Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 02:24

General

  • Target

    113c71971f33556fd115fa50527aab47_JaffaCakes118.html

  • Size

    49KB

  • MD5

    113c71971f33556fd115fa50527aab47

  • SHA1

    c2ef218060e3f07f5037ec541eea7b83e7748863

  • SHA256

    1beca5625b27859439575bf54a35f7c601bdd6045c3612be56bb3e906d26fcc6

  • SHA512

    6516c11acb4521f1dc30f9bea207e8fbe8b5efa43efea166d979a457eb74abff567e918c8ba4500d4eebdd08d9bea71ce8c3d3ad7293a96daf58ae63be01672c

  • SSDEEP

    1536:RQMD5J0EeNsZy8syRAzCRNnG5FUuwQi0sW+4X/:RQQgNsFNAvF/wQihW+4X/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\113c71971f33556fd115fa50527aab47_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0816d9ee8cf6b096f54bba30216a31fe

    SHA1

    93b044f9d6ddf0548b73065c050b51d036a70b70

    SHA256

    e3a4013ca903b53b8eee4acfc3b0d0115148ca25f80f8a3692827ed8e53b529e

    SHA512

    bbfb7bc0b0465f36a79c3c0af7cb747ab83341812a4f92e078b11f9f350f0b0c5f577a1b670b977ee31cb1121d686f48779382fa6db2b5f49066da7262df34f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    515440be6afe529a7b7d52fb218ca4cf

    SHA1

    bb93980c863f3fcfe9d241332d375a3090105c73

    SHA256

    5822a93eb570bf941927dd7345288887e8c0e8bccbebe47d43e54a7f2cc3055c

    SHA512

    f525714da59328e45a2a882da2a4b50f7bb126098de25d69c5bc6c74a229114f11121321169e92d0fd9910233435f262bdcdceaa615348a015a84760f5089ef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14912dc1b1f59968b357c1988d870af2

    SHA1

    6e65ef81d388a46c1eed210530d80b1756ac8237

    SHA256

    2e81737770989dcd13cc1cc7da6a0fb6aacee4a53c83689909d4927a981b89aa

    SHA512

    1d3e73e46bd4e990a56f6d57c008b9daddf683a37ac35ed73812fdaf428c683288091e0e0fab33d6a45e26bc7f583827076d2bb00067636ef9b25b4b5e32d576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4366d48fff56d1582ec3ea2bab2c3d60

    SHA1

    a54374941c8e41b4c2378b3e24905cb64ecedea7

    SHA256

    ac522b15ac26df83d466078ac7a2043b5e6a0ba76d9ed15598de13afb2108fbf

    SHA512

    2e04a0cfc6e824a77501dabacbd328ed318f62fa53c0f2bd0e3a1d4048cc188d1a6dac4cc90e7c569dae74cdde56feba3ff32b47fff2841077bf51297aa53caa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e0c2bba3b4cad78c4d7e14907b45747

    SHA1

    91b36e148e1c80d7d74d3e5db576a3c864c22e9d

    SHA256

    38ab0d397abed1d4794b61b0c28e1d38669774dbd61c98e6934c738127168a95

    SHA512

    f61d82f3445f3198dec99321552daf41b4e568d46851d4f80d2e60fbf9a9dd056af47136a74d6dca5583e8fa726c02a8d66ec9224dc7bac712e1c69715680d7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    424dc0475ba8c5e8e094e1584d58e395

    SHA1

    e4a0deaf0e0acc1113331e54e8f0eb2776c2a739

    SHA256

    8abb7e10b8d60c2c1b693e993c0cf91b3ead5cdf9b1aec0ea8c63f67018fc942

    SHA512

    1938840433358cde75136ce8a1cbf1981366ae6097e027fa6c64cf8a79f9d46fbe34d21e92ae8862a00a1ec0fa6e206f4ecacb34fcd1206c2ab9012167a90ccf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7535dbc7be019d339b2336e9b4b9ec5d

    SHA1

    555d3544c1072916393a9f0f5df69dbfbd2d14b3

    SHA256

    06cb1d77dd7666cf7369192e7492e0e6334b53be04a6cb6ac93a9a2fd621985c

    SHA512

    70dc471c92aef32900a4095dbe0e5f2bb15d159e2c7fbea06a2cd5209814c39e82dc77523a7623f58a048f195e0b48b0fa3c4ce51d763d248280f89f04ff1d89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61a521a7ec7c92add40f8db4ffbc135a

    SHA1

    c1ca672915cc432c0e3765883c36c7a717c00c6d

    SHA256

    2b0942cdb97cbbe6f2e41c05b65be286f10b1d78485d6dad2634f42f0c535207

    SHA512

    f951c8231c458c37e6b7e85a6ee4d920669d073729540e0fa27cf78511d500967f590c72884dbdd35b88cdfca57ed4d395b1c37e8e6908c4db645824d13256ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bdab98405081eb23515687ebe587130

    SHA1

    72abebec4ff80830864fbfa9abb3f21c79a7eb2e

    SHA256

    dd237f28b65a630f91274b0394a31ce75ab0b243a4656fc8ed895bf3d3e46637

    SHA512

    ddd2a83b941bf7167e34ed6238cd4a14f2a15aca69766d82de3f5d8ebd05c6427057c41d861daba3623c5068a8d53dfb6c2096d6884fde5bb76ffe9f70f3129c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3aa4528b2fb65292edf1a9077b699e19

    SHA1

    b6470cada2233392235ad8d3700e8510e154dc81

    SHA256

    ab0d18c77a36ed6728d54bb94d84b7766be6caaf30bf8a46218f8d4427aff40e

    SHA512

    33bd7aecd754b84a1992cffb36f9ec98df5bacd9f676d651367425c58b01b9fd2a3731a17578f04ec7ca7052a7cc2a733116fb7857b8a83d3573aac3ad046847

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84042498ce0b6b50b6ab113455c9e4b4

    SHA1

    e712d9dd4f662275ddf1f51fa5c34028bc5c066e

    SHA256

    d159b258f2d3195b668a627df041c08cef8830494b7ed3c571effbf7917fce95

    SHA512

    e1ddd80d201f6530175b56dba2f467af495b7480985339d7902f0b9440bc25af37cebf35fb50130e47b0ddf57dd5c52b25e9fd396d7b7dc8d377a359f923c9eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa141a72d64ae90f6f6c8d93b086addc

    SHA1

    8e707a2dc1be754f5f3c8a454716ca41c31965bf

    SHA256

    0ea1555ff866b5f091d867a48340eadbf3e7dd5ca5b0c92efa5a00ac1c486693

    SHA512

    afb6863f613a0cf6a8906215f2be07f4129f827abbf419c9d5ac23b97137cb8533ab26be55315912ea248b974f58ab9ee729db67f0e848c29fe5c0dbdfcbf7db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bce29f06af4d88948fa1ab9539de542a

    SHA1

    0165ababe8fb0c67761aa7ad5c3f3c6561388dc5

    SHA256

    4394f71ea0b296dfe0a11ca11ca359dda01ab2bbaa893b1e80f40ac8a6ec53ba

    SHA512

    21180600e5f796769811d9f618a0dbdff7e84567f0f700160801507fbd8eabee390a2b19e77fa713879e3b62278c3639e7402c13ca570f42659beed80778a68d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee8a5964a87f1d81da4bf38fbdf5415d

    SHA1

    ee59848ebc1b858f710c99ee53ad99268b0076f3

    SHA256

    2d3d6d5f4a503ead57e907764c2ec18e5e346f9ef2e360171a11bb2fcd44f292

    SHA512

    02adeb417334709b254fbdcc0512244c5b18ca795c97f8c86626e6d75887183af51070743514b421a0c4648f833283485fad55fb2c843e10adbfc15653e349e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17c102cc6a4faa9f7efb313bbc061a16

    SHA1

    d7d474c997f450c4804c71e41bba2b2accabcde7

    SHA256

    5f0a0d5de4a59f5496b12e94bdb81e60945835cea973840ddfe190bac0c4843b

    SHA512

    2824734c2d4c324ddce83a2e119c3e45d76c69f42d7818d15c051fc28edb3ff4ffdc867e457b316734a27759efdb613ed228cd80874f159546d5d857171cc60f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    050c66901eec5df640f39617d9d2182e

    SHA1

    eeb28a4b2bc6a2913227ee033141df5b07cfa16c

    SHA256

    4f95cf02995c9f47906d6020518ce3544743674ca4d9e12147d6b01d7faabd6e

    SHA512

    a24becec09b2bf10c8d6d620da568c389e441e75c459821cb2ea0703c26f5383b37378c0268dd0b24831bae92153a74a3bc2ccabafa033a6efd3b9a5c75eeaea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7355ebf6cac6f448830ecdd7e384cd10

    SHA1

    947476835f3dd146ab2b9d15bfdb3701fedffc6f

    SHA256

    d1aaca99abc628e2d6c651a46cc0f1f4583162f0c2cb1c7fe5cbda4aa1a2de78

    SHA512

    34b87fa9305e30ffb806008c1fed37761f297e36c58edce40cea3c74948d62d8ab35d4dd76cb4e2eba844053b8847c4dc8c9f88764c65445e36dbc2be487387a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc0f7466f55cbfd66ef40a4cf29892e6

    SHA1

    10d9c164bc18f49301e3bcb0f0ab2ab56f9b8e33

    SHA256

    d0c7ca8945d1959b3b274ee08e402a2e9680680270658abd382b7cd2279e0940

    SHA512

    f6e7880bcbf0261cc2138ca9b60d89f572cd21109182ddb3f63972edb5ace73b4ff20b0c18ab54cd4722b2ac849f120cea3039060d2f8dfb66ed74d5897d7d77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0ed942bb49dd976b87bdf78ed4f1cb8

    SHA1

    3abbe961efe1f3211eb36192b232671749e203f3

    SHA256

    3b2865342edf61c167d9aca7cd3974dcdd8e971fc308460ea2e835314e11f367

    SHA512

    73f0b4903ebb1438c6078aca82cb308fb9f28143383092f90defa26a0738372569cb296a3e0390578c5e932b23b5ba2160ec3485455e4d6f782af815e0eefa80

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\shortcodes_responsive[1].htm

    Filesize

    60B

    MD5

    66f23d7e7b287e497cf4e1e4a244780a

    SHA1

    b0a372c795f17fbebd305e07100043dda4b5d55e

    SHA256

    41b18942a62a8cf6281f1ea7eb9461f1739d65ef354f1bd5ddd9b60fb78c78a2

    SHA512

    93bc9af4b05737a7a3445a381bde9b06e4bcaa89ba7034001152ad66e549b20672127eb0e925aa091a52908e1a3ab80d3592fbc9c5975223ce17a988c7258169

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\jquery[1].js

    Filesize

    45B

    MD5

    d1e1bc7b232605227be37f50abe9dc21

    SHA1

    17e1cc7f7de0f11408f327881da54758825b5f77

    SHA256

    3aa6d7fd9eaec62a86e242b967cfc3aee2c623fa98573554dd2f05347a35d837

    SHA512

    c3a2187f0a2af1bafd745d7f2871a96c87541b7c381978b59d0e780b6e09afb34ea0237a5723bf2f847400c7104aa6b2512b02b6e9358d482fd536b79ff82bbc

  • C:\Users\Admin\AppData\Local\Temp\Cab2444.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2527.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a