Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 23:05

General

  • Target

    2722fb4651caa12771b90dec7cff4bf2_JaffaCakes118.html

  • Size

    460KB

  • MD5

    2722fb4651caa12771b90dec7cff4bf2

  • SHA1

    2416838ba20ccd6959441702f28ca2ce535c186b

  • SHA256

    c802088d7e86c7996abfed32aa86831b92c26bbe37c7ba4bfb1faaa15d77dbdb

  • SHA512

    4e47ca82e368cad2b399afb5d2cb6cdd3319d95375c1833e5388298a338085e02e6336461787976e412f2ac96212305974011bbf87c10a7fd7ac72d154668252

  • SSDEEP

    6144:SLsMYod+X3oI+YbQFsMYod+X3oI+YmsMYod+X3oI+YLsMYod+X3oI+YQ:G5d+X3A5d+X3u5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2722fb4651caa12771b90dec7cff4bf2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2884
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    904c2c290b058c720e13d828eb45a3fc

    SHA1

    72bb10334b90dd765144d8e54f3a3a572b8f304e

    SHA256

    c1a1442fc2f53c7832e164c2b0ff3734be69f7e4c3219240d3c0bcd5569be4ee

    SHA512

    0ef5460905bbd84ee7b16997639454aa3899e33249bde96f22dfe482228a3ed4fd1d21afb4ff0c4a45414845a7c9554776a9759e3ec1184b9044c9f812f9ad8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48017d7cc59e26f33f9ae40bb209641e

    SHA1

    1dbca6ab82033e7ee053db19915015f155bfd68a

    SHA256

    ec1732e905483d4e8e762799b151ef5bbb9ce620364a6d1444581daeb560890f

    SHA512

    871a1e5d0bcadbc12c3844d65efa45092f46a854524dbe95da93d869cf97381039204b3864f98f8f33b58168a14c2059bd01a5d0b63deebfaed28e7f033b79f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2068b01d29694baf6159c9a7a6f11c8e

    SHA1

    2f83ecafbaeef805656180e55417953624f15119

    SHA256

    2f1e2c696712f80df04c66fbe61f7b341794cd2c02531cad95cc629c3fc47ff3

    SHA512

    032531c586b560964d028684110f993277b8e2310cb4c668dcd0b137bc30e4e7c57e8b03da2db7dbd03142796f6195260b379855a395bc6338ee52ffbc685e77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f345e871b9a1105e7d339da1cba6bd75

    SHA1

    68b5548b13f4bf30c20763ddd181cb03f7c96104

    SHA256

    c0a506a152100b66f9e239de2905ae399327065e47bd18ac3717941b4ab07832

    SHA512

    f6510093c24ecd18f4439ef49546d2db9ef4c499241f46394f7a8b385c13676fd16f462e95c6e93cd2131c3ade377d2083312eb82eca56c53b8d6c827b48f26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77df22546dbe25ca82d5365aac4870b2

    SHA1

    236d4fd03626ed3e7fb66f746000a952e33fdc18

    SHA256

    3db6e83f9723a59d7985f4f0466e8f2908dd7828cef6313242d582584546c3b3

    SHA512

    7d5c23665e25cef866de751cddf3a18c017dc26942882490d38f30fa538b0304caed30eac073277f6464b329090699e4d97635cab38cdd1cceb93fcfab4a8fea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cc63b4527e634121fbe916b01fa30aa

    SHA1

    ca92443b9486ee3d5f46789f35c7a5dc3d47eddc

    SHA256

    5a573f6d128ca23bf762a771d59d3bc613cf7b084bb72dcfcfd2e254c4a28771

    SHA512

    692e1f1f712cb810b214cb26a400164422bc2733976865a0afeddaf5bcce6a11555790d1efad115acb3629e59a469f84d3bd23062b18556ad6f0721c0be9c30c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb060bf88ab534ec93ddd7a1eac1b05a

    SHA1

    58c3afd16158d02aba26507c790de581f4c3e21b

    SHA256

    4acc59322b7c4e7c5752db391ee7e16a565f35e3bd6cea6997a9739f19218f86

    SHA512

    a5636b484e284546e73d8369f9bc9db9428e9d856dc4262ab04a2bb6e8e235843929bc3078e8c9d3f9c77e7ef08c2319fd7844cb344bbc3853f39d96d7fdd5dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2161b99e94a3acd7ad74741de3c4a6b

    SHA1

    a9d80ae41ed8a1e7a1475fbec206216293e9397d

    SHA256

    956b114753621df1c2c12c1a4bb4fb2f2394980fca09f9231155f730efe9d51f

    SHA512

    3e03e0eca278db07bbd576aa8f0af64db21f6fe492ef3fccb63b72fd9da6a906227a5010d4dbbf8ef12480e40534e943b01ceb4e86be59fe7538c039aab07a89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    887c31220bde027f2258ffac4c72666c

    SHA1

    8e0bd0796aad5c0691f48517688394620317255f

    SHA256

    f0fda2393491acb186324e13f8e0b48bcdc60c473c8479f117b9d221b96db6c7

    SHA512

    b9482fe3671cc9d38078b979581902cb957233be932469bcbb24960fab2e890c3178101d8b5db5a1dc758ef2193aee6ac5522bee0402f1a9013fb7e711463f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3817ad3060c2c865d0e4d3242724ed6

    SHA1

    b6b941a9b8feec49762e2ce62eaa187cccf03925

    SHA256

    56fc6b29b12d7484dd61dc2651ab1b94d6cc40de5e197f82d773eefed946bba2

    SHA512

    cf86016585367240a43038960b3a94d7ef2a2a32d3f12a37eaa0646cbca6c8c3198030e96276535b92953cdb13d1a93ad2cf7cff39dccfdd88b5d9274ea47a75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8402576000008ab502c510ad41db13a6

    SHA1

    4c13d6848cd1a360237ac041cf4d04b97847937c

    SHA256

    1d73dfcb38f5fcbd74b5b9c0c72b971f93ca4bf6e3698b95e01cd3ae68f4841f

    SHA512

    3ea3a7d022e732c3c9106c9c111f77b964ae435facecdc07dddd65caa64c634eecbb12d4b8ae314012aeabc2ddd29f80961aefd2acba7dc6fe4dbedda4aa7ed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38e4a601d5524a38deabfe0df61f88f1

    SHA1

    e53b7a2aab79d108e93f1643bd3d88992877d5c7

    SHA256

    c0ef6fd934ce550fd0ffe307ac3d06c8f2479235a5ce58c19ad49dcf649768d5

    SHA512

    bf4463133240f8b3a7fcf0f80b402ebf4a264db4c403ba845e70de39b4bbc212d583d5aaee9bb0b82362aec456293506736d1b60805f9eef50d552d18ef464f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ffaa9d7c2971081542bd5d139a20251

    SHA1

    b00bf6c86b6591b88205f80e9f80433dc6cc42cf

    SHA256

    2af714a23b65c0027201c980b509cfa6d354e326f263df8d18af215f989ad233

    SHA512

    535e95d7dbac7f77b2495474dd07aad925cb4d06de29f202714cc2f84b45aaff565421f961eb409de0f4f24e7dc0a32b5e0947fca189e5be4acdcf6d726f17c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5287d0e109ca2dca7db5576b8eba4a16

    SHA1

    08b4694fa7f6d31303e075742b4ee89205759dcc

    SHA256

    41cdbf2a448f2d030f3199e456306e9cc9777061cbc292550a3d0d03b5c04294

    SHA512

    44b24888f05dd32a0b163a1689c758968e1a515eb380b9ed03162da326c8cc9a8b66de90ef3de7aa4a0b762e2b2f2df596439f8ad87579259fd0e6314efe08ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ac30e48d8750d92c4f5e114c67cb8d2

    SHA1

    8e5e71a8fdf6603c370ed66b1b0f6103a38233a2

    SHA256

    a3f3043d338adb693e25dad250dc09d9cec325c03654415f19f55039c2d9cc53

    SHA512

    304ae9fce66e10b06d6843e5b8f9b9dd84c81a1300b7547d79e75968e6cf00bf65fea51432afb5333656a5e6d10b51d0277617fd4d94fbf2ce651668ca3327ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cddb9c275d1c46cb596ff9bb785c8328

    SHA1

    afdfebd0178a992eee45ec6e75c48d8eeeaef1ba

    SHA256

    990cb542abc6911b5b432b597990a4d1994b6ea151f0935e29e72963443851be

    SHA512

    5bbffcdb5cb64db14f538ccac7d47623683744a356f199e1f35b828ce62f37d5490a763a296e330521fd79f4c7a625f623b503ff97162fdf8148ff61fae09434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0deda1543f1a7e26e69005ffe8d420e8

    SHA1

    e451ead7ca111fbb1fa33e2a8c2ab3d94606acd2

    SHA256

    c2fd2c53043723431d27cf1b418a5496963c149d2a89d36b1837eab154da1c13

    SHA512

    401b890079d3566b1ed081a782847030f5cada4aab395fba28a08fd68f6ff68007feb91f2ee245472cf56c0f6df1cdc1a00c32b5503c941e92f28a10ec77db13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb39e446e12f860871bfe0719fc471be

    SHA1

    4a4c4f7a9638b87033cb06a80d624675c6e1bb27

    SHA256

    62ce5cd2c284b216602fc2dbc31c4a5594d9324429dac6217038d17c45f41c1c

    SHA512

    6d9dcb42e63ba7b2cc0b0605b3b2ec9b38c62e02cff608edeba6d024d9b946ca2e10b33771f9197718c4ca03459377a48f9a63a8dbb42853a279fb3f60f325d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f08a9cb648a1ec429b28fb18d4bacc91

    SHA1

    930011c7ba5ff3759277a51aeaa42aaa18d30ff1

    SHA256

    3accaf4a7b154b6abac691ce919822bb0afcb1227c5d9da1f03261fddb5296c6

    SHA512

    f5e4a452b150c0fbafe9d48fa9090b8ff2c756d0267b6179cc8dfac008cd781115b065bf16c45014f9b61b119a91ac5b0dfeff63998e5a173877d8424eaad718

  • C:\Users\Admin\AppData\Local\Temp\Cab401F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab40EC.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4100.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a