Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 20:07

General

  • Target

    14490dc77e7b46b0381371bb53482ce6_JaffaCakes118.html

  • Size

    125KB

  • MD5

    14490dc77e7b46b0381371bb53482ce6

  • SHA1

    cd9639a5ae647aacdb8790f48b83be1729369f8a

  • SHA256

    dcf16f5abb308671a0f753805657a97eefafc936ff9d2d0a036351d286e79627

  • SHA512

    14dd74375390257062d02702604cc6fb532e4e3e8622d0fe3bae0b8b5948a783b541a8ca4935da6744a97d6f9497c5196ca48a59e0ec5023de1660debe4a6e7f

  • SSDEEP

    1536:SkeIyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCW:SLIyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\14490dc77e7b46b0381371bb53482ce6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1a0091bd49d37572e5c97513c7e1777

    SHA1

    96aadf47d629924a7225febbf6aa00d2ac0c944b

    SHA256

    0631f6526096fae1c18bff64b65d86e25afb27f484994caeb0b86e66ec46858e

    SHA512

    d19f31eaf992b67333ab15e2cd7cc907a61991595eab96b17ff92b06ba7a2a42802834c4ce523c0794cfba7ac8006e5387101fb89b31ba9cb57030e54b9f9369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    995cb5bd354194ad533577389655d390

    SHA1

    fdd0215794e01a16b5b0825610d9763fdcda6bcc

    SHA256

    75d7dfc45e9a80c9c93f7b8c8daa7e92164ae138016c66dde8d45059d5e81f2b

    SHA512

    08a43864319389740500af4f6b7bc1993ebd37ec5e2a9179757de5cebce2af2d84a0bdfbaadd41964f9b90721e78d697a70fbfc78cc59b2ff7e4b06e59aa0f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bd9e7f92cbb850080562777a9479c9e

    SHA1

    9192595cbc660085803e4ecd7f41ffdc910bd9b0

    SHA256

    3192a9c811c43c99ead2a3113e3146383e7a77788de571cb9718f433c3d4c548

    SHA512

    4d3c4807b3848005103cd26a8314e40d817ae0981ca8f9c3ad21a9ecdebaaeb20b29449363b73d30a4632e274cd867198e7100020ed383fef0bb1e03ae5754e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e893f963ae53d9b6523edddf0c0bc33b

    SHA1

    d218db5272b6b35dc1054b9a4170a63de56b14ed

    SHA256

    d901ae01946ab4a852b774347a5f2c434e5b357a784afa1ea8a5f6f8c3b90e9d

    SHA512

    5c7133337066f4b7dfc72c8016689f0a86996074de39fa75775e44bac4ec8783da2f409075f163f61490c7ee1ed7057b32701fef247140b968f9dfc5c9620f08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11a296944fc005d0720fae60f9506644

    SHA1

    cafe60133002d0303d30133db3072b266e3fcbcb

    SHA256

    e3565af6384eb20141c73e3fa03da1381e1fd8f3705294668e4dd84bcb27ee70

    SHA512

    041bf5e9711550d54419e53e31d9d7df2a0213083c647f7d201abc319c652b3c8e751d313bb36e126ff7cdc1b291262b270f43cebd5cbec4fb2ca91547b0ebd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47cf84e26fde3f176d49ba9715efb98e

    SHA1

    1abd015e4cc828ea832cb83185b2eb8a630406d1

    SHA256

    1e66220d6051450de180c960ff396aa34ce319b5a7b91a701cb106a7e0e1140f

    SHA512

    d3f2fcc78fa66fb53a35439f736fa9e3ec8633ba4f12adb2abdac85078848017698fe95ce57bdd7baa2e96a032d65f3b217d927203989198cfd370e3c6b5b083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b398496133a063dfad877e29506d6ef4

    SHA1

    a747307409965d31722af76ec41414d2b4dd61a1

    SHA256

    b53f1b4bc7e8a3917d4b84424ed95fa74e95f81577216477b75610f070e90e02

    SHA512

    af4255ae954bcd1c9b9cdbbcf855ba7c2a70530d60ada9d26a4c1cd63cc1bde1a1c67c50a50c28fc66337b9b1befc7635049921e65cab7b58668d2f32d586647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bde95b827a7e19a8081bb9b97e344f59

    SHA1

    3986ec87cefe3695e32070e54f6b3464b0a40310

    SHA256

    ab7eb90293febc48567b1591bf807e9cccf52cd7d9985129784afca7c9fc0a2b

    SHA512

    1dbf6a63515292597f3b1a10cf4d138155f653ba50394f6b3fe85c4776e62fae1a61b003c2c58fa9529a5773fbc4c50cd3131349c1f546d3d9c9a389022745c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7be00debfcc52d83a64ace9756da917c

    SHA1

    43af20afce3fbc3aed0941defb53bfe819419a81

    SHA256

    2e41251bbb752a96ce6ba58bc85339fc9ed8655d5c3d4c332bd770f859fd3776

    SHA512

    573d0d062d85eb597b783d249b44257ddfaa53422f74152616056df10ab881eae9d6f1b88fe1620910a18d428084445c78963c440ba98fbc550352a4f7ea8fa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06f403dca415c07cda7c9f0875532bab

    SHA1

    2635edbea151251be7ade42dbf9c99c0d0c30cd8

    SHA256

    bf363de29d87b506a682c75aa7bf64a2c84164ee5c0b69ae54caa55d1e701ea8

    SHA512

    9edff3e2016a397c9a4f7e36d302fbaf187ce2f3ce8b07f792975f2493ea3c876df81305bfcbb1d1632c6fd5afd1825e7e5f46818b335832ae8d5842e6573344

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    956247453e343b50a1c52ce915c9cf42

    SHA1

    9e0a03b5d2cadcddc6f09d718c2d2f5ea9d0e22e

    SHA256

    420dc232fce0e15212af3cc194b51323a3bf284f7de0d57945c40c0adac8eb52

    SHA512

    0789346bd48c57b77f4299d700b9c7deaac32a358df48449ae3ed2eb035098e12436891c2c285717ddd5727d510330d30640cd62d7fba7353aa877c8cef9504f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a4a11762b9b5d19f15731e763009c6e

    SHA1

    dcafe9a816acda399d0a0bace141b9b3146f343f

    SHA256

    13143c357653a1127b3074d5a83fcc28919ea581cacd5b9eb91418f894337def

    SHA512

    e3094a8e87c69863fa8f9a6aa11c4d314765fd61d2695040682bf525b48ca3d65ada1538d381367951f902fafbafa77bb68b42d7d9eb57343322e05a96c5f8d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    789fa1f340db922609cdabc913111710

    SHA1

    018e2a67fb1d2b888a6381a9afa51932a6f19fc9

    SHA256

    a5aead7e0177386c6e966d1b36e2a31bd2b67daedb42b0442f785bf2d592de64

    SHA512

    8b1d54ef7acba7d0f02bf070091c87c32e20b00e1d9a4ba59daac91d45d2ddd203d47618e825e9ec90f839607dcfceb7328996f06628df99fef500cffa4b3f29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43f4e02072388293182716af2975327d

    SHA1

    bf64ce3f1b81ec597fbeb2e5297c3775169bfbec

    SHA256

    ac373c4809badf7a9cfc52583186aa81797b1a0bff3b5dadfa8856d50d1502a6

    SHA512

    e7232208564d9f100b96d09820cd37e281a7861cb9e06a2df531d07ef340f31c790db87e39bec886786ab235c91148e1cebee184c0d932f3d059a94195b46edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    127f92986102f0b927c15e0cadacf1fb

    SHA1

    a4424d1464ba1950a1a1049c0fc68f6620aab677

    SHA256

    37f9d9dd982ad0286cd0c0b666960edb86582dd1f4f703b62ebb42fb01197b3e

    SHA512

    35841eacc963b5144309d58687686f053434d1074d14c3f26ff89d125e32ced40e9261f761415d9fb1ab0b2a3517b4d2f3c373c9b8fc6892a6c45e3971216743

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37576ade3497a4687be99549d8031365

    SHA1

    153166865b2a75434354d94f1847502cc995c72e

    SHA256

    416f78cffb9b506547016812be8ea6722cfc874fcffdc739eeb9aed5e69471b7

    SHA512

    7b4d46c398431bbc969b0067f5a68c40c275b8151e03d03c7fa1760d6140c7f53e5d054f378921cfdd2a53084524a2ae539ba841e3dc8cf1ab367664afdf2018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e436c7ff1b57c00a496c7c962470870a

    SHA1

    200f2eac01a192c86d5c59e3b8ee41328b02c8df

    SHA256

    9c56d1f29a327803cfae9841bf3e12bbf8fa185377d5ebb7fdf7ffceb781193e

    SHA512

    37ed673070de3d7a2475cc90896a9402c30432d772a04aaca53c83bbbe096f0fd0695a3fcef5d1e94142ce79df8fe770870a8ac5dd5b084108565672e2e7540a

  • C:\Users\Admin\AppData\Local\Temp\Cab9B85.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9CD6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a