Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 09:24

General

  • Target

    0b6fd07efc9771fcf08c2c896cf38863_JaffaCakes118.html

  • Size

    67KB

  • MD5

    0b6fd07efc9771fcf08c2c896cf38863

  • SHA1

    3264fec3e98b573263150f21b8598655ece012e9

  • SHA256

    9ec67fe5cbec1420f1a66647ca464d271b439cd1954ee8476f79547995965348

  • SHA512

    6279e4172d6276a91df70f05a3e6b99f4c8f25972958dfbca41ffe3794e07b6d1ba39875afae87fa93d66fca65fc2d4a5027accc5a6dbb1d0bca63ef06d9f302

  • SSDEEP

    768:JiXgcMiR3sI2PDDnX0g6LaoFwdVRoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVh:JxkUUTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0b6fd07efc9771fcf08c2c896cf38863_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2784 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7273b923dc9b96248e0f7aa26164df1c

    SHA1

    16a549dc14d084b0ac223fd286151608a52c1475

    SHA256

    f3a55cf4fea818ff3ee6eedd4bed0c0c04a97b808edf1c2af06093508a1bb633

    SHA512

    479d0437899795c1be457ce710e5e65c299e30228b03612ee4f85e37a7966201e0d837c56c293da98ae8a50bf3fd8e066bfc1a394b61f5ea2a31ad103a9e7b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bc59d4637f73ef2ce8ace4765c646fc

    SHA1

    b5e95de4f5b9ce75bdeb2dba6048eaf84f8d5b40

    SHA256

    e8f3e8ffd564f4d87ca850b3da49ce30d10abcfb2b6f0854308d312843f32c6f

    SHA512

    405fa4eb039c3b9d28a2a52d875b6e9fd8abb00bd3ab1ad36cb7c254bf3d3012f6069fa4fe37f6ba6f92ba4ea5c973db3ada2226b0562f52d6b8dd1b7da7a0de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aef57e970c93afe8b867990b6abe874

    SHA1

    c62f644f6ff7d23ddeadcabab951448307976fff

    SHA256

    d5841fdb4e360a3a360d6375f5b860d34c7123787e5b2215c5b4740280b7eb7a

    SHA512

    06680b8a558fd7eea352af9954d81c6220961ed32d09f847080a82d4e84e5e6d3ae0abb6b1e4cb3b79557f1ef306cb10f539a2454b6cc9d0a0e3db1402d02c38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95bec12345338a3a607a0a1f8088f13c

    SHA1

    25465b825c0e46eff2b5626c605da6caeadaf46a

    SHA256

    68e12751ced140db7d846495d3399f8befa142bbdfe58f84749eefb795f6d309

    SHA512

    e926df535b6fc9710077ce58bbb7d5c3d89773dcd8c657da087c6f3ee0e9da8fcfdbc5e128535b30e9de3d030a490630259f5c4906607180f0993031835412ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e644652ed2d5797e422f20c6788cb4fe

    SHA1

    2c8bf7f734d6fd8ced20e1cba0364c6ef2d92948

    SHA256

    76bb0883de836835a558f875815012a390b5e1616311e0e48c28a0234e6ab02f

    SHA512

    edb00269233b86086460e3e7d1a0aeb809c6f7ab3582bebc4df5d94d3d719ebe49dada11c2c2939ad58ca5117690456e350e61fb4b9d6d1118d87255b5be7441

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb26436bf19420fd79e60985950763ef

    SHA1

    dfa711604fc42656ca827962f59c016f55627a19

    SHA256

    3fbb82ccacc82d910d862f54743697c7b78533b4f93d1b78406104213229c77d

    SHA512

    8212b084e522bc18d2941ffc935c943bfacaee21e11b7c50b8da1e783f5dcfcb04982cf0918f954c79e6eebf989c105d57c63be02000fb6312e2136b381ef81a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    793704185734fa1e6d76006a0c8c48ab

    SHA1

    bf8ef168593bbdb2dce2113e9cfc4ba9ec7bed00

    SHA256

    43d162d08e9b7ceaf9ae5910993ce2b49c176cfd4f4a7acf1a701908f14d8e8f

    SHA512

    5d6624fc00070b3e86b770204574f38057dc02412e9c22238e17eb691475785d6bf5e144ace6e53dd23aa75df2ffea630de1ca40ac127e3c493b3dbe94abd5dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66a3eea1c5219c700f5d95264e1b484a

    SHA1

    5f8b71cc74fcb5a11379509a3e96dd02a569abf3

    SHA256

    8b7bb32f4ead8705c761bd340cf10b21d2d5b5d34fdfa06d7e2567668865f9bb

    SHA512

    327e7592a670c3066b2fef7a6e58b4df69397c70c67a340f881870b07e5888a244c819303efe9c7d2d5b7a12d8b42a6ffd3440db1cfe48fca06454c1bec647c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c1b3eb32eff83b0970c91ace6f9dae1

    SHA1

    b53b05a3c6174dd6ca2007bc39dfcc2363e09f9c

    SHA256

    b1bfbc0c1b1197b7a6004bcf46f022485991f0ab60bc46d1a7a096ed82c753f2

    SHA512

    bcd87005424f30263b4a116ae28a047058d46ea07f555824f50462db4f8619ea6f9a435ab861f1b874ab41ce2283243daf9e6a92c323ba09712b3889058e7518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ab67119d2915b76deb42bf4dd0d5f40

    SHA1

    e2f2fdc11a1208ff3c5ec0cceff575af4ef7c2cd

    SHA256

    73d1b94946b3cb538c4977452b90498391f6531acf84295e69be97e6d3e088e7

    SHA512

    b89212aae3477a04a79f665005a034529de42a5ae8beae6045d66cc13c28b70e8a1b714eef4db2c15c547842b0ef9e950d7c5444d3c28304001b576cf802e0cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8effba71712ecb715490a1690a602d3c

    SHA1

    3d8374725a83ba1a292342b58ca50a702ef35c19

    SHA256

    6e883e223340c8ac903c9483c99d954b778ae43533a5ce576ed28af2f797e3d6

    SHA512

    0eb2211bfb46a9e0c3154aef8aa0b0bfd65981f0e85ea23f0783c64ee642baab1a0b7cec5464a9cb1b69915e9c8518a4e6a887b5e3add5c8dc2b810a8abfe648

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a743414d0b7ca00d0dbcb581fb820bc

    SHA1

    c4cc6253af2922e597ec345f3086bffa9d96bb77

    SHA256

    df5d6bc503b028477e3054e591cee1a9732fcf41eecd8c834dc48653a084e29e

    SHA512

    9ee3d13b2f1a418c694635d5c9d80465e5bf76fa73cbee14972f1f4e22ccd65c2ee7182ac0143eab58ade6348a5c44ffd087fa332163ca7090f1434a6aa63723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7e10cd07752991d6ba17525decc9d5f

    SHA1

    4af086795bcd43e719d830f7bab7e80def2bcac2

    SHA256

    6d22bb1d54b5d17bd4c5544354976e281de3451cb226879c18b7c29584a706ec

    SHA512

    e8084c5e1ba6cca38865e1aa754be41538ebf33ccfd711c8c8d0a4bbe9f986cec9d7cb4cff70b6ce06dfe94411a23bea363b198c4c10683391ca779f71dbe7ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fac5dc51c62f617282e0c726648a1987

    SHA1

    c98dbb7f5b234b291278c5d1a0883ec32b3a2b89

    SHA256

    8d0344a64a4794ab3c7710cb90dace5df2167c48bd58565bfeb339be20d41c17

    SHA512

    0e0c461df1de8aa2bf907a8a139f20bcce9618be6c7254cadd779908ac271dae3fca8adfb83c5935f5c3897e71bffec4a0700172befd73739657f0a219fa8c9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8a491479d0a352888c85d219837717f

    SHA1

    173c6ee6f935231232a14200bfa42d0f83e220ed

    SHA256

    42e691f5a7e13bfe47941a3d04b0395d8feef6eea751e5b5feb35075d59f6c7a

    SHA512

    bda1cdc4a5ecb064e1ae2da08a73006b48b15d73d5bf1817c249f0bdce1d091c4a297e533b69fa9dc6cabb12578628159669242663b371ca7b0e9311374a1022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ef9f73578cd84af327cbeba4cd15903

    SHA1

    d19e2c98deec7710e43bb959c8cb929daf5b8efb

    SHA256

    367e16b7670470cf1f18c6fe09fe65aabad10bb05758fd908060dfc59d527349

    SHA512

    eac5a08626b91079442f3a421718f69a59127a0bb08ab8fc9f317c02d8153b130fa1fdeeb936ad9c0bb73bb15a83fe4a5c7ca7db23ee96e87cbe980b45a08235

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    314268d32c42e74e66f0fe648cab7f25

    SHA1

    aa2066ac1b7f80bb0ea2e5aafb4119a773415442

    SHA256

    ef8afe9eddc6aa60c3f8f7360c8ca61240f17565e652f67c5b46d8d3e4e3c350

    SHA512

    74c35ccd6e7d3a874bfe65331256f1f103fed550ddd1a3203c77905772005876fd79200c571e5774ea3b9ce9c082224af72b23401c5d5933282f26a9cf0f8602

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    492214b7f7c8da967db9849145d1acad

    SHA1

    fb8c6a6c87cf9a98e38d618fcfec358c69e9c24e

    SHA256

    7e41bc58ed48848112a9d49732d2c3816a9dfcf16998397b81cbeafaf3a89c72

    SHA512

    a0462febd976108cdf31eea9ed61dd0530caa2c682fc5111fe553303e1039354fac3e88b8263badef2318cfa7d0d105f0e016b5739c7f0c80ddb7f6de148c03c

  • C:\Users\Admin\AppData\Local\Temp\Cab2463.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2537.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a