Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 13:36

General

  • Target

    12f71c8d7d13878e3b0729d50e0f37be_JaffaCakes118.html

  • Size

    30KB

  • MD5

    12f71c8d7d13878e3b0729d50e0f37be

  • SHA1

    9de6641d2f9b9ffe066bbc01a937bb82d6917a22

  • SHA256

    2b3ef09a8e84a6b4af71e118d19bd7994a547d0e6c80870e26e306e8710de83e

  • SHA512

    11a9ab79507d6e966719b03e7e2ce1eaa308645e42e934dc0b8673e9dd7732ce84a39b6cae74e33048a71aff6a91959f346a73995976b7ad60e4a9b449372225

  • SSDEEP

    384:hTOIdUb/810BBwsgjXXPrbDruiunKNmJS0TuWVWje5a5Cdip1+ZM9eNoETPh26g5:hCdbzBwpTfHPLn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12f71c8d7d13878e3b0729d50e0f37be_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2640

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9544e7aebcf174fa2bdb5c7dc6102de

    SHA1

    c24b8cfd7254baa2bf7a18ef86a6f3e75f6957b1

    SHA256

    f86314033d32a31faa5a3176c35587d2f4ae1a00acde0d2727567f4fe4afc39a

    SHA512

    7ee37c746c7a293d3a4190992e14db7be9c3c8c2d274c169d0288f110fc2ddba510917708dae12f24ea1e85c80739d33510456e190fccea00a906ba9d0be915a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d87b1c449c513c26fe7ff71fd61dac15

    SHA1

    53bcc791e73650d24d3ce72edff09c917268a382

    SHA256

    e1a8de735c031576a197c235cdb8beaaa8a15fecfc7f3b03d23d6a416e1ea6ee

    SHA512

    519bc14066c1ebfe1a683e3b5f3c644ec5603097824964a1887033fa9e6dc33749ad77aad8cc028203835a890ef050d8af427a9b317a723256bd7d3b03e9adeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae8967b95db3ad34fcec72147a6a011f

    SHA1

    31be8575859f92113d6aa0de6258f6c4fdbf2ba7

    SHA256

    54e2a3312becc48e9641ca5983c24f01558a7311b7f6899d527052dc52b7f884

    SHA512

    50746153d5eb01efa0a761ff24e1c6fd28c47c908cc1c4d735f1ba4f1f3c73e3130246dfd6a9f89796acb632ef3efeeb31220f0572f497da5734a46e5522b2e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23dcd919421d1c532b8997a3c3f9af52

    SHA1

    990a63dd30557d72d2b691d2da6e6e01b89523e1

    SHA256

    2dce52228629c1f3bf72231280ada73aec4d655da17b8cca0801733d7b0fd5b8

    SHA512

    731249b1f6c1bfa4d025231f7e2aed472f29741d9ce75362034dd775b876ce289cada4bdbb66f64004db7c0b14f1e1dfcd02d5d601a6fb4d2cfe68adeb376946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    299402452a6e2c90407233aad4335923

    SHA1

    f4bea2c2b8adc4d4f2f67ff232ab2c07e1329702

    SHA256

    b5a70c1e366d4cf35bb90aa4f11986186211a6903db6af1cf8335aeacda9b76f

    SHA512

    9b029c3eb8b4c68d22dcca475e04cab73ae5889f4468ffa34f7392ef8dff88bb2ef6e8c28956481426ee9e9b8293ef6b85ab33bbcee7a5bae963ece792233c21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7906ce8c6990c0d14c76428e1998a67b

    SHA1

    21f2e5f5016a89d988634ff5a58a790f1ec30c9b

    SHA256

    e0ee7642607bc50e95b47625bc6002600c6a607b068d6eb2bfd5afc1831af923

    SHA512

    a2c49d196b455a994f2bf7ccbc078e0cbda3cfc97e50a66ba0df711b81aafc440739211e82e59ec88b61a196ced8ff3dbd57960499d9f30fe60f11de475fa596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4013fd70039ca5a5cc6bc011faa853d

    SHA1

    0370074250b4e931d0381db524147805eed0ca27

    SHA256

    0082cdccfec05681c44f23a312e66cb237ca39d203a90a9e8e372333a1d19a22

    SHA512

    6848e034d021b20733ac67bc99b5b3f4e1a895f4a48d0a3cfc18af62614c7c4269aebdb3ac8f919f79891b3e38456486f5e645e47439564f0c7b21f1b9f08dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe1a46ac7f990e9647fef572231e2b9a

    SHA1

    0191f46fd7ed1886f7ed6fcfcd64f0e0c662f8ba

    SHA256

    9bed397f8a8158d84d3078143eae7c9d4de2f783fef1a085d6c4ddcfc5dc447f

    SHA512

    8ffa9191ef1c222fc11f165c3183dc4d8a5935f66a1b398ce594dc43780025efb504a9710b245635abf11ccd5d1260932515df67224b01ae230c628da715d548

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2fe22ca7c3d97454f04362923959182

    SHA1

    f6622da873c2f9c733f551834e9f6844c03db0cd

    SHA256

    23d28caf5ad644db97b0bd464f18d7dc6152bbcfb0d9a0d79c7e93f8d5c91f9d

    SHA512

    a074970df3b7257379da2181c71bd54956e8f8816dd0e1dc42b45151072e04e53abaf7ca4886136e8ef902287c35edf06623fe8de162a6f7acd16cbc313740b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11d4c640c66dc752282f6347bed66d16

    SHA1

    1b7fd630282c0fe3ebf7d6fb60967488e3353a0a

    SHA256

    03b130f3075677c306c2deba0907b20bd7d324d4fde498cebdc2b3a866a0fa2f

    SHA512

    27050f6e96a157c04066142e6e2a55c1dc35bbe8cde2418dff30d8c96aa5571f35d85dafb0b0196d9167203fec66bbaeaed6d76e173bc6ae2e0af1662a8ab937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06469c55932abc5b9135a9769e230196

    SHA1

    2a485fa47e7416aa36d372d2b3dd69f9a2032c40

    SHA256

    a0b46db81ad161f12da1e1a2f88e2c1d0e8e14ef79bbd0ca78facc049c1fcb4c

    SHA512

    51dd0f3f710cc9a381fc9f60aafa8d68b435bd083c8c66a113d15f6d073b03e830de80497505b1fedb730939ce32ace263cf698cec6332ace32bc9b919654ae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    580c89e0dc5f74edbef6a35107937ca8

    SHA1

    531118cb3a0e00c5d79a07bcd5dc93f8c74d29f8

    SHA256

    49699a02c853362d69943cc722536eed64a2a178ae68e2753ada4c7fba40ee71

    SHA512

    9de65060dcf093a78470cc2f501ea8daff5abc9e45947bbecfb481fd66d909de6cfe63d43324ec81cdfa5afcb8713b0504a1068823485be18922337c06ac3824

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    634ec1f116eda788e6e6919201b11ba9

    SHA1

    1c4a7f72d14efff40790c3891fe5f76a24d14052

    SHA256

    be98c23156c4f2b83279d7a67d1b6a4bd05897716c04d80f807f608b4f476ebb

    SHA512

    b788ded076fd997b64edc43b501685feda500881beb5375db17db86d8e98fd9f8e661a3bd0974c12b5b7bd804fc186fdc27ac85831aa0cb7ebb732d4f5f9eafb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e8d2c042275e2a232e1a6ed54d70149

    SHA1

    b397fb13701187d905fa099cd8ddfac60192b28d

    SHA256

    dc686bca13d40b7b4907cbe0eef44d605fc5450a809e6ac24aeeb8572dcee029

    SHA512

    ab299c5d6c25888bcc3b97a21e2fe5fd1fe09e673a59662039508d9042daa7f226f76527f622e45ffc75c3f470ec0bd1baaedbb2b42b904b908dd1f7df2479a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb20bf7ba72a87d9b8d59ccb3676ad43

    SHA1

    31d98b7065b8e5ecad42aa1069e5d27db87562bd

    SHA256

    72c59df52efe29b9547ba5f603adc4bbd08bcd863815e74f843820adf33af2b4

    SHA512

    77ae2ce37e64d795de0ac4efe69ceec8d842f62c4948556ba47019ef4a3a2578b12d8eabfba0bfc5f828efb9a37d000e415fcd19d519c5b357b8369877cd217b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fc2c827ba0fd1c3ca105cf04d3177bc

    SHA1

    9e439a6b542c72a3a834efbd34bbd0940bcd0de0

    SHA256

    900d529436025d3c4777abd0b0abea42e5284cf12f321a67216f95e1462bb172

    SHA512

    1387873624e7a42e20c10e36923ace28964d3ea169007b38df1740e580ddbfa4923e355f1a344e1c81876696e4c0476bde92713bec8e855df4b5dc44ed8132f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f9047ebc9ddf2521193d0411983fe78

    SHA1

    eaf95033afad2345d6963c58403c5387a14207b0

    SHA256

    bfd13aa582eff8eef9c6c698490b9d524464aeb38bc9b6e5fae6871a87e034f4

    SHA512

    95775085a0952416e9e1de5125ade6342574fd1857ebc79b3c3b4b8099e00f71444dd4a309572154a7338410e196aca0bee2e1719b75159151483ee40ff0a853

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b95fba9ab349228c846d091b2294fa40

    SHA1

    5d7e365b44140e3015d3ca724acf1ae00f1c6ba6

    SHA256

    8efbe8d6ab5d6357fc6abfca7d462b22960e6cc4a45d67edc34d8bfb9c37b3f8

    SHA512

    385f304c0b2be8f68fe96c5ca49ef6dfe941503b075abc5bdc82759993679d81767afd4f775b85519cb20fd99083bcc5b6b24619c0fb0b01b15149aeb3d08746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5aab68a409eb64c353d4acf738192a1

    SHA1

    87996057f6aab8716f3fc04261a932571209634d

    SHA256

    c36b337bb3b49c3d84953bb68d60f9c7ed3f7fc6298eea7d2b5b8a344c90f0a1

    SHA512

    7765947f30a8b89a32c948ea0c82c8bd7de7512d707619749dbd329703b206cbdb2b10c25a3e2fafe7b0e9d19270fab3db21d6edfe590f9bc81aec30f2848418

  • C:\Users\Admin\AppData\Local\Temp\Cab2DC5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2E8A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a