Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02-05-2024 07:47

General

  • Target

    0deb07e12083f7a2ae36fc51db6d687f_JaffaCakes118.html

  • Size

    69KB

  • MD5

    0deb07e12083f7a2ae36fc51db6d687f

  • SHA1

    8b560e481bf8a0a6ba81692fb806edad1e1ae3e4

  • SHA256

    3fd8319a3f5c8ae2dfb4e163641a0f2305a1e11dfb34dcc26ea4e71374b0ed1d

  • SHA512

    4ffc824f2e7bb8afdd78327986d1d8c871d833dbb64062eebcbc0ac330069e8b0332c5e8f7778f38b100b8ba519115726f118ac2cb6f6e520d6e1b89e41dbb60

  • SSDEEP

    768:JiugcMWR3sI2PDDnd0g6sqoHXGDDeoTye1wCZkoTyMdtbBnfBgN8/lboiGhcRoQS:JywwUPTvNen0tbrga90hcJNnspv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0deb07e12083f7a2ae36fc51db6d687f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1676
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1676 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2324

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71927bfb575929fe3d67c63c629b2252

    SHA1

    08e0e49377d636b79a50b79905efad46d37a64a1

    SHA256

    31e8eb2e122c431367cc434600d1563d0300702414c30c3e2a0a398faae4b2af

    SHA512

    301bb6860c613014aefc54c504e70c19f053af5d5308e5a75f7327399ac3ad727de0a1c5562b803df7df97a1c19ac1e216ed9919704a0da020e19b5ff2db2a1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    863efebb67ebcd7d8c2595a6158a87be

    SHA1

    b0623ac6ac09cd035f5594945209be36880fb248

    SHA256

    5f980291da716d7e354e937c434324582a374ff3a4782ae0263742d2c8bda785

    SHA512

    393eab31a87a64787af9a26a43d9d6edb4f977c48c5e07953546d5d9321cb560c37e6d931d84388e62f7811b99890f40b6a5c59b9838c365596cad09c7788548

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    728b86ff578350d4e2f6d3c949045c13

    SHA1

    dca91e724284e9cf4f1dcaf5f7eafa48148e7859

    SHA256

    67b27abe190a9b240a153a6a14f216b2567ef86c4ecb163f95aa5864cf262552

    SHA512

    a63421c09e0e7224da521f62bdfd2078801eb2a09cef5b22778c12c844b0d44f78924241cefbc82af5b66964ba930b22071ff5ee104d7b4e43f2ace79bc54fb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa93f6125336ea0e367498a5f78b0c66

    SHA1

    ac7ce859ed58311b43220951632d64bbbcd68686

    SHA256

    c620e7a8c8b18c0727bbc94f0c333b839fd554e73711269af007f26ebccf9b1a

    SHA512

    6580f60e3973c66ac0d5fab57700f91e59e0444a634723a3e4082405ca7f27de7cf9377dfc2291a25646097ca896e7261d9f0676e1f01bfeb13995435a9cd254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2399d49068a6e12c5b8ebb319034983c

    SHA1

    94574f193bd81375556cbf6e52b69e6a39291c76

    SHA256

    50cefad409f9c95bed7eff78ea83513cfdf79d357f345b75d3e9ea428297d6d6

    SHA512

    b09af3bccf72444574bdc5604bf476c45ffab0f4e77363ef40eccd815f49074d69842d9349f6bd26b730538196a5cdbc9aa231582920c82d8d23657dae6f01ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76fad0acb48b60395db09180eb9cd622

    SHA1

    4727d376fa025a51e1ac97ca92e37cc8bb6d9f8e

    SHA256

    be869fa05968a7d8d8c2fb56f947fa24f817d320706491d498e5f61be588c9ea

    SHA512

    75ed752314a811221c355bbd42a6b62c98b309e5e90287b2bc230c976f1c01423ab6a1e93daaa115c86792dcfdd6a7ab27e1c8ec7d23575224374d59e87dbb9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a90727cef70feea6a6b49ca4865452de

    SHA1

    f6fc67b68345af2fa28bf25efc3cf7716adedac8

    SHA256

    895c37b4b493ff6a8e5ef7ce7e0b89318f9e230649bc4ffea3406842e761256d

    SHA512

    fe5e4e0af8d3f6d8bab3d966651fac3a3b97cb6cb1c70ae17c822d0ec697a9578233da3c39491c921e71c8dc52209a2f0642cb5092db7fbb5c74c67d89dbf75b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca2adbf1e43ff1e0da7e1739974219b4

    SHA1

    b8f7dd5684dc3ae1d488eb7787ff2aa527eb7c3a

    SHA256

    57627654724906f6ca6282cf6e9881dd6513aeb7183647f124845f28ce844685

    SHA512

    6f115aaaab6208d31af691b3d9198991470e0bb0c43cba2d104a86b23f1360873d1e749ff916f206e20c5d30bd4c2b4190b6dbbbed99286d453048119cf903c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d996e4382d8ad27c3791c7b5e9bc0e81

    SHA1

    6d3ba65055b7d3e5175a717114647e79c28843c5

    SHA256

    4eb85e40ad2a5de6d0b0ac680cc49b5ef7932bd20d4ab11adc2a53faf394f9fe

    SHA512

    48cdcb47fe34abf5106599dcd15af057a7e8be703bf49a3266d232e9191793f9744e2cb8a06838da99c54686f02eebeb2233347a8353920b2d98b427acd1847c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97dd0c6d55f93cb0a40f3efd3375d85e

    SHA1

    2e870b04944c885c838c3553c7e88e21d397f893

    SHA256

    5809c0cffd9872ee954ecc84295d9b23be4354effc2aafdde312eb0ca4785873

    SHA512

    e2d79d065165344e8ac844aad9375b1160486b8235d847258385012e0fe2295664c9068b2f3f532ee9b0e66647def5d49109471568008da73cc89918293a9c96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bf63bb09dacbec6a4c4a0aa3362c69e

    SHA1

    64446083879075379c3f73e53278930d9724b2aa

    SHA256

    762cf193b583b7a0a8c859fe33c84adac23da7de6c946d76639694ea0a124d4d

    SHA512

    ec932e28835bec7dc0d7f8716411bb549ff819492bba61e6684261648702940fef90e40c5bac6735448967722796f9075a05ea857e29133e9404d3cadedd3f19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0b9d3658a6062e65ee5f62009ae560b

    SHA1

    8779402975e7c8121e1df7be46be9c05291e93a2

    SHA256

    36d883f8713fb0f93a92e570a32e045befc533cc6d1180f5063d6d9637b88b56

    SHA512

    995313c8d6069d3cede1983d1425b1a87884350ab9de47bcfb272eb3e887f917e66381975abf6e32deaf3944703554e04b1b7ed0596166eadfc663b3594cea33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55b50f69d8ab347e6835e08fa2f5d50e

    SHA1

    506ab1495c9294df60a85d63dec604b91ab7aa1b

    SHA256

    929637e10065560c606ac8b9fa1c964770d632770fecaeaa90537326ab1e1d4c

    SHA512

    e0a82c802da61ff336746aa7996eb93307d2b4a03a736b957187517c87300490ed43fcd64e3bf16159ca1667118c42b87a5688313570b5977ec41991990edaac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6ada389006d5665eccbdb1dc1fc5cc4

    SHA1

    bc8cdf1616b34aefe79b55819ce6c5cd04995754

    SHA256

    3736bd19a8652b713655f404cfeebe73d49bb20e789c0a6359fb64eb6d3d4f10

    SHA512

    705fcba02f33db9ffadf190c1f680306fd7417f97090603df09e17125b0f17d303d432bc47b31e9283593748346eff0f3eb21a6bf259ae6ac9d71ec0ab41db54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4366eeb0b80d98dcd09bead4e3df97f2

    SHA1

    9364f354898ab68803861eaacbbb88d0e038ea7b

    SHA256

    fad0ac0a1debebbc84ee6e5dcca88432468383f0d062f71cae63af9ba8d1a3e4

    SHA512

    3970604251d5d756db1481ff0ac6fb1d62a2ff4744a974e0aee188b8904a418549a5d050fd5f75316169f116996178879566fb80c3b1108b9781a5a939ddb97a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9539280463505fbfc20001f5e00dd32

    SHA1

    9ebf6c51b52115fcc37b010cf7c8ba2163715ffb

    SHA256

    6209300be076814eb3d563f815ba6bb6a749b593ae86b27874f7bfc68863d801

    SHA512

    3a995c201104aed6b8abe4332c851aaf4165f95d0d57d264080b4035615817b3ca7856608e53d392fd8f0d7398ae864e29b6d7788edd85a0a5196589bc69a343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    beae360c623145c9743ac051875e7462

    SHA1

    31442d0eaf9505917c5f02ddcd3891ebafc590f8

    SHA256

    0d6b5c790ee16ad94e5817137bcfa1f058651cb67c0e8fe1db9de8d73dab9798

    SHA512

    21277ae1c310cf87d621ec544fbefbcc4de822847b0d58959bcef153a4c8a6e549626ef8c3e90a071e360d9e62de360ec151140e83c46389ce946a994ea6ef84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ebae68ecbd9e176d44d0c08781ede30

    SHA1

    6ada71d903e50d2e2fad4fb181b32611033899f8

    SHA256

    5cf3b7a618cc8e35e7dbe2481446412e933d143dd42fefb9a6b15d4524b38b00

    SHA512

    914e5247f3cb76a3e2a3e3351212d87b37663ce4de4a6c10041eea315de279bcdffb1b36dd37763ee5681dae33b1b30ad88ee585c83714c04f3e67895f8d7061

  • C:\Users\Admin\AppData\Local\Temp\Cab347B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar354D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a