Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 05:08

General

  • Target

    286d330490838745057ed73de837f89d_JaffaCakes118.html

  • Size

    69KB

  • MD5

    286d330490838745057ed73de837f89d

  • SHA1

    9649e85cec86250347857e2da8f7d196518c5c14

  • SHA256

    178a1fcf981e43df80a67123798eb1831d96a30c63756f97c67708db0415ea27

  • SHA512

    7c49f61b170c4269ad458e8553bdb7f8cdbbe390c81c8cda3a5dc19caf0eff0b2869f9deece5ac8b84aef19ea836cff1811cc5f08059c349d279f4829a024136

  • SSDEEP

    768:Ji7gcMiR3sI2PDDnX0g6san6uzB6HoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFf:J3eiITzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\286d330490838745057ed73de837f89d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a3b6e3ea6bdb40b1f760bfebf9ec249

    SHA1

    2397d0e805b90e39d5ae19c3921c776cbaf135c3

    SHA256

    43a79b9966f2346907660f1a3a06290e9971b37c7856fb858e403ba7f9aaa9b2

    SHA512

    a8d4820eba832e1587c2d91a26e2c9e85802e8216d5e9dd491eb84768d85be4688aef59b1cf4b1ef4cc4b416f0d5128c108a86844806d60eaac49a907eaf9290

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4f33eeaedd30c6c66ccf545c7a18fa9

    SHA1

    755bea41f2e239694c7ba070673bf8006c63e5ee

    SHA256

    8b1f81a9ad62cf834269c0b8f4cc465b8501043ae3cfc50dcfe885bbad031e5b

    SHA512

    c00220ff525a8fe1c3804e37ceadedfa79e536aef7d6789137746ac41c0c12d2bc0e4bd6cbe36d5ed5dc3219dd460aade33a84d287ae0d5131dc85146052bb1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2970ccb945ef50efda637beb38709652

    SHA1

    6caea69488c59bfef56805c738186b33666ceba2

    SHA256

    d199a890bdf7080a4d564697cf9fee70f3055380cba6e7ac2e74156cf4425e45

    SHA512

    8dcf0bbb61c0f106e7e1f1b4c9340f566877e28efa170b5f2a8f6b5a7dc405ad3b3e69894cdb15b453d994af1eaa0d77315c3240dee4c7ecf7e41fe09b7f0ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e83ae8286c41e7134319849a12006804

    SHA1

    b3b90c0724e581cae17433154474b496877c222e

    SHA256

    9ea779761103df81654fd799ed65a7ca487808e8e9416b5a633934e3d762584e

    SHA512

    3ce2c226b77b259330ad0e34d942e99426096f4cf69afee37996c36ca4723e5bdf04dca5ccd88261fa950c2ccff054ac8f059d94db46f17cea1fc8e9ad6c1d7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d7d311f1f4b38a546b0f8bd84f080e2

    SHA1

    ba9c3360b09b11392e4a3015fc5f39a579bbebf0

    SHA256

    bc4bd2cd452fadf580ab03851cd53711bcf493615425214580005fa93217889e

    SHA512

    50151e58c128d885557cb490b4c19b87be76aa6daee9fa8c562cd6db27ae7b55b9ade89c6fcfd3427bfe9c7f0932c3d5e069770c8dce20a4f546734c31602fad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00856aaf19b566257b5f2848fd6ffddc

    SHA1

    25145bab0887cc9579eec97c6b73c8199492dddb

    SHA256

    457cfa3e438bcabdf8859b21bdb716922985621cb3705aacd0d1032638641c1b

    SHA512

    b5627814cf45e868ab0a14498df3e407d5de39575a456d2e1a45d594322ecf6894b55765f9ff6ee1eac029af0dfb4a595f0a98a46942c474f7e61c7edf34e26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d624e725350e3984e83c5846f9b5830

    SHA1

    321d5a49da4e5e082bceb0d18decb9fc3220454d

    SHA256

    abf3413262d17c0f5173707bc1409fdf8edf55b94581c5181fd0ee88d880619d

    SHA512

    3d4ad1d453a36ff5495ecbc4b17ab27abd53e51b35167588a00bf8072d8e620981edf0d19a2573b5e012f95fb62deced133dbf89733229af0cf7a9e9598f84a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec9fa363950bb3c87c8ab96b5813d788

    SHA1

    a9806abd52186b38d1a1717f113db8204f630502

    SHA256

    8e5df847a8a02820914f14b796cb13af611a704c185bddbc3f05f0ccaeafd543

    SHA512

    2d32c975ae0abccea3cc04c63f9f6f9bbb59a7a1c835ac729c4f58aec819fe187edc3d85c653576f8acc4ad2897782d6d781775750f9b961232e08bc55244352

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02e059a21a09ae233683cc8807e23d8d

    SHA1

    d6ce83f220ad64393e459bad880362c35c1a0782

    SHA256

    b17e72de8d1f1cd0c4cadad5c20513ae818291d78b5add6f3c1a9224e922d397

    SHA512

    48a9171d802f900e15bacdeedbb9e2f20a8b120cfb5c196404f58d7a497e6d58bec9b9f56b97a7736bf9281f01349af391a227a9422e1abadd01fb097b30c81b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19272b462d7743e1fd5c167e8c3316fb

    SHA1

    e73b1c4b576421ff1def7beb76ad721f3277bef8

    SHA256

    48e35acc1760b1a9f5856b6548b945d818ed57be699dd918d155390da3c93ba7

    SHA512

    bab91a7781170aa25fffb6142fb925714fbb1507e09fb8c9c3dd8d5ce5ac3baa378c1e05ffcb792c4fe6506adf0e11cdc11f472bc9d4c412da1bab4138602f4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4cc417ad741e2679df5ca80f253e443

    SHA1

    a1918b91fef78570dec8e805fb5b148c5ea9e2d8

    SHA256

    973ccba16f50a8d0886bc7ff6a3e65366cc71bb555a5c13bbf67c96464f48e19

    SHA512

    14c045f87c40f2096b768fa3f98021d67aceb7f1fed135c346b35eed907bf893369f253a7844dd4a8cd57a9c4bdf08af7cf0309424d5532890e56a5b8288992c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b9a4be09f0bdbce43c7ef10d7165242

    SHA1

    b6b6f20164751fec6a61476e6c6686dee440750d

    SHA256

    9941ce06e5d845da4c5fc016822651abb7e703d68a44718c73f4d22314338a42

    SHA512

    12e2f3d7e652a1130b32b29a1dc436ea09fb9b112f2aea207fb4ca222a49198c0304dc7be02b2bf530fdf52c38e3bedf21f476cf3878a972896c9a7c108314ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    717a2ab6c05e87d90e474a1982585deb

    SHA1

    f229b10c2b8a12dda7f24eddb5e39aad2f5bea86

    SHA256

    452447880a30df6c265d7f9f40fd2e1d25c9ed9da8c37d5d0b449e4c8ec04727

    SHA512

    e804d11e74fc2a30ba20f3c19cc49fce529fffcf46fce32771237f5615915fce4e47803488584373877db4278149a19e23a27563e8d427c7dbbffc5800591c2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a6c55f661acd3f894077f96182d1746

    SHA1

    34dfa98b950085854b1697dd959cb4edf72e3642

    SHA256

    329e19300da41e77ba8275dc6b0e4243553612e636dad7a1f47a6b8bf9b16ec1

    SHA512

    383d5eb6458d28c2823a28fdc7e227ddbc90f067b83aa5990358fe4db7372f4533220e00e67e8a96728e1f714f130a414b682e3d36eef9f48d5804345e356923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dcffa3806c4a59677fc91b7d3470f95

    SHA1

    9ec4c38c922fc4fc41f6b58d005df5a940d9f397

    SHA256

    f134336c489c0f126e4cd3ca23b74b7485e301f76f4dd92bec05f34f4d67760f

    SHA512

    57e06f8379c02050b9529ad417cb6d3450494f9c8f071ec16ab34b90d9943c2f704530fa9454b3052a1b3bd2758d1ac671722547e974637776a9169fd06da34d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57be4ba149352c3aef33cb5e9e68f7af

    SHA1

    e6c891907c5011f3928082886a6c47bdf9bf0c7d

    SHA256

    ca7f9e99cdefbd5f164f979d1dcf44bf92bed19966a4eaa42a6e4d2c316635d5

    SHA512

    006930c90767d5c46fe3c3df05f18eda9f1e4fe659e653250bc2b3ed950ac41ca131f2696ba243ffeca2e6e6e01b1f79f5475825d807139e8bcd3f4c9bbe8e04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de98ea7b3d7997faaa113fd33fcc4ece

    SHA1

    c136f970a1515c2df70c302f131791e2cbbb7832

    SHA256

    e0882234a610f2f292f50e02a6c00864cfb5786b33e54a2f7f162ff86656d2b2

    SHA512

    bbf47dc1c465772c867bd056ac9ad86d29f7cc7936cb89aa001593eb35745f37cf6bec7bd92def30985964e1246e03b15b2499b84753ed71633a26459abe7990

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a35a199847de025024f6b80bf58db67

    SHA1

    e3161b4a11e825540de91c386d779ae372604312

    SHA256

    98c124b15ec03610f3ef63837c15e88cc97d94b763a1554b297f9eedc20439aa

    SHA512

    48dd05427f472e272a31127679e87a2f5cbbcd13190d4d67a836d0ada0df6b0e1b123f19a21b80b82000f86c567a462e09482ff5ac3fb2b0ac6e2be8012bfea9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    389dfcfa4b3e20f776dc83152c3cdca2

    SHA1

    e0f8de36c3fec6fe22421e0f7bd7424f0dabad12

    SHA256

    39a9feb59e00b941955c5d106796c141dd032133a7b78bb9ffbae92b6e7dd6ae

    SHA512

    0fcd830eda2fd3f24ead5f81f2e006df72e2c35edcbc1d2eced3020eb810f4a3a9ab6737cd9c67b22bbcf37cf553ec3e383e6b1f46630f6383099540d658c02d

  • C:\Users\Admin\AppData\Local\Temp\Cab2B27.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2C0A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a