Analysis

  • max time kernel
    136s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 00:48

General

  • Target

    153a8f3d8bc8a2126b4279239047a285_JaffaCakes118.html

  • Size

    158KB

  • MD5

    153a8f3d8bc8a2126b4279239047a285

  • SHA1

    b98a2bcab90daf9c4f8f969af1dd0c6d986ad16e

  • SHA256

    2c74bf98aa45563f17d91d9632ba3c810d07049eec29fd0a074f9065282d1517

  • SHA512

    640115d6e6661c529d468802871716fb41dfd2785492d7b9c4c93481ff88f65b95d1dabb7cbf5ea8e56fe26811ee0b71312b72133a1a54595825c1bed142f356

  • SSDEEP

    3072:SsW2UPHI5PV3KryfkMY+BES09JXAnyrZalI+YQ:SsWjPHkPV3KOsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\153a8f3d8bc8a2126b4279239047a285_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc09d0b95a6115f0d4d17013b744e424

    SHA1

    5992f4ca3a73b912b32ac9b61f7232217e0e4b5a

    SHA256

    a63a10a8ccabaf2060a90d301e644b3823e45f9aad30d19755e64fa03dddf5dc

    SHA512

    43995c71e67bc96d27c93660c798f0b39bb461b11edafffca3b64202c43490320aef412f23737ce39af990661334ac46864819d9e67711d0a9613e83cd8c6828

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96af38849f38e51b16c3736ca3f9e473

    SHA1

    ba8b5a14c9c9a4c6ffec205c74abe3a36d79e7d7

    SHA256

    faec5e259f8fb3aa99f08bfb7d4dc19e304b16610eca88e65d31fe7116393341

    SHA512

    1ad19b74b0673fc4ea516890da526f976935030d0aff0926a3b2defc4d00c6ae872efa0e4a3a8dc4fe98afa730c2525d2422e09dba1dde599b920abf427a024d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41c8e31c52c1385f150a8bcff48974e6

    SHA1

    f11c8106db936b50d115faf6b10a84fd47e6c35e

    SHA256

    2d0a63bee277e5b9c98be8d2c8ed17b4d4770cacf1cfa978d8740cfec9bf23ef

    SHA512

    15b9c802dda4923e008c01b1733ef6f5b13b27ed2fd42be9f79d9aeebddf87b680a06457f12b4fcf07efd5194810a613633fed969785fda914a8b0a5145245bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bf40fa8806126ab3dbef80d0ef159da

    SHA1

    e2e852dce7e991933a311f2606a276902e5031aa

    SHA256

    2a222eaf2cf702add99bf909e01f5e5aacbc798557d4ddd5d9aa6f7cc087c752

    SHA512

    dadbef6cbe23d700707fd308c82910af3185e5c6f612a32f8c1d1cd46373f9cf841e38d9063bf450c5fe2e38d001832a830210fbec1ad0023095429bd3ab7772

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f11d366835925ccfc98830e9388df38

    SHA1

    734c5efa2819c3b6feb1de5322d44d93cac5bdb7

    SHA256

    7b80e37d7efbdc3167693486a7624bf8f3056f40c1ca639c34a0fab94249f191

    SHA512

    bdb49318f028fa01f0c8fe8f09c8c26e21520ee4fd0c66763f829dbe32c9b645be3b87db02bce4968d24b59f6f3a761067114fca4dded0b95858c1e67efb105a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    686b17741a58e92397515cf2f642b89a

    SHA1

    9d53c4677a8746036f9cda7459445e56a3f50509

    SHA256

    78b6031ae5e49623b832c2758cb1bb088b3240547e33f44233def4bd8f04ea21

    SHA512

    ea057ecffc421f61bcd6cae84099bb0a35259cd54cf9c36277916121b3c154c474c84339d20ec2036d0091813e97ba617da56c999b340edd0ef72f8862ee6c73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9923dde501e084404e7c71dacb4cc988

    SHA1

    aaa246ddb2150f227388fb5719d1d0ff14704005

    SHA256

    cdb865d14134ef3d63410aaa847b7c27572ba0d1654fdfc1e73a40aa2c320667

    SHA512

    0c11ada9c4e53694702e00dad9dd231a2695a12e8e88e89ea2e1d618089e374d6f2c760bc6d36a2ffa4e8f998879b221c6eb5c77e5bab651ace860decd430282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e17560372ab879c051f5af5d34f1f179

    SHA1

    1d67e21b6b3052d8b30a3fc0661dc2fcf6bc6782

    SHA256

    eea4556f35f2b2b9d4ba9dde76e6bad00771a4c3921e8be6f16713df2c86125f

    SHA512

    3cab777b01a6013c1915c66e6854a147d1bef9be11db92ea8cfbc090335c957098815a3d3b68313d73cfe3c2cd489e5110164803e405605feebc9da4b6c581d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d598c451542ed00bd0eb8eae635f772

    SHA1

    4c022863c3231c0885985baa90a02cec974013ac

    SHA256

    a9463aa7145281b5e85d1cc7a0173e60e90f1e39ae0a363741f2587873096df3

    SHA512

    e58ddadd5e817acc162d9c580b4b9c94fdbee79d3016641a7f41107932d2190ed345846ca631444960dd8ea21dd8da0dded0cc97c7e39d2d21990856632b2706

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aee1660b8b8ebf7f130a5f2f409bed9e

    SHA1

    7727d65b976906d2bf4785c8bc8ba78fd8c788a9

    SHA256

    fb35d19042aed8e6e57e88e375063755eeac76c20a722d492f105237268d1e69

    SHA512

    628cd0d44828c9715fe4bac9113f3680db3166ed9b4d781fcb1d98146666cdf15c57ff0fc5e6c8ff6eb2df88c44bd64003d4f36fdd00e783c0433660e06f3e8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed9cd7a527a22c8b93e81c24f4886f20

    SHA1

    677fe078d55ce3b22360549860c7d61224e0cbd2

    SHA256

    fc7bf49c120d7c0910480e2643e2a0367b7c323690468e075bdec2db95fd77b4

    SHA512

    96ec8517300515799018895fa8004f3d3e0c901a9b7f11cae80dae9a2603fa01e6c99cae3baf95d5b57ad3c42948539a1b26201f4501e210d3670e62b865cb66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11fcbdea6fa8f438b07bcac6498925ba

    SHA1

    4bdf94a5000c788d5bbab81cb4ab12462df5a095

    SHA256

    73ad4f5675f83c2ca1d213ad62a2706f967275432c68b31b2387abb0e95179b2

    SHA512

    3b971c53aceac440beefe2c40bd72d023fef9a7100bbca1e48f1eeafc48644fe68f2d89cd33fd122ffa591e840f4430820cbd03e863c744ef3f15b60be85854d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57aa6c7ade46e0d44eb4c0e2e0a480fe

    SHA1

    b327f3cdf1ea532a6ec8b4788b136d6f5f9406ef

    SHA256

    bbdabc5baa0fe883fac20f4f838a1d443bd27a7eaf7c974226d2b6c5453130ed

    SHA512

    c395cf7ce6645012c766fa1804d023bf8ea3a0d92f377615306f27f1ae6899eb71bfc18da6335ab571fd0b078f0f9340d6e111d0dd0d3e006ec3bf9c0dcc5e98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    364f609ae1a7c37f27ba39a0e9313b81

    SHA1

    4e23d5740429fdee237cc2a26d0fcc54191b41b6

    SHA256

    c6accfc5e19fbdd63403b4151400ee88929918a13bbfc577fb94141e33147fba

    SHA512

    8246bda2000a9c6b68ed37ef6b8a26acd96bda2238fa0c239d39f90989533ed2fc21bfcdafa163941c94ae9f0fde554add6844e45fe945342507f2ff5a2f6e1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44738bc264a878f98d34ca5967789295

    SHA1

    b78c04159591980768cbfac591ed9ba3cf4734d5

    SHA256

    29c3448ea841d31b78ecab253157b73e9c6e7d7e7711a60c7a240ba170798dab

    SHA512

    42912ebec3faba532aed3a84644078338d0dc91993ce8d5d11c01934405afa6231c83f3fe2d847e1c518129f07d6aa92be943e970868d8f66acd3e5a1b2e9258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    651b130660f88ad0b1747168114a26ea

    SHA1

    d224325f0f0bd6246e678f0e7084755d5c4394e8

    SHA256

    a223c6ea2465fd2d57a4ecea5919d0a074dedfe3d757b6d378aa733935d0c4cf

    SHA512

    3d3eb977281a1ad3365635305a4cb34162decd7b460589edefd435f775ad43cc11c86fad433e752b6a1d4780ef56181f4f46e03f07220b46feddeade31ff45c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ad87c9d180224b3bf89e8a7c71b14c7

    SHA1

    6e090ea698ea2e112fd5da8e19d9119a2318e820

    SHA256

    9edc730085b9858e409a6879f687736f2ea18d1862569f2a773b6396bdac6e60

    SHA512

    58860db7810b1643401129acdcbd8f77a5202acef50a0908b42a6a6346f8b37738ae195d9160c764b5b8a3a057bb7c8deb30ecaa8d1c630574250493e9a4bb57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    641165803137c06d7113c5d81ba9e1bd

    SHA1

    e6478f67effac3b000806229643feb970546d645

    SHA256

    0496dac825ecb602218e37f2422acdad6ae60f647525fe620cc27b9719180c9d

    SHA512

    7c7deee10767031462d874f9a7b9663ab67eb66a548c0483d5127cbd81ab1cc205ab34b74aef153cad34b99db8aa2b51349b29ab02fbc88754c4fa3e39019093

  • C:\Users\Admin\AppData\Local\Temp\Cab17B7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1906.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a