Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 09:52

General

  • Target

    122fefb505ddd22f6d917849f159fe82_JaffaCakes118.html

  • Size

    213KB

  • MD5

    122fefb505ddd22f6d917849f159fe82

  • SHA1

    4ba0e5b111c7d398202fd50a9cf511bc3a60f80a

  • SHA256

    b57791956629c514d6f05849107eb1987f20aa145252fe011b12ce4c4a8c7141

  • SHA512

    f6f0fa0795d41fe3b15e10fff3556b82404a84a80b4bf7d173b9a20e3548ae49d8a74867237d544d599d6b15f75d3ce74f640d081f541fd95e672d6053d40d58

  • SSDEEP

    3072:MrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJA:Uz9VxLY7iAVLTBQJlA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\122fefb505ddd22f6d917849f159fe82_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1652
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1652 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f3d145fc32da1048690242df307f986d

          SHA1

          bf22ed7a03248833ca810eb9ead1cb2bb7162427

          SHA256

          ee1c530df8333464c0f114805307caceed47a5090b209249924a50901ff7758f

          SHA512

          a1982f4fb77234d0842dca9ccb7feb003110d1db7e5f85a45af37555a061768524ec777d5f27b859676b139a330d44543113dcefcabe3cf4a5014a0f7e0bd771

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46ec2333218795848ccf8c3ca9bcf713

          SHA1

          063661c78fd33aabc4494b91296edf89d9e2ecbf

          SHA256

          96722256d7c402da913fa6969d600c7ad5cb5a8d8234bb26c12180d91069e4fc

          SHA512

          1b754bf7fb1e8e012d628bb3c9b2a875fa16bae7df189524b25359728c33321f996201a08154dc8f154fe8fe19a161f4cc671d7bdb488a0b8b20ceb34328fb4a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2467d0e3f6bf72f469eaa61ee75981ef

          SHA1

          c9afeacecafc42214b9deba7448589e558c4e2b3

          SHA256

          441de00d1ea59d713eba89865c1fac5b73f9e1e2a564b35fed92e8df2c748a78

          SHA512

          44c15fb938db68545c3c272b877a5ad0fc0b097937fedd9097fa8842442d3675203030a20af8b016b7bf046f6a23a537dd3227b1c16c1a7b2410a208a34bcff9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          70b31582b48f8c36d8db36f123f97b16

          SHA1

          cb6f07fda7200ac64b406742389f8cccf141a2ea

          SHA256

          c95407556ec6cb20d555a859940f58232412ce1b510e85d814a1789af97b57aa

          SHA512

          7d8525d4fb9650e099c85958e95a20ec2358de91223420ef8327b887b15551e2b9105c4c5d763dc7817b636b9ff1b41d72379ad55270e2273f68fa522580d698

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a73b15968e5dfc1fbc2252a666f71605

          SHA1

          2df1d1869f198403c42b565fdf52299adf9816d5

          SHA256

          2ba5103e0931cb7622e5a9173185eaabb6202c564034e94fa892073456f34ce8

          SHA512

          ad3a97278ba980261bc695858daed6d20baaf4c94f75f2af136a80a4c82a7153e97653311eaaf8ed92c37d33f129fa338de123e60b28d5862e350d858dc024f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8f61434dae09659dbec109efe8703553

          SHA1

          28ebed80ed5193ff8c28c6d1a0662ec5c62ef9dd

          SHA256

          be8b360c391234b70f3b5ac6bec688d5c621d23db3dea606df1cee62fa36f9e4

          SHA512

          6c6a512df8b7d3f76198925ddc52ba3bc29a9a23dc80403aceb615f59c6f799f9f2ba71f2dfc68c7a768c84e8a0aed9a67dc8fcef6a993ad0def33f530f381a4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4f6a2f9c33fecfeca5cd4e4b3cdd197e

          SHA1

          678f96d5067b9b59b0676482b3cf94164cf3b0f7

          SHA256

          06dcf68fa515dc5c046ac11112257aef52ab9ceea3e52c1df4dc0f1c5d47ca2a

          SHA512

          7566d27efec4fb73497ba4eb25611ae4378257e831651f691ece43b8dc8ef9123deda1230607edea5b5c3626d96926348523406a59c5bb4449bcc14857198e26

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2b651a044d18db8baa0d1c0e009a8d28

          SHA1

          ced2acd231e9f0f0b0d714abdc7bbca3d25f4662

          SHA256

          b43b42668c7b8bed879e1a375bbe0eaff44ce8a019d0568feda059cc9aca037f

          SHA512

          fe2ebe373faaee55ad9a7012a194cca9a6e049762379c0a01d4d26088e3c75ca6ded7f79b2de1faf95ad6c124f63199966ef2a92240ecbca223a97aadb2affc3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03b35dabe0a7d4041bd217f83d36c9c5

          SHA1

          f5c5743719493a2599fb4084db9536a7641f1f48

          SHA256

          e1337419813ce171f7b3d3c4f5909182b9751c74feced9cfd554228a4e1b8db9

          SHA512

          2cf1691b259a9314b72de82bab9906fad0e0243655732e43af73f58820cb40d6fedb41ce46c478bf63d554ebceee7eac4e1fda0d1fbda119bd0f4151262fb26b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9d34946d16d7800258756d608dcdf23a

          SHA1

          147ec174e84359fa0e87f99bba94a038a5d266c5

          SHA256

          7b4a5ece606d5bc6c8fb98f1641d55a2f58b2adaf39371eddc1d64d800b2a518

          SHA512

          85eb3a5656c58d86daf4ee539473a4fb479468027da77ca7290f2e56e42157713c5a413135086f453da26aa07c2726bd56b8970917f49f895687af130954ea8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          39efa8e2a11d8bc6fbea514e03299951

          SHA1

          1a993240db721d3b71b7d3ab5aa1b7e5761a65d0

          SHA256

          70272ce1c75b6f37a07441296c994928e5a66b54f224f3f18b9f83ecda619f61

          SHA512

          8b11bb564ce78823edf07b42fdeaa7482ef75c596004d6a59a336c5e71187003fc106bbe0734bd5cd49e8039430593905d3a6fb6930d79a7cf8c4b69ef44da2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b520c4f21b645d8e98d49810cedf03a7

          SHA1

          5d452f9d1027cab4d6a02742ed1d8918d6b76c80

          SHA256

          90774e9b0ec0522673300d345a09ffaf07fef2d6724c6d516aa3846163ca0fef

          SHA512

          c2cb0eafeade930c1ae560949ee419e420169386e8405c65c5fb02b3c4392940e89136172d19dd6bfe92dad861ab80892d05d863ef749b58ccf78d781b059fc9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c0aa975134051ea842b36e6390880dec

          SHA1

          98788e71e8eb400fb1d56dd1170c560c1fb506e4

          SHA256

          e59a47317f731955d7954b6bbba9f9052cc43334611fb0d1a78d62413639f7cc

          SHA512

          cedb6a585870000b9450508d69cb2042f6f82f53d911867b53946b7d354851bab1a0aa158e674a830b2334a70aba3e0bd2cad474fd85870202a2eeaf34ce86e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e40e4264d695e976041bd2235bb0e870

          SHA1

          24573cc3186a866ddbb9463e4f2e24fb312f2198

          SHA256

          20d020f530f8c2d247688cc8ee2616c9017c27285c74acb98fbd10c60ece4b5e

          SHA512

          8b51c45211d0d4052dbe2817cf0152f2aad5b5d49fbcd78938ee7805b3033dc231f34cf6e57783672a8c08b299af6f2c2df72b5118148134f9f68ba1efbe0c23

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b8e9980a49788a313aecf40f1f88991c

          SHA1

          7beca595a06182f1a77c93d30cc9c6fe5fa2c44c

          SHA256

          b6d017abdfbc0c70a6f2554eac492479a1a9ec8d3c242761f032634a31eb6aff

          SHA512

          f3e104ab05bb372d600f5327574c3ed62af32dc3a0396c13905d3872b8b969cc68ffc29750ba39b919fbcb587045cb6580b77a85020a8dbd4164a19ad0db8dab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c9bf47bd27878ea70a763f5e763e6d81

          SHA1

          76aca75160268020c74704535321a8a3d2926216

          SHA256

          1ec8ea2f56e8e242323f4ae1a2861e8f810dc72d63d942bac934fd9b71aad696

          SHA512

          5111463c7c65b69b51f72a122d81039eedb8e7ba9ff9b384dfeca455d65554a02178b7220975db8090308424eb6ed670bab11f21a0d53845d475dc1343c8917e

        • C:\Users\Admin\AppData\Local\Temp\Cab371A.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar37FC.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a