Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 03:05

General

  • Target

    27fedd80b2f7af0e952bb83c91344771_JaffaCakes118.html

  • Size

    68KB

  • MD5

    27fedd80b2f7af0e952bb83c91344771

  • SHA1

    777908ac83f8f61d73eced337343b5e6958c9b1c

  • SHA256

    28b63c9f10fdb8634758520996b13159999d5793b04c3ca1c80b5cfc8e474ff3

  • SHA512

    f564432e0c35aef90afc9af99d40734156c350eb3e0f71d346235cc9d0a4681261de3766a9ae199a6814fb67cad25ea5d5b01b58b40c3fd269eb8108988ebf8e

  • SSDEEP

    768:JiEgcMiR3sI2PDDnX0g6UVyWy3oAoTyv1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVh:Jorry3odTcNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\27fedd80b2f7af0e952bb83c91344771_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4da255d3fe2aa0974fa13a6d1cee65dc

    SHA1

    5b36d74b0003d6d8dd5033a8e15618d00e065390

    SHA256

    8d65d8e0d87f86484af7ca39cca7938e3508aa02666442e02ebbdf1b30c0a83b

    SHA512

    772edabfee1da0c334a472a4ad71461ef099807bc5a853fa642e3e65a8c5a38068020ebe0179b91a7b522508356e7c4855359965977e97434122ef82b231e2b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65e5dfeba590b0e35fe4262629341235

    SHA1

    dd8653de64572c8c9c0625259c60b38473314beb

    SHA256

    d9075db49ec818aabcc179412aa96a409d1a6c223ceef40af0baba00723d9b5b

    SHA512

    c389a0c312c69f9d04b2f7856b74022ef1d83628d297e7fcceaa644606251cecd02a4a7912120242516819e86ae3ab6b9d241450c4dea276851d2dc945fc23eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b07f396cfc8e0d34e512ce124b3414b4

    SHA1

    f01b5f42af9f27739975536e5be1c21ca92d8712

    SHA256

    00cf6b32a81c9dc65720ccaae9422438d4a9d0a10d1886a27461a6e7b1e651f6

    SHA512

    9ae69f617a2dfb8ee2cc6402712b7a041ce2398601c00ac79b6adb7b117aad868277dd3b7b431d8401741605ce93a88437fadf755501610d330e2375a5904898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20e2a68544fabfa1be0a9c8f34e476d0

    SHA1

    95809cfb95e46ab3fba36338cc4df8a440f3b1eb

    SHA256

    f796540c2e2dff15e9b4815a6d6a01dabf3de11dd47dc68956c788f36036aa2d

    SHA512

    756603e90cee7c4346a04a4a3f5eb8daf9c20681bb957476c76a487ffad6aa55efa4bad96a642cdcf65e006cc95cec9547c5cdc48928951eff8762e4bf0fa871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53223d616936d32ac727db0c4250e71e

    SHA1

    a3ba1fa0921868149093fec40f65f3147400a0e3

    SHA256

    9f7721f1378a3aee7c3b4856c927bdac1f42cae16f39ab8e3e7418e33d996a44

    SHA512

    0231ab139d2626cabb93b126f47ba4b8da046ab5f5c50b5a120db94c5195d6315f98c7f1ea357504459e429a482aabb2c7298130d1138c8522ca81c60d7726cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efef3a7b044bb6772f70ac6e3939c1c4

    SHA1

    acea106adb10b126bee0b03981a1c4962346fd9d

    SHA256

    34f432b02b7393b04f588f405fb8cb72403d6e7def0a7adff5ce03c96265188d

    SHA512

    73b5ba034b43fd91757b2d859dba490ed8a8566e9acdf7d1738478c752e35273619d44c7a6679a40b0e2e5dc39b43bf70f98c8605b76b26226f6e1cbf1a33eee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2188412202861615e4ba2a983f60b05

    SHA1

    fd29aa8a4c24983e2a4f3c28e028a8b81ae0d774

    SHA256

    03a6752ae5d61f8ec4a40d5fc50baa78c739ee9a3aa8231b18d1c3ef489fd469

    SHA512

    da7c3befad5fefb190caefab9d5dd275a16c1a69caa157b0ab155a35da6ba8bc665aab1d6986807b90a8458e6eee25987a074770aa9f8fc7252bf7662b83df36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b989034dd230cc13892a1f3d819378d

    SHA1

    07ec86f5e3cf2a0e0af048898f84477ca03a7630

    SHA256

    68aac3c09ea081590eb6edd316e32f65c94fdd5c961c18cecc992446b93df1b9

    SHA512

    3dfe3937e814458566dd38626bd57bc1273d28d13bb61341531e4f43fac36455962d9e05b5c8577bbbcbc983031afb4d613aea9b3593fcf454de3930d85caaa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdd92e56c7601b9c65c9a82767722aae

    SHA1

    27eb6f394c6934a9055ca4db8089d1e7d4ea7e8e

    SHA256

    9fc2f00ab166a6a9b156ef15734c7e7b193947e1dc2e5dbba1da6ef972d4b3b2

    SHA512

    e7c5348bf4bd07966f40658cb7942accea8750a01987b453bf51110514ca354d4545e0f40c708f1f0aa2b32a11f87fa2eed394b7ce2d9ebcd909f5e4b3344a67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8e4c790628afa7a8f197042e91c72e6

    SHA1

    641819b75d66a997a2609fe4677ec540113c37b7

    SHA256

    377438406be83481a7394078335a9f5a0fd231312a8c01fa1aed7a1d7195b46b

    SHA512

    6ad07b4c952df93e3719da3af13657737b0a7a558f1c4cb0e17095a40e8b841d1c2bea0137c8c9def568ad14694c28dedcf64916bc968ef03e72310045f29aa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e20a6382e84f4e0a7b38461ae2f27cf7

    SHA1

    b4417e1436e03c6dae532343e67dfacc91a6494a

    SHA256

    58c6109f9706dfc54dc711f8f7f94137e26785c7bd3d13f284bebd494ae2eadd

    SHA512

    ea87471ca31bbbce715f57ec8f5da437533882f27f04404b2ab9a994e82ca5b0b11af807e172528d9dabec511c4911f6f2d94d4c6b044ddc0d4e351adfaa0423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dcb4f569fd10e7b498e3837fe4dfa92

    SHA1

    31d8e22d71fb9cbe7a349b38cd27b35c12efa95b

    SHA256

    c273ec881513af99983914077b76d4b02f1f4f588581e8a8c884ac50c73ed48c

    SHA512

    2f3f4cac33f9dd3bd1151793bf970bd72c15d5b373653e301b7e3a708758beb1256719359ad9d26063fc32ee6fc0163aee7de34692f921734396627c640d9def

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24c8f7a5173342a122e59a6644d2f091

    SHA1

    5ad98ab76000b6825f77345b7c28726a6cb3c7ee

    SHA256

    0fde7195438992c1bdcb3b529452dd32543cc49ecd06c1c683340a412ce2ce94

    SHA512

    e113b8d605ce72029a2d8e27e2752d8954f6c2169ee8f862b7789a893a71155bd4cf3b692319ee2215a28a827132b28936be5f5319a121b72297a1898fc69d1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b056fa64e14c75ea788877f87d24237e

    SHA1

    aaaec29fa10e4e8680463caa46aa743308f4cba6

    SHA256

    669024a3ab6e4fe8d3575fb2324c012290f3a570064f664efe9cb08119de5728

    SHA512

    766e1cf4736b4f9697f1e81ad5f77ea477415980a25591c8be505518dc279f06e2e8503eb8015870f28459b74daa77af91b5a8ea4ec17437f8fe3c450b7e001b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a31e3a4881e9fc8439b2267db64b66d

    SHA1

    8fbda92f28bd334cceb1d4189c55b0f855d0adbb

    SHA256

    62ea354dfcacf3baa5b8101bdb7f4f0c398ad5acef1e95b840e94fcf4bf0e064

    SHA512

    d611abe91b11cc0f23458e162f323becbb99fd40699a79c89d479052f0b587801477e3973db273c819fe1663f92d7a4c81060dfe1f3245130ffb5284178787cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b63eec145249e81fdb53297a8a5d3841

    SHA1

    2fe0a43f7f015feffb1379f9665a0144a72779dc

    SHA256

    74b953a802021df1725140d2a2c1949065f0b10e75368c84633b95628899a836

    SHA512

    86c2aaad9406352ac31f78f03f334c833bb7f3ef2230b0d748b8cb7d01d97f07e6eb8c745d9bb71cc93bef53f948f38d0aeae021d7b542371821c9bd1dafcd58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a984464293091e4566a137c416bcbb3

    SHA1

    db1133b9647d1cbb703a804d97b20ad4d6afdeed

    SHA256

    efa587b66ce8d7709e5204f5b4f0cfafdb5e9fca3d265bc2b35619a2711c3aca

    SHA512

    f1d2323336f3acf0095b1f19d3e6a880d2f33a8fae9e8196155f3e370557569ae721f7bb7c5987b448b21a65d404d5cd2fe70c5fb248cc7a3e5c985a4f16bd5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1c3cd8e52b5631ac2898c1b4609f5ac

    SHA1

    f6d19ce125c1d337c31570d1c1cb08c0266fb3ad

    SHA256

    f9c990d016d72eb63fddb8ebfd2dbf090564c92f962cfb5c7aed262e424cf7a0

    SHA512

    0ceda3cf701de9add57ee3fa4b47e51d45d694fbc33cca1862a626a943ee3e7d3097c0a352ebed0295d26ac5a84044653f18399391274285bc8493d0aaa8067e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1ad713e47a2389d8aea824fae5b68e0

    SHA1

    93d657f600aeddca0f540726f29ce435b1aa48ac

    SHA256

    20f40f72e60777fb1e8343025ea3cc5a5b86006de48a9265f6a0960ad6f3dcdb

    SHA512

    5f2de4d8d160114cb8153d630e4afb24702eb7a39e4aec714a3d1c71107273956c08efecb5da91907c6880507cc413f48b5e6839117a64b7da6471af8700fae2

  • C:\Users\Admin\AppData\Local\Temp\Cab2658.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar273A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a