Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 02:59

General

  • Target

    15ad234c5591b90b24d4507e81a66816_JaffaCakes118.html

  • Size

    839KB

  • MD5

    15ad234c5591b90b24d4507e81a66816

  • SHA1

    5589f1cc0fba4f8a5d740f732ebc9dab3eeda920

  • SHA256

    d1e36e3c0b3e0a3f77349cc2b32cef9cecf3dc4ff6f98db50effd5e2105ef3ea

  • SHA512

    4e0abf926ff0553816d678137929224bf139fa3b661b3c50e1c2b00f43289b3f934888561e1275cae1e2e928be97e34f311e48dfbe8adef1aa20a36f6a3ce947

  • SSDEEP

    12288:Cj5d+X3ZrscWy9dHGx5d+X3ZrscWy9dHU5d+X3ZrscWy9dHv:C7+1jyt+1ja+1jb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15ad234c5591b90b24d4507e81a66816_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0bc857e60505641b589230b13f90670

    SHA1

    3b1ffa3f66cb264210bd3221532b952501d4a495

    SHA256

    345e83adc66e39c6669acdad2396006ef6ad4e7d37c38ed8feb736b1b8043f2d

    SHA512

    5cbd92ebc26005cd0b5018614102da665d629999f0591572f459954c8281c6975bfc265ca0e1ebc27767a4097de0d6c3e4efad88cd5359bc6c0e100027517884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a18105d5df607e407dda9a2f83664c9b

    SHA1

    3a34b05f7e3133d0544a66335a69f082e01eef3b

    SHA256

    f5d5d6d217b0f02b1f8303fe6b58924fa43fd310aa38147abc5f416d48f37309

    SHA512

    64897b7ff3b6d2ca8b3de46edabf502a40716bb0c022946108e7d357afcfca176f1894bbcaeac8b15d77f86273f3feb4bac1e40eac045921062347c908b8ccbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57a44294a4f105d18ccc016d5b50f1be

    SHA1

    a10446679f48f48baa22437e8ba745a93b0e180a

    SHA256

    9e07804839d974c2b092eddcfa0da84b34e62d20940d0798a161230e02576936

    SHA512

    e219bf6e73c7a9d4e7769a2c6a25d55a0f2e72884813862f9f51ca4aa42e10d6a335405432f9f8652a6d6147fd2673951da98ec82ef51ef709a48419a42e2360

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f6cb4d27d138d77a12fbda51aa568f1

    SHA1

    39167595aa33bdacc3aa50f9f3ba975855186660

    SHA256

    dfc3176b656fc78d2ef5f98d09af51dabc65bfa80bf3d6202ed4a9e34b2ea8d8

    SHA512

    25374a7014c1d623af4488552ab4d83dc7a1492793e4bd85d59f3fdff27e0af4352527f0f23c5b74d5d8f01efc1ca9e031c07d4c8ac133c46a658780343ffc80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e0636f160aab1598d317cbd30a14150

    SHA1

    0195229db9462578c4f958bb93199a8f529ceb1e

    SHA256

    a931a2de2e3d78ba21bfd55aa911cc2cf3c0ee59db36865a1ea6a8f5d288cd7d

    SHA512

    9c7c5764b24c38112558a803225aa8163ec5a9467a3fa9235e9b6a6476787a4d3b93ed310fcb5e6b3e84df429b330816f8e5baedd0b578b9d2c6ce2cbb485bf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1eb88e376fd80c8160a7b6c4d0be9a5f

    SHA1

    f0c146688652ee09111f46979f9ac913c3629056

    SHA256

    e836a517ddd5cda36e5825e46e947725897e7d4487747ab3e50cb4710ab8646c

    SHA512

    ed122262d88edfaf062c42ab68b6e27992a6a7190b6f089a95731593be627c9f3f6df4121c7792450fbaa00da678ce6bdf9b976933a189546b158e29ca4580e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9d3e5e22b064a317f8e24701f5a2e39

    SHA1

    4adf5a68b009b508179434f7fec109f3706aaa05

    SHA256

    0c1b1d4f41ef873a54f2cf7c43d20170664af58ba2bd610f0495675564d67e56

    SHA512

    8c851c76b9f8ff2c924b22c1a9a1a4aff66f81fa149235a09f274df6c20a3570a44eb075f137711447bd0c5c11479da769dc4306b128ddb6976d9420488fc322

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77b71932181ac0dee48ac315c803f020

    SHA1

    23e3962a1c5167bc5e4a50698c9bd3097e4fa4f4

    SHA256

    b915fa7b2ed0dd4a763f51681e5b663a1d20d36323c44893121f8ef875e95112

    SHA512

    cde575dd6f3d41cb9992049515181e1eb6da3c43db8c5369ff4cd895a28273e3602d02d76ea5514f5338546c101b4696912c84c8b45467e539f5b49adcddb522

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f898f8f5ff48bda4aea6681c932d8680

    SHA1

    714c06c08a036191a21ecc1150b029f4cf3065c7

    SHA256

    bb29f4435fd2aac12bda65cd1be53d9f0a0210a30a83d86ae24b223392d0deff

    SHA512

    072ab8766969823b89d42f105118ce0fb53492d37cfbebe25d71264b52e3cf2e3ded12c854ba76614f1ece516139ee66f58667381a3a9a3d7f841c9683f3ad86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3734d59bac019d5fbfc5db2e9f5194be

    SHA1

    da1c103e1aef4025f746970ef6dbe40c5d718c85

    SHA256

    cede66d1bfd738142a32effec3f1f530f64676f8c79a21a201b19ed6076127d2

    SHA512

    0644855e446a8c317fbbabe4725d41c935e4973907074e337b958925c518903aee960524665baa5b840ea568337db021793aaa2365348d6ac62dae6c1d9b53ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8c57d53835d0da7c967e13ec9f7edb4

    SHA1

    b2dc9e00e99c775efa72ffbeb32e4111a07ad30f

    SHA256

    43da341f132fd70661b70635db78984032f75dfa46a0be23877008cfb4db1c6c

    SHA512

    8f56dbb095ae035240fea53c180cf44b08dde3a785caede4b93b04e32ff19ce0a979a1a73c1584ef74ba2904880041a0d4eb4dc754097b3fb1c659cee719737e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c787a478d1d8cc52805de8dc6663ecf

    SHA1

    ce363669e181a08001a76518f33c21275a94b8c4

    SHA256

    d90f8b20bd4652dfe7d07fad1aa06396438f070c1fa3b3b5df7ec6dff235db4c

    SHA512

    dc966c78f0af3bc2774835c2436701f2fa4a74a97615bd8e1b45440528b960a5c30f069ea6742935eafff8a8892f6714529422e72343ee6996015bc61c8cf4ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8639560b122403b20481af128bc0c0c2

    SHA1

    4f7c3991db6f9ead97d76494743d961bfc6a0f87

    SHA256

    6ef83f18b9adca8fb1d832fac7aa3751f5907ab0f5f32e3f03dec3009ea8d0e9

    SHA512

    b1e15cdb4bd3558b9641d739b6f8987e27af8008c181e161f6c5800e9aca1ff4da5826a7dee07cdf727ffd1e8c732c0dd6c0aef22c9a7b174ae4e00de2bac733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5cd0006789eebee036d161a24afe7a3

    SHA1

    accd0a95d5d500541486cae1dad75243b81702fc

    SHA256

    55d6ad113527d55a2d097e82c7c8563b44778f90c581a71ea0b68c3dc8b683c7

    SHA512

    cfe991506d2ac21d863bafe3dd9dd549cad822c4fb1434cc654168b4d7f9200d8eb6e94f1064579822fb50ba227719b0b1461e30bd7d952e9a19031414cf4678

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54031924cb56234953f95305932586bf

    SHA1

    c906efaad3790d652c43ae0e1325647db6717b47

    SHA256

    85e98b05f695619a4fe0a4d90d48ae021969d7e1a8ea4d9d2bf141b96dff1ce0

    SHA512

    157758699208880fa70c8c23c875dd99765b1e740340bff505e46c48930b1438bd119315121f9e567837f89c7c00919ed3ced438144e2b2201c851890a87674b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07ae70af1489a05f72052a9cf1640622

    SHA1

    c02bcc193a1d8a2fc0d0b1511c3d93d6cb60ecf2

    SHA256

    4122436cedd580c4f8379fabf1eb4eff77a9c5621fd56e9033e198ddd590d80c

    SHA512

    8fd915d4e2ed64a842aab3c1059099b4eee9b6b5587867c967e9a69c602aed20dbc4768a283eef39c93a40d306a09148b28ba18972476987c50a6df6e839d619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    851a589d8659af404a57c10967b0d5c2

    SHA1

    44c3f2ef171eb179c12a319a2280e7de1538c63e

    SHA256

    679eb1c12c1818bbf18666d7df559d4eb8fe10f83459a1da6017d68d08c8e04a

    SHA512

    88fe901e500551f05567b78e26a6486fbc18654e2a03f326346319c93a6d1fb711195ca74324936f720fa6e4b3060dd17dc4e725d5eaad7cccccf44cc12f30e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61067565946636bbe3c7add1cacb6d0a

    SHA1

    000263513807ed45a121042f7abd495fdd1298a4

    SHA256

    57846f222c254b033ccadfd6e5d9ca105dd58ba0d4bb1c3c506bb3d83351cc78

    SHA512

    021d0aa4108cff93cd73a28d6fd64f2a0c8379bfdd734bea0fe014b4cd8730dfac6344d6af5dd2ee2c52db544a496d354c6380405683b07266d60b02e6a7eeb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90110df6f09cda3963164e0ad2a08de0

    SHA1

    5293af933fbdb8c8309c684dee924fcc2b5855ed

    SHA256

    29df3a88365854745b21b216c185ad02cc09c3c54a3e39248af94e83c65fd3c3

    SHA512

    8626eabeb9f4608dc13f3f5c3bc352637940c277b1343debc1df8842bbf3e673eca9f44899a222fb5ba36febd856533e78dc3a895f5c7e38c544b760c3f7b5ee

  • C:\Users\Admin\AppData\Local\Temp\Cab8597.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab8676.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar8679.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a