Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 10:53

General

  • Target

    1058c699980c826fd1673346be352f09_JaffaCakes118.html

  • Size

    23KB

  • MD5

    1058c699980c826fd1673346be352f09

  • SHA1

    52511cccafb43609da10baf9ec8165dfc37584d6

  • SHA256

    867e9c4d4e6d42415ccd1376c0ddcd57b0c09ad96c5739f0a501cd4864117ff2

  • SHA512

    8cdb3fa1a8d28ebe41ef9a80b60b2f1115c6f49e224985c3d16106c734c2c3881889730f93376a9a1d238e3544f61013f435a31766014bcd6be463a12c4d6096

  • SSDEEP

    192:uWHcb5nbDqnQjxn5Q/inQieJNnNnQOkEntWsnQTbnJnQZCnQtFwMBpqnYnQ7tn8i:8DQ/F7i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1058c699980c826fd1673346be352f09_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2296
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2296 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1956

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a3252ea2f18cd1aea2e688218a21dbe

    SHA1

    4720d77eefe46adb9b701c0e6610813fb0b3dff7

    SHA256

    c70d47e61b6bb68feb2deb39d174611e2964b20aba91a7bad801ba4659c6292f

    SHA512

    cb666597ab4d375ef117002399def95f4a701cab2d701d9b8fc16b35d3ace19f88a090ca2c22a73ae9d5dc0fd22b020a94ef92c8557a244df1db6132eecf015e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cc26eb7046afe88ebf7abcdfe5a97e2

    SHA1

    a3a78923dff0bc56465ee81a23fefe0e8c5840a2

    SHA256

    702b1ed2e2948560549c41e93ac31299b0c9eaa540fe79c852a3f41cfe62686e

    SHA512

    345d20ce1a8d382db2ce5eeb09bd6555707157dbec7e7a1654cf639341d4f6dc5c0b07f22df84be1d1ea0fea6eb8c3b103ee9ea97e796e13a370b0d652bfd41d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91f9344c6f01857981d5ef9be396ce23

    SHA1

    db565e45ed29e790b9a616b57cee55b1a2a3b105

    SHA256

    56f25eb432fe2c15437fca3d6cb2937cdb508392fb5a0e039c6942b5347c300c

    SHA512

    4bedf09372adc0f9d09c5b5370cf9f548987726da6d85b8a36cad261ff396c31be66a93ca39dc9f1521a8e9b1c1899174833464ee48f3eeb0d294b428783df02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e88f9e022bf2ed39114d76d3a8b7a22c

    SHA1

    89f7487eed4de05c70e28fc034840ba2a2d921ac

    SHA256

    cb61cb036c10274c0b60d0343eef910918a6b9d6060acd5211659fa658b22df2

    SHA512

    dea7b967e8d78f7ad6f79a2035cb0c50cec32f1501ea1fa9b496db7646c6d2717d7f306ddf4e606f60cf44068e8d55466a28cb5c5106e232754edbcc89e9c64a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5234a4ac82faa347080b86e59d3ce6ef

    SHA1

    1360a8fe14d3d0ef584e3d98ffcddb0e2e14c466

    SHA256

    5d9495dc0000b2242542273d8de6b2aa7598644cc5d5c73106644a556f123c89

    SHA512

    e57cb4351f30b04b9f99a5a74805b538739975ff9563013574999a034d344c3493549fdc7aadd0e48ee4581fa2ec3c275b2fba841ed1014dddea724b932594ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e4d40b91324d15ffce7b5466cbb558f

    SHA1

    9f6daa785569b1c6e61a63995ef5507f004200ca

    SHA256

    ea322b5b5707c338c7aebeda6299dff55e3c6db2ba20bd8d00a8370d373d56af

    SHA512

    5db1f46fa19a40690c3db118705cbb7f9b30ecaebbfb2563084af1e82d92b0d26e857a9abb0589f5d1dc2c0501b884c642d4584803ab08fd437697a9bf0a1aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e4b3690b54396eb1483ca3def70223c

    SHA1

    8a3fc99afbcd6eb0838258aa7111354a64fbbdc8

    SHA256

    28a6e4d2f277f751a2f5a05b302c08d3daf3daabdc98ac3dc9ce3b2c1232ef04

    SHA512

    f617684c8de9c0a5fa5bba82733a922d2c2f51f6038799cf10c9c934103ca6b8c323342ac5241461e1c7a368c66a8bfd1a55e663f4083da4954c714cecd7be3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a29f51e625772cb0371eee11269b2cfc

    SHA1

    167508007bbfdb1ac0848a9b3b28ea0be45aad99

    SHA256

    72e14e62d1433ddeaa81a3cad13528199f7a2e24f75521708e59dd8ef48db934

    SHA512

    c33f8bbea329bb883393db8a3d49243d153d255228c7f9dfdee91530d571b55b1d3c154c9d6c292e122787707e2327678eba97c265145511b7154ef2ac73ec8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68cc749257ba7f8825400de7751f013c

    SHA1

    48be4a329217bba9c018074535ca740b930b11f5

    SHA256

    fca76c44b5a24da6223d923c6a53a5f094d8b77ff3fb9e69466d97f9001a3871

    SHA512

    78691084be304347230fc61e038c93b355b9026b248a0ba7cd72c160b99be1e8145b9fd96ddf24077190adc7a55ec91847e11ec4faa99c672d4683188103a2fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    250bf494b24e6ec335e7859d2a91c26c

    SHA1

    d03e2a860aaf424a734fd84434f3bb00bca370ce

    SHA256

    1fa6e82bad32b1c965e78c09b8c98a5d41e4eac012dcd4c820c9ea2082d4990e

    SHA512

    9983fa810794742e2f2af04afc54f57d4d5c5c8439533a4a7913d490959df16d83849e3cc3c43f2f022a3d3356cde38d8ec4b5c99be59e9013e3f9e7924b2974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c1c3b4bc312e58af02ce446a889215a

    SHA1

    e132e949804c61fd7d0aaf53ab0df028dd6081e5

    SHA256

    0db030cbb6bdb4fd03c7e968d1dd187549fa912b8677253afc63965fccd4841c

    SHA512

    c22aebfe2f5b0b3edc68e59c3c37e9f975b697a46dc4980d0d49629fbe38fc604d8c845e1e07bd4e1b2a37515d917782ed396e6dc02516e44d93472d8ec651ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67a14d89a4f5a4f1f93c30a6cfe9d4b4

    SHA1

    1971de2e6f2707393bd6b1be05135733a1096b0f

    SHA256

    7f83895c43aa74e05b5fdce09332465f01c4b71680b79fc61ea33a1c95812b0e

    SHA512

    6828a52485cc6aa6e762e28544c479b80f7dbac33b1297fa890f8b8e341f50fa3d979ec01811c8516d47b9bd86922bf53bd65c7007ca34eda6ac8e933eb1b0ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38cdaff24b6fca9a51f7f310e39a5adf

    SHA1

    94c12c1f3bde500989210eb980dc738a0c733db4

    SHA256

    d812b17ea870f973d5a71f9c1a3f8c6628773a8376ee7a633accd14324941d33

    SHA512

    3096767487500060ddb24c23ba52721d534b089c3231b383ac9b6c7dd45b6e5cbe15683720808f490615754e46534424d8b449f9b6de219ca9c4e61ecee2c979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76b1ecea9ed4f5f0ce0e53aa2ba71b72

    SHA1

    6b09a0a4b8a300aab1130b13bc6eb5b9702b6d18

    SHA256

    cc67c13f4c725af0014fe5be73ea0e8afa6e7636986595f71fd4d1f66bdfb07b

    SHA512

    28eb0bd8e0b0c46127ac16060aa31335b80bd0975dcdb6eabc614779c47b07b1f6dca739707bdf9e8f048b24b8b9499866370f2fd44b9ffb764501a2c4341cd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4995458fc987264a1f5a554f8662600

    SHA1

    26343598131b8fe0a23b92bba53846d15be8c1ce

    SHA256

    6e285b77d185786fed4401b74b362e3b131efd18e18f0966f5999cf7c75fa845

    SHA512

    ec7df9d5af88617b5710c51b7a9eed5d3943f0162f4d79319187c3e96b710abe1bd75e9a3c684b6c405fc3756ff361f9827619218089edc30282102cae7e9e73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db0b4fd113480321d0010d2efa9d5119

    SHA1

    f2e03eb99b2f1aa8c0dcf33a159c0ecf36b8d5dd

    SHA256

    0090cb5e6dc2c190bb6f245b42520c2e833dc7b83dd0986bf97749ecd1110d7a

    SHA512

    26557e8284158e8e772cfb28191e783f171508921b976695e501ecd1af92da1e185e1b091ddabe656708a4e791f635a9dbcf6d9799b00a7e954eeb58fc0761d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0eace585c3f4ecbbce144867ae4c357

    SHA1

    f99f504d994015c25facc6d2efcaf3cf37b01644

    SHA256

    5b1b033e8bd00d96dd71623352808338c48aeedc46fa8c1e4bf0509c5f2708f7

    SHA512

    830a1ee23b6e6eb0cfcda2cf1f04293b9190a18bf5ac1e47bf06bd6686387094ea3e6e8f27219be94c57586250d89dbb392e4ffcecc8207c056b1afe58c3f035

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0e4f85d43884368d613a6c0b25ca653

    SHA1

    7b01fd24c5f2cb74b609dd1d096732e23818cc25

    SHA256

    cd43d18935deebf89a75b91539878aa6b37b6710c3c6f3326c1b7323a4d9ac1f

    SHA512

    1b52a4d3c960c7f3114774e5cfcc931ac79bb21109df38985b0f993d6c111114e2434907ce687a3863aea5b2f7fe04b0bafd4b232926b1a4ac24438affbe2072

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45c9c9249ea4b33bb6d67203256d9dfa

    SHA1

    2c8b07005d5f3fed54ce8bbdc600cb1df7624ef8

    SHA256

    bfaf6374dbff4dd28c95f103b2b08d2ff7b34106ecaba2f1a36639dcfa3bf6a7

    SHA512

    eb02ca0b252741375c70c9d10864165165ce56aa93ba0979472601de050b8ad294fb77af025f90d25c3fded742a1de59bfc33b5f4367e9be963ce7ed90ac3212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bac5647b338a61f3db455a7dbb70bb8

    SHA1

    38992c3ffcaf1dffea3d27f347b1461ae7f2d913

    SHA256

    053f3551efe058b9b739a7d208c9fd47f8f51926a598adf1c58208259eccf8a6

    SHA512

    ecc834de134e768338078182e8e147a5f6482f91d3678d1a190d84c4b3c949787bc4fa50231bc94616163a464370247f86eb8c5253c1a5155bbf9973eef85a7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c40d849f75468988f1a628670a88a8da

    SHA1

    8af33179678e7f413957e8eeb046ee9eec7fc603

    SHA256

    d0ab1fdc18449f6e44456da0a0dd29cb6579a278e309c0bd4010892a1d9a243f

    SHA512

    9e27a23d999e12e8e57216d3341cda9e85bee57b247a50f0e393fd240581155b8cef162edf94c5a7ce391929ef073b46ba115a592e24ac3d1f7ba444b358012f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c628a9fed7cf13e12e9f053497f285e

    SHA1

    7a11f4ccb8f25548de44bcf0f2ff06e2b2168f34

    SHA256

    db0acdf96d5125e942e45461794a3de78fea2471ec89fc16a008dbca91294b3b

    SHA512

    10b68bcdca7ab7c39f18d2cc6553a5d7151477ee27d4bad507186b1ea59eb0165455d6bc65963a42cfa15b10fef8e55ce4dfc7b5e63e464076083aed5448c48d

  • C:\Users\Admin\AppData\Local\Temp\Cab38CD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab39EA.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar39FE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a