Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 04:25

General

  • Target

    1f701fd3a3babc9bbe5d0c8624537a70_JaffaCakes118.html

  • Size

    461KB

  • MD5

    1f701fd3a3babc9bbe5d0c8624537a70

  • SHA1

    4605c66013890a6639f2bedff50cf1b4ad9ec88e

  • SHA256

    ad06ca4749c7c24fac51980ce1ac588bf7b438d46b2780ca800c1249704413a1

  • SHA512

    322e87f6f0fb2a87d6d3bb488383c52c945a9e8f75d211a44f4b3f89dca9671e8455a1800aef0280c389cc57b43c96ee2e1a2590fbe188f850a0c8e654c426a3

  • SSDEEP

    6144:SysMYod+X3oI+YyQ7sMYod+X3oI+YAsMYod+X3oI+YLsMYod+X3oI+YQ:d5d+X3X5d+X3g5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1f701fd3a3babc9bbe5d0c8624537a70_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1396

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41a4910007e557c25a03ba0fef176cd9

    SHA1

    60f6d93444e22d94b7ee8e44755760819f62847e

    SHA256

    f2d09aa4270c9c6d8b61a2b5bbbff06ad0d507b21d47417f97e001a4edba6ca7

    SHA512

    888bd6dc4988e2a2b04754ffe29ddb34bc8e4ff1e9de3959d97998edda6707cc6fe56f672502eb987bbc5567ab1cb4cdbffd13dc356dce36d9e41c95b80dc588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e053b96f9f6675590cd649df4e62f4d1

    SHA1

    e9724fef6fbd5be5f716d46a4fda6603ad94457d

    SHA256

    f4ec3c0f08a003d6d929d49af6028ca7200ac7ab0254087903df4516ec7c537c

    SHA512

    0074e00c8fea4a226989d5c0da60307c982eaa4284463ed3bc7563e3139816bf00cf66e68d82fbbd8884113f7e9e73fe446e68ea1022dc32926f66b9a4055f49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ef87b5d0e931e6dc97e9fa15b527021

    SHA1

    a5b560a5f2215de57ab974299a39f07130ef1bc6

    SHA256

    2c76ac506d692a0ff2a3df098bdee5ab9637884a2df3520dd2f76c0578b18bcf

    SHA512

    11bab1fdaac6d8663531f33ed907845a635ceae580fbbe7d48c557efd17df3b8e779bfb3a417f566c8ef3b35417cb67bf9b7842e350dca003aa1b6ea407d843c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a047729e215a6a1967ee04f7409b2a8f

    SHA1

    78490791e359ffe95cedba893e28ab503a815d58

    SHA256

    702406b92be993925348f3e0f7ed2537b302df6d732fef877fc12b5c7e76487c

    SHA512

    771da8db577197a844b6c7a2e645f3ab617fbb836523940b9490f8ee2a6317054d55a23d578cc8aba6f2f27c0cf65a7c04c6f7ec4190dbd8d263fe90e8a7aa24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74fcf2908ca30ba596cd59657cc82a6f

    SHA1

    9607b099232de0df1d5bdd574525b0f71853df8b

    SHA256

    77eeb89e7fc644f701f3f6dc64cb38ddb159207596c534af09e945f7b1d306e7

    SHA512

    db26ca057229706da84eaa218a79f46e448bd56054f262545e0567b42777044aaf47ca428e3ef5239e13934aa219c7d18dbd07c8b901d7e7435c20db6110e7ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9dfec784e8d8553c1fc5a59ad435285

    SHA1

    08b79a9c6018ae1c5def503a5b2aa4e8e987e18b

    SHA256

    a5e0aa9d7bf330c7acfbb228deb07bea4e94a3f1bcc01b9569916bd031a17156

    SHA512

    89e68d04e2071e69ef9feefb1004fb1eac9ff647f32ea5429410086312ea620f0f453d5beca1becf836c20caa9ea0f1848da8da9aa6a03c97ba0770dc66deebc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8de270ac9f7ff7d73b65f5f272a5ff30

    SHA1

    f97d3c86d99e0631892cd522efdbb708e6fecb9f

    SHA256

    c7a37c9d2834e01a17e697fc880d79a8e8620e7e41de1959bfb64e08de13a70c

    SHA512

    8c5c32502a75fb0d41c158ca5e65df9ade3c138ccbf02ed680d16e4c4e1a8b235dd4b5cf45d39d2ceaeb2403a1c938561a941522a7e5a5be1fbc61cd502bc0cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b164125605de59c06bfdc96a25500e9e

    SHA1

    62193fd030b61cb5e76a80d6cd9713749f676000

    SHA256

    49d648023c75fa6913f657f4e9ca4754059d3789f2c35f89c98b497ac052b657

    SHA512

    d8c0a7bea98b0312ee7c4c59a79ef5178c0b65cdc8ac0b11479d0c45a94eaf82c4f1cca9c2e38323b36b30e3a7a86f63f261c636af47fef88d6596f577931568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22c8b315b50f3d58eeec1816a65e290f

    SHA1

    bdea17b7cad66fcdd8ab006594bea62326278461

    SHA256

    67fdf8e8b9056710e15e1e54c86149d2365e6da007edc4d30b449a346863cedf

    SHA512

    24f6de9827afc1eb04c13a3a22fc8dfb1bf61e3408af9685150c344a2ecd076ed0e4885ceed029bdbc59670e836fdd214af79ac641df230b4d81a301c48ba662

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89e8ff4f10b9f871d4435faff057bd7a

    SHA1

    6ceccad1f79b8547955d18917bee4dba1aa3dba6

    SHA256

    9d0bfa6e263fb45a5eb608b241a78e10746ba1fcff0a37bd72f5843d7396530d

    SHA512

    cc09227aef441987722da8a6c1ea92e376174c8ab9eee73bc8d81024623c5ae20f763ebade4ab5a38ed52ab3b5499b73bca3cf0dd2a39797f0fb93dce2cf3ca1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c817172fbcb6d4cd226471da5b2a027

    SHA1

    a06a63e20ccde6fdb32bea194f0edd4e751bd6bb

    SHA256

    0ce7e0e8c77dc2f0dd787db01ae5d871930d8cf1e1670f031eb0eae0331ae0b1

    SHA512

    232ad478b162b2edcb7cd7ec6d1bfbac60a0b460d8cc16c3a86af9f8da6f0d1983bb6658b3514bfff05007c890742e642842be8b1ec009e7f774439204645a1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33e260aab6bf717c9b43f0546007ccfb

    SHA1

    f7685fe7868313b4351dffa210323ce3335a7828

    SHA256

    1c7c2a0bca4d8a4ad75d3182b45bdb27198f784fd4c8c9e7b25397604c626df2

    SHA512

    b0c941b2863dabcee3a2ce5e0e998c15cde5f2106a822278f75e8b54b1f7a1590f9ad82032b3bc00eb9faf5ec406cf62dfb87fc0677509389ec8bac75294b356

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30062e3b8397492a33506e0d07fe3f1e

    SHA1

    31ee6adb097f231793fa3f2d81be1b246c0ebd53

    SHA256

    a487acf9923d69d07289ca4fe991736b1173bd13654191bb895a692ce81295bb

    SHA512

    ca21677ae5f8464577717f162b71bd35d0c770c1b6231683550eef384cf840d4b9e7e717da7b01ec02e501c00a57c90068bf62350b16987e834cb97e4cc4f234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fdc9dd56b2843a297ed969c128794a2

    SHA1

    6b0d45ff62fb189c65ce13786cdd0aa1217dac18

    SHA256

    80bd5e96a3e1cf3389882cce2859677dbbccb8fd3e7dd551f9e4fa6ad58e6c82

    SHA512

    8b9a8614f55a0bf2e827d3fdf42c41e99937936a323f2e8544cc05656b073f764c701ef46d8edff38aa257f314c2460bea102d64fcd4e9b08a6d178fc523ebb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a69c8fb37393a644a2861c0ec9d7b194

    SHA1

    4cd5a0aa96373da72566f91309d9006cbe0c54ec

    SHA256

    acae309e860d590d9a7fe96cfe2c9663e0a4e4a72b934e11271e133dc6a332c0

    SHA512

    5f9cfd83db108f6442575c53798a80545495a01a7a35cda4962d947152c9e4a0e074f14cc0c890c3794f12dde864bcd788ce0a86473f82409fe8df5203ed97f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24fd4851f8ee66a51c547154da80c280

    SHA1

    5be2aa04d110480a4e0d98d77e07e4014fcd431a

    SHA256

    392eb217ed4d7348b005f64cb3e7c637d22c4219cb57b7dcb7a8b09ee7bb42a8

    SHA512

    c968dbe476fc34aa90ce73ab05a1be7e4cf04ee877f13bf4dfb3d3a94cba86781e9d70bf0ce149e5cc0e743fdc007bf7abe7d0d4eb9787536108615910726bad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c17070c75098ede1b6893dfb1095f4b

    SHA1

    13afb1b7fdfcf06e95e1967461911617e9948e82

    SHA256

    63cec89dabd743eb8251e552966984ef937c0802c5e4394cab887a6d89894ce2

    SHA512

    9625cdde2c3626327df5b62903f5d7538076f4c7f569b5e6f2aeb202c82fa162d586ecb395f9eb41b96305f21f2768d77f4e1e4ade6fe5eddedc1501ce5ac78b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d0745347597a43f41af09c64ff74f4c

    SHA1

    71b1f1412cfcc15cba8f5a8ca0bc3387753a7c1a

    SHA256

    d7a6d2e25f69550b9ab5d8b1be572325fe4718c87f7ad0c869757f415d5a6201

    SHA512

    ddf85da456265a8fa2bf977c3f417ecf79bf3f3d724fbed982a4b2b8cc6b003d28a52c647aa12a1a051ce29e2ad504c9772c237b2d31ab06ec55dc4ac6f0d240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4409036ee5aed9ca892c45de7a4709d

    SHA1

    a9afc0cccfde78214e059664d4f2a76edfb42934

    SHA256

    fe297124b3a4e7411221134f754d6d3aaf5332183ef88ad20eaef6c34ea294e1

    SHA512

    b3498e62b8b8bb2ba47d9b774b48fb1916d9bd0046630a480ef3444f7e06db565bfde52a437d7d5078c2d30aea405f2f0e02b050e42198b0400fa060a9faafe3

  • C:\Users\Admin\AppData\Local\Temp\CabB849.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabB8F8.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarB93C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a