Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 02:49

General

  • Target

    15a46acbe6d79d925ec136695e0900f6_JaffaCakes118.html

  • Size

    102KB

  • MD5

    15a46acbe6d79d925ec136695e0900f6

  • SHA1

    421b8eec8647ac21b1b9304ee27d940ed55d1180

  • SHA256

    ef7dcc65579f37e49c666be660de6c808e6a003ae6e4d0cfcd8f31ed99ebb81f

  • SHA512

    1158b375b28d865de059c9bd0b0c5b3f34c83a82c89e52b94ba72fb68c88a12bd84e02ef4b90141bd4ac8efe3afe30af53e5683ecde4e34c941e33c16306b05e

  • SSDEEP

    1536:/gguqpp0jBVdUVVVVVVzzSSOOyyy66IIKKGG8B8BxxxxxxxGGddttGaa22hhjjZx:/ggzpD6Vx2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15a46acbe6d79d925ec136695e0900f6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1744
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1744 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    616631af0b8735feb081ed1dbc235bc5

    SHA1

    b6509e19e1830931c024c7c5f4831f7ce6b19d4e

    SHA256

    dac03bee78744650769d5adee53a15b6fa38b0b81935258cf8b343a01cc474a4

    SHA512

    13ee98a6d891d0379dc6ed40d79c11adcd3db0b33e0e282ebfac6940652721de4aaa074a14e2fc16c7f2462921f8bb428d4c679b7aaa0179fa79ddae86ba672b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0feae6ee5af5fdc7330875c4d568b544

    SHA1

    dd5e3bd5031bb98d5883a0513a0c3073031d31f6

    SHA256

    3050f1c3c7faa92df3f920ec4791cf1dd770d51c31901a997ff4a6c9bd76a716

    SHA512

    7c21ebdea043d36f15cbf2899938c6d48119094f510cbac5fb70a94a1492629a4becb8fe7d6410ac1e5daeba6a355fcffb5ff48c583f88c16d4b1051e433f293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b7732450ad40805dc0db90f79a8f31d

    SHA1

    a66839862478be3215c99ccb30ee34accc202e12

    SHA256

    0a50e8cc53ac5f012d9605c558907c31ec30321bb17fc73820ddad14d9cc5bac

    SHA512

    b5bb169f404a89dd86b20c4e17eca8a52fca82393e48164df64d6ba49698db014b4f097b461f29abc03733b37363a9192ad331a425088c8c48c8aa00a135301d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d547dd30577cd8378957a9a76170dc3

    SHA1

    09a5e0c581e8a6e980a23f41830e4c4870503f32

    SHA256

    a2b86d85cf254608f05350bdf66febd9ca50ec48041ea15f6d0bf5447f9e7ce4

    SHA512

    2d26bf0b9ba7a614ada21c170ffa2356ec8a46dad50921e5e5a02256dc484cd2cd522efc7bbe1261c1f43d3b0ad18fcc22257ad6a1eae1fec7c86b86274ebdf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d4d27752d69a809b63409426b69e7db

    SHA1

    5c19f191d1327c5e0f4c779d80fd15370c8fad01

    SHA256

    01d9c000a245a16188ed29b9091ca79814be9599b6b93b9c895dd6da251e766c

    SHA512

    8bc1ca1ab943535df9b4ddeee7ab4625fae375d8c7651e25912a3e9aa013b58937e6ec268bbbb073097fe0d18d79ce031765892df7a1dfd087795fa849911584

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7224259c21dc5c3df85f3ce6ee5eb981

    SHA1

    d3f70377ec3f7d0806a7c754e610c9499e38070e

    SHA256

    5364651d8f6e375e5f0d302454c88168b24b4415e5f25aff79e52395cd126488

    SHA512

    247d222a3d1852bfa831794a840a1fca15d5e404db535497d3c208884dedad4bc76ae06c2befed88f011e17b3f0a10bdaae0dd76427bfd6fdcf136853e021534

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83396869fa254e6fd9edcbfe5d7f0551

    SHA1

    c232c729e020c900b85f795202c739b90b478a71

    SHA256

    150d73ca25dd563d9f4f55d91807b1c3b21b20e912b5ea7841af4dd73ff0d11c

    SHA512

    d29d1732347156f32bde9b2f98ccf09f32d133e2fd7d0cc62165a1afe57b9c30b20ec77d66927097472185c6d9561c989bf70d7ebf6af6505b67730926c992f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57b04a2550463c88f5e571d0606d0818

    SHA1

    830a19b9a0aebc2d1966a2c4cf03656c3ae8b4be

    SHA256

    5beba1da006ff429749ecfe27c8b2736779c4f67fa466fa590687819ef937a58

    SHA512

    c8b0e5e84111f1a1acb65296600032b03709b91923f68dd90c5c4c5aa88ea09b5f28cc3eda5fa971b38989b12cee53cce4eaefce7e3c3ecfb3cdef75a3286a69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    187a348c29266531c15d9a7a0cef83c8

    SHA1

    50cf8171f69bd809b1c477b48430c3008a64197c

    SHA256

    a0f38d5301297d36fe831e9008501f088118740d5c127b1cbac6c7e89552311c

    SHA512

    f2d77281f9a28fbfde099249c179eb6bb44f3f90424aaeab39a7d576cc90932906e2651f226dfc8bb146eab32a7dd34dc280c923a0c420baf68fc393b2982833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b171667a78e701c9896107435d981be

    SHA1

    9abd70c955e0c835cb17cc365162f87302cbf22c

    SHA256

    3ffa4b173bee1b7659c48de924504acafc972af7ad1c29a575831f8b844b77f6

    SHA512

    ac4b13614579f8144359dd3b3c736bf8a2d77289d4ce52c78cbefc255d3054b14dcdacb6c964cd158a6cd6553c634ccad3b388fbdc7b7a89a97064b51d9c367d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e080077a74e4acce7ba3c730b1c9f4f

    SHA1

    dfe296a7242fc48f1602dccbd8845aadee321ccb

    SHA256

    10c571fdce82ec0a0fd2776f8b260f647fe5368aa37efa0f961d698fd41c51e6

    SHA512

    431b08952380a0b0975ac41d78f19482bf921c1bbbfade10472dba5678147462f42c2f0cfd6a7da11a93962c16a6e259eb5e577b3cebb9f2027f9b8b22f42c04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e44ed6d71f41ec7fcfe57519bbf7e487

    SHA1

    bd342e3ec353fa87323bf6c6f07c3f235d87eb05

    SHA256

    c94af62d83317b97d6fa9a04a00f55cfed65c03a5ce1263c668cb51064748e60

    SHA512

    bb8528b9fa30e055f586ec98da81586eac62b13ff1a90a5ea159bc1e7bcc6d045181985f68dc20a6855b90f48a7c228dd074c5f4f5d8c00f9e1ff3753af79ec5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    177369c600812001503a0dfef198b21e

    SHA1

    8d3bc9015ef6d2adc324d5479fb47c891e049c55

    SHA256

    c4562e29e289bcdb88e605156fae72f2bc13b04ca4198f7b6e3d0531a037a549

    SHA512

    a2817b1c3ea34f31e0ad3a7a99295179fe1f2fc36065bc0d1506312bec7db1413b8c62a75330a29555955e66a7dcea7344c46ec71c61e40b6c5ae87f0cbfb627

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b1b05e6bd003ab5157aec52822ee9a7

    SHA1

    4765a15468fc7ebbeec64bba1f97659fb47fc405

    SHA256

    3387e5055567e04cffbf540126aff5141f268972dddf4e4023fc722356ac9a81

    SHA512

    46275cab84f868801be095db45cb025e5dd09de8b908227ab9a06b03504f1b81d1eb3831407eb89bc96f60a3090b1f06f579a07e5b9f6f9ea17ee36076b1e9f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05bdcff70cbc4fe8029764cb041d8a85

    SHA1

    849f97c8bfc5fc4f4bb60f947e25adc77eb41c68

    SHA256

    f026425bd2a55b563521a49224298968d87b5a053665dc6c118c5a6c99a99cd1

    SHA512

    fed39524a6836b8d6fad86f910d20c64c0f1b3eedec2eacbb4f19bda100f55888187ca4c86212cba2244c42a71ea9acfa877039302a0daec332fd9aba1e852ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53fb9eedea3cd0a97969f6cea51fd9e3

    SHA1

    821b7ffdb72285b23cae8bed747dc512cda95bed

    SHA256

    141a0b13cf0598196734d7dd77608535e0bee52d2a56f4e1378790ebc415f358

    SHA512

    2c990350cc5c4b1f38f9b4d4f8a6df35a5697b8586eeffbe9d9da03efcbfc61176fc6cc3356a4826878e5727bc03d28183451a90c8debc451e5ac58437f0746a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15f2b82e40c4d650dea6d4f834fcc1b6

    SHA1

    97c2c6200a93670eeaf20ba3078667ebf4290aa6

    SHA256

    0d81064c2c13293b3e6f194979c9b2814964585c0e8a8490e35cc3bd391b5060

    SHA512

    2a3ae15baba42c057acde21f6d2dba28a4addfe34c923464b6ca1c327a623d8b9ca5f72e052153f973e79c95cbc5075ea258b31490cb6ccb2fe346f39b408c5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e874d0712498610c00eaf1a73006be71

    SHA1

    d0d7cda50787aadcb482832a3dd0a616355e2d3f

    SHA256

    76aa279ddd037827a7acb0b2f931db59c10b19ff83711c843dffbb512f9d8e83

    SHA512

    8ab01abeea567d2155ed79775efd2f33e436080107eef1b57f65da13c467a85d2ae30332cbff93eb9ddb570e54b798de4741680c2d7e5e2637e493600f0ca6fe

  • C:\Users\Admin\AppData\Local\Temp\Cab5005.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar50E8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a