Analysis

  • max time kernel
    136s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 17:13

General

  • Target

    1104a0b813e1901a752f32c2c2dc2690_JaffaCakes118.html

  • Size

    12KB

  • MD5

    1104a0b813e1901a752f32c2c2dc2690

  • SHA1

    5781f1395901334cc4328046846f66be45d8a99c

  • SHA256

    06213690a50c8d2b74a0b0c1722bfabcf681c670d498a8c6579e3216d0e7d12f

  • SHA512

    4a853736389495fdc964b902fe49a19c6ebda4427fa709e4e0a89f34eccd73fc9517f2d18b1368de5177309509f44cbd7b2dff5a560c11642406914acd4e5b73

  • SSDEEP

    192:SKiWlgfDnEv4Hz78HXGHG5jsOWtPMRIT1pG4wH4zpzOn:SXEws3VyMSbG4mezOn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1104a0b813e1901a752f32c2c2dc2690_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61083a9717e05e0118bf7b516c18f5d1

    SHA1

    fa2ba18e702d8a00f338afeaf7db9215eccddd64

    SHA256

    5ef6dc1892df2181e99f09a7f435cd6dcbe291b6fdc11eeb6de65a73c3723d85

    SHA512

    c5173e104e3259bfe35f25744d97e31f04f298e6428fd4d58e60d91368279968ef344fb248b4c129ecc785d8c1048f57d19a80f508614c29d0ea76c794dd84a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fcfd21d8d51f113de4ed94769614be0

    SHA1

    929bd38ce6f57b5d97d48a86a458db12b4d7d634

    SHA256

    182f79161e607be8845d64de678cb16092497640d10be2696fae1e733560930a

    SHA512

    7d49792a786dc3de29d58902133b1a945745e5481611cbfbfab1b8cfbd42b1fd21c7cb20ed963e4d50eb4357e8ef78ad81e97cb51426588d49b1e6de64d5bf37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27f27f582c974a63c27f85526e296e59

    SHA1

    0097acffca2a3303b2ce315a1f8d7dafde8a1929

    SHA256

    d10c108592b2a7c44f1fec137d7182df2f754e5f28149c1189d9fde64af31fb4

    SHA512

    d1832f3cca253f8156f42299a681468effc7aa549580d8cf1b2dc6c69efa040c90bc275dd4017a3b65485686ae1b9e23b7ba8e923b8f3f2f0b69e18f4e12acb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2112137e7fabe42e713785a3541c18e

    SHA1

    0a5c44395d5e22d89b0748dac1ffef118382fb3e

    SHA256

    517bb6c07047e34d999e1f58f49b19baa53ac3ca4d9a8cb1d28b9ee93abc7374

    SHA512

    c6870004e47df55fa75f36d7b89a9bee2afc3f0b958a6c62ec8576bf4028da8fac1f0e14685a8dc5ce2a65810544649cb164b2f1493d7a5db731a8e5057ea719

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adedc79fb023256b9311e7df2dd26735

    SHA1

    56ec594dca27f2071712470032268982b0de492e

    SHA256

    092a871a3151ac21321912a496b84bbc0de3aa9ed336e80b24f81f57a023c486

    SHA512

    8e4764bc98996ee33c6e4ec88c67889e7f29b46f357bbf343a61915babca4a849632b872da909254dfa8838f84235bc02729c15017fc051bd34c6675fd9a908d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bb6104f769723cc526fbd9d8586aa9e

    SHA1

    1f986063d4e0b19c9c7bca98ace0a5ad27ac6772

    SHA256

    90dca47c38a2117615d085de8cbc70c71f2d5d734afd1e3ff9adfd4b7c840293

    SHA512

    53b8aaad82466c8f72f3b456f41df66a61f11ac6e25b6c270a48f39d2a7d5233e256ef918900e89e668e233c9499837419bc12d50883cddd09307a7c96468320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17755ff3b6213d2bc0d6399b700627fd

    SHA1

    522c1cf127d155ef336cfb7ad54abad2640bb02b

    SHA256

    7b71716c687fa5c1ffecbecd5055f50d6c444193c2a95fef824e955c26da8ce7

    SHA512

    bdf72ae66121473af346956b738e3e41f6033ab61981af2269757748c0bfff43b5eb3ccbae99f5e06c7412b2e0fab3922be3e97d33fa82872a0c6fd5c4a4fcf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2d46ef7073a483ed0e965cd2b3164d3

    SHA1

    9278584d0b8e748026089a05b170c91ce10a985f

    SHA256

    57e0dd992f68e6592c3cb460f9e72ab5e333facb753dded77a54f15d759c1983

    SHA512

    61bb72c4a6e0c8e5a9c41748482b1b96798cfa3c7d1872a1dd51a91d49bc32af0ec4d927a99b5d833be3f108b6ff186d81412b9b528833808ab01f55bd1257ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9816eacf46db2b81d429e13fcecea30

    SHA1

    19c67e47c8182fc476c1c56f77afe5e088573a42

    SHA256

    14fb3fd9fd089919e6c62d1c7c6865c21e910ee41c707f179bc9471a14e989f8

    SHA512

    fd345c4067579db0c7438eff985c408ee0361ad5f2bcb65db2a0f50230d8cf374cc27693a904adaeefddee0286fc27cafd0a1fbf0bc400e1b744ca15d0e94b1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b77d8c2a0d594ad025df3e6bade37b

    SHA1

    c4b9a0f9d108f03ae2bb9419a3b8f6a22bb55c50

    SHA256

    7593b326e1b35fa6dddc23dd5457795a37e1ff474c36b3524c1552d54204ab4e

    SHA512

    f36f9c85c940b5455519c174dc4554131e54d3cf0a481bb47c4d4a010ac18bd926fa16989af7f722e3bd1f2c1eacd22b06957fedca144b4143f049cac635a896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c575dfd3f6d96848fa2c29816f73502

    SHA1

    66d654c0e15623d4200ef17e52fe6aeae035eef0

    SHA256

    0022f834406a25c85fc971bd94ebfa50e3f55d4e3140ebe8bbf012230db7f5b8

    SHA512

    2c2fef84bb54296712c410320f3c62b09b93cc0cddf63349bb7c194fb03fde8e60f98e759500ec9dfaa7df27cd1100c6ca4a64ad9db656471ae775e7312b7364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    871130e9f661f70d6c638234913738ed

    SHA1

    1f0b16043eeced7c6382006970baa667ed4d4af2

    SHA256

    7ace180bef2c0b634847dff229774078ef36e5ba73df9f8629ec2f1739c5a4d0

    SHA512

    0cc4ba62106e266bfc8b86a6d85cb4808b829cc9b0cd416cc71d199f0abbf169e45e5df509e5cbdcf5421426e1946d233ac2a0315ce63bc30786b6252985c9ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    220cb9dbebf7b549fd768de9ae94a0ad

    SHA1

    c0e2c81075223dd88c15e70719d93c78c2e4884a

    SHA256

    287aba54640ef9447353f9c02180ed8bef8304bdeab8c1725d4478d79f2fdf16

    SHA512

    8df8991da923b4a4dfe653601cea59408d38b0c8830f5360e772eb551e1d54bc8ea4a826f92ad139b698a008f9f9a184eaba2fe5771cf1e0832f029c3693bd31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8071550ab678d6ffafffeba595514e3

    SHA1

    b5bda60f715be8423200e5fce8ece269de259e23

    SHA256

    1c6a0068e2eb2104943ca2318d07112483f1e8fe9a05773d56883f53e67105fc

    SHA512

    11d1c10ce687651abf73fa9a161a6abc1126944456a72ecaec96cb767125c3025f4b67d0c4b6c6b4df614cc9a4511fcb30defa1a56fa098705816d004e10c76c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40aff76d3b37b710fceb374a8971331b

    SHA1

    4409dd7b58e2e9b0d7697db366891e060324c3ba

    SHA256

    e0af5db10be76d3df1aa8b2048405bd63ca4b6dc97038b83f43a0e1bf111a3cb

    SHA512

    64199317330e182b9f45cefb0a96271d8a80dce8f5537fbf62b309ebb9632a0e39003ee243dabfcc615d04ef6a2be50da95302fc312cfe0ca30b177012c08b5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f7eab2dd120e7610ef8df3e32e200de

    SHA1

    fefe5c93f9a62c989ae0c4b681a05152591f1b75

    SHA256

    fffa42f7da76aae99c584d8435dead551c4754b4dd2aecd2322ba64a257110ef

    SHA512

    fab031b6d84d7f37293684ce0ce2c3d1392cdd920aabdc8dcff0aae37350414fc111aec8a94be65569f471655a480a733ba8e615586d15592f1d6e909b79da13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68cfd898f595cb1d2d281fa2d54dbdea

    SHA1

    c14d3567aee1a4bdd1cb0cedbf7441fb5e3c3517

    SHA256

    658b894b6f35201f2a8c625801bece7543c5ca57fccf9960b96b41b7d0c42a09

    SHA512

    14768659d1a0ed5d3fc53b16cc264736e8a33001a70097a7e647d9a2efcfe1010dd939812abe6ee56dd26715897e1b549140babe3168d310732a880053ef1734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2fa9f213e4be0fe65b2e59513d784e2

    SHA1

    f87728348abdb83aedd3583504ff2647f1d99c26

    SHA256

    9ba24d475a16d312037bc26ebbec118d3e2dbe63c9700c1967e85d9d7bc0e04b

    SHA512

    e8c310de17912b56ea8695bd2a3ff7584810f2d3c2e8c7f17ce36c39ef74a4c23ed8c947349ad9074c78fc17ddb4021b0da2767b012e1733d7552737345d72ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69d3f7a847821a80caae5c6685ee5518

    SHA1

    5d80900743f6f1b19c38171c60f185fd7f680992

    SHA256

    166498d9cf2591ef88af56fd0b30bd06b06d008fd4f569770abff4dbf14a332e

    SHA512

    934025ac7ee01d850ce5f39bcee14a590d5471fbeb84f6cdde9a888ea27fd2d23ad2cdd545960948148fd91a8d2ccbae96376a128dc1f80ba1d48548d83ed888

  • C:\Users\Admin\AppData\Local\Temp\Cab2435.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2507.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a