Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-05-2024 12:25

General

  • Target

    17a8c90dbb435af68434a7f8f48bf140_JaffaCakes118.html

  • Size

    4KB

  • MD5

    17a8c90dbb435af68434a7f8f48bf140

  • SHA1

    f66aa5a816d8e0b16b88cdc3921aefd3c735cdb6

  • SHA256

    3edaa5a1c3e025a305aff969c52547a46994b8402448442e1c6258f0f5b4a32b

  • SHA512

    647107b04e6d9a1438f1aabfe3cdcc07e3878706fe1cab04ebcae912192f430396ae0b34dd16434eb6e6b48f19a19cac5296a26c08ff855868a054e99d4d634a

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8obEBSo8t:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17a8c90dbb435af68434a7f8f48bf140_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59469daf2ee73104c4d23555b8f187b2

    SHA1

    15db230ed9f9502a4646bd6b2a51b0b67bcc65b1

    SHA256

    32cfd67d9da01f31c4d3000460126e8080d36d5862ce8b917d44a75f179c990e

    SHA512

    abbdefd02c2cca5a0297d65cef8be181d8db6711600f7bd79a7778ad217a08242b038fd17a02319a4ab32ab26aadf3b816b3f218b1fd1e9ded6d941352b779b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c6e292dc884ec64e30022b856777008

    SHA1

    9caf78e0b8be11698e36d413506005fee20d5c29

    SHA256

    f30bdc9a16507ef41929601edb85f73be1a5e95bbf60a8cc4b2b5f69dd6cfd10

    SHA512

    b1dad6deb5b9077cd30f793091a5c0785bbf17cdb480389cd96d0b666f4c9656d67deab692af49895d497383b3e9fd83c5894b18147bddaa551564aa9ebaadd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1de3d36b01c923992aaac11f22b51b22

    SHA1

    19c65853a2e07880e610e3350ac602012390d7c0

    SHA256

    af6f18da1af3d556be89965ac79025e2feece4fc193c5924b8950ca2fc8cf45f

    SHA512

    bbb7c2273b2a8ed1c031e5ffc4a5b42195cb3bc5ad9536c048994f5f1ef62a2610e6f4d3823fe7e49af7478fd39994f0511e3a855925f6995c3b8eba35063da4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0e8113bcae9802624ee703c9c1e7883

    SHA1

    c13f64bfbb9929481a6ea6bcec9e04292671fa85

    SHA256

    c33f13f50681d19e23331fda73227b0091c7c6c97cf096beec353dd826f10d48

    SHA512

    6d72fffa3794a09f51042d36bfa99798a21681ec0dba5f14b1b4753b8e0ec706284910637512458e84b062e16fd6e3c65fcbca9cf0fd73dca41050dce93b6dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f99bd2720bbf6a779cb0c32017a3691

    SHA1

    6df763acaeeb379ab2235cef12eebacb839e5786

    SHA256

    4b0010cd7e466017dd1606cf2f330e44c468b548897356f94a87b42ad7bc6ef8

    SHA512

    7fd0aeffa556eb9d10f05c143363a35f0665a2f88dd523c295194624f1f3b557b657940d559eab9ab3f7b8ab6378731e4bc5bb34a0e89a8d880a4deead2462f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fdc9c3bcd961b7dc21715588d95c9b8

    SHA1

    44683749d03b032a4a16bb2c988e605d4b475091

    SHA256

    b089869dcdb97783bd7102f53c1afad723049383a56fd8e0178d106558dc3d60

    SHA512

    e89a8a4095fb68b0827ddc81cdb18fdd6aa2194c8fc0d282e2c09b7405546b6c0fa70902ad960a46617c8b47f965a8b9f245a098346e4920c591eae57c1638d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f1900f746f9237f915f35bac820fbab

    SHA1

    92caa9bbc2192269158c9d2ccb30b0eda318753e

    SHA256

    51af75c535c077292521f7bd237b3e065a36996ea66cf6b7f17eebeaaa9d9f5f

    SHA512

    d66162056240b1e95bc18d3e3701d23d4d7e4f46c27e5372b35d1a55e486114fda1a4da0f89b08d7748f3d5e43f73c6d8e0798d8d1d45fecf103d95dd7f0c26c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd917f4e4f1980164a2c383f63a17a8a

    SHA1

    04962a8b54083e882fb5a6444ec221f9a8154152

    SHA256

    86e2e27b59a16ae20540264e47c9b186777326cbb303b9e1df35fcd70c25c2e6

    SHA512

    e533c73f92c0a2cc5443ef04dc988a1d31330844f86979ffef4368002b5ecf5495f3b8881f3aac14df99147d4a66de47c7321f1eb80e2a37d904b7e90b8b6569

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b270e7de1c91b15082f41338fd42063

    SHA1

    32b4db15e12d4edb898b95a76a5f517e0d8d1559

    SHA256

    e1749fd55fb0d9e01c6f1c1d8d17d64448675eb6e927c447a5f75d0f5d006b6a

    SHA512

    d7c4fed525016eed03dae09bd7ed12d560428d99e6cc0122917100a985b64db9a357f398fbb4bec04bc4ed6dfde2e1c28911e4cab4a87a213899b24f970920fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70aa8973eb7bf4c87dfb132a6e0494f9

    SHA1

    9725521d0930170bbaddb3ff81d194948f6e3c22

    SHA256

    203d2cdb39eccf33e564e6818f852e1b5ce2cee2bf49b231c810454830b72852

    SHA512

    bf65538aebb02c0b23d9299d3fb1133536d8c458f75ce0db191fb041ae691dcdf70938106574ed93259a1f21c34263811e13064b6b4e7562b3050be4e72403cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6ec0951b07d15c05389e924db5a30f2

    SHA1

    190b5ce15d9e9829b2abb5b2c29a0369c60da60a

    SHA256

    d757a3e22543bfb1058b5bfd41b08de41dad856ac5a24b2cb7b71c70da1dc403

    SHA512

    cd948a0f981146bb0b5491eafbd5653c59956cda93cc23fb89031c9819f7ec8b592a09d97db14e7c90ce5461448a18ccc0b34867c3289c9b1e57aae337c37215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6adb9ad83a13d62453d3a02db82d64e7

    SHA1

    906f3143267b377f558d9662f99b7cb48ac5ab22

    SHA256

    d37fc3233fc6e1e6c06eec41bd0f866e8eaab31daa71298566a257aa45d0ef21

    SHA512

    f3da1825808443b9477dc674d4d12020a74a75a9920b6e51b0795ae447967689fbcc3136b8b4db2eaa66b17f79c2e07f7a5118329aea9c9e5c461a921ea20524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be9741f119feb6b7cd6afc27faf9ff6a

    SHA1

    6f8b9c86fe40fac0344395ee056633faff9f61a5

    SHA256

    2e1b787036ff428af6446d79aaade453ac8ffe8344c811c3d14a69aa672c7f3e

    SHA512

    f36aef1333f727a14b60c083808efdf95a5c716694d0fb95284ae22491b6abd5b69c1da6b46acc7780c22502771c8f5d64725a1f466d71cbd9fca6fbda49db97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    384066553ec96cf7944cac9aa9d2a3d3

    SHA1

    5c5e6e5c587d6f93bcd6dfd46a9d1b987047210c

    SHA256

    a85faa1522f2f9409d3042886f9ee02010bcdaa573db9bcc4c7a3e324350bb8f

    SHA512

    43b0ee67c1ce35ce9f5e619c53f57f620a2563a90c6f2dd93c35e37254ce66c15916190a085bf06956e6795e65fbaee4037a0eafa96aa6f0c9e8ad4bf42bc3e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51d15f5e335cfc375d978caf626afad6

    SHA1

    44866228353087b44f9480f58aad592f0368bddd

    SHA256

    df2d9cd875cb2bf2adae51ff4896bee2ab7e81d02fb7442594aa5e5f2153c258

    SHA512

    86c71a5897d64927e7382a7acc4f891e1573ba939732b65efa7fe12a702ee759d8a71ea4a60163c513b0ffd22ead75e7d4b35e3d35fd52b37182bf43b967f579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcffc94401c75ab187e42f2406378bb2

    SHA1

    26afa492041b623394bb4e8861cb087f61184448

    SHA256

    72876f15aba1efd6f15fa991d51471a38316288a4ba2121dba3fa3cde12f5698

    SHA512

    76975b38ecdfb540550eb011580504503bcc7eecc930727eece77babc6d4b1af998c368f367682f69354893ef241630c9a736135b147023d5d0d5ba5911fe3a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    305e25ed7fe6ebb741b1613ef0996f64

    SHA1

    53927dc4a0feda63286885b4c2b1a5607c0e02ab

    SHA256

    0a2f614f1808564f122a3db5e86ca41202249d8c2f699ee606a65c06b7c553fe

    SHA512

    69611bb9b4133f696a35ccb2880a8475da5e3124f250ebe5889bca8be368be1668f828eb06ae787ffb617cc26588e820d65203851269b111023f58079c4d561a

  • C:\Users\Admin\AppData\Local\Temp\Cab37B6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3898.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a