Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 09:14

General

  • Target

    2025690776557bfa3c8817183ffc0afc_JaffaCakes118.html

  • Size

    42KB

  • MD5

    2025690776557bfa3c8817183ffc0afc

  • SHA1

    15b3e6b410bd189fb40a9a2ecc3d8a2f040493ed

  • SHA256

    5aabb56b881a9a73ef7611abc7fb3e84cfbf1756304cdee950559eae321137e8

  • SHA512

    acacefae0258d31da7d126d4b4a944117de13eab3a43c76f1aec85888e739b67961ff6aebba875796bdc232fa5b7133bdf54b7858484739452eed280f4c36247

  • SSDEEP

    768:nvYI2kOeOJw+Vh5BPn2Y05kC+MPJTMGgAMULQOWVCgaB+NbjiQhydC:AIvgh5BPn2Y05kC+MPJTMGgAnQOWVCg5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2025690776557bfa3c8817183ffc0afc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a690cd9150f27a9a89de05cf555a2a5a

          SHA1

          2b828e61fee114d06add3fa63e393345b6ee8a2d

          SHA256

          31a5004d1975dba285ac7eab88ce1bf9cc31a43586944f07c8854e39177626a8

          SHA512

          c59bb13720f5e65bc03e066a0789826fdbb70cac82debd90560d4c5f9d2156b5130e782c64addb48652c71c1486b9cbd912e308745ec43ed1c5cf7ece5b1e0b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f6c2837f87792be01dfc6eec8260825c

          SHA1

          467a91b1cfbb1bee784f737984a106fda4b1281e

          SHA256

          f9eaaa786a905de8d7ed877119e52740e5736ce6fcd780cb94123f5112f05d87

          SHA512

          bd6d14111369f99e2e82cc1f625b0a98bd7e3ea666e34c37f05d15f9b0ffbaa9bee8bcd08dfe71e702f9d0fc4cfeebb943c91bce214684dcacd5245735bef735

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          11574721bc500b64381c3d082104f29c

          SHA1

          c452b48ad1e7789c3f2223e5ef7dd18888cb540b

          SHA256

          32881504d6806e51815a782ef27422e77447379e7a136a01c809f18e539e295b

          SHA512

          52ebfb2b4f372e56b772351235e20ffd0d9def00ea772f54748554be5ed85d980b63beaf4ced139d2f7e5bcf46cc06d7adc8d75b54d5c3b3e86181304dab841f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          90f3fec85b35f41fd5561cb10c0df0bc

          SHA1

          55fe6e585aa425fc53f717fe4e2c05a3d248841f

          SHA256

          bf096b4c3607d9141200d2f173ca15033ed126fdfcf8621db80c95812c5f91b7

          SHA512

          d34dccee2ea00af3ad49df3de30803086e244aff50b669d0f4a847df797e2e59765b67af321a5c11a099321cabbeab8b54f4abfd3deb650c66fea5cd8a12a727

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          34e8696e59eb3595242c7705b34a97bf

          SHA1

          4f2c9d1da4ccacc38c39e24e861849c061925a6a

          SHA256

          a152d4fa242bbb294d431c17118c1eaf632e87230c1cf6e1c38cf82c0fbfcf34

          SHA512

          69c592839a7fd9999d51004e0adc0b7fe8c7a66a0ceecba4034561faa791862e9adc6f90f43d62ddbca6a7498e68236729158a1ad7734494ad3cd4f42813fb2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          26b0b2b8300937976778a37aed79d8e3

          SHA1

          3ca5a6cf349ad083f614394cdea637f6ec334de1

          SHA256

          a4d3ee7b027e7705a4baf384fde712b66810221153004dfd67c1aef58d3bcf99

          SHA512

          1e1ec9787bc4f81c9e2d3f68f26382d2d6cf01c3fed09e6ceb5aeb9355b5ca8c45e5679b284d178abf1774b7a7219f75c53ab253b3dc73c93ff11185ea19990e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          afd5591d2e0838fb7fa45138ea13900a

          SHA1

          517a7bedc74a671af451757b83ba0cfa1b5729f4

          SHA256

          dc1c103a87d994d41b44f7eb5eea6de21cba8d65eb53fd3c464ece149b6bd340

          SHA512

          f64d4aa200f12a846000343dd3ec55793a003dcfbd72b712604183231e646f82bd55ae518163df9500ca5780dbfd139bc697e7bd247791de8e3e85b342b395a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          638a3636560988eb8fcff097bce7c586

          SHA1

          c2f5bc8a06959027e3174b9474dca622ae4d7fc2

          SHA256

          d588dd74032aaefc2de72f24baee6d19a8d64c33775e8d8dee9e0319d85e67a7

          SHA512

          d332dddc8ad42ae40ae8490b9cd90d779d9c29a592a2439b9d2705167cbd425eb1d8071b979e9d89ea01d98c3444128df299c9e9c9c7e2c5b6a4fc47c088280e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ea4c99bf7ced4a249d2e6899871590a9

          SHA1

          9799251cb6654c37c727c0e675af3995741cf5d3

          SHA256

          9a28794dbaf32376b97d4e02e4c39cbdf5ee143dc3275f39618bee9a46a87098

          SHA512

          3c2f25285c12fe6f7449c2eeb5cd08c3f3b7b521928a2c202ad0b539689651252363d2c4c92602d99d3627e78fd77a9b9aa0448d6c2cda822f80ac7628bc082f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dd3e8e135ae756a562fb0e4afdbf85a0

          SHA1

          4bd33e070d58704d02edcdcec8c7e0c3aa7965de

          SHA256

          34740ff5495a58a532672cba69efa861970e56a8fa494dd8390154f621ed8179

          SHA512

          fd6dcfb44e508c2313133db77d216757984208b139f29e435b34a6b3a6163625e07e164f16bd329fe09d139aead12b887562afebc633f5e61fd6e39fb8aab3a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          17d96171b11466e78ba122f343731dfe

          SHA1

          0f0799ac28a8e481da6a098beaa524bf75b0dda5

          SHA256

          af590c074efa5780894a0c84126a092525566795a53ca2525048835564e264d0

          SHA512

          9a1a870f38cb8f9484f3ec8c483a7e133dc4a49fd8c32d0f736a5fc0fe199f3ab824829391f7f6167d33a3461a09ab0d5b5a4716e1b870e8e316d180b74156a5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24f38328d13951cdcf97950fbb6b4582

          SHA1

          1e0e42402fbd2c18e76b54aff6bcb2842f87b475

          SHA256

          6e3fddeb586627483a152753331e78124d5f13c68d19fdeadb1fee09f1dbcfcf

          SHA512

          24d67e42b20e09c05c8bf8715ab274f5297236b678fcd316f625f612ebbba8299b659db4a15ee2cc0f7341249c1d76132bd9ac522128b5cd39be0fda0363b8ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a432b9b4a46a4d49d5cc3b52539384c5

          SHA1

          807b97eccc3ba5fd8025ae82ed0825aa4849b834

          SHA256

          8929e6e717875bef5bad6fd127c2dd1ae3312c1a60500c4a7cbd8bda6fee246d

          SHA512

          ab62fe2f4bfc6f395c5cbe7430a05ce08f3a11a5775a89d960f821573ccc438eecbe766bd7fd1e9207f565b323f11052c2c853b3c5cc3c2804a135d6c48879d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cfa73330f6e515518f9aa2eef4f66d83

          SHA1

          f9e3b105585a9b29c5d9fdb908686ace315b8edf

          SHA256

          d63d2712212d0b14ffffe7ae10214b137c2686ed67cfc2c5ffb3b79507b421e5

          SHA512

          26abbc6302bb30f61b6020d7a26876865b6a21f234d167d4ca41e1052e3713ac5ff3dfa861a0e951e66a86705978f3a4562c1a6779740bd2e0da64bb03aef433

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c2c0dce832e676fb1ea21c0c2342d652

          SHA1

          fdfc7f8e7cab75598759ff2aa5aeb0b2f511f374

          SHA256

          674b196aa62483a008e3122acff4f53aae785c3246b8d3b325434af98a7f77a2

          SHA512

          e62f08580437babb9e0969a46a6c9c3215df807bce6b6a1614a954e73b68fd18acebecc8030680404b4590e4478aa723aa7220aea05d74317a92f590a31b05ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1e1461757ea4f428a7d33fed70fb477c

          SHA1

          48eddc04ed8b653590df4c42301a690736e42c1b

          SHA256

          8f44f72b42ebe046fa01ef06b284274c5de7727382da6b4443614fea33556bb1

          SHA512

          f16952833b5ae88122906f218ab0b9188fd8b2b23a46c72f8d22095a1db617474e2e0dd8bba5a19d56a509ab89d782f2e1b54e8d2ddafffda0d3e359e83b5cdc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7bc42bf407df40e95b1d624dfdb0851e

          SHA1

          87d2cf25d597de77139b79e9a946aafc89027134

          SHA256

          5dec0aaafa7dab1719da8204fe691cf4e519ba0accabe91a45684c89a645b70d

          SHA512

          aefde5bdd84d110809244693cf2c6901c5e7082b920be484a627cb4cbd8dc81a5b3b7b30db8d123382ae58bcfe04bc878e2e147c3b2d63aac488e064151c120d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          362a843bbc2a977430f4a5240c716489

          SHA1

          d2e49a32f40ea43084433b1947afd2d6be53cc5a

          SHA256

          ecf51e2233a5f66eb852ba133f40ae5a4e91a8179c9851ebe23edef5a3faa68f

          SHA512

          a17e6a6f9492657e6b6336047398f6216401aa18419c6f34b4bc5362119e31675f79e9c62b0e7d6902375d62d1a1816426168954c7c21a10aa2fc0dbaf8c2774

        • C:\Users\Admin\AppData\Local\Temp\CabA0A6.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarA197.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a