Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 11:53

General

  • Target

    207d1d0407fa1f9b922ca3db3aaefd02_JaffaCakes118.html

  • Size

    43KB

  • MD5

    207d1d0407fa1f9b922ca3db3aaefd02

  • SHA1

    a335a5e48dbe93ca9d234c634a37b8f6b876af4c

  • SHA256

    7f3849ed9a7a8dce20d9386aa430b7eddf3f5a453545029d77f41f6c911d0c6d

  • SHA512

    0d8e734c88ce719856f5ce85979074839cf05063292236fdfdc091657a13f294c9065ef9bde46c2409cec614640c06b01ffb65060e9374d751bf1a93a3740412

  • SSDEEP

    768:XwBCOE02eEQBJfa8T+7L/qgKuEXOjeFUeTReWKe8CtZ:XvOE0iHW+7L/qg1EXOjeFUeTReWKe86

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\207d1d0407fa1f9b922ca3db3aaefd02_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6727e6e038f799ceb581675a3451e6aa

    SHA1

    fd92ce7271b97a7ecf90c06ce40b889b534e6f13

    SHA256

    08665721847cdb14b97a9014a3dfefa22ff3a2a396d350c0ce4938e2da2afac4

    SHA512

    2a05ef93c3dc56a01664e89d7f3accaa8cab57f145e6e525aff308968fa03e041b1dccf44e6b27fa1b2cac83666c948acd6c22cfe4ff37144b32fa7a4ff8bbb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b5240234efa963446f5db297c8bbe29

    SHA1

    748f9aa96353e7f6f1634b4e61240fdd2cb0991f

    SHA256

    ed4d79ce7065f2fb42412c0f01f9f019fc3bb5a515e4d28ed07b31704c4c3a08

    SHA512

    bf9a8b829b5249593d51c1fe4032df216713cdef07d159562b004f9efe6610bcabd4e94cea735d052c2e2aa8655a0decda98ce91120b8042782b6a4a6f45bd95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2474a98e326c76422705881f476d8378

    SHA1

    8acb5d66e5b211d4ef9c843333f91f71614125f2

    SHA256

    537d97f84e364e3a38016154da71417947db4a3c6200b8f62cebc2a0f527c811

    SHA512

    d576654bb943fb8bcb00a0e9e5046df9ce306d97b93ed92bd3540d4c0dff51c2afb7f0eff10f7e06c2e1b21ef77f8dd17c403b32a7f35ddace69a12f874f086d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25ab519b6b2c982384e8a52281fac94

    SHA1

    3241b01255af9ca32aeb14385cb72b0eee1b4edf

    SHA256

    eb537b2b8bc716cee59388e269e9d045e3938903bc81fd8c689fa7f0e6e6d9c5

    SHA512

    42fd794a4fea532d8957e488cadb6cf2190ee75385e27786de434f95da359433749a147fc475bad83a8929134252c3964341715a097621eedecde47ffe29eeed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aba70b469cae880d470ed6c744b9c65

    SHA1

    22a62736645ab74b9edf7d66d6a106b32263593c

    SHA256

    5c1bd8b98b5cceb93250ad7d3f76a90d8898d176d2de31c85b61f4d8f3f47baa

    SHA512

    1838051c1e8c7eea88601f7bbc1a628eb6bc82fb78e59af5aef839f7e0ab0a5525439e96ee7175bedf5ef21bab61eb471604ef1ea8b0317a3b9b8b1763df0b1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17c360d503a8a180247fdd0863c487ac

    SHA1

    1c6ef3299cc26ad77316954916a4bf32bd5fd2fd

    SHA256

    592697fab6e4e2941b6ffee0664b0f0170e8b225a00fcec53b3020806afceb67

    SHA512

    909f7d49805b53f359afe5564a456b87a2446968775c39a5e23375e61b790ad3dc3a259b3a32045020aff7fdabffbfd07ec826a11b0523e73dd156a9ddb79694

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8926a4ece04610599bed90822704fbde

    SHA1

    59acfa093143fa091f6e23f104506ba7c4522c77

    SHA256

    372607ad70c061432f84bf2d415259f4bd5218ab70fde3487aaa8181e7c24371

    SHA512

    a0473e1898e8a69aa64ac4ba3d875465e0f42fed156c7fab61b54cb5b8dec07eeef2941ec367a36572ded27b9ffecbb38cba0a56a9c303fd2bec9facd894d7e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9a75e0c9f3dcb7a092706e0cd3eb6c5

    SHA1

    e6b82a87815498a4c50c1589abad83351017dd41

    SHA256

    906daaa87ca6ab48241d87cbf6c69adba9d5dd0819f8441e5793774aada39984

    SHA512

    446863f9389dc38fb2b2e08b388d52127e245081dc8b89cd86b6f9dc7d0f05cb5922d40c7536632ea75f3eb001944f06ba3ca8fcb82b8b7fb6595525704232aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59b6918b2e8cbba8ba8115b5038a5ab2

    SHA1

    50b0132d02d600704a19e29a511ead9d5fa3f359

    SHA256

    3fb36130bbbf5a8fa187d4b0a97e7d51035d584bf9816666486db8452ac4a2a2

    SHA512

    7d3c5c6a55b52c46a4540c20ec835a933232388b334501800d6f21ca82f97742689c2998369cd4567feba2b5051a6c74427e88452ff7901c9e1a1d5d348f0246

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    842112421fd494d71dcc5341e5a76307

    SHA1

    c216fe51484ec863bfbf0133fc9a7ecf88f00fe6

    SHA256

    0c3074eb30ff3a9d358d56eb86aa0a886b39eb02262b21a98c9c42ed329a4b97

    SHA512

    303ce111d95cdff239b0a98de0f0e3a256a85950955ba12a64b3528da4458331eb2c062399b5fc05b7ce012061bd51d9aa0d45da8aa0fd7f9cfd0f2368071846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    225d3825589d1af45592b3047270e39b

    SHA1

    e046a7d8892bb59fd31313b8b90d0bcaf05fe871

    SHA256

    ed6fbf39d0efd57cbe1054c23430763fa51b829ac7d8faa86e836e1119c52d47

    SHA512

    fa177834e872cd76a283f6b6fd68490367d31977f97177c1c8b9642c96f9f4fdd758b839452a7ae989cc0d0e75c09a4e66ee8644dc15ff1275305a1248050cd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7d13c363071163e8c24258935fb533d

    SHA1

    0321713d55e91647fc5ec90fd4880ac9e31290d2

    SHA256

    c91232d204b3b4714e871fd95409021f374d541846ed7baebc43c4ad13f30bc1

    SHA512

    fb869ea746494b0eea8bbfba73efcd899bdd28be098bad9b7982416bbdd632fed88c8ae7e164b6e08dda37c1e947b658833fb14876ef8f9a9bc995b6839fa631

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41b72941eb6970d57fad327c669d86cc

    SHA1

    1c2ce194a469868a5633205df361bb08d5f6669d

    SHA256

    24ad9f017704f10c86f7f84feeef55afcf8e659c6ad094cb6dce1fc06889fca9

    SHA512

    40a8e2cf59235d29172bd00e357329ebd75d2c19ca8ad18bc45a1ae09b1c76700338b6ffd2b80569c72e6d17848f9f127d9eb50c4639ad5efeabfb4f4606d2a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77ed4b29ebb720429282a0be9ccc78f5

    SHA1

    afc4664a7ee28b45f2e60f8e35a3462abf7a61fd

    SHA256

    c1e735f4dbad8401c83f38492fd331fdce297c127fd72006c4a53a7a48789fd1

    SHA512

    c8cd23a993697a05b6abeda34af1f3ad438c801366456d480e76b341eb4db86d070b5a6621375f6bfd5caacbb4e2e05bd3c8777d98ee1e6235bbc28d60291f48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c27aaaaeaa8ccc0b94acf30801e3eb59

    SHA1

    9eb4384769a96047831e9b56ceaab13ea5e0c59f

    SHA256

    50ceebbad55eab4dd6f8c27207fb916c6d045c84fecdd1706bc06fa00e26f907

    SHA512

    9b15a71c99a857a452d5a24de1fee16e3434241bbc458da811bc0eb023b602605eb8084311e1878ed0f412655b2f2ec15bc6f0c5a4caa9173ed0a85edf68dfa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03596d49c06fa8875e046c3146b77a1e

    SHA1

    0647a220a3e90d368a23a2be3f0180c2b9ad3306

    SHA256

    73f3278deb589f16bc293b2b602710449ed6969ad75dd68fbe34b623320f0cac

    SHA512

    a5b03149b16ce02ff0a577e2c6daf70218af6d298820286834b14378970585b3cdb00d13ab06123019f033256cac5d3758775ced7cc89384c0de91c930949bcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    910434c9f50867d53d36d539c722c695

    SHA1

    3b3984901c2b2a695f2ebf733c0c5c623d0b526c

    SHA256

    ee9743ed83af8d82fe8400152a9b2c0dd54ba9aaecfd7a414d62edf9858994cd

    SHA512

    1f1fa1ce64b3bf90cc81cd0bc8e1bd510d34b5b387839a05a4675322013d34910209675d1750e96ca1a325e199976545cf1eb909364d07e9047dea033cc191cd

  • C:\Users\Admin\AppData\Local\Temp\CabE16.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabEE3.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarEF8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a