437de4b876

    SHA1

    06b8adad024d0b757cf3d008c333159e1c30b6e0

    SHA256

    2a6102ec27224ef7779550e93799e3d39d70b5535cf6e1a93752e48a1e0d6844

    SHA512

    43792e115ef85524152c06f3ac5a53698b2119c7f5d8a7a6a7ebf66aa3b209c2506ab92fa8aa05f69f97d66b1afc039e46477be92e1eb8f4440c0bf1f6f1dac8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    825ec3d725bf107187e6f9c589eb9d92

    SHA1

    3d5a72603e52ffc3c977b2486e1f7f7bdd91ec2a

    SHA256

    dc08843d8f4de278ac6e02217602c7fb17fa16756fec366e2cfc2b842f239493

    SHA512

    05100e4a8eb79bd1cc165f0b4f0875b48bf3ccceef0752585d13d1665cff2cd58b898fa42cd6b1ae447fb04043068ca26988358acc7c6c4bd2a95178b3fa548c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b30247ee0bb0299783468073ecdc29b0

    SHA1

    c24ec238461fdefa761a5e1035de380bc207fcf3

    SHA256

    4f6615c50dddb9c9d42ffdf5047090359042bddc677051a9a53a5b0b889d4600

    SHA512

    e335f9d57bd6fe330d21b1f9857b39c61baa571ef413473fc5558eb74b2a5db1121926f5b943f335854cabb00c551a6cc89f42ee88af837b2dfb8c0c5c17cee6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    830c30c79e7c9d5c5131699591cbc189

    SHA1

    27f8a8edb092663525ed577294e9201f55b61abf

    SHA256

    8b5e80c1cb510ce0b0518ffd829c93f7bac65ff4b3b631222788b95f8dbab84e

    SHA512

    6dc4897574a1662b677625b2eade889661c64b60368b430b295be7411f49f31df69b4b5c427c03cc4980b37d586ff1d3bf2bc367e967c8edc4394957f53874a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    857cb8446c75f30798d81f6c0623a7df

    SHA1

    8e9ce5fb50a295e0ccdcbf1bb9a229f0d67b8584

    SHA256

    d5c7273b6416c30a87e5c2da12e331196b56bb123fa9a57563d3823e0049d801

    SHA512

    1c5e831755ccd1c6650365f3a1b02c08bb860d16e6187df84e8059f559aff9d2d119e77822da07c2f640488d1b72757ebcc652dafb45dfefd461c7a574f17201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f85cead200d743194ae69a7dbb591a15

    SHA1

    f355bbe4443f976d6e8343f251f3148a7314de5e

    SHA256

    60f0e60a7db860bcee08a2a84a3e74ed33ff6f38a5c696b317d05e83e9efe441

    SHA512

    752f504c9f247cfd340a89d83032e6c90513aff7f4861274708eda73e1ce0b105a5f442e4807cee02a541a68155da859b73cae1e336ba21f4b5feb5db01749ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53004cba82844167b86caf1181673982

    SHA1

    4904cbb300ba7ed327cdfc3ea342cf3ed3b0a0bc

    SHA256

    be9e908114be360a85d54ca68a56c6531700c814073c1dcb16d46fa1b856d548

    SHA512

    baf8ef5ca878a04c045ed704eae4e60ee06447d9d3c970e7335bc59cffce5524fa8facf0301bc4733f6ff4e8ddba4b495e3f959d2ba993d9745e01f705071e6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    804f5ae5fcd15668982541b7cec90e0e

    SHA1

    d812bb5f7ad08aa3a0b1540b020083c7e442f9c4

    SHA256

    87b4140c0938b7c43c1c438c2231b68faff556968e5b55bcdad3768a097eb8a6

    SHA512

    c7e7479ffc8fc04e2d813fbfe253839876a48756af596f891580ae2286869f9ea71a7fdfbd704093781ad0ec728f406732cc2567c12671a12a5cabbdc7f93b87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa12d82c83cca2a13922b5771bff2559

    SHA1

    7fc723b5b1f0b8c9f6da041a07af0a94810e0a33

    SHA256

    88b0c435c9962722a88de269c651cb1d011f06fd5deb08c7be0b86e2188764bb

    SHA512

    2b8220db372b2a7b3230d663ee3faab5969cd34cda1768270fa4fccd1acb2dba293d7ab2d0e8105cc32e87ca34dc8e7c91fc0d60958f6175c2ae5842072770ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a38f6abae7de6543dc5bb5e4956e160c

    SHA1

    228354c55da13c180bbcc4f34bdd6ea67cbb9d4f

    SHA256

    cd3633142b83b0929a5b5a9640b9b78191db30ccdd5f3a63b78731bf65125e1f

    SHA512

    b4cdae8f45723bfbcc58b093324adb5ba04f1020baf03fbcd092d84d46149779c8368d31bb6febed99f5641f1ec92dca29f0b897b732d61507923d0d1936b1a0

  • C:\Users\Admin\AppData\Local\Temp\CabCEE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarDC0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a