Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 13:08

General

  • Target

    12df19cbb2604e613338683a95648fee_JaffaCakes118.html

  • Size

    14KB

  • MD5

    12df19cbb2604e613338683a95648fee

  • SHA1

    188f4630a0b23ca649c9e2cc9adf5baf0935977b

  • SHA256

    cdf494168866e757b10061317c156d7f4410deef1b48690d658405954a26b3dc

  • SHA512

    c587222c176a2af2bba1bf69f462e7a12fd1b98f9ce94de709837874abbbf1950608d9920aa43236e380e988459c372062ce8c8787137d3b8b4c903a5a1913fa

  • SSDEEP

    384:CyiW0dNQP/X/Utj6Ai7zy1wD6MFb9+SilC2MV:CyiRdyP/Paj6Ai7zIo6MH+Siy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12df19cbb2604e613338683a95648fee_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bca13578aeaa1feb51d87a7f0e6a1639

          SHA1

          7c52975fcbc93908c320ff786d04d84333c5096b

          SHA256

          4b381f00bc8db5383c1831e1ac58d7b25dccc3dbfcdeb4e2e70189e182eeea29

          SHA512

          bc3d07bf0d7689177da13afaeb5e7ec586e2f52f6b952e9f7f2d7f31bc0efc357c8d7b079d867c95c53d7351c0d840db155bec9c1ec7a499742de3bc6f6d96ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          718f7d792d8ebb7f39edfe60bf5b7dce

          SHA1

          be3970b64650d46ee5ffd43b6370e2d80c88bcc6

          SHA256

          94784190cc2e592791b0731c6cb1a360b82876c6bdf9bffe49ce6318e181bb58

          SHA512

          3e23c6d51ac3cde79ce7f101e54ad2e55e3dea9ab4b95c3bc080373edb1780c2d9b7696623e3d2e97d10a6876600fe52e18d185b334051b3455e464bb0454cc1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dd2d72e5308a45fb15fa7d79da821507

          SHA1

          62d62acb3c1c1f14e2ca9e74d7527034c884aec9

          SHA256

          9eabd6cce0bf74f328b2866dbc5e467f96c686590c6fcb539702dcc0419bd6b6

          SHA512

          2249b8b2154e7d23243f6c20d20d65fdb755cdab93ff7dbcc1373d1de40e3a372beee5f711b3791996f5e787e852734d994c290a682e3acdb9a2b0d6fa7e33d6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0e5c0cbdeb1fb77098f57428a96be060

          SHA1

          e5a295e04a2f083a0e4d88feaa4d2f134d05ce10

          SHA256

          2a857291edcd6d53b56a33f11bc2a90de989ae878d4895d9049b1cf08d1fc214

          SHA512

          62cf2b00f552a9e076deb21fc01a0c7eb0c4bfe82d049fbb22ef346402efbee64e64d90dc72256607b959bb55fa7ed060481ff5d9a503d3055c443d94f028911

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ab9954b0f8cda5b417bf11b90eb6413

          SHA1

          96f52e19aa04fc90595c1468732014975f9789f6

          SHA256

          7f3faadb2908d7cbdce5d5dce4b3c156668f0b42b5fd5562352c6a244d069a58

          SHA512

          cbdac82f2aa797683ebfd92de1fe93aafba71f05358447da90e440a2deefd016c61fa3b0a76f047b0a391c6fa58e1bcc286f541e81dde55fb960e0f71178a641

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          86292dc44c6fca0084c7443f64250a75

          SHA1

          660f6ee929ca1582810cec3d53268bba52057abb

          SHA256

          b732ec35bcc9aeb71f85e5804e67b6c4d38429b60e2ed6344da00e3021aedc8a

          SHA512

          a81d5423d190f746603f5157dbb751d0b6ca44ab3ce0ee3d5112eda92e64eba979b02ef1c81cbb8830f1fc5c9d4c5bf1dc8b5eb923d786e4f8f7d154d1d1f416

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          77cd56b1ce77699e0689e6c266606879

          SHA1

          9c0a3d73ef4a42bd1eb57005371442ea988861da

          SHA256

          e177b59beddefa0cccf9b62e2cd178d7e9e950d3c5984f19bac7803c40269ad5

          SHA512

          765430769606f9a35d5f70377e2e32dd65c97de6508ab7be86722eb5c440e9a823254d8566620e41b64591ee5a6b9b4d4c3f1fe8aca862601bfc4b58496cf3b8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a380a3d43cbeff8d39e315531af37df6

          SHA1

          64d01b54908a214e0bd0a227055b4fea5b9178a4

          SHA256

          16e773f8b69415db4ce71d07f54c19d5b80067e5ca469e2c4fefe8e571022429

          SHA512

          7ebd25cbcb05992327e127b3b40d39927ace907f41b9229806404f757fb189a462d4913d4f743e0c3698c67881cd5f9b95a68b27570622d7ba00f8972141ddbd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          09843bc73f598b3dac1595f51451fcb1

          SHA1

          ad7c2a9fc127a8a6d0780922de0c42dbabc092de

          SHA256

          ac1fa64cc536c64ebdf544d7acca0f2166eaefca71db7711b799c1184cdcf075

          SHA512

          6dad3d46b3969e42b132108fd3ba662c3f51676a930d65e750ddfbc28ebe6f8036feb2698dc3e88904d6fdf7a40e737677c4c733ae7732f94f33edc8f81c2f30

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          29dddc4bc8a7c8f3e8dbd48a8f14a186

          SHA1

          1e44bbc6a65c8917628b062310b6fac9f2f3d39b

          SHA256

          dd4c647972b6b2dca0105bb31ec47979209eeba00ac2269d1216cb31c28d2961

          SHA512

          fdf1b57f155a2b793f45a1c70dbb1eddec98245c5877884213625833ff67a201dd16db1e19464ac4e47a2fd1a80e97d9a81e005fb3ae69528e0d78271231a448

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9f7f834f2a510cb4967d7f182f1d272f

          SHA1

          c47c640833e6d499e9229caa9c3fa896f46a5766

          SHA256

          9534d4e81eba9f091dd5ff66a89b82049970f1072f7a24581ff630778b657d7d

          SHA512

          cb7926575cf7b0705e1b01af6f7dc3c69c2f61a13562f39e8bebb44305ac3a66d0c055d15e06607684d9f3f48f3c7230af9d0c7c103baa94436f2c80e4cfe585

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f93a693d39ec555c47b616e28c7e3aa3

          SHA1

          a2499ddcdc739d6c2c042c09dd9a493f49fa9dfd

          SHA256

          996ca91b7e8861f3c181b61802e52081aa12969493de270f0c8fb78cb4378f4b

          SHA512

          1b8665c4756bcefa5f3e025482ad171b55b99b9c332786d2dca9f9df61d2e4450658775eb3a8bc536da56cce43e43bbc3f4a0f56f96e55fcd179cc7cba8b515e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          002038a4daf74acbef68b709e60663f1

          SHA1

          07b94ac397149481ac66f05ee05159633b2931d6

          SHA256

          a3de8f01a77916eef73b8fd9fef38500d733c2d6c20aa2156f942c720e37d47d

          SHA512

          425c8afbab12d6e39d426fad53073f3244e6db6252f9658bff9a3f657f85e7c62a680683ca205d7217b004f3515d1443da4fcf906a5d04727160ee34a5d4b8c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b8f562c73f1d420058e522548d860187

          SHA1

          115c07dcff0451277fce75539e5a695aa1a32a39

          SHA256

          d61ecc367bc58607ac4f30555e2d71f937b42f1c7249882ea5bd7276e67f75db

          SHA512

          14f80a9562dacbfda130775375397632792a40e7934829aaf59378e62c17751a24fd6fe9a26bf075df4374878f4267597695bbd8e788f0884392b5c6311ead96

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78b2a1ce20029504d836d0a87e449e54

          SHA1

          42663bd5a39f5eb993434c79d83d2c074de65135

          SHA256

          4d477cd680d05b54fff386f60789e51d9c203419c1477907beded20ef3a9014f

          SHA512

          e786710f5a49d9aab0f9bfb7040ddc178e29a17f43f8480a4d149ac811092b917c843848adb2ba843c8a92bbd3a568c7786f329a119668794cab89e8ee5525cc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0746df9b8f8861356074a9320a40b7fb

          SHA1

          5ee7009668053c0c3f42bc0878d4ed60b64ee511

          SHA256

          cbf38de936edc8d3359a793b7ac377f720c6766e401e4bb8c00a696f7a87be53

          SHA512

          309dceba6b8d6ff05e88d07ac9f12115d9b2e2f37a28c08c67a6415062ce540c879e808a63e0098058ad601e4320058c7cbb7e6366a985eaaa3131483e157e97

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6e0bf720bc550a12248cf09fa70ea7db

          SHA1

          acaf6038039422429c1bb53f69742494ece992d5

          SHA256

          a4d01fe2621dcf47e6697d3bc2855edf23c6fea9172d939d1f44e3fb18d9440c

          SHA512

          d012bf88486233ea6a6ae864b397370c0f77eb2a1f4a0aba0c4ec41b01e110d442799e6e1290b86a1d0fd4dd9723f5789109a6d015e6015cbf5889b820007865

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          90ce61ead8734ad3aa0a06063adda4e7

          SHA1

          b396eb0a5300094d8f5d8440d5cf80b9dd63f11b

          SHA256

          271b8b6626e26a06b7937b384557320878f6a11ad968690e659d8a25dabc32f8

          SHA512

          e89725f064a6e8dd10e41cae8123c37c60a84dd94ad3a703966c807d5489393b88b0cd59ba9e00ee8ec98730da9cc975926d4b10fa22fce0934b96c17058b0b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9fc9d1208d9a9cda0d20083e500fbad2

          SHA1

          87c0008457b4c08bd3dbb6e2d94dc6ec9fbbac3e

          SHA256

          c2e44396d58863e8b384bf7ad729076a2347b36d83c6affeef582f4416ba0ec3

          SHA512

          3faf93c491bb58f85ab1f42f962e41c5debf09f8a5b4194a4bdcb4d4684bbb71455c6b6feb57130c51c55615b5aedf745665e66f7a210c771b40520b58303cee

        • C:\Users\Admin\AppData\Local\Temp\Cab9D88.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar9EC9.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a