Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02-05-2024 04:47

General

  • Target

    0d8a6d00b97ea147431a85744f16902f_JaffaCakes118.html

  • Size

    143KB

  • MD5

    0d8a6d00b97ea147431a85744f16902f

  • SHA1

    012c2fe8274c43292ffd6e17398ab74a6b15ae56

  • SHA256

    5f2f62afe7ba7a22557db3d122266f45a5c6dd35af6cd44fbf9e7eddf4858bfb

  • SHA512

    1bef97c2c46edb14e5f6a862d2afc88538c38e1cb52c223c8280070975d96271397ed3b4bf33d7281703fc2d79681242a1f75896bf4602d67cdb1e148964ba18

  • SSDEEP

    3072:SggX76CScwVXx7dyfkMY+BES09JXAnyrZalI+YQ:SgI7CVXx7osMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d8a6d00b97ea147431a85744f16902f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3e0cfd95c376b2863f319e63181cc2f

    SHA1

    82a8277543c723d03cfdf6318611c09edf9397e4

    SHA256

    ab956aaa624ebc2da97f5ac1132f653188aed1fee23cbe5994ccb02a429b3e0a

    SHA512

    dce884a88bc542208dacf88cc5fb2ffd4dabd719f34b425988054287eee63cd7b008feee7936bfee08e5ba37831aaf8cc4dadad2b0318ff610ff9654f4816f0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ea4f936d435e588029d8de2f2eec1dd

    SHA1

    18c8f6334ce90744b7f5faa56680a10d6d81b79c

    SHA256

    66fdef5de604234764e3701ded90be86b065d1f654bd87584f5c485f8bab674d

    SHA512

    7398e612c735872dc78baa08499d75218ceb0e9c0ecce07cf32b6c6e0d216a92b00e61a274b8aebb8b20a60a3dd951927b098002e605439f7dad485100a00565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84a9df912357c0d5dd588043107aa57e

    SHA1

    eeb3542345fceba567fe9acf0cc8a92bf678d60b

    SHA256

    61dd824dd29fba317696c26c4e5fbe97b1d99c8c57144fe875bb848903ef2468

    SHA512

    2d1fefe06f0a298a336f1a7ec96fc50c2b23433a557791b9e2accf105daee213fd2604496293cb72f1a8f11110bee6aea590d7ad3364ce89e191d494d764c611

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b63ef4ff9915dc6043098584876f87

    SHA1

    b76532c514a8abe36c66cd06ed6c791bad3a5275

    SHA256

    3933a4ec0e5d587bc873d401a8571e382208727a23ae81ebfd4015ecaafe9b76

    SHA512

    60b4dfecc35122490cb55f276e587a3b9c1e79b44c8cf8d30e4272bfcfe3c12c3489e46221c83812d52eb243e30e38e7f2211e262ddcd875fd0a93457eef0c33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5a508105cff42d4b41da6be02a87978

    SHA1

    80507b9a7afb35ff75139b533feea67b5d6f6103

    SHA256

    b19607f43228f90aac4e8833c1385ffe7fc36b4a634c754bf29ad914bd8a1162

    SHA512

    5987e62af4c1da1cd4931f65240abceedce9789dd85b227318baa8ba3110b557d9cae5e1fee85f88288630342ee9bcbf312f844f246301921993bc77a7d2bc0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43c21977a8e38b53836e8323ba5334bd

    SHA1

    b5d2c808ec0e9e5741a14bd80885d26445b9cd42

    SHA256

    70f84c42842a09a12e516db97b01224a23134b59515349397d4f34026ac756da

    SHA512

    12b20062569f26d40852abbda0c6aaf97556fdc0b4f118663f9455bf5246aa3829c3d0a8378c46d1dca0d52241c2c5d14525eb8ee85b1c8b2bff17a0c375dd5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e25e72240aa0aee1bae12fa0c64b2b7

    SHA1

    23a67ec6a54d99d4a587de77898ba06f75a2907f

    SHA256

    7d9ba0bd26fe64d5b2ac63d85971bc3910f07b54bf192b89c0cc9d8bcb4484ed

    SHA512

    89e7d807c1130ae4f75d1ab03e93f51001e939afb425a1a586e7de6762e4719168dc6f3555d2e0bef89960754deb2f8c2fd3cb88fe90e27de9dbf19a55e3738f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9522747c041735ade340ea3ead3a004f

    SHA1

    58b47f00d41727b18a8caca4327bcbbaf91092e7

    SHA256

    91d5f8060ad0e57eaccb0a073d72f2862509134809072e82def64b8c6535a235

    SHA512

    2c34a30dd76ab1523d34aff6165b94886fcf13fad50cfa616205d224831af0f1fcc7a5f1ba9fd5853ba804fc98f455cbd4812939fb46f09d5518cab0e715a862

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe98a1cb3ffcb7f82eab0d1484987374

    SHA1

    b9c0b7ac53e7fee13d67a0393920b8bc4c927204

    SHA256

    0276e1d45222ccceb9ab804426c67d5cd3a2badd385dde8271b7d00b018165da

    SHA512

    1e39d3f20c30910c1962db77e114a431c6adca0ca69bb76dddc223515d6fdc8268d4da9d610cac608ad3af104c0a01e8ba7673eaa1f42b0fb1f9d82784a2e005

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    407c34bcca64c35c161b2f290604cbe3

    SHA1

    ebae35e6f3f9605089716d019b9846602a1e1dad

    SHA256

    4a30cc096973b5ff38b11517bb6440256ad08ed246309ffd96374e29f33c4e5d

    SHA512

    936fa6d7b8e0d259395ac46e96e0e55524fe58c6caa6e43b9f62e8722e662aff580fc462ffcfa2d8b275e9007991d7a3af690a7003a24c2b2f95ec3f594dc9f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7862ec1c1d417e0ae1aa35b7a6110e54

    SHA1

    361bc6f0ee5ef8fa841c4671ac4860b2ee8ee04e

    SHA256

    85d721f7976d3c006c231f2209e6babed068dca9decab5d1771490165b4cf1e8

    SHA512

    d3b4f270f8e1a2aa95c4ac52e4230a128b3466c68eb8af53a39024b6091764573dd319aac30bf497da01a9685a5032293a695bb5522b877478de444f4c1e75f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee4eda867c9207b05f5754442b6cecbd

    SHA1

    28de3d013f4cbeddf1ce89112c8953cb9966fa7d

    SHA256

    144913af20628e3c87a6a499211ea45a567eebd7130d77591e2040a7b013058e

    SHA512

    cb12357416667352341861a7a127dacfa1664a410e0099fad8ac590ce1b7347915d160139f72f835c2fb036e97dc7bc51088463882fabcdb249d5d8307096689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11e77ffb8bb541594f88402117636e01

    SHA1

    18a0bd72fc9e418fb4808842f8b8b183883cb97c

    SHA256

    e03c8929d3c304fd0d0791511ba0a2b3f5438fd8745c7470dd06125b821e6eba

    SHA512

    bb64b1659cc509b747696eb2d937b1e4a22b48bc2747728082a9c89afd732b309816058123761bc7371d0d7c2d67b7d0e7a4dc0a9e3c2c983c7ef4f601e91178

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14ab4d5529737d04209d44cadc689be5

    SHA1

    70952ff72620d7e8572e8d8fa2e96b3f6c435f58

    SHA256

    360501a5426f47153b7ec97dbe61e5931b2c99320286c238a96954125d6b5504

    SHA512

    38eac0c52f7b4f26b489dbbe91b5c25fa15361230c8ed3cfee0b5fc493eb48da58dabe206b7f0fdb0cc8bace53c6d465f4767e531cf513d05db8546e420c0392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4319ce3948cf25efd6fb097975d39320

    SHA1

    990506e3c2b8b6441f9f253bbf59db7c7083811c

    SHA256

    6d43d1bddd059faae0151516ea34b60dfd11631e9325bc769ec7eb84e2f39620

    SHA512

    8cab01a668e8e564489c500ca1cf67126039d3f1e2f47d4b0fce1004890e4f53c59d428e33e76a7919ebf2eda67d0622f1bd180b9843908af90c2c508d92ac63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5433faac360b9728771750ede1f1b005

    SHA1

    9bc4a119e884f060f5019072f8de2d853b227ea4

    SHA256

    eeb4121b332670d7e44103fdfbf8741b347905894c2a266f7e352504b656581c

    SHA512

    7cd6a0a3dd1f2b3d9f5ebe557e6c5c7a6494d99f0cc7c629a464cbcebf4f4f1fd64873c65db77cb224192809fc1b78180c954f8858c9ba6cad7daf1c323c0b99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6eb9f812f2ebe0f68f3be8a776da64cd

    SHA1

    44f2e3f3133551e742e21047f804fe5dc0b6667a

    SHA256

    d9f705b6ced5b984444da8b330eda7f7bc76e2c5068f8649ef546936bf065e33

    SHA512

    b56ea65f7b8f1d8f1e43c4091d86ca1a21cf0df81a03660ab229e9cf55a42b2fa43fcb92c7a6d9f306c42a6e62d2e158d095f0db2fe5afd49f7336c0d3cbd0db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcb10144a6046670dcdaea55d9cf7584

    SHA1

    23dfca2cf6515f1e8f5b6587d41e2aece9ef3cd2

    SHA256

    815a32446b11833f4bac09828f9acff967452c667454e4b2c8ada6bf4b1296bb

    SHA512

    44931428b6254d1e37cf48ceb91ba495746479541a7e755c5039d48c950fb9bd9db6c2a91e725f486804b6c1e1956060d44b9488688309498654bbd55908d34e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e1653139c7b9cd147ebb302919b7267

    SHA1

    ce4534a8b327224164ae81db86e14b2f739c670a

    SHA256

    5b202955e1f62468634250f851118031b68c0c0445d65723cabef750c17bd2b9

    SHA512

    6406ef46acbeddf464cb39b8cc71640aca2239ba595e7fec243ad960a2b25377a4500e4ac63f7232ae8ec31d5b3197da71f105e914a45162ec819f31b412734c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72257bdbffed243a5cc67d3ec17de182

    SHA1

    9e0478d1bd960da25eb51ba8dcaa52c59d523542

    SHA256

    78c381d136f57b5c67c7704a5759e60c789d8fde861b047772d8530dced54f1b

    SHA512

    e804e4700d0b1d127e3522c737317529ad2b5f38eed3b6d1837d4df61a8d04c019474de08e01197392bde5ce67a980744e32f9a070e4227e40028530afb5e4ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5186bd67f5cf84e352f790636508cc3f

    SHA1

    1f0d531241bd96e7b47883951313266afe4a6c2b

    SHA256

    b803eabf550a66719451a8fc3ea69d8da6494b53cdc65291371913bb1bb06767

    SHA512

    0c5248c031ab6ee8f38651b3b7550d00cb1e499c73390299b6eb2fde69a0f0dd46fcbec93ebfc394309885e6d8324fe4831f4d53decd5f2416d39358730529cb

  • C:\Users\Admin\AppData\Local\Temp\Cab1C97.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1D79.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a