Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 03:49

General

  • Target

    0d686ae018e5f3c0502c6246148883a1_JaffaCakes118.html

  • Size

    118KB

  • MD5

    0d686ae018e5f3c0502c6246148883a1

  • SHA1

    36ebcc136c2e02f9af6567f2b0ee7b268949e962

  • SHA256

    a1a87da31b48e767311b86ad843049f0e47b1f08566ec1a521ece281e50ad78b

  • SHA512

    9473f6d728fb917beb927a03289ad67f1b5448eca09dac051042684827185557229991b8a1ddeea5d2d511571f2a887f080b7115ee0ef9bec3e9ced98368b81a

  • SSDEEP

    1536:S0vZyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCW:S0vZyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d686ae018e5f3c0502c6246148883a1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2872

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5574565c41315d0f016c9080b77495ab

          SHA1

          c616dbb1a61caccadd6af0caf8649610d2a76928

          SHA256

          76fd78538d570785bdaf2ed1cbecc6d68864b8f59c9ede56182d0a1b57a30f97

          SHA512

          b417a25d7d9af60a607ad0f8f2fbf0f13dca73baf67d2e6ec4fc5d77b42a7a24375de4ea0de186b8e9b6c80499ec5cbe3955db85674b8b708171b44def06dbc2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4239a03d12bd4ecc59705e3e5a7b5523

          SHA1

          993489cd113d3a47c7aa2d75dc11c6bdf1384a52

          SHA256

          dd255c75b9b01167fc0cb698ff39b18bac67a4661752ff35070becb107242761

          SHA512

          326a7c7f092d34891f4001b738a2ef158b4b689a46b0443b27bb781c949f8991f793ed0f1d531608c15d50c9b65ac23423c5bde7b2fbdda1e0e9aaa29dd20d8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3b03bff549cf6b02cb4b6eeb600e9657

          SHA1

          8732eeb8c121c26ac44d77e66eeebfe4ea555516

          SHA256

          5fca7a6252982b7d54de964308e4da95ab2698e8e087eb6f602c62afb50e9523

          SHA512

          e126e002c17b8468acb1a96936239e55e8bafd227171df6c6c3a13c21a4458125dc936c3e9a8a0d2ebf73c7d3d3839cd6910f68a02ef0cd31e5c8bbd2b0dfd5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fa43be215ac02c4d79830d08b5b562d7

          SHA1

          f64ac05ebe2e0baddc60e3437e6e25fb61e39c11

          SHA256

          7a3d3fc2e682fe73c065732acd559a58a8971d2ca67e676d82e7594477c60646

          SHA512

          6b6a1d1eb5494ec789839a6429f15ad46e303b5fc904659204f88f7386f6a3d55494ef19c9bbe292aa902cc7ce427222853b34950c8b776ae1a79ab589429450

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          88301418532a5784680a86256d0f2c81

          SHA1

          94c9035b3e510dbe5ec19a617f5edbc023213d91

          SHA256

          d1edd36c34da7348324c08e51604f4402229db987b1271f61047ac471a11ebc6

          SHA512

          8883f5bc06cd1af5ad56d6e0f231f8261bc707e45f91d23bdb0362a1f7fc7e5e1d2b37c9778e76cb6ae9ca11a702ca2ca6b24d7757d7376e027abac369ad7f73

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          99d851c9a1537e78747ee20e19c82e03

          SHA1

          73130979a6e7eacbc6e790c507efca55618d8703

          SHA256

          c1a6ae5d44f87a9133d7c45c3d206726140c83b55b36b4e585a09898e504ee32

          SHA512

          5565050a67da7c0363bde4c8f6495ff5977c569e97da19c2529c6eca6d905108e64058ba523ad314824aa5f5e639474daf7a6cdb3477d128e1593ab8eb6113b8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1860c5218f1fb36c3ef12d9b1a2f3685

          SHA1

          fcc33acc951aeedde61b6819528daf96babba0ad

          SHA256

          b71c67c5a8c0c603624e77184b2418bf5e6258bb192c4f025e8904694d5c5e50

          SHA512

          28f43364f1f0dda441cef5dd2285ebb1b7d0f3f109580d9ded97dc290a20914ee818c0c2505c34135793d54e704ce914557358369c8f9d4a2cd119eda010beb6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          36bb2cd4c370b7411abfaaaad660478e

          SHA1

          cb137d32a402c453d5c674c65357bcce047193e8

          SHA256

          deb33fa495282deb12652e703e109370d7705e76dedb4a5c7fb14d70ba157cec

          SHA512

          6795f31e16f2c76803d16979ab7e3179b985f3d9b60c1735652f66bc3e1bb3a879437aa7c49156edc4f722ea40cd1667166265621cfb22558205f10df0c4936e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0735526567e7889cf572ae701988af78

          SHA1

          50114445fe7ea6998f1ed67a4158cbd12fd0787c

          SHA256

          14b5840e753e0a9f5be54b703c968ad6c2836be98ebf6fb78dbef9ac50d3aad6

          SHA512

          072350c29daf3e3cb48de454cba23ecd68857b06430ebc0eb86fbff83fcc030b6c64f92352058d0d977434e2b6056208547dbf4087d06549f42d0359045fb19e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8a53576c6df6454a2b5b2e22e69af848

          SHA1

          fc47135051c8dcf09f92368ce7b0264856a9ee52

          SHA256

          ced46dff1f8cf32a30809ec04a051f9e49063106fee709f8731053b5f37c0335

          SHA512

          9d9f3551f465e2d24672f15cd3d6910b94f1e278551d00b6bd6082fab75fea02bdd5fb308b4456fbfb862e14d85dc6be92b2fc36c3786b6e54b982a00403e724

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2d12ac0b10565bfaab888d54e78a2381

          SHA1

          449cfdb47f084a0a6fa1e41d39bdfc6247531271

          SHA256

          bf7651c55c55a931084e1613d08335a010d7e71a9728d22c3d8e8cfa7bb705ce

          SHA512

          9919e4c91d858e009289a34362d30790b899ee73ce0ad6c624246fe1d42853b06ce4e5f7b66c5f9b1e1ddb2dcce6c1ddea5d26321419a7ed4b1780f40c06f253

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e444854c2bb13e46f59835562a7590dc

          SHA1

          a45a2ddc10da236fd4145240faf7dac58f8a6cff

          SHA256

          1b79c7cbc4e4371c6fe60442d42edcf30185269cb41fbe5967f4e2dbb5c65c13

          SHA512

          d4ccba6d110726af3b37055cc2f8b071d8a3cadaa428ad6926fbb2758e13f7989eb4b211f7f9c325ec42573ac8a5bfbeb01e7a0ebd1d1320dc3be6246751c251

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          32d6709eacc4ef8c55933dafd7f8461b

          SHA1

          13860d21b937ac19650b47b381e16c0723707c48

          SHA256

          f80f9db308c3ae59b79322472a6dcbd0b6ee55024580131a6143a1424fb3babc

          SHA512

          6298bc9ad79f444f4b3d066d3665f9642ee21704c550404dcdef2d4571a81f09da4c4cba31e8b3016cad10ff9bb995994dd4e517b8d19f4c160e455b44576eca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6dfd1144c470ec023dbe58f7464069e1

          SHA1

          4d8114bdaffd85a0636b416c40d0e348956eb198

          SHA256

          d53bfd363073fdc7e9bd9a44fd26bc21a590f1d4bc11bb542bd574354cf7b336

          SHA512

          29a14302d619c88cf188ceb57e6f4dd98867a6d79c5468e17b312d09b8b2c052af92db4ee624fcbc4f3b9e0d369db8b74ea41c1647f57fb36a71b9cee6a382ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          994795cfb721e57c44917cb6a022d300

          SHA1

          969e864f2d63d5c6c1014048d6682d426af79b69

          SHA256

          5b112dc7c10daa6a90f27f292164c97bd6c0ee6503ce2faeb991871dc87caba8

          SHA512

          7fe096c86d6870be31254c80fd7dce1d2f85d4bfd16ba6070b0f4936a8ce4a596411677b7450d421917088c7bea919f67d4c0b28a68499c85c978d97d3fbbc77

        • C:\Users\Admin\AppData\Local\Temp\Cab2DA7.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2E8A.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a