Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 19:25

General

  • Target

    216217201553eefac7137ffc4d1b7150_JaffaCakes118.html

  • Size

    17KB

  • MD5

    216217201553eefac7137ffc4d1b7150

  • SHA1

    f54d6cb2371be87e5fb092cbdf5b4dbbee23d63b

  • SHA256

    b3b1695db2a390b16f29d139d306287b2c3e400243d7f9fcf59c0efa71fe1857

  • SHA512

    c9e3530394fc1de2336d87b1a3f74a24cc11bd0b51bc0764fc4f55d86f915fb699f74c356ca2f2c31ea3d0069870174a46e8599e12113bcdd17d9d60fc7c435b

  • SSDEEP

    384:Aj95mkQvRw9W2WauoUvNw0akW+iySp+oMysyB:hNhif+oqyB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\216217201553eefac7137ffc4d1b7150_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b866284f670fb8007c1f38324ab09359

    SHA1

    3e5fb18b2c44378ec8385b18dd933e67b54fe03e

    SHA256

    0210853de43f9859dcceeac5437ef68ddb7616eb17f92bbaec44da6cf8a87ebe

    SHA512

    037f0d0ca94a6a33da40f50c4c356c1c7606e9ca0b84dd4e4cf7e36db9faddbe0e0012a74591a6c0694648c1dd89ce0565b8f67018fab86bb444854947d489ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    255359418585ee1c3c3957098a5fadc3

    SHA1

    36c052ecdeb8ae52e4ee21225b44a73e0003d5e3

    SHA256

    da75a2652941d288db5f6a84679d342cd830fcf1ab22ba86d5a8d6cf701a9516

    SHA512

    9e0a1af138a95d7bf96c234e2cf7ca65e45dff5d63daf37b5a37e84298d97d728f36a6d6819a1d969276454d39a9f8a1bea8497555e705c62972f29bdc987852

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61f61acd833c48af8fa791a78f5e8c8e

    SHA1

    5a6b292ee017030065b8ca58d8b0fb4c27addbd1

    SHA256

    5f3b64b4e8f6543d70286870450aa76e18921dd79b5a74d30b86ca34ab017dc5

    SHA512

    e66c7212811b70c8dba8c3936b81bd138dfed81d1c7a1c6794fb947c7768f4c57843d0b6325a5bc0bdc3ddf9d85c4d8ce8de36b695fb59612644763d273348e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af819c913c0bd513beefde2becbf1118

    SHA1

    ac84a8a0c1c129290cdda0f0479df72e0d15fd09

    SHA256

    c56edff820aaf32b1e7adc06aa174c1af3bef7f34360f15b61e14ed08b50fd73

    SHA512

    5bda1691c9bd413d091af845eed88305adca91e725fd60b8b6419b43b9b1ab42170738625148c6f6e011e66896de90bc190b156fc7b65288bb3d439faae6a143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b6025d4431ac9a34dd5092b25ab3dd2

    SHA1

    4290a0f8439a8463e0c2c7b5f127e78ef92af6dd

    SHA256

    3872a5ff327ac161a0849c0f5963e3e57db839ee0c58cab0d13f479d181118d1

    SHA512

    682553966dd733be4b9cc17866b5e7e93af9ab907f9c060274b0122fe243e337473bfa0a5121b6919c2b573f71b2600a9a667be25a84586f4895a861a6cd3707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c049d3cae7fa88ce9fc5564c661311fa

    SHA1

    52a28618b44866347037c6ebf0bde8a723a21b9c

    SHA256

    cf09984bfc1b38a3fdeed8244969999c4d5e6dce1cb5dfe73e8ccb222f3f263e

    SHA512

    2840332ae305da1644507ff2e70b9d081deda080db340c45ae0671cdd1041e7aaff2c454deaeb170c25df0ef9e354318db91fbe0ef31a611ffd8aa8e95f6b0b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf4cb53fc4cec27fb3e7db7920442ee4

    SHA1

    86154449cacabddfe3c248e337e800c58590fdbf

    SHA256

    a3c42c5862811178b0a2d0a17b7fe9ae58eb85c4ed919daf2e272f0814da6d84

    SHA512

    2e18a4bdb80f29b6da325aec31216c9a0f6c4b728171c58dfe91c3ea5ec9b7930070077eefee3dec230002e744ef61ee4d185515979c40f3c4bb402e51fe303c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c16afbaccd75778124d787fbdf1404e2

    SHA1

    528919da5584b758f2bb54bad92f6a36ef72a336

    SHA256

    966bf1cb328c7a667101f71e386294d1aaa472ddeaf49bbef2e8cbeca4ef35ab

    SHA512

    7e33c8a13a0b77c0ae9fa1cfd29f346044992fa3dcbfb0b9df8a6334aaf7d7a9fc25b3762cf93e416a378c59e9e467598e2469eda078476ade4d010ecf7a22fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2341e20b67fd87b448f6cd4194f14aaa

    SHA1

    072bc985509d5779fd917930d4061b24811b7b31

    SHA256

    c337db9f995ca1da7983282a3ec085c704dba086542a847b6d989abe5e73fe2e

    SHA512

    adb29655ac6140be7189c478040dfba0d586e94689d2cadde23b93d41f444e4a273419d27ce088d63b1c7ddf251ec4a4989aa8bb6715fbc8969142ac9e4b78ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2289f645ddfc76ead8e4083ddbdc476c

    SHA1

    75b5b78b2eb21acc65e4f67826827466cff54cb5

    SHA256

    55555aedf7a3aa2703d80acaccc39fba13e12e6a71cfd1ca9957199a5c59237b

    SHA512

    937537bba927534eadda4e5db81ad4a79524428f6a4a86ece06ec571299ee38f12163abde3d61e341a1eec3c05abc1cbd92d988b71cf2dc990bc1258937d5a4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b92711a49b7884d4d581f44b83ad12f

    SHA1

    9520c8858036d9f7e9f651fecce4306d5ab965b7

    SHA256

    ea24dac6ac09dc7fff761f3b4d4e2fcd3316813debca7d77e9dc22d20b3bc012

    SHA512

    0f03a016e2772849b5d23a76266d0fce2597c850d7d48d34b552d143b6c9004e8362e0cc9f3f0ed4b5ba867b96e86c2e2ea9ad871113ea874472a907aa83582c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8037521d14907cb47d5b8ab04a49f879

    SHA1

    7d742d93d22f669b8e4c627f1cac4a3d3fcd17bd

    SHA256

    35c0f6159ca6c0d4467e329a87ee9c41dd8a4187461b9839810373d9d5e78c01

    SHA512

    28d6eadfe155802a44c1883c7112d78e56491b8e1814e21b55ab653273db8f43bee4088af7c8695c034d9a17251143a3cfb9a6a359faab7ac679b187b41e8bda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    641711d23411372e3f870b1f7da9aef8

    SHA1

    22055d77ab4ba81854e638a0df8a7e0c3c0b194c

    SHA256

    547420680e083d4eb4888831c465e391b34453cf61dfe3893853dc4b9d7252dc

    SHA512

    f81f2858be75be90a37408d9f7bdc573f76c3d0f8461a3fdea22fa66fe4ef02708201f6e81a98f75df3b09ff9503cc5016a2ffc57614425a75f4ce32283d8809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    100ef24d38ad77d87bc70f60de517cbd

    SHA1

    78eedd72f1320ba6bf945b4380e07743b383a1d2

    SHA256

    ac1cb5c0471401af952efb04a2065664bb711e5dedae64d04be95b42f657c759

    SHA512

    9917fef6026e74f1b93b5c3804a42e21dfc885fcdd342d78cb4c50a332174d54a695f1d1b7abb0c70e485a3b55abfce34151db96b468ae80ca501a84c77086e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    137a3b7381604f877e0691b73fa11a53

    SHA1

    6f086d5df5358069d9ad3b0923be32ab8726c5e3

    SHA256

    5a3ffdc4d37b299b8b729cb679b9373cae7b08374dcf690310efb7e4dbf8a062

    SHA512

    07dfb2f6f3e552cfb3b0753a0a8fed0f7c5be3a25873487831f0aa66c9a83cd79e6f81a39cafb28716324a809fd08365ae95148cffc122e832d9988c018e1865

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6236b8d312ff1b7ee87ae17c0747f351

    SHA1

    7be7a8b3fc031538c9e6a302bc7e529a8d9b3f8c

    SHA256

    dc888d0ecef9bd1bcb96ceecea1d2b05d5ddab126d4b54968bcde2c816caced0

    SHA512

    b510e113c6eb160ff5564518ec210e0d98278a108b0efab18372faa221b968c822be43f7374c6d330f658dc69abe9dbc0c0f7ac0c597ee2bef4b1a3a556ba2e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3565a51287b0f56757f5eb0bb0120465

    SHA1

    e09030ca8db752b00122124b58461549db051685

    SHA256

    3bd0e1e4336b47c38d78e2970fde091876243f61ffa77c15ca8ec703bc246f81

    SHA512

    9c008d4a94ff840b0e032d3e01e407c8876082a39e42fa8759f3251d17608fc1e57e4ce07363218c8b40fffc28a5e46ce47c8b36fb3f61cb66d0efaf29e86e38

  • C:\Users\Admin\AppData\Local\Temp\CabCB4E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarCC1F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a