Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 09:40

General

  • Target

    10366bac0670fa5a334a5e14c59d736e_JaffaCakes118.html

  • Size

    23KB

  • MD5

    10366bac0670fa5a334a5e14c59d736e

  • SHA1

    9474272125a66521030dd1229ddf32f97a48cc53

  • SHA256

    a70447de6e5a922af42a9ade3d3288fc16688bd4ceb602b137a7d9a4d3eb6fda

  • SHA512

    4b0d6dd7a5101c3e5eaf9e4b68080aac4adc8fc8219dda78f50fc856802a13b48cf0372716cc37a6639c0ffeab09df1fcabb40fd2a40ed407f2e8cd59396b572

  • SSDEEP

    384:tzTkKJwkRIrXPb0pwCDYcbQ/BmxtaBVK5Ow120Ey8IZ0aZESd:tzTkKJwkRIrXPb0pwCDYcqmxtaBVKUwr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10366bac0670fa5a334a5e14c59d736e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1332

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5f37900d27477876b8d4c312048be97

          SHA1

          d05ee8e538bcac9b124b9ef2868620241a6b911b

          SHA256

          fd0c4bfe7ac86ae6d1795bbcceee9352c0e014606423456a9f4cafc58fa2f441

          SHA512

          0165358644ab58a42e6342ee7cc6943e8561803a7b6f1a152319d273e9e3c94a85139a5f1b6fd00227d8eb60e48dcb8416bf28a290ae8c2570763a3477e663e7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7a90ef0c4a40227ce6f8abebc3e942c4

          SHA1

          da03e1bf2a4342b160736801cc572049b53f1b2b

          SHA256

          9438e92b35317d7f9b4eecbca7e713ad76a2ee5910a6ff9126b6756ebad1dc40

          SHA512

          63ce660b224133df5ee88e3e1bd0a63b0768707a47645bce775b1c63ecf3426949c6260cd7c30900d21d5e23ebe39134733ba1c4f2ddeff80928c21cdd559366

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bfc4d4cb6732ba851acd55f3575d9ce2

          SHA1

          dda0859f228b1885fa621a79c54d0147fc55d338

          SHA256

          863e43d75a5376d78f7c693ecdaf482f9a4d780621a92fa1094a9d4b01e75053

          SHA512

          3bf2ca32d590966f1db6890a8caf1e107f73ff19c5810ef7c5c3f3fd444a2ea67e9cb0ef01e16a3eb6d57f897265b707b88345a02d5b2d6cc62f83b59dc171b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5be16ffd1eff80e9e75250b034419a3

          SHA1

          c59da903e43f1f5cdac2746bc5d4607ef1411261

          SHA256

          59cf57cf99571e4318deadc794293ed417cfa3f00979e0a1790020697be0840f

          SHA512

          867de2c779cbc0dfb621e915f185088c42d94339069d50caec792e22b487f2a5e1bf4d845601bb4dc3a335681348e84771701ced6c52f1cbcc40ecd2209d16d5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          af6b4e5ac9b823a74a109ace8eded093

          SHA1

          fd502f608bbb806336f8f4396ce5fcb01083df00

          SHA256

          543142fb612ab7b8e4f31611a9c25d3ca39f021fdc098bbef58314c2699ae1b7

          SHA512

          5a2fa1c8b9200054c6570aa430cbc5e38a7ec2014fe97c5963123252ba1c14effee94710bc75c2d8d3eb322876f37c7fa963afa683a60b76ba9cfbce56f3f769

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8e19173a223abf1af62d78af969b2476

          SHA1

          f32389f77423b68f68c884d7200498668fb30f90

          SHA256

          484cf479c7424e626650ea5c6a74fd66d88c15e378efe9e24d908eec74c112d9

          SHA512

          9848217a006ab37ea1e24f9c81220963e96ca2b6860720bf8ee65f6c39480cbd093b6c0bc38ccb46c9e2483e32b8a863693ea93374ce8415ae976f749be53f96

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          73315f1118f57ff42fce4c01c3ef9f7e

          SHA1

          a92ef40fb6597c61198af492f1dd0acceeab73d9

          SHA256

          1cb4bb480fbe929522d7774e8d90ccafb71f9740af38877c21ace6b2b33e8313

          SHA512

          d16e367db60fe79c85134ebf80bac0063f9cda745862b51878e9f1b1904a0ea7f9b64cabe418eea0a21f452228a4618a2afa676bfbff21ed4ab1cb3d88717342

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d721b95625f7426e0a40e58212a41b7

          SHA1

          508671e031d44ea26f61882a8771b210f3fcf6f5

          SHA256

          740c0410cd3e4de6f692cfadffac65f9a8b1e7359b3b57892a7d68251f7e5e94

          SHA512

          c46ecf321bd214b2a082c29e4ffd06b63378c963f786b3236b22435b61c08f0f2b08292bd8c9db9692ca687f1dc73c18b380a388bc2a6f1323b1a73093299707

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9891895a095fae0e5d845e9923e33375

          SHA1

          2843fa2a4f5ae363cacba861d5ebf503015fb7d8

          SHA256

          5471b61043ef07dd14116722cdaf374503a309a736d4923a1bbe76b3bcbfc23f

          SHA512

          0e266057d15ee714d84d4365b5495303886dac8dfa6e2035181c6803e64a88b00cbe3f775843035129033d82fdd72e30f420084aa0f272c097c2d5af4d425f94

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b4fbe31dbab82b4bee516eae0204c54a

          SHA1

          b8f39fab804bf2fc191f76f26d2c53bf9947fd4f

          SHA256

          2a2ad7b374f0d6aac1b54c5aeb62432bf4452933902a6056fdaf8b2ad72810cb

          SHA512

          72a97725d6bf43719c017479cd8b4f9556fb14019d005ed99ff52258be89e9f7c115f4ab8e23cf3badb03678ea3fcfa0066dae13118b8b676dd9768f70c28db7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          93af5d5901b473a51f60c1c11832462d

          SHA1

          c68668609aaa0702ef25dc238d4e6722e85bca67

          SHA256

          d03d6200862feb430c54dbc959a091ff10cebc79eda9f1a4bd733748f7068d90

          SHA512

          86b05663b091722f0825db74112f93b8e331d5c170cead148c6f4fb806401d8e41fb018a5874de8abcc29ce3a1468193ac73ca042dc751340a2e918ca82e4b82

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          41b6dbccc5d4a23f40f15ca0a1c85c28

          SHA1

          f2b8fe288e9f7c641c3e3893e8203fc1ee2cbe15

          SHA256

          58d6a93163df49eeb08c8492a9b7c5ea3bfaf954d5b1043090b3ba6e168e07ac

          SHA512

          3287b3299e67d4851034cb81be245e292da745d962d198736aa8413ebdf0c4e6483a44719784990c091de9adb08766d38ed468ea6a657da3ad6313309f72f2bb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          88af11c41573e71db1279c0d4fac5345

          SHA1

          ea1413c184aad9a73d14501e7a85aaf2780b197f

          SHA256

          aab073d940725ec5d97503c73c6560e907ab3cdfa6a3716f486af688efea70ba

          SHA512

          068e16a7ca653705e74817dc7224fd302b8cce54d540c7dd7484eed1c46ad6d075950a02fd41ff283940337aacdcfa13f1a8d943fa2b5298b0685896d0e66600

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1f81ed176deb5b942e1e5c73534719ac

          SHA1

          4c2af2262d8d892c3c6abb5c1698046080ee7cc7

          SHA256

          7381b84e8f53386974ffc3eb3cc19d725b5e392b54414aeb74d54f3c5b67149c

          SHA512

          7b1bc0c4797dc2712d09e397f0384cc3b1f192fcff52aae189b95cf688b70afb152f9a67c32855fc4b1447db03e4cb838dd2cb36d9cd243ef91f70b8e1362dad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d9cd438fb4dc6c6365c24b4dacfd1a5f

          SHA1

          d26ef4f40f527d0ed79222c2cc79a81f09353ced

          SHA256

          fed27be1ef246c0cf14a23d160693a50c56db3deeb9fb0bb92e2fa102adf77a7

          SHA512

          cf4dbb883276ad8d7962200e94865f183a7e97876edec64cfa59270ab96ff70df7e3c1237237fcab1d4323523976c03367f3e7340280433ec84b8cde70125f44

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          db8822d9284298475d8f31ac4dbb9ff1

          SHA1

          ba4fd385edb25b878ea45867dfbfe140aaeaeee6

          SHA256

          51b740e0cddefb86f1677ddfdadd5aea66b5384a3cb31975604f961af75fb12a

          SHA512

          e5698bd2e46dadd620443fcda7d224aa847f244dc791263262c1704fcfbb0d54da271ad2194a2caddb302ce59d30f14edf91127195cab880ea016cc8e083392b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2248138b2a949046f8abada43c5bff29

          SHA1

          1b0224f108d25fc2f82d5a296b55d5a576728788

          SHA256

          7ee92975f1ba9fb6ea0fd7a24ab28bd7b42194befe97b73918c42ab5e7df8ff6

          SHA512

          e123fc6cfa915c134f63ed1e4b73f370dea9b9acc4bf0a6b936ec2818f3c009e66f7ca38551d7cc719e8660f4a66c0da8e1f0f5eb5ce93fb06ae74cd393d5b88

        • C:\Users\Admin\AppData\Local\Temp\Cab26E5.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar27D6.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a