Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-05-2024 22:47

General

  • Target

    2713aec23208215505c7569515875f27_JaffaCakes118.html

  • Size

    460KB

  • MD5

    2713aec23208215505c7569515875f27

  • SHA1

    aebdaf5e6338362481d59334ca991393675542a6

  • SHA256

    98454d86c26890bc80ddec46155121b3a766cbfabb14086ce9bc9598fb8e59c4

  • SHA512

    0f331423028d9a7d7e6c96256f7bd9454b37188367e924e66e160baae7c52a2aed8c02bf1a286834e991dab1e56ae3f53eac1270bb1b84fe39cd89c88cd8285f

  • SSDEEP

    6144:SosMYod+X3oI+YWQCsMYod+X3oI+YOsMYod+X3oI+YLsMYod+X3oI+YQ:r5d+X345d+X3W5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2713aec23208215505c7569515875f27_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    577f6911d6c997a4ea96a81fff3be29f

    SHA1

    93134c4075b66939716085311d26eaf8c9cb461b

    SHA256

    7657eeb790471dc8bf434db3d9791d129a07e9ca55f0ed85fd088f30628d8825

    SHA512

    9bc4b25430e6670a1fdae91073175b91f911671fd736009546764365d451e583eebf7181d4016ec00c803ecbb832e21304d0a538cad7ed71ddec107667e85910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd2ca1c447bf03d2f41fbf398e93c3c4

    SHA1

    281463c54a7a6554f8525fe9fc01ad6c65b0a260

    SHA256

    2e6ee458acefc9c6728bdbbe09593067d0a032a23b75583fc0990188602ed651

    SHA512

    96747526b3d468b4cf5de8b1bd5006247116d4905fd4b0416ca4076a4ca5bbb34bb5fee1efdaa3e170244b3baded33e5a4d4b5a1ce6d07a78aa9ba45118e11db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ded18f4110a4fdc06463b1c5649f1bb

    SHA1

    107e920921eb31865d874e8247e59ae35965e34e

    SHA256

    f84625de2c1536b07bb0954182ea804f3a3f8c7810d5d9fbbdd2218938243645

    SHA512

    87dce7ffcd92a89e6c8aa5d996dab15abd03df1cbef2ae42b62bf111a7e57a14899b9a1c00cdec1f843ab495f5db5bf03b7cab0bae6606c3a9c2dd60dbed1fd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb9e8aec2c4b0a62b0879929acc50ef4

    SHA1

    086bc4f0adcc03315396dfc3e1d0684b5be5eb5d

    SHA256

    5b09a345beffc1ec499f8af5308e4c692191d877e8d1527a4aaaf4a507c21de7

    SHA512

    5c95f529ece299451054f17f9ea69d752393ea8c4d969f24f29022cdc4e9bb8285cdf62104df52273dd76f4472095b36e033cf0b8eb97ab0728d2592db4b0b3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    666253b092b5e03b81958b9194349196

    SHA1

    9e4f2e403dc122b2d7200ff2f3f5407d72ff9483

    SHA256

    785a965d8213a408ea7a69d1e80cb0d9f127d53df6e45dff621c88547a18abc7

    SHA512

    8d3001202c0848dc63916e6bd3b877bc344b5750546067ad831a9559ecbc02c0f0f9dc6b9c87204ded3a302f188942a0f45697ff98fa1d582b6280bac5726ca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4a0c653b75ec33eb001ddf81e88416d

    SHA1

    672cc5bd48ed9312a77f2487c41559fc85e0496c

    SHA256

    cd6775973ef27a5eb940f3237999544bd70e28124c15a4ae3d48d154add2ddaf

    SHA512

    2819aac5eed5419f864e21cf92ef8de851bf79647921556dc15fb9dbe313350f1bc71d41085d1a794d77aeeb907b53cc4c69b486604a1739d3f70af8ddf26d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf9c03d53df06dc41e20ea2ec4db1095

    SHA1

    24c4dc34976cfc54a0f1cf3bcf06989148aa94bb

    SHA256

    81a8383bfb93ccd8e0aa360345f8054aac2cb10393c94112e8279d3ad5ca4b3c

    SHA512

    ffab76f0f44d5c2f4fcbbad84e0bfca8abfba95f40592a2b5a1b4fde1bf16c7d97be8ff2af5a4472e053a49d520a27c5695f093a009ef13aa271c2f5fc753bee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc04e8f5ee1c7669edd629e08e4d559c

    SHA1

    cb28a74228b731e225d71db65cadd2ce23bcf119

    SHA256

    091051341e3446652005904da8c7980ef20656096c39c379b24287adb784d28e

    SHA512

    91c20ba65c5a4c8dc9f8556b1068de0f61b0584e00c3cfdd91fbd0068694d2979e4733c9b0af81e8704f6818dad02e5bab978aef9065dbc1a1204a6916136f44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6222c6e555c80be2bc3658761c8997d9

    SHA1

    fc0e4f1e79ae5cd885f355cc691d7cc163bfb637

    SHA256

    19f9c6e6e696c70bc8927ad303e52617661fc86f935562cd7ee45dad2894bcfe

    SHA512

    dc51d100bd3c9d5807bb6f8f87ac35529f080bb87ff0c75ba97fb5914a6525c84455217e65b1edffbc04fa136c32334ce153cc9d1651440d3bb9c61f475d9b3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43355c769919430f21a3362aa1455fd1

    SHA1

    107c771e6601ee4745fb42560d0c024943d0f574

    SHA256

    e68098ae79240c6677bc34d8dc52473045f6e6576fb0ff446592089a426789f5

    SHA512

    e7db0fda81f37a8aca353bd6181077874e77dd047ab8563d6807ecf2960f2fc77b8aa9045cecd9459f99547568ae557ca397df9f833b6d7213b434fa6da97b2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c36a45972642fc2df9d59575da03155a

    SHA1

    6a34ec2ff647f4a60355a1a4ac543d9a47e8c0b9

    SHA256

    1fc86f934c1c70f3c632fd1936b4f1f0f6543383015780a3cc14e62b5217aa44

    SHA512

    73eabee351b39e01ce6ce8cb8273eacaaafc9de0c8d60e319e7223c0ff629340a2eda6a9db8bb70645ae8d8fb2e28863e9c9c4fcc2c3775261a3f5923226ae61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c748aca1bce33137757f2d5e09f0f44

    SHA1

    f34c77f254e7d93e0b0ee0a6388c453e73db6d96

    SHA256

    62bcf5aa55d935053614e3fbcd757330686b0061d7eb3eabab21648180e72b38

    SHA512

    d5fc190f85b6a5e1597e19a5d5688cf7501569c083be209817c500efb95d4e8cc66d85e5c0fd90f8285e81266b2f29a30ea80f3aae7bc57d77e547592c5027a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2da2d4b99d32f97e8db9044a572124e

    SHA1

    0a1554868086ae740b5a57ae19421b51c82ba707

    SHA256

    37fc0dfce3af3ff1427c3b5688b7f742bc91d168dba655081b90e86722ab6a18

    SHA512

    eb9937c22d94dcb301816f037242805ae199483e57b231c89739c5bf841a951c2576491f5088cd94bc5e32c921dc29921a3657e1d6518ed5d3437b55bf8231d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3018556986c94ea509f7a35f211221c9

    SHA1

    f3df13ba96ebc4c87ebfa8eac9227fdcae07a6eb

    SHA256

    c65f00e612d92b996b9d67290c2795af63bcbbaee6cae24e997bd57c06fffb23

    SHA512

    768b4f87cd23db8abd89c52720b76cc7dd04df0c657a199f7dffb6a013b51d3035c5e5c82c86b09605414ecef46b584573eda6caa2389ee5922e2ddeb32324e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e3ea1cd7ea9446871318536c59f14b

    SHA1

    51ae63d824cae5df3b6ef04b0b95ee55eb409639

    SHA256

    66c76ec023385f113e714898e96fb8a346cea9d7bb0acccab1cb3896f9ce3295

    SHA512

    c551d90f1bc9d8d43e00f040f7d188a139f050b5450074845df5a77ac40a273c713349904ae1920836d9ec902c16f8ba6fafe5140532b4cf7072769d1ac52a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff750cdf7ff7c939eb865cd43a13297e

    SHA1

    849149e51c46b8835e0af6c5e9e70bd90d5ab069

    SHA256

    09fff1c53e5ae236553ebe09904ea88d755e3059877688c4cb43f9160ab50f26

    SHA512

    733c0a60d3567e2f274451dd885636433bd04ea2fa809d78a149ceafd510ed1549ceb740ad13301beb1654e956c8a9b1ddddad62006dffd6791665f5c3ed4b50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b869573af49fbc3406d64099f19720b

    SHA1

    95b376085e478d7cc9716e62c41ad5d34a1514d5

    SHA256

    36b594bf6b6c51a40114499b4644797d84557207d61d75448a6bc74720162e67

    SHA512

    cbf30626a6fdb1df2cb2a4b4bf4284ee23c2ba994531786d6a5b75cf7ced6166d5b8ef0cd089cd8c5525f14d3145261e70a13302ff1f796717f9d5ca7d671b0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c6f79e1a7ba1018d08ca92191a7d96c

    SHA1

    479e2ef04db04fcf55f4593eb66114defc85c935

    SHA256

    aa729ae26da1eacd375d627dbb388d51c322234a3313be3d0052806cbe9c783e

    SHA512

    24c913dfa869959b535087de053c2be162b5d926f3a630386ad110166c19a6c43c4b296045a227c652ba66dbfd0beba9d48e9a470f64e32f82604d9c8b27f318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b8b30cee1b17d756d2d05929174b44d

    SHA1

    2c4014a7f4f0cb79792f6b3649c6af59c76d2b7f

    SHA256

    1588a61b9d4967d4366665f90052851f484fede2a9a3cce3a3af504f03f41f76

    SHA512

    bf1fb1791239ff230a217b993975680996a09c83fcc9d2f8aa2e5e86866eeac2c9fca87e5faccfc27176141cdb317498560ff4512418f97d1946024cf3bb4131

  • C:\Users\Admin\AppData\Local\Temp\Cab5007.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar50F8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a