Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 14:55

General

  • Target

    20ddd9acd60adda530e234466a65a1df_JaffaCakes118.html

  • Size

    461KB

  • MD5

    20ddd9acd60adda530e234466a65a1df

  • SHA1

    c908d39a08938c4fc950278cab1c50e267528d54

  • SHA256

    33e3ed28c7591ce148cb0c04240cabf839e814109c0a460f8ba62615b5921781

  • SHA512

    2fcd03dde23a6a7f5f5e2d05edfcbbd606231090651d6de7707f4e72338a3566c393e20c0180fbc74b85e63c81b64fe40c658db84f9ad4df762c203070478253

  • SSDEEP

    6144:SlsMYod+X3oI+YLsMYod+X3oI+YyRcsMYod+X3oI+YLsMYod+X3oI+YQ:o5d+X3F5d+X3N5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\20ddd9acd60adda530e234466a65a1df_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b68f82ee80b4f8e277bc2ee2ae6f460

    SHA1

    caf3281945d6615c9efe890b6855df2c733daf5d

    SHA256

    41d9ff549ca794e260a4f09937cdbd26eae1ad3ea4c767ca6098de040ee9095d

    SHA512

    06afc9b5157b9dafaffaf41be9a36979087f5d2edea989aebc0729b5fcc3d36fcbf632639b38be7ee83e38afe00624222123c5ac3fcaba1219d9405e8f70993f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b35f776b6aaaafbac0b9acf3ee35fe0

    SHA1

    2573a9df9e1c055c290ecdf5591cf4c8588bbcbf

    SHA256

    8556877897587cca222e601a79ed465c1a0618955114e469ba7d671eb0844f28

    SHA512

    efba5015bee2cb955cb609c2cf28ca1dbd386c004c0f3158105ab8f3a9be9cad67dd8a23b16ad3d63f0852beff9a43c7a18d2ed4bc7f9a51ce9bc994faf48307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95dbbe8045a5a496fc26678d55c45f0c

    SHA1

    d0921401fcc247bd7066daf0befcfccc1df86a13

    SHA256

    7ceb04ee91b4d38cb360d6b6e8790a047c5870d8162271f408ff4e32b978f808

    SHA512

    225870959ff2f5b8e8d69b305fba795c410c07b96c1e3bd28c4e2baff6c4100aa3b2a65fc32441f6f3977752fbce0b21e67565671fcd553aad41853e090ad56f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    961ee8d921050096cd182952c3ae1e11

    SHA1

    ca29c2bb4cddf7ceaeeec73e3c4ee679aec97038

    SHA256

    df71ce29cd9d1019c14caf7a1e5ae8d82be584c89460642461121517b30f0214

    SHA512

    79437bef367a53d4a82906a8cd96c31b16308704f45a595d9a6e39909d6bc895487ac0c4aa0f515d87b7318acb0f55435bdcc8f2bac5cd31e4bd8dfc0d0ee02b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3dcb1a74fb7e008ebe3f748c76dd550

    SHA1

    12e5868690cf5812bdf0c90fe984ea40d30290fc

    SHA256

    678fa094651e15d8ca4327961c208452742affc59cd039004afbd9642e9925a0

    SHA512

    1f2d1e0f63a33597384226a1b2b40c77393e121a195d16e5f4f7fc602d23a31cef7fb068a6e3ece3be48406d4261e1922dba5a633e86be55e766a4762a8086d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29cefe2a31cbaa726bd689cf02fc2f27

    SHA1

    187785210f4c1b1d4bf8855eda9c329bb6c6763a

    SHA256

    b71e6686a6ba895c06ccc3ab8e1ab7f1466cd716d830678a0e47b21a04cf94b7

    SHA512

    b129b494596ded36e8b619ddbe49aba972c4445cd21364c9ba94dde67661b4b12cb2375d0d577ebcb16357e9a28284e53c9a8f095e82e12e4846ddc6fe1a0bb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50aca6c9aee7361704c2aa14b19d51ba

    SHA1

    9514d1863b13135b9d043bc7ec53f7ab9cba0521

    SHA256

    db7f93bcec53665acce2c34bebffef60bcc54b98ee911266c8043afc2bbeff0e

    SHA512

    c61906f007bfa1a7074a14d9b3d047cd0a651d808a50822f19ce3b821e68f4bee2ccd3ba29d0e6240922401ac42c7e6aac803c97dde15c782a0020debcf59020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8cebff6cbe78c821c1408572bbb2736

    SHA1

    dd81bb428a8c1296c98b40468c2ea663e56cde7f

    SHA256

    d505fe6ca202dcbcfe506a8e03fbd957cb3b55600d9edd521d0d466622712e38

    SHA512

    5380c67b2535d6a5571f9f768ca29825c7ee07e05b1d7be4fa6ed4b007de830777641f62532d8092b362070d4d70c30efb05f8c7079590fc702cf42b41560665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3e7141abb7fd0f07ba72b129f8a4eb2

    SHA1

    cfb0776106320048533a06ff513aedd76c38227c

    SHA256

    02878abdc5661ffa77396927c648294ee5a7224de181091a5e4f8d381db1c594

    SHA512

    70d30c426a6dd31a9d7af0a2f1706861df5b5e02256013a36d26a383ef996b60da9f8b423b7fab4946f606730aec3ded4215219dd4b7cbdd60fc6c9b74896d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98ae3a7408243aaa6a7d445420b10020

    SHA1

    77fd1adf36d2c8f382591b6f735a9377b7a44037

    SHA256

    decb548019208ca45c95d517f7626b664b29c055b5cad91a83bf4cbb8539bf31

    SHA512

    64a88c71df7e7cb7a4707dc343597c006da97cb60256698fef802e66a5a80dc530802e7c5ae99e0339542fc897b0135e99b5bc1a976ad6f684d44886de9a6287

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b69548a1ff316fdbba048d296052117

    SHA1

    d1d2d92433b51278c59cfca3370d4d3274d534fa

    SHA256

    d948612a4633afb90b600a4330edfac65ca382a32a9a6fc95b9442f0afd51b71

    SHA512

    0c598e0f3ead15f58617dd9a3ee6434b774b3f28691a806a553481f85698d603bc9af105722a759de8faffe276e0b3567d283581b7e0190a559a6d517fe727f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bfccea1965f19a6625e369e0d99ebdd

    SHA1

    d7b7483a017c61cc33162bfbfeb069a82beff0f0

    SHA256

    2f6b5936991ea2021b6c9d83db0f9bd6fa6d5a3dc3766bfb10839323aba6b530

    SHA512

    2b6cf70331f6c582150d75ea77b31d37b612b4f63f98ec88d185a3460fb6e48f7cf28809e2720f5ebb77fac0f915034ae7d5039e6d5f0a0bc3e427104416c63e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aabc60cff8b8228d68f8a83a7599415d

    SHA1

    4850df3c1ed8b5adf0f999f55a4e4175f44ff01c

    SHA256

    a069a8d4cf476bfd080731c5305b0ad38501b6bced8b73e9fc85484ef169dddc

    SHA512

    690951a1dfcc31bbe80d623b094f50de06969ec722772190f5bd58d51434dc5aef3a10512c32019ac590ec3e92647583a7e88db26acd6a86589ad73965ac6936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d43ea6f6c2e8ddfba2f25b07a8544e98

    SHA1

    271a96b6de1019538c582c41832055e004ab06e7

    SHA256

    ca94e1525d37fc91989cedcc46ccda61fe66b93e24ea755cd809f7ca0dd0541a

    SHA512

    1ffaa3cf789c2ffebb983bedb84d7e98223860ca682962a3a3aa1b02a63c228051dca395b2666e099b065b43fc50e365e20a8a8cee227db06742778377981d21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fec04eb68b69cebdb122fb0e1b46c7ef

    SHA1

    d82f1282bbb9ff2a3fea10968b75578b8495b5ab

    SHA256

    823ef696f800020ea27d87f005b9628fb21515cd79f9a2ccca0c986af272e0ad

    SHA512

    780cc56902ff0839d0d6cf685a2cf387c6a6d9e41b9d6c788a4f39fcfa6b7c9f6f0d3b94d7111ebf33672b778866a59c7ad5bdac94e14f301e410b53db95cd8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89285190521d332e39358c4edf7999be

    SHA1

    d8ad73b109c58839cae7939d3940a94a7e1afe94

    SHA256

    71d0f955760b524c3e96de3be9df9b19d47b61c9c36159ecbeb24e6974fd4ec0

    SHA512

    5df7a78596c809fe182e36f47f9e3095dec7eaf22047962b0d36300fb60c41890ec217ffc1c1b3207346ab5141dfb9fc26e13993de211eb831e4c4d737650ae5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c107c642af2800ae9bf31ee950379c4b

    SHA1

    8a8e99b4eb434afe8854a4223af72c50305936a4

    SHA256

    684a08f4a841fd8941d10ed818dad586184a58cb61a731f57d965310da36edbe

    SHA512

    cdd2e21efa52a2ba34c9ea3e8cbeaddbcb97c714c39f9d3b6c41e5a8c21f5829ef249b43979cdec81d399fd0e0ebcf32b6c12b4a8794bb33bfac7dcea05aef14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cddf7fa01a2eb4b01009042de0a2adb

    SHA1

    a5c8257773d99fa63f4169f763660dfb1ac213b7

    SHA256

    df92bd9f2982c70ce444d174d934535553d89ef540860e46c5d70ae9b2935d1c

    SHA512

    95bbd9cfe28d9817761a527b5b3e7f21ce8cdae95953dc46cea08199ce5c4226408b5fb91a9c8e90f6376423a3e78cefeeb9e368bffa6c3c88c1e065ecb44a85

  • C:\Users\Admin\AppData\Local\Temp\Cab5E59.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5F59.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a