Analysis

  • max time kernel
    134s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 13:33

General

  • Target

    0ea40180d5e6924a427af4ccf903400a_JaffaCakes118.html

  • Size

    141KB

  • MD5

    0ea40180d5e6924a427af4ccf903400a

  • SHA1

    f31a53e0f8ac3475bdf67beaa87f454787dc78c5

  • SHA256

    c17a06cc5acb13c8c57d722e9bc73d2ed6ad12b1bf00d6e60307a113197e6cd8

  • SHA512

    73fc41ebd7ad7e3be812eda873edb031b960736b2219e7531925b3006caea6a25dd55078f1ee195f6c0a48302affa405f220f84fe0304026a27c74f776f84638

  • SSDEEP

    3072:SBG5Oo2vx7dyfkMY+BES09JXAnyrZalI+YQ:SBGl2vx7osMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0ea40180d5e6924a427af4ccf903400a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2784 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2896

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8afb7bb6d6c1229a4b2bb72c6688228b

    SHA1

    240a3e485193ee82d8e0b7f873fad641c32e1a8b

    SHA256

    ffb7636a44ad93cb649a7f7f75ae6413c4dce73cceb8053e12f2374653a44861

    SHA512

    4e91c9eb54c260dd3dadd4cf9276bc8c468014745e6f80ee2892cf9fcb1f4f43186b2cca24b0b3fac42263cb6700cec87c6fee96f0775ba96a6ab8207b5bc630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    376e9b4dc115cfd93f39fe2ec3896b59

    SHA1

    28a1bd5a983d06c53706567bae4207455a438d49

    SHA256

    4afecc04ad2567b728e0d9a31d614bd7ff020e8760397f3c2b6eede588ab8002

    SHA512

    3ebdfae25fdd4cef725383953032ec8387f45c999d7c683df764af890cb52161140b0a333d6c0822e7ad5b82f410c1421b3599cb025dcc5050e964ccdc3b807d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b17e56e37619e77529a469a3c04e621f

    SHA1

    d68b1c199374b405fd8a1a95421ab5974da5e9fd

    SHA256

    c7c3df4e63e61bb8d1ede991b511e636081405f7bfc27e7e4d48bbfb9c7c361c

    SHA512

    1efc92454cc1d543fc7a5603af70b301cc4a2773054141f8da5b3ef2b0656ee887767e97ee77d0dff7a7f245cc855eb621358d2c000d0361b6ce4c5826968a4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20b84c83ea447b791c1de43484b6fbb1

    SHA1

    5267b76ca6be42db504b64b14efe8a9e2c570bf6

    SHA256

    4d46fca1997822453d8496a8f54c74f8e11292012cd82c8478166c90a30eaee0

    SHA512

    8cc0efcef6ef14318031694778b2104d0113ac228ddc4ecd186561613f292f79d6c25e8e7dc962e60d2dfc1130212b1c3d28f99e739e9b47ad2f71f2e821af19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c53e67f2c3e85d99a5293c8e2617c91

    SHA1

    e72a7e09f693035fa6bbf69b9ce431c0d8efa424

    SHA256

    afb07c52d6331df3a4dc31cc0fd34314cff8f5920fb86827dc86a6cfc16fdc94

    SHA512

    855aa25330fa084ae602d4e56ee186ce955e9ddd310f145f72ccfed11da22ebe147ce442a96df93660f7de5e62b2aafb01e195309b4b46ba2ad532c2c13534e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c43189909409e6ac17dfebef2914ea8b

    SHA1

    6374bf1ffa94b422c281c8ca4439d44bcca52a77

    SHA256

    d1a123fb415f12c832cca202851d8344b5286c442c7f0bdb89b89d44e6c60549

    SHA512

    9d9243e3eff591f5df7084c2412bc837dcc134adabc45640552a412fe3050a6464ed9426248b05fdc05c0b9fdece030265fe0f045e8cd5df83f3340417a4b0b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9eec65d5492fe98597b4c27c4503bbc4

    SHA1

    e71ea2bf0687a979f7c214d405b5f9802a44d484

    SHA256

    ba66592802f8c162b25ddae7fec06380c47c50d18ff176250ba1a947c08bf935

    SHA512

    c34674e6141ddfc57353348e4697fa946893b94b62713b5d22c029597ed3788bea1722216691115f298c481c211b9e3d074733ec2982ea6f38181d6a3cd960d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40362100719564aa6355fa0728432322

    SHA1

    2e63f1d796a95e76d89a00099f69971cd5676925

    SHA256

    8d43d58acdbdcd354f5facb93690f58f9fe8a6fb9a46560e2007032ceb56e231

    SHA512

    63596471889d71b694b08bf408c374b70253c1969ab0ecbcd100132700fdbbd27a21beed8f61e42b50e60f3eecd28e7c5033f0589fb0643321cb3aac20f68d71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57bd18d3e80f11ff7e0bce8db23e2abd

    SHA1

    fba891d159f657590f18acf40247f609aa286ccd

    SHA256

    4bffa40425f461c589aac5e97bb7fc2ed76514b2feb63970098a7bae95db23f6

    SHA512

    e35a15d6238a3abe9977076a2b5f841f425ac2751269ae77cfa2968fb8dbd9ca94fe29894034c5998a13083986ab319fb631aa2ebe4d095b8d93d5c6d912fd62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63a52cba45db9fc953a9eb0b78e35afa

    SHA1

    259a3ad7ccb01a32b88c5212ab2f8f78715e2c69

    SHA256

    25fdd321bb5e1239fc453f50388a4e34a27d86db5078f829ff16b4404317ac27

    SHA512

    2d88a245a604a4e0b13607e0568f6ad8c5c1c48c73551b242d3245874ef5cbd6fba0c9227c1b954c11de850d73b895e98608b3fef472594257893f96ca9815a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08b668c1ca103006410bd450bd781267

    SHA1

    1291aa62b74473eb73bc00d823f776f2f60ddaaf

    SHA256

    0d21f1c47f14c733d525d45e5134035b3d67ca161388d7c02ff58693e6d14d21

    SHA512

    f65f0f0c134846b8fb73667d455536e77082efd23bac84e6c55d9b86dd94de58eada3d79f5e395a350fc08a4732d7273956c7b535d391101bc00b8f0ef973a51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35161e5d1e25b5795747b18fe9b42810

    SHA1

    565ce155f98efcb9f86f73b566250fe85a68a172

    SHA256

    1d737b333d5202bfdbeae35ec2546a344e8bbbabd74af04e88032cf3cc022f9f

    SHA512

    54351f233a6566132e8b7d8dd69a46f8e77e7545536726dbda847e6e3d9a8f4c8e25250f0ffad6d9a33c06c5b42cfde5ad62b7527519f88d4a35385d99ed4957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    216077ac74fbf1db48d6402c8feb5a58

    SHA1

    edd8823c4ea005dd9758620700458be57fc93126

    SHA256

    24de377501998b101ef9b7504d63397e33a1f08810130c5a19caf63cddf59c37

    SHA512

    62fede99b79a716889eebea24116eb8e5287b04e1e8137a07dae036ed84d5687ea40f71b6e73a72b4591b9f8b161d562092e1641872bd2a1a43a79039dcf2dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfebe2d02515d0e8670835fe2b8dfc49

    SHA1

    4e05f04c84375f8ec3fac75dca8259651083367a

    SHA256

    2602047744e582916196657d4e5fe378a403e10edef42880192d24bc7f022531

    SHA512

    2da78061be44a8d39dca1dc94a194f0f63f4bcd91e5dc1d80f44e4b0cbcdb116f31908237f3d887bdb03175d71ab3bcda8f8d2441dd4a147caf1396dc1178afa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3613165b652cfcfe6488e213862b13cd

    SHA1

    2867cd7e043005935a875923463d10ec1b5d6eb0

    SHA256

    a1f9adba35799df153d542abcf3461b7afddf1a869136e2d0cab2adde4f05707

    SHA512

    6d7c1ca0b1dd8c1ae25d135fd16e7814c602b103281876e3e0aa300c35715cf76810594958d6bf63b59573d7fa05b0db2cac204b38fe710015d0e584e3324d3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36cec0775894a2543f856666b52cbe60

    SHA1

    3da435839d67ca37c94e0eef3db49eb4814a3303

    SHA256

    cb6beb2faf3113cf30fb89c393ca916f8e576048b602b1987d03214069697fa5

    SHA512

    08434520a7b311a97455e7c41d2ff10b6b99697db014e4e9fe88de9a782e57588bda1863faa797838db723678fdae5ec5b34fe20f6488b73f8e1826996f5c457

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6be3cc9e6befcc3de7da5c30986e158

    SHA1

    8fb94d0452c0713df8cd97fd872aab8e63b077ab

    SHA256

    6f169bedf1d0355a9543c5bda1ba4d05f5bb2ba2282ff80a7304669aa96f23c9

    SHA512

    f24cd4cbdab02c3dd8e3b36f5de12e3eb887c2c0d99d3bcc235ee944298cedf4969d761e66bb8597c9c3e6df4c858cabe9d9a496cfba017576fc7fa888030eb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fc7fcbbdde7c66721d975123ce4f7e1

    SHA1

    aaee1b2b71a818d0daf5ee59cb4284dabec5fadd

    SHA256

    53e07b5d01bdee66848d64761f4f5b74e49c85e5435f8cfd0e5837269cef6884

    SHA512

    9a848f7f9ccfd4e75fc15d1a2fff3cfbbe669eb68934252ddc3b93356259dd317fb01811f166638e82aa8e6ac5ba0e02588e5c3b229ecffc66306f41d37333f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9119ac6e3daf3cb9b391ceef98a2fa92

    SHA1

    4649277644dc7212b84120b6acd8f43b9e87a642

    SHA256

    8770df842cfe365eba071830058b715dc8974932e296a4553d123dff155f245c

    SHA512

    404f1da137763657acfcd723e4edd2aaf346da5d5b3b8af48ddb5d229aa55ede57c2c59aa282c65098de4858fdf54e494ff9f7f5b26f72a410998b0997df3b73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4df3e0960b5471a82dae84312d95d744

    SHA1

    8a3478a95714d33f51206b5425c6fe1bc7c83723

    SHA256

    3e0b0ae1319c08a3edb34eb064239ce5862af1d6fffd61f650010e96ea64e7aa

    SHA512

    78d967ea07f83249e5524d773ca7534677e27137ecf2dd2a71b365e422ea7300d53079679b4d509bdd5043cc06e34f06f0909e4b98f3bb01152dd6413c16c6cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1fa5758289e919323aa9bd9302ebf0d

    SHA1

    b862fd01113f60b6b106105a46e6085868af3df6

    SHA256

    1696c4d41a87147bc9007f52985c7759f65a59ae9b8cad1a474846b72a2c07f2

    SHA512

    6dd668577b8a7c5a9192f98bae30ec631034bbcfdd5ceea0b7e9533176e4c8ac8ea3df00a44944ecaae4010877816456c958aa0a91e4cadec1d1a290b50e3a17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21fdeb4233c2f79e12fc99a4fb410903

    SHA1

    60ad480d983a8a29b00ca68d32e836b8de87b60d

    SHA256

    3938ac5d0c3571ef9f14f08f1096dd3245be28379d9d9aca867ee4fda3e0557f

    SHA512

    34ad874626ff1a0edc528903674481418fd4f148089de5cd49096522a1622b5dc5e8ff89b06aa1c92a81a6f2f8cf4957c656dce3b6421a63063a211727bb46f9

  • C:\Users\Admin\AppData\Local\Temp\Cab96C3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab97A2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar97C6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a