Analysis

  • max time kernel
    135s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 16:28

General

  • Target

    25b755bfb12e4f68badc16d389406ba8_JaffaCakes118.html

  • Size

    114KB

  • MD5

    25b755bfb12e4f68badc16d389406ba8

  • SHA1

    f0e3cd85bc169e5943f7e02e9abcd1d770c81016

  • SHA256

    528fb760d57c0a47806050e0dd3ad69666d5cfca0d031b3e26f63418627b3b72

  • SHA512

    69269d2435f8482352fb003c22b2f9e8d46b929b3f65d0b3a7db7dc0de619a661ced388123c68834244f420843920c7fa7ea2d38694ba9b2f89ed4721926439c

  • SSDEEP

    1536:SwyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQh:SwyfkMY+BES09JXAnyrZalI+YjPL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\25b755bfb12e4f68badc16d389406ba8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2368

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e6ddb6ca869da982fa78eb551d9d154

    SHA1

    0a8dbb604fc67801a51ae2ca9b62f0a2c8e53123

    SHA256

    978b8d5dc799401f3e6c7776d6fa000449a75afcebdd4d6058ebf8407de28d81

    SHA512

    ab9c8f6dbb4615578084cf7c586d0a989645f405e24b6a02af9ee25d2a764963dceebea79ad5a2c8fce855dd49fa769a6c7c56e55a1d067e1d25d5c217a7e512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbbcd68707841f19735427a43b671887

    SHA1

    2704704fcaa2c4875589194f8c5c6bb90ff588cc

    SHA256

    46a28317cff22889c758eb54f6c5a09ae2b227d8b3c4073c36cd026fe219cec1

    SHA512

    33c8ef6babaeb30c0df4f3fa7945114ad0ffc42e8ac7a6c9f2b343d38e3629bbbeee669a464dcea07f7db0528224d54ecadd96fab4fb806ad0cea8edf2b4fe6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f91404efb88a29acb6f34f0b227ac970

    SHA1

    81e8b944bb34c787f7f4034ffb6e25f1f57baf82

    SHA256

    ab7df30f41effd758a120f2129eb4397936d42986de79e9c99c5ff9f1cb49ae5

    SHA512

    51e960841b52d37f0a6b53fce24fff83afd2d8284e20da6ce1ae228309c7218d9c8d7f10a9e53c2b09be87925ff4a72202b11c29487724579f178e6fcd36b87c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50c2b6171d09ea8220f7f525fd596ddf

    SHA1

    a48112c6146d61fb29492e2dc7a2689a371b5d49

    SHA256

    5af193bf818416de3afc68c6700838e21fa4cee90bb2d95d5959618b75129a8f

    SHA512

    2dfb69a17ceb496d88706616f491bcc47029b600341e59d683f228612eeb4bef0842d8abb257f7b3570e02e484783c835ec2d28d68412ec3fb8f5d36e5fe63d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7b873b3e5e3451c2c128d9be138d058

    SHA1

    37045fba77ba8dd469fad7c84ff3a304a7c10a56

    SHA256

    c50d5df33f93494932737e7f6ace33d64a9f50ed4515c0671ee6571c11365c9a

    SHA512

    859cd7449b53cd2d1959c82492c0137ec673263b1fc3e4365ddfb185ab9e91b0df4b74141b4a982efebc1989aee1917b54c2ae56b5bfa306cfc5066a7fd625e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e86b168b3174807faeac1226fea36e73

    SHA1

    54240029886f38034e56fafad54e91f3dbf2f205

    SHA256

    c14e1effeb8329e98ff1ef3ea1c1acebfab3b7738879db2e428b52ac91c37b03

    SHA512

    6967e95099b6a50e44a3e5cfede0bd2cbdf759750edae5b4101767bdf58a359ed6af4a0b392c13691204782bd80e9270fa4d5e72c6a223127140e0cd960586ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12c50311a9f8e4c47c9740219e710912

    SHA1

    8e6e81048254358c98a7cca64f47d9ad18c9164a

    SHA256

    f64b93face94c38913adb162c7584a8332aadfc030cdb5facd2a64b19318666e

    SHA512

    d602c4ba24c8ec152c934398d2e8797fb4fdc1175bed6c75d3ab02de656542e8b0188ee540d5b3e605c29da3a6f53f02114e9342b7c1391beb390365c6f3e651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7eccb7e11cce8fec7e2d82dc3a0ad267

    SHA1

    a5531916770dd96ab2108cca690f2cfa0deb4cf4

    SHA256

    02c873383957f6c72f4cd897c0386197a5dddea9b11dd78a133d7f53b2a45f49

    SHA512

    cacaeab55f0b0ab92bbda5b1178e2bb8869e196ff0a86e6588cf0333994f482b9178bb6b8cb5940c58fc07821dd710e6f60fefab7bc9fbc2ad18fb517b839640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d44bf801dc222ec9e935e38803aaee93

    SHA1

    0ed6267b2a143adf220a0101d3c94a435b4987e7

    SHA256

    41637673f7eb1a2e537102f7b81ef11105e66843929bc7dd4b3f7af11de9f4ae

    SHA512

    2170b7f0bb42ae36d806a8fbe764e9b69fd19e967e22e7cafaf06f876ca214557737f4061117010c447b746712aa9e57fd380f35f112aee1db5be50c9e92cccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76659928051f8b911bef27f1ca68768e

    SHA1

    801f90893927cadaa9363fbc496870c9686a2c3b

    SHA256

    5c368f022cb464999ca94c1530f292818144882b89ba994ed96633f5fa788c89

    SHA512

    05f968311a09bb589e403326f4fc9317d5d7909d5842a8abf5b879d98746b3d7fd3b335680b8be6bbadc19298f898965191f21f2fbfe8abf5bfc9c78088efd10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cff9a7e876eee3c704abdb8f10534c4c

    SHA1

    3137e22e5080e39f4c44e7e23bc6b4b7c9582235

    SHA256

    ed2203655706b91c00e07c43c14f6efce64458a7baa0b03dd156fd3215f9d64a

    SHA512

    a0833444a7e97554cb590ff55992163235be351d69038aa6db7ddbcb7423d21ab2d854131147858974016fcc793048b0336bb432e8a3fb1327b0c3e6015517fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2712a4878682b951c01748f053f54c77

    SHA1

    258896f0dd240da5b9f9bcd11cc85e34af82e8ce

    SHA256

    cbd7be8de0308034702e078f1a87dd6ec4e5a0b8c015720944b13cea85b2c40b

    SHA512

    12fd0c5cc779398be5b6207ecb944503fac7673deb61fbeee0a954ab27dec0b94484dc96b0262dde25b72ba156ef854b0bd0f6efef27bd40e152dd9c670b9a88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdf2520529ffe5123b2c4175e96e9059

    SHA1

    0f023f4de2193235a1116e250bbafbeb473d88e6

    SHA256

    d3b9bf7e85c8e1cd1c3afa93de41a20acf0e0ab14c887adecc2cc1a9f0dcac2b

    SHA512

    39ef8a3f78a152eb9423ab5310157b92f83f4807d836a901451bb89873e4aa3608da00911a04f178027fd62ebe980ba39c4ddbbf7a5b7b72432550efa6921d9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf31529ef99aaf5bb5157031481940cb

    SHA1

    bd35c185b8d55a8c26a4f0cbf4f5a778b0202499

    SHA256

    063fd264c0ab5a212e02b373a744f6c59086f7b11de9d91debe432406b0cbf70

    SHA512

    9cca836bde8628b93a75d336714a673800a5de4da8a4765a5f6510ef93ec55e20d32967cb24fcbcbcd6ea72586ea72781d6cde3a06ce98730e79fda47417b423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e249e3ceba6ba8ad1e5a304ae875f45

    SHA1

    5fa707dea968710e697b2d98e8090545a21e232c

    SHA256

    31b2fc1eb5a0ef07b429059134f118c06b3e4c17a3390cd1b4875bcacbce5536

    SHA512

    5f5141913681c405fa15c2f106480d3c0b82e4e75642ad39242c25608c49b39abb943f1a6ba8f8cbb1262160bc5f57dadf289dafb98aa6648820116832c7b5b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43919f6c91e1f2af524a73fb1e43c79f

    SHA1

    f8fb0b479b7e1a7bdae44c26d9a86d599cc54fd5

    SHA256

    4fde8abfd4ef0031e264664da9d90274b1cce1171410b125e4df1f27de4d1f3d

    SHA512

    691d94c2f4fdc06aff55471b382eb15908a131bee3b525dd3cf7a18d298c7a829fe20f4af1f9525ab7c45fbaff788b93af74382f1465fd2cfb69d1ba74516dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb29d7bc7b888ef61d98b0cec8113d39

    SHA1

    c665cc65724a3a2d25b6e0ab5a3d01f5db7fdeb1

    SHA256

    ce2a133ac8c354f33957a0f0104c79658734a7632b17f7a31ff3a64109c2af11

    SHA512

    0eb5dd4d3544f31ad391afdbd64397d268c03de379654f7a1aec0e5da002574f60e36490838f725a948b4cb4a6edb4749986b1a4908de084e339070560392493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3571bcf8936fd85891e7e7471575c2e

    SHA1

    7a95814e60087ca7603a4def36a7133ef3fe679b

    SHA256

    f6214b048cf3b22097b884756aad723ba3900e0506f9747ee7f09a029867d9c4

    SHA512

    0480f5e5055cebde11efd5b174ff13182954ae23826f35dcc3c83fd028efb580ba5929cbb6fcb62f5b4f92aebb235231c941a40f09901776d89a04bd5c588c4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d9f1456eac97263fa96a3837eba4141

    SHA1

    f9cf2e9d29de4bf016d2f78d76651cc4c2edabb5

    SHA256

    e8a139ae9b800c218ad4b5b60f76509a4e07d8c8b2879131ac832ec0c66c8ac9

    SHA512

    651811e73401630f4e7a5c308fec7e0aca4f231e5c83a59c79a737d41b962d2fa4e4d93daef38ea8c4e665bdd53537bb11cc47573daba471a5ad6afb2d95d597

  • C:\Users\Admin\AppData\Local\Temp\Cab2C03.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2CE4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a