Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 18:52

General

  • Target

    0c92c6d91c2ec9f65a5a73352b77a9a0_JaffaCakes118.html

  • Size

    138KB

  • MD5

    0c92c6d91c2ec9f65a5a73352b77a9a0

  • SHA1

    09761cdf278b0d7c779ad42f5b48a97aeaa154e5

  • SHA256

    46e0e7c76d60ce2996d981d91c9220f5a75c440d073433fe4b81c424bbc75e43

  • SHA512

    fb506171f04f1367ea3a3fd629eb2c5305d47ee4753ca53ce885cb3b7e3f89da210b1bb42fc784ebd5b452cb2e277baa16346eaa7293165b0d0f94b02dde80d5

  • SSDEEP

    1536:SWN9qaAI28Nl367yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJA:SWrqztyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c92c6d91c2ec9f65a5a73352b77a9a0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    412e71ca24f5333c3a326f46633b0941

    SHA1

    8e139f6756701f339f9d45ab2cf5e6969fbe96ec

    SHA256

    c87fccb5d9cba5d635084e1c8770dacef939316783c84e98bdb02a2cdc2990f2

    SHA512

    912b53af2b3315564caf2b7a85d5f41b3649da3fc58238232e933914e15c109856fb7c80839eb77c9543c4175bc762ff8eff79372c5d5ac6cfdb872ab0c4f7e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6619adefd198331ed063a40aaa5386b3

    SHA1

    288b76bf4f91942859ded7ae33c5ee106c1966eb

    SHA256

    0017e3eb7b397db9bdb58c92262f8e92310b574b27d983382c2abde41ad7edbd

    SHA512

    01abf4ca6dfee76a0bd421cb90e9538074e6f6dc8a4b37c8f445ba18d40e551fc666869990aaccdcbfddca12fa8bf9ad3bed8ed790c5782bc967ad1825838a51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61c0f4a18169c164b1a40552b1d3f6fe

    SHA1

    06eb76d3ca59de6e2435a34f382a72663b37fdbb

    SHA256

    ed4cacb21b305bd60867a19519223fbf0c512b4a5b1b7df83b7a4e77f58b28cd

    SHA512

    7f7d2da1ebdc0a918359da4d5e09583ef4c3b9d5e9aa1db4a421d4b6942303b1124d41e9d8eb8a495ead624e39db0aebe5a9c7f1779d2ffd291324a5b78cb8e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    566d3bf999f92ec7cd2bf51091d1a596

    SHA1

    3d9e48acc2051aa43c7c90d5b2fc392d3f51ae48

    SHA256

    2e4819353a2fda50a1f97ce7367a39c595d02cb52e00a26267cdc82512e4ff1c

    SHA512

    c4587cd783e2010b11720e0a2df668f740d6000eba58ac8b5cbcd5404d940b0070108dc762ecd98508f74a4a97627e172fd35743af07b991311304cd473084ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37d2d6d289c6c8160a24ba8a4c5b42e2

    SHA1

    4a7d166ee5fb5fcee590a6c1bb968599ee4fb56a

    SHA256

    23422eef69b2f4ffba5ca93c946ea6e34517d2061ac5003c649df53275fe6e19

    SHA512

    8c5df5faabe30586112c804b09651b6a7bb137cdc99763ee565ba57f64a40e4490fb200d949ca53acd6e4b727cdc1cac9b69036926450e9fd78422e936bad559

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ba47eaa4b2c16a6c2348d9707b64b94

    SHA1

    e2d145a925e1ab4bfbe84c05730ae56767627609

    SHA256

    4fb39acfe5d50668be217344f159572964fb65744fb9f92fc7831e1efb3bd9d8

    SHA512

    da378c76d3320e4904d08bad3b11a010a02610ea569616231ab248f2d390690233e4d6120c3537dfa6a2a5fc1cb6f4188ea7cbfb5a06c0392ce97c88b0d01399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb69c8281232ff09ec61b6195dc34f81

    SHA1

    02fa4d1100766332b28f9c307424c250585d599c

    SHA256

    255404dc05bcab51d195ecc19453d3ee9e3b6f7df3ed5bd0b278a4746ac8bff8

    SHA512

    cd4d3c65d23a3547d2b63f9dd7f1b259c301769d471e3a146414652db207663400f732740fcd113398a9f727167dad39875d937d7997fd5184c07e990a686bb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f53206a85f75b83137bc90b6c8065f0

    SHA1

    698db7c77810ce626071a543cf48a72b2b34e207

    SHA256

    3065cde12bdf2e22306bf45a737deeb2c8cf5bd78eae9b4540d8663ddf7d815e

    SHA512

    b4a3c743a85d92f0851cf260836e27a21eb467b950cd76502831299bbfc93c384a3072ea298dd460f46949b1b42831bc48550901ab4f00a8bdb961b7d33251f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fa907f51c81430f471672144881a335

    SHA1

    c60a2b7a0c1a6ec4eac9efd2900faa49d858caff

    SHA256

    69b62a1a151dcf53ef5c8fc7d02b7883ab453e1e4f1afee0883cc1ac7c43ed6f

    SHA512

    f75fd54fc71d20c8f61d3d02abe18e0d31b9648bff6ac354958ee2671c91545d56569643eb95c27a781bdb0105c69a8ec546a5dc2b2d72c801e68c0c8887c88d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5047c8cac2df2fe401a1f8c856e626d1

    SHA1

    8e964ddbf7af167c5d5d6f6abc4ae56193efb979

    SHA256

    47ce4f65e113a8babd6f9c7556977113b2f2e9f0cd46a7430e05eb6a17ed50cb

    SHA512

    ff8b49d58d28e08606b185b08890bd1f3c2a8d50feb4aba406d10e9857f4a532812ab926d05408e068bd403d4f6d86ff9e5a7c06d62a03d760b24e9af05ba6a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43e97300ef14178808da3a5aa86c3941

    SHA1

    e4083cd268196575792d3a0b3d05daa5a17012f1

    SHA256

    842d73ee3d37cd993348acf1f72c71e3530501c874e6da85a2a7616d9778398a

    SHA512

    4041a28bfeb9a4eb4253014fb79dd41129ce60bb2dcf2b340ffc26166b7e6bae1e95384fe6ed1da557217d2504508a7ac488d78726eb88e4240684d637defc9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    207c7a873ae81cde0395d4475ccd77fd

    SHA1

    3e2d326c093dcab044cedca4639f49c762aac0cc

    SHA256

    28c5981f7c7008e10b41ad2e70be2bec79cd1837b699886c19f34ba38e4d859e

    SHA512

    2a20f85e812e943544ffb765d781bad40870a5aef21f8d41571857f9299536be1a87408d5db6d2afbd7cc96472d364bec55a4a09924a6a99ce45cb366e890452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4ef69cd2699168ac0b8c792d59d60b9

    SHA1

    11ca61fb5976608de9130c8649fb08200107e3fb

    SHA256

    afb938aa9722c334799080f15a65b9d6f0429a2d28ded3a484010ab17170333c

    SHA512

    7abdb2df43d9dfc277ea3d9f27d5068978c20460bdddacd075e4bc8b51f74e5dc6e06d0edf3c35baa513f6e71023158a1c61e8c21625b4e7f696498387e70e13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96c72b10f81b3dc33ea05f697165e87c

    SHA1

    adb8a33bcbee574b66f3a054af7528d2eb16e478

    SHA256

    f5563d6acd7f2fea97be02484fca4b0d73898ef5ee59498a2e6284a5f71755ff

    SHA512

    7dbe0b91ffe7bc6e8cf29907750b6f36040e381c90fefb56b0809c07fab19a712ef07cfce57ade4873cf58eec5427d87a04cd7e1ce379646922b0cc69cb23c05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a56e0d982fddb8d6e953bf686294fb47

    SHA1

    06f1a6335df46cc358bc1d2d66da366c66c7aaf4

    SHA256

    7f54630057107f632545c6c48ead48572d8f8be58c96c1514dea1ff465e2f328

    SHA512

    986777bcea00d09118b2a2f4f299e534b4be3aaee8a2fc9dd08d5ddf91d2fcf419517c3faa7863a081008a8c12bf225514cd9688c089f0d18af2a68d7150231b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e66aa4c5066ae510781583c1fa3eafb

    SHA1

    92701c58847bf1fb4cbe0efa9b37195bbf6072d5

    SHA256

    2c6c698a40b85359be3c8d3d00b749e801f1b53b2cfe2ef41812cdf73bb4587e

    SHA512

    4f1b1f85d75eade3b14eb6fa3048aba26d1f5f0a6916f7d89a1b83a1962af8b00ca3adb286ea1be8d5bf75ae90144b8958807877fcd8e50da8a6bb9ffb676d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c280f22fe4a5df8a09fd819fd8b37135

    SHA1

    8c1504785394a0093cb2d2c76502006d1be1fbd5

    SHA256

    b2f6f2faf94dda1b28dc8f1496a77e2565882be81af44cab6fde687605a4c0bd

    SHA512

    976eebdec10a722732a900b5f3736901174239ad25227082a72b931c8f343ce65d3ecf5c692329892080f8597fdc690a2e1efdc6674d6260bee609a0d5a8e7f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cdb3f5339683d458a594a3bd6d39c5b

    SHA1

    ce64da9ae274a938570da47442c3c45212da35bf

    SHA256

    c3a86b4976cb173758db24e6559abe3df3cddf668ca35a069e379c3b9fd5f7cf

    SHA512

    b6590002b0574b2d25756fa63d278cca869600a6abb1eb50b593bceea7b43ae9ee23d69d2a801db0396c68353ab10f5ff7a83a3fc75d38784ffdecbb70d017e6

  • C:\Users\Admin\AppData\Local\Temp\CabA11.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB31.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a