Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 05:45

General

  • Target

    1fa202196bb1d0dde54320b84c58223b_JaffaCakes118.html

  • Size

    213KB

  • MD5

    1fa202196bb1d0dde54320b84c58223b

  • SHA1

    1190df1cd639ac8f0beef869d05d6eb27b861d9f

  • SHA256

    7e69ea66fa25d6407bf52e6f00ace473cf6f667fa5bb3adf7a9bdd4dd975f694

  • SHA512

    ce274c0145579eceee3afaee11864336710d205a7a32b9c96015a939a05f06b5726d1532eb3a458b512b3e4d6f4e58fc7b23e970ab1df3a357574fda2652a8c2

  • SSDEEP

    3072:vrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJz:jz9VxLY7iAVLTBQJlz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1fa202196bb1d0dde54320b84c58223b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd87cad9859afc5a4a299533d4f232f3

          SHA1

          fc8a662b80de9247f0228991bdb625c0c83e75d5

          SHA256

          63129b376428725eb895065ce351c8d834b63b6732063b04ec6e9a2f98b306ea

          SHA512

          e341e74629f2cb8ca9d00181f0304d359e32b11ad92abc72aa826394a28accfbb71385f939d0ddd60cf0a43b51eed4bd02e37178bb94908393062fb055c3902f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb481708b2a46a28d020a112c142a712

          SHA1

          a5548b632698ccc0dabbba423993519645fe0f7a

          SHA256

          2c754baa759ba492e3ea875b5ef3870e48f679f7c2d7212a6ecc14e6eb803c81

          SHA512

          34bd8165510dd1bf5320d041e9458df55678e2de4ad5da5d2d35dc8530dab6193ae8b865467a867097ea6c4933d610b9122f9622d9bed1839380a8b1e0fe3e2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1fd54880b0472f4daad9ac913a673b9

          SHA1

          a9d1a08b1f8956ffc0a6094cd03ef91bed7a49a1

          SHA256

          de88af320847b0554e54b8a69557b9af1a1be3f283e4a1d16ddc41ed3ffe50b5

          SHA512

          63e822663a7e0b3b014e09a258ea6d1069f4999434800dbea4bc7d62cc6e56b5a7cc417aef11ab903fbdfc09391bb8d950b750fe8cef171d4a575c3c30bc1eee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ab5234654bdc31dbb01d05ecce0bc81d

          SHA1

          53aef2b8baa84e844409820aa99ad061107f296c

          SHA256

          bb946bd0e8542d7a3d76fb6b6ae11c780f5e71f1a3d09cb05157e807121d2ea5

          SHA512

          3d20156723dee8e76a06cf1aa95f1556aff292555e50f6b4dc5df1133fe7ff323ab46b943b4cdaef1cbc710b0235473ff880ec2e68283c125a161768c8f19af3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d71bdb73c04f5e424f3f7aae1ae0f1b6

          SHA1

          4bec614e1bc9a652ead595175fc458667662ee4f

          SHA256

          396f1dec77605b86fa86ce9fac1ff7fcf53afb0c983b22402b65f51ffe602384

          SHA512

          e0e396a7a9fcd5c3117438a69cae27a0621e6bc06182cdced432af085878e100f7d2fd0d543487fc0e8a609f9c4db54dd4a7072c2547e186b11cc94ccc136b92

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6fe474957a366aec920e6720f4d3b777

          SHA1

          c6680b9c17cf2fc9358467f2fd58e1919f3f273b

          SHA256

          969b453f04eca97d3744f178604c523fe03bdff44d628d623e9cc5d32244313a

          SHA512

          03f5e6588dfa109c53e686fe671c4404b6b86b93658d6dcd2e054571a8f34c7ea7dc4ea91dbb8706ba7bd1e4f93c463b98ed157578f647a9b6653513da9f7767

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d85157644b22574b9f735ba3c9668a7d

          SHA1

          26a86abd842b5861ee61c674cd7365ac8f12e68a

          SHA256

          28b2ad26ddbabfbf6fb8316e7621071d4669f227ac6ed3867272407046797f4c

          SHA512

          8661465b0f2de09d600414c5907c9dcdc2f56d0c796efcb219edd1e0d68a0dd3c3e861e2cc73dea928135cd2c652d2aa34c5d58f594d7f934cbf5b9d9db9a5c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2d0878969d788c2c553cdd3369bcb030

          SHA1

          fdf13687f7739109db3bc06035243274651e5bad

          SHA256

          e76dcb2cbbab1e7a2b1b611c0b54da3e3cffbe5757bc0f00b758264901ed0054

          SHA512

          d4cf230183af1f6f23235da65c87f25bf9ff8f20756344e7addeda95940e7b3587656d10fc1d32aab742e8ba89c658963c97825100f8d78d969423da0b75f192

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          938d636bbd3b45ce0fc985c22bb2da14

          SHA1

          f14e87860eefbf517961e665395d4d99526298d4

          SHA256

          4c207b2008b52c9868fefd66260865fa1643ba17a88c6b3d1640eb66dfe22bd4

          SHA512

          c8e46f11cd972bd7153ee84982d26c9a06fd806c8e64a4503a87332e0e9936e23b1a91dff3fe054e4b2e3fc5ea09f27f5f7ee69ea86f92937a6d95db660c4d0a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb92a0d0b47f63fff7858455105626fb

          SHA1

          427845e7655f69cf1fd8780af994fd25075b240b

          SHA256

          d6d1f7a47cc0d38bc8437d61a65b7465e871b645bfaf1936055334a8829fbc72

          SHA512

          04b5914224544a7c087bc0cd2e478ed598a8771a1c445c73bae8cd5e65e9285e88ae48c75a4182340c8aae14c6b8cd02a596fd8004195142f324b67a476edc0b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          abe761f15d9b50c9d1eae98706884957

          SHA1

          926d89f63e8c932b40371a0df89618f118fec21b

          SHA256

          8fd37e3ebe3ec8b7df997c7104305eec4ea8ef93c91f9696ddb165453842d881

          SHA512

          d512faee990c5e5109d6e1765d873c29b79c8b95d7aa757857dbc334d965773b957e4af5952f7afe31ef873728d2137bf5cc5eb24b062777ced6e6218b0d69d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fe79cb948f48e3d81b9271ee44e5c3a1

          SHA1

          85c1eb68e2aa81ddf5cca55576842b06a428c493

          SHA256

          48dca5d88c042fc9021e27c63fce0d61c3065cf0e33d4b2bb47216bd342c3529

          SHA512

          e636d16ac495e8a35f0d9d522e5ebcd922d633efda80dc128fec229300898b1edad76533b87fa3f1bb1b785a2c3ae6fa65fc7221c3f08d0ee72b5ea5b1b801bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          97640abcfec13dca97281aa56a0a623f

          SHA1

          c2bd68a34114ae4ac5eacbd8d3a5dc90cfce231e

          SHA256

          2d73f37a07d3b72f2c08eed52c0653bb82c4347ad5ac67e3fa2f3f6f576bdb47

          SHA512

          df3fc45c3b8c23a2dcca2441de93630e876b41a14f885f7a5e34820b9f20bbf5b1c5cb880115fb73e8cd400da776ec41c71c7c37ad6d84dc808defd86f531ef8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          173bfcf2997bf86281bdb619be503d18

          SHA1

          0ab492ad2045439bda1cd1320ec71a72a1bc5ffe

          SHA256

          54bd689eed3784f33eac3eddf5c323cfefaad267f80419deec90531e7fd64a8e

          SHA512

          a3ba716f65bbca27ee1b4e55a5f6843c86b43873fd6d8e30845c6aa28a90d1089be0a09399a5f99c415bf1757434a6d37097681a6c8f1fb77e2c217d0eb46b29

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a5e55ed120446ee884e50b6381da8233

          SHA1

          07c3786d6d800dfbaaf659170197b501100bfd6c

          SHA256

          5aa979f1f6f1befee658bb8964c9503fb1273d81917d1cd006f79134059fe7aa

          SHA512

          d8d20669790d02e007eb23ce4586badc52a1eacd36ed02bbc0421aaa54ebe88b78692836aef2c8e31452feca682e5a47ee120bf6aabd4770c9ea3360c379d5a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b17cc5aeaa06b009caca8016da88a401

          SHA1

          1610b24822fc183b93b3a9038ec37898c947c6e6

          SHA256

          be88d38a2578d7380fa826950c21feb49cdb7554bf7e86895661af772dccdaa2

          SHA512

          985269058d31d92b09f0f76d3c5d5aa0b3276f9b349789347e6881d79ca935267d7240b70647989c5cfbeee5fe275bc21c57b5aeecb840d8ff168ca233516825

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          af27d35af06abcbc18a26a22c6030637

          SHA1

          9a5aa6c15d114aff53730bfa82da32a1623fd00e

          SHA256

          8ef42258e2a938f717402630baf813b1fbc7f0a4aa01503ffae77a046043ed96

          SHA512

          c34d3fe31f6d0af92391df64f8145e2239ed457bb72403448f85af377705c7fecb3cd391ad4fed8793c1ee2cefed7d774baea609c77cdb2fb60fc13dd4692262

        • C:\Users\Admin\AppData\Local\Temp\CabD06B.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarD237.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a