Analysis

  • max time kernel
    140s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 13:01

General

  • Target

    20a3878428aeb070a2a51da59de86cce_JaffaCakes118.html

  • Size

    139KB

  • MD5

    20a3878428aeb070a2a51da59de86cce

  • SHA1

    bedcbbd003b284b04a07f57d5165815f331a7390

  • SHA256

    de1c089af9f23e01a28f1f970f4d026284cf7e33070ff6327cd97d5ff6969a97

  • SHA512

    8e3c11b43069a61d55ee4bf0ed12436acb86d75666c39bfb3222dc36cf5053c73e127c34ff9842580d4befa147868db530ec76eb71a79bab8e120f780c8d9ada

  • SSDEEP

    1536:SrzP8RcxlhyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:SrxlyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\20a3878428aeb070a2a51da59de86cce_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98bc9aae357a18a0aa50fc75749b29a4

    SHA1

    1943dbf0f0c149a76a179cbea52df135ef150b35

    SHA256

    56ce20bc801e32672b3b6cef2ec478ec7b97e580d1fc2127bca463d5530cf5f3

    SHA512

    0e52d47adbc48413d0b4a5880da9048e476fcf4a114dd2bff29704dcf5a1248059593e81f382b2feb732a9eea42d9e5f35961918b17db9acadea47152ecaf9c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e485b9b5b13cfd78660ce22cc018b689

    SHA1

    11e3791d7b4b29eaf14ddd5014bbaffbd8a4222b

    SHA256

    0fa328af52f2bbd181c52054eb3b70866bd487f92e80b4ddbfffabf39f572e18

    SHA512

    d45cea2370601cde2c966ddedb49fee039bcc697646b159c7924dbdf8807b5be6f6d9435b59eb084e8ef973c62d66982a7f456aac55662e3b0095412417bb399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71ba86c4d4a5c6975a40410be54b12c1

    SHA1

    098bf42c0042bcc799b325eae3c310f467b69bb5

    SHA256

    072d31c56ef9dab65b638d8e6e7805bc7a84b6b81504735a3fe838d5e0a97901

    SHA512

    aaacf5f8f41dad6512cca1828b97cc9f6088cec0dc16528cca5960fd5a81dc9c6d469fbba63e81f051dd4616c2084b73347afa00cafaee30e907962a02da65e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93c3b1d5958406da19ac1809c04100ee

    SHA1

    7f9544d5814e39fd860983b3cc04e86c1148029b

    SHA256

    bf2738078b52b05f01f05059da34870e2c336ec6f844e6edc2b27f5acee14046

    SHA512

    fae79e8f7a7b5e51640c70881f54907908d912be5065a56ae594f417000a90929ba0b7a779a5e7b9027fc52b4fca650910ec9362d689fb0fd8c9ae7568acf725

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69f581de3ec6d7d6a5c4eb9db2c1cc39

    SHA1

    3e0f15ee108c6893537d40f3563733dc89f958c3

    SHA256

    d3c0013968a99a303c8cd833af768880c474ba89856dbb9c5717e5ac5d4f92a2

    SHA512

    aa48e73e9199b2d709c3fac8b6b15910c60bbb7f5dc2413ceb6884fba0bb80bac7744bbb040ceb8858c0c2cb11dd79afd0cbe32d0ea3c1eab1678a15767bed3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    676b61261e4032d315455921d8134a67

    SHA1

    fa6fcb4bc8027eac83a4e0f0f9b87d76cd8b4d5e

    SHA256

    9bf8ddf03b6a440cf5a77459fd1fcd0804a4d842cf3c9b8770388e19812ba909

    SHA512

    bfd66b7a15733110d116f29951b45119c3837480c9682ad2a6cc22870a2f33e89a0f8bf10741745752d4cc51f5b1c8e5074f5ae28e9afb791d744ffceee66135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    691198f90b4e9cc246108d8572102539

    SHA1

    66fd59023389052cf83c862b1f3784499bd0c485

    SHA256

    f911c947a6db39dd065b5399c660b71ed5ca730bb7c67b1e764669f3ec6f568e

    SHA512

    bd5d0eec35ffb8ad608358a5f0a683481efad4c6ddca6966a10eb6a75c22c4f5d82717e2247f5a62d91dd6313285c416a9e0b1aa42d80c7922cfff599bdef689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2ac55217cc6dd8d88d4c82e1357523d

    SHA1

    dac28c87489bd8733e38e4054af849569cd3f229

    SHA256

    97adffbd56b9ba6afb60c525ca512450d007e5523590e72212c2edc5fc47f09f

    SHA512

    cf831f7f06893962771d20b2d67c6124caf163a7dbddf813d58bf3b00fb7d6a6f2df3cd5089a6f2ec39fe5522e74b7cf23bfa8faa444c615550e84d756b556b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00d97007d22a259749a4192cac22bd27

    SHA1

    e4decd7da20913345c4c012070736860967e14a2

    SHA256

    44acaf461cd44e2fd7b4c0f632f4e3ce8f81e8157667f7037ebcdd8dc6546bfd

    SHA512

    6a37c4d91c75dee5c9fcb0e97bb0da004d0de62d0400e3d0ab8ec2234811ee85e48bbe51c57427bf0972c402843d4a18cab6d09d2881bb7a84f9ffaf99335aba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e583cc689139b98bddccadedd9f33e60

    SHA1

    840d9271e44a80d30539fd5b44476638e0ef3532

    SHA256

    ff9b32f71b3bb253d9b2ac17820de8ae2faf4969a148ab261ed87b113fd9c198

    SHA512

    137d49a91e1cdd22d12a8313a5d2d80fd7aa1b7cbf9df3ecdaf6016f41240aa94bfe9a3c58945c1de82874faee035a7b44d2b407ff65ab744005323c5e8a01ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    561320a8e0339d5a32cfe13d4e5b0e1c

    SHA1

    ff18f2c944c53df90eb3a3260ce883a385ebbdfe

    SHA256

    de4983e15aceb7c217cdda87477952d6bfdbf7c87fc45ef71796e47116a8a437

    SHA512

    76c16a4458619f448490c8f4b25711e5763ca4f6f5253a7f1b69474f7f809417addc1cc67a975e923260f00b9fd84892a591b67c37f1953dc2f1935b5aa5700f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47dd4dc91c2ae7a2321dbf567fe67231

    SHA1

    3661ddf2b4bf1560494b2f30452a4b60b70b2f77

    SHA256

    0ab99b0085265e8e0365184c246e3839c6855bb400e7c0804d7c1b1ad1d4bad9

    SHA512

    94ff32bcc4c10857edc77df3ffd554de12d7abada95f626af60ae1f5febcdf94583355ade942c368359decb9b32b6054ce6547f5efdf7c19682fa366cc051b4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d201f9d2724eb04aca6d5faa4b54bd8

    SHA1

    c5cf8905ae4081dcca958679049dc216b6195412

    SHA256

    ea86e04cdd7512b7697b3176ba03a4edf2ec609e0299746955ece8c00b8daabe

    SHA512

    ad41aa47fb622ca3dd3d265c7dace37515e3daeb8b6953b2e41370db020cbb09d37a1eaf211784fbe8548aebb07504a60f3c122fa24a271b84abe780f4e926e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    446084128a8fabf38b20096f16e3c52c

    SHA1

    57eb60648a8d7176100794abfe22c2a4baa19f5a

    SHA256

    e616ed6dfba217d5975a583ee34ca5a4d5149a1c711a4f5693c9f077ef144557

    SHA512

    87cd433976246f63541a1a7c230254856e7f729f994674f7f549323a789dccc13813e286be71cc19b95af95ab11149b0a298956842c519680872410d9d417dba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a423f41b64200b444c5fb2215c162e7

    SHA1

    3006deedd221cc0bc135342ed346aa4fb83079ec

    SHA256

    da38aaab4c05f612621ab41155e845f38e5d0a318bcc6c5854a351c874de28cd

    SHA512

    c8c392d5780e0cebc70e2c45b6ae92bc81e792fa458c91712ed572b0b9cf51939230ab99c0f30cc7a487514749fc905ec0553055a874d0abe9b65e12f7c5b2ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c10005f8f736282e2265ff85277b8f9

    SHA1

    e4ecca8b17ab8847ad942cc03aff1cb22349f381

    SHA256

    99352f49803a212c7c21414a90e055a94745b77f11837a5483b92ea84c9851fa

    SHA512

    0b9b07afc47aae4bf25852c99232e6a11353869cd5f7c5b457ad63e050c21e4bcc960f105046176b9d38a7f0908be2fcd371a937b772279570d29fb1eebe998b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e34782ccbc512380b08567c3cdc1690c

    SHA1

    d9b30b9bd83be594fecd0a583c5edd45a4778eb8

    SHA256

    d84d72402b76f403b8a3207b8f8e72ebdd5204e5ad6fdcb2cdbe021540ad6be5

    SHA512

    78413680f14845dc0c965fecd0b173fcb8d2ec869cdf42fafdbbb3066da025c7c16393217cb4525039426a0402ca3eac1d985e0e198f660e3440b48a1eea84e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    143d923fff5ebeef6237d4dfede853f1

    SHA1

    59a0a2ffe8ed0d56a4039a7d62b2056237d180fe

    SHA256

    df07634d27375476b5ba5636479612643584c708b784804464285eba5a39557f

    SHA512

    86c6eb1ef908db7cd7f961e161a9c7d1f50043a4affbc73f14a1ec34305a9a70399eb58c222214af7dfd3c22d1980711ec567dcdaf60a2b43e98eee67d420b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e17388ed3ce9791fbc48dc0fabc71f3

    SHA1

    7448191ea0942f5d15029e4c3ed00f3912acb062

    SHA256

    b4830f0dcac701d92eefe85b5a37a191b6a1729c741de50d91fcf7ac261fd413

    SHA512

    968fbaf036e94b351c853189b7dcc35771d68f62f37f49ccc7ae4ad06e80146f13e62b32cc9f32549c611cda99623eee40e6c6106b1b8187977b630f564709a5

  • C:\Users\Admin\AppData\Local\Temp\CabDE6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarEC9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a