Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 04:30

General

  • Target

    1f73e763a550cc5f28978bb47e2aed5c_JaffaCakes118.html

  • Size

    23KB

  • MD5

    1f73e763a550cc5f28978bb47e2aed5c

  • SHA1

    58a540670e426d86e59a03e0ecdb1dc178487eaa

  • SHA256

    5576462baceef587df839ee56fb2987661043601ee1046a1f6672b3ce03135c7

  • SHA512

    10829b6e86cbfc19ed8bbf64e696a31431ae0811d9ba5e222d2d221b8db578ee45d2c6d26f3a1044848f1a7a67bf96836f8dc85c1ca882b223bbfb256039cfcb

  • SSDEEP

    192:uWbYb5nJ2nQjxn5Q/knQievNnGnQOkEnt4qnQTbnBnQJCnQtnwMBPqnYnQ7tnAYH:sQ/e5i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1f73e763a550cc5f28978bb47e2aed5c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2260

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59c8334e3c2c99c586309fde103ed2c4

    SHA1

    6d18717695066c853e5ddfc6000e32d16ed5d010

    SHA256

    87948b2f23d1758fff994a3733b9ea40318155433dc241e76078990bb0a4c7b5

    SHA512

    cd14ce6be9978fc5e8233d066c2ecd52ab818042b2e1a311e037ede754a2015c1bdd8548d8b7bd6da8ac71adc62cf8858b332b83404efb27ae8737e220faa6a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58f844b28db5e9b02b509b7493fe1236

    SHA1

    4730b44a1be5da2dca83209d1f77c209e88fc5c1

    SHA256

    3dce9c9f02f14f62accd0f56dd78a1fc50226d9a02c7c58a29286b57f231d43e

    SHA512

    8f47f9776ff200fe60904007a186dd127d3d30cc8ed68845bd6abad0426488c9ee45e3e595f0c331b3a3c52d86d9d917322473542b5e25e665e7f12a95f31806

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8698889ace93b14ffeb59e0c1d695243

    SHA1

    f908a2194b15c060a7e1e44ce21ab19db2bc76ac

    SHA256

    7475105420221f6d16b93488fe3baa486089fac0c4e06e9fd439d9f03a890119

    SHA512

    641d6757956ca7a0b6478a197e1e0f5b57c54cf25278fc867100ae2c534bbae43b555ffe85c54a52454aa6f82eac3cd481eb4ab5a9977c520f3eaf0f8e4683b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f875dfb2bc38c7925c04acb0f6be9aac

    SHA1

    59e669a36a8e2260d688ad4a63f7111851535060

    SHA256

    4cb2e9b0799555845e099afaec336ac5928e925ba84a1f416d9bd0387a17c739

    SHA512

    066d29ea6f2752fe8cfee8661fcad91f2326a372dd077d1c33501cb69a1be4cd95fc222a66f084c86d09498d37ff96c4748a120f76b73270f6e3ced3248b8e29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09dc028672972cbb2cd9a9c048b081c3

    SHA1

    2d1eba3ca4881232322f188ed1ba0fadf393b07d

    SHA256

    48185baa54fcd050afea00ca99a6839d472b3f526ecaee5e1758794076459b66

    SHA512

    5b11121f55c61e82f44690be50e093f5e07ffde9e0c893388f491dcb53f92b5d89d00a20538a017ad42a8fd054265a9a8627b5470b0c56c6ffd033dce4a13ba2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    792333bf7dc7c3be2975ca47fbe92914

    SHA1

    9d7f54ed1cd2c5caffba245030da4063d448c3d9

    SHA256

    fd990d31db7c65626c0055006743b814a640e1e8b48b036f736461f4dcb6cbae

    SHA512

    38b362249614da25b7f29f7d15c4839e745853ce214e2aed383f697b3cefbc4beeaddf9e07ad375429aac8a80c39b8d473f51ebaca3cb0a60fd0b0078d6d57c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecb03a984b495f7761a6016b50647a45

    SHA1

    505ff59bd7fbe1e5c2435d4317d2e147c3504270

    SHA256

    dbdf41a4d6c04ada4100b01c0bc305ec3f983b6ee9210104a947c6b9972f3c7e

    SHA512

    04936be05aaa8f6de1a5cda38b9656e7c52b085b53fb61eff2d310928ed1f3f13807f1fa645fe4dab917c36d0a7a58d45b114e33e1c6787142c1be9e2f3dba65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    852a3394e9fcf9ff2002bdab50decf0c

    SHA1

    d30b5f6400d8db77beaf0a6aaf7b251b6391da5f

    SHA256

    1936b2f75560e5c34a806f02b505644a9e3d5e34ad54d5ee888027dada1f5fce

    SHA512

    56e1ed6ca2d19687c9776084444d316af940d149520e7d2b7d355f0f770f668181a4765eb7b4ee3c12b86d07ff14372d5dca148e4daccdafd9faf80fe0cfa212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de01a30344841d748adb665bc44771ab

    SHA1

    7b3549988b218dbcdb10d728e05d44369a4c1a7b

    SHA256

    91925b8afc6ea46087d6d144c6f5f2a7f9269a59cc09f4612d2aada0254abc29

    SHA512

    524f25028b827a77aaf624f97ccba39fc97ca1d8da3b8607b24af936b99e1c7d331168ee34313444f983631bb506c1d4dcb2930069089f7583f3a39dce22d459

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48504b80496a7d1fbbd4f8df49930521

    SHA1

    4b54720200b2d7610eff5d2b6fc74a7b21c0577c

    SHA256

    2d12dc681ddc44734a04b16593e4a5145351a81b500bd9fd913bd7e20808f4db

    SHA512

    081509c5569f04147a8e4931ce047faac9fd2baff5496d1ac72b8cffe51dd5e43c7b47c09d19dcee5f221277990ac2979a5dd38408a8d5cc3569e2b75d8de8c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58436ce8fa2da2ff99e732542e190ac1

    SHA1

    c68dc6b5c0480d313587d2ac5bb78015386e4b9f

    SHA256

    a9bc87e802938b277d78ee9db2efe2b063f80de1f14f65880a86c9f00ce8fb6d

    SHA512

    af82656fca7395c9e577044d1d98c9499583f48dba7569e453ccf61b95c40b089d0f54db694e749096b7f13d7c0c5f47bd4e9dfffe80975f42139c56477af6ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da2021881f4e3a6341883cb3ff42dd41

    SHA1

    53573cd585ae46709c268f665526bdac2047f032

    SHA256

    5296569a5750767dd08e84c8c1104174fbd36bbeb6d6fa49159dbc3ff92e5d8f

    SHA512

    8284bebae5e90d2b1299f1252f0b6deec125bd976189dad774aea472532593d05f09c85144872ab78afd8c596fe29cdc08e96b3dc07b607134eed8a72b0c1baf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c597120da277f3b6bb37dc3d524069a6

    SHA1

    c044791c5bc83dc0a7670882750a493691ba8df0

    SHA256

    a55e6f70146562a3c2def6aa97e3bb9ec78ec1afa9612f0902f692f68a6c5a71

    SHA512

    1b2a33088c87db891bef7fbd6358cd769ec3212bfda1703ef2c52a047723eadc56ed8cd21f528aa5e9c46e53da82d750c1cbdb06209e4069639e13af2e2c0d89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5014615591b5a6fc8ca0cd35ae9c0b0

    SHA1

    80d8021fea20ffc229937f7767f151763bd4706b

    SHA256

    1702bd581aa0d8607e2bb81d9b835a9cba03814068e730dca47a79271c0f02f9

    SHA512

    70575344b556712be9f989ac1ae5c66b2364d24c9e322937fd9f8134ffd49584282aafe003b5602f8f71643de104249052a5add7015b24c2ef53527439bbaa2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab65edad8e1729f00246a8f81623cd02

    SHA1

    5dd70698582f6309442eb58097356c174be592ff

    SHA256

    2b90a9bbf9a01c64a6c31f93e556403235625a4978239af63ee2d4598bed8d90

    SHA512

    25e5a062283ecfe0dfd360a85d804fb38953d8715f62afb1ce8dd0afb96ce684dc3db2099f371315379dab9e6908a6efca01147ba57bdbe705baf351cf2142c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a80a757d0ff99e8b231a7efe18720b9

    SHA1

    f1a05e12ebaa07c5043c0a077d0518c84e63668a

    SHA256

    1244ff4b7ba0ffba3094b35eeafa065a72930e1b66de252519ee4d11a0c7a816

    SHA512

    f620704eb2c7ae96eb14651db2da0063923999860c9c85aa55be0a16cb564dee03ae7eea8d3a00e001d4094979434aa1eeb53906dd347c4dd5db116df36a281d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc1ee50dbefd378cd21df535e2ac39c4

    SHA1

    73a8725440c9320ae04cad5fb470207668d85403

    SHA256

    c171fe4babbfe620515fc3ea22dae5c1ebec0d6fd8fd07c08ce6c98230233547

    SHA512

    723121d3e0cfbafda24e8063a5abc441465874a27a9c249b4f43b0f2f9a928ae5aadfcd615a28c5ebf1625b5260c1f0afff3be89b4de7fbe809bcf892099064e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16ac096ec17b439d8ec52402131ae35d

    SHA1

    2ce8a8bf552290b9522b57d7259bebccaf27b7e4

    SHA256

    c9bb8b559a53689c8c16e60df65e6d219b9e38a0f7d4b803f2828287721ba0d4

    SHA512

    df06cabf4a7baa755fd6fab7bf22c499c02d430e83b7c2d73929da48f2b031455cb2e1190a0d92f103a65a2a2aaff9f53fb348ca8d00ca6c75ca265bc0d79561

  • C:\Users\Admin\AppData\Local\Temp\Cab22C0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2301.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a