Analysis

  • max time kernel
    136s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    02-05-2024 02:17

General

  • Target

    0d3539268669b84c5f02bc4517969da5_JaffaCakes118.html

  • Size

    21KB

  • MD5

    0d3539268669b84c5f02bc4517969da5

  • SHA1

    b99acd82dcb1173465448971bd79ec01070a6465

  • SHA256

    1a7773137dfec24df10c08697f57b45ff0ffa2720035a3acb38b25bf9277bc2b

  • SHA512

    2fbfb0cee79504d03fb87b71d1759e19249760a1454ee6212135719251db0d0de4aee0b175d7a641fdcb756eba9754814a7a2a3104597bc76b60cc3bb0c706fc

  • SSDEEP

    384:zi7KcRAa5r9DIiXbWVBD8c03Rxh/iXcmEfP4ycbp5pzVcrMDJZTO4um:zi4a5r9DFygc03t6cmGP4yGLJZTO4V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d3539268669b84c5f02bc4517969da5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2440
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2440 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1676

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4ef53c54220b923f039aaee72526839

    SHA1

    05771f6099c05c21bef45ccf9d74f85d3575c442

    SHA256

    0289d65cc2eaf5e40696f9d3ab93533721b82c413363faacd45e11d4b017e12c

    SHA512

    3207f7402252e345bb904aa0ecc4bd2f624928baf4f602af4c2206607b24808461b09e1421cb56afbd20ea8ec84f70254e2a31aa4afa9c55d0232cf8ccd46ccb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a67fc49d3061f4cf6c49e8eb65534c8

    SHA1

    c170787f578f280449e9a7f3578ee6a0997b6655

    SHA256

    6deb99c3c4f9194a978c0e45a7214474be4c5369ef0c0e95bc992a04298a0386

    SHA512

    26227d4349f53517dc3cd74c46674b9f58872210ffe757be732db10ca950025438d062814c344fce09402f3ebcf09e45108729ada3e38b316e7654ee1b58c294

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92f86aa8d6a9a00b054f80a14fac5e6b

    SHA1

    1dbe8d08433408ba04dcc918e36265a1c892a7c8

    SHA256

    9a5cb0f66bee5dd0ed77e8480bb1d57c6efc7c27476d729cd39d9c69e0083317

    SHA512

    2214516129dc53f7eed14d0f87d33a9d843c64c6161323a8d05a603b9fb5a1b4d51a8c144d41d0c3c781818c7dce535c46913eeef7c290432ef3099ce8f6a152

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88cd876845759f382b764a431d929255

    SHA1

    ee1cc5d89f03aa1236aba2c36d77c5948462ba46

    SHA256

    fe978185c106599d1974ae3fb8177583cb1e4e6a644f88b15f80e43600dbd30c

    SHA512

    1f46cfaf07fd181539fd88c1b7d1b982b30372e4ae720dd97554db054aecbd4618f7e1d3c023a06b4e512652d18ac530a616579cb58d28bd75eb426b1e72faf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    430455ca70bf71e709613dacaff5ad70

    SHA1

    91ee1774794794991613e4064ccbc420815d5a55

    SHA256

    cda012745d4c266161e4823896407fa9718de0a1464f7b55b83a87b3ce0e1077

    SHA512

    18c9a6936349057ca021bec47196349b70d6e84232bf27472d37d0bb7cf495768ddeca49fd90bbff14871be89812e5a0dce6f1a520859157d748899c91f24438

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8e7d40d7c53484120c23a84486bd491

    SHA1

    75aa92123eec18e1c1e08281143710fe2cc0dfa1

    SHA256

    7c2fc82222e1063886eb31e920e9deb676b4dca6de99220627eecd439ef76733

    SHA512

    d5b92b723fc33cb2329c5eb2513d3bc4faf568097361bc3299f14b6c3063fcf7eecebae3e5a1a7d2f506f86f069cd6ebfc4efd9944aacbba6b17ed1f01d4a58c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f198abcb810ce20e042c01b97d69e508

    SHA1

    e3d8aecfe3f4a61b1e4d7e17fb685bc7452eb644

    SHA256

    899070e224ee6e3f73e6711cbb9f97f7cc6d4cea4a9981fcdf8a61815cf1fef7

    SHA512

    6c2082ad370056087c5f69be531bf7aafc13784b0bb132b4080eaec53187c8a5a9ccf2bb3e9577b6c5e36d979db15ecd6350d5f84a972fa9ef1da48b45290009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d81f200fe6d886096c213eb82fc93c1e

    SHA1

    97c603894920cfd6e5ee100b331620739c34ca12

    SHA256

    ec293704e814bfbf6d633618b8a8b6932c111584a9d750988914c36bb6658c3e

    SHA512

    74be876ce0f81a7d34b129645787a1f585e3885359b68989d056009e82b2055d714b52568c0651cf6523998499e6fd9b22c093c882438f569458af224b245e64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ac5f7f84504b7a94c1d1c32942e3c5d

    SHA1

    8aab80674a4819658f10ba0fb58b769e2b1e2a8a

    SHA256

    ec712060fe664f0fc9d421f8fc5d7d56638de1674665aa33dae8255f6f097556

    SHA512

    2bf996518aaa9bec32b541ceff50129eccb50bc058b4276334d08794c274fdcb97abec7e149559627dadf03157fced5fdcb23e775e79ea0f6524b836309cb73e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36d00c41954892c05ea7958b252be790

    SHA1

    46df45b63435ccbb323f2b2bcd64d0b6c14dde02

    SHA256

    5ab8690ac314bf07f02365d20c9cb3bcc9f39895b310f175d4aa815008c8b633

    SHA512

    ecdca1d11e0776b01b03264f8765a1fe6f53702a54f8c7e954514ab400e145f122886911f309e9b14599f2d8281d6ec5cf6b3d20d8f3efa8766db716e4657f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fb00fe904a031be540bb2c7a0aad5c1

    SHA1

    c7a0787dc9876db72230ae84d783b2b7279153c2

    SHA256

    2518feb8e7d9ce5068b80169e387092e9670f50139c42ed652333eee7ad26571

    SHA512

    0b34a5381ac6750de17d6a388021fb50a6cd0a3ad68af7384d9d8eaddb00e34a782bb1786c6ccda80e7a84eda92b1078ddc625106f2246e40d6a313a384b02b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b2409ca13869ee5ba5ef4a1b140cd24

    SHA1

    6bea88fc2a2d158ec0ed3c763213c1d24aab0de2

    SHA256

    3bd66f9919fe52c85f3f55cf7ca2644852d4376aceda67346e119475a64375fe

    SHA512

    47984a16d46398ed154e7156aa1fbf85cb59c6d637f00b4dab6c63cd1e512fbec852fae3182ea7cbd510ae2d3a023d3fbd004184fcfbf549f4fb86b887d84472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18440a6e8bc6f2e306fe15574757eac3

    SHA1

    8928a3de2cb8e2bb38e0315a37706622d02239f4

    SHA256

    7442176b43188de5e79fdcfa26159568e47bf880ec88969abd1f39ff92611ed4

    SHA512

    5257c0935c80a731f1ba874c56ba306e3ece3df2d0d1854535cd1468dcb9c03668df0c2680dee4e02187e0999c70caceb6467aced746671a01b2c4c0b6323347

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f437f4663d351d06f55352d8c0e43f6d

    SHA1

    932b2ee9f6978f853ac8b5b8b8e6b7d5d534b74a

    SHA256

    119be998a5d2b7fe459853ed421e47a0313841c6ff450c3582453d120f07ac50

    SHA512

    dd353592deca87d31750ec6cf5f11fce437545c7be440d575c2e05900f74c6d7120d1f6d8ddcb66dec64b128acea05d76407bf146b97cf30ca4861e79cc7907c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69014fb00ea4a53df9a525708e74eab2

    SHA1

    88a317450760636e4bc85b0659d0152817ee5297

    SHA256

    488e4d6024b3cfcd2b34f2e8e110bdc6e9c4c8425bedcb575f393faea6827afd

    SHA512

    6e59dc989974b18163fb9cb86424b96a77869d66802ccf1f6d2b87597b3ec41b91ecf196c4c8446149a72b36acbca9b3e78eeb58f4d9f9d51d2d77cbc46fa100

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    710c7b4d70d9adae7044f992a4465e8a

    SHA1

    41bde0e26af94b4154069d280b66b520684b83d6

    SHA256

    ee76c62b24c1e1e4c90b61cd3c8fdb1ccc182e7e7a064874f1df28ac53a658cf

    SHA512

    96785a153a6776da983b253446dfc4d372b753c433d9f14e50ae090612b762b3e1fa538770558fde5bdafb99675acb29004aa76c544992430bde6a3bc2d96854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4630c218d70292094b489baef2554434

    SHA1

    a88fcb75a68eeba39f5cbd5f6e57d4f6e16a4b86

    SHA256

    d17bedfd96786419b6070595ea9ab9b5d1a8a5d5404b7cddde79159cc1bfd92d

    SHA512

    bd0d7e33bd1b1c5963329b11ad04feba779f9335b5c800d685967dd5706da8822ceada2439308c266a53c2079e1c3ea7d17fd3df5075c6c901ef15b44b85c728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    433dd1e0add0d06eabf56bf901f6a7e6

    SHA1

    7f920b8ca3fc80496be100481082cfa35ab9ea92

    SHA256

    e754b4f7b091ca0ff87e2d95cdb28d7119565ed4966459364a6303312cdabd83

    SHA512

    24fcefee0d3980ea3307bcc9bf68f402f79f2cd209cd68a2c6cad331f5c2a9cb9e783f535d39201c511a89cc7a177a7f3f6a02e6df7e4ee7b348764140a97ada

  • C:\Users\Admin\AppData\Local\Temp\Cab2A8D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2AED.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a