Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 09:00

General

  • Target

    293994bec3390184456fe6de114a15ad_JaffaCakes118.html

  • Size

    20KB

  • MD5

    293994bec3390184456fe6de114a15ad

  • SHA1

    ed423a16c3a54cf2ab0a9a18a2bbfc46ed9fe212

  • SHA256

    12dae66910e34d8208b8e01fcaddcd7cd7f0bf02c047d8352c49f08913e2fced

  • SHA512

    7a063cbf979982491c74ed754c8220a894d88f6e12903912ef70f97014098facc99574055b670cd4eb000dff6f4dddcd04e9a8b3cf64963169e62e7c8b802c2e

  • SSDEEP

    384:tpU4N1G06Os074RaTc7DkM/ZUheVe5du7D6:tpUNhOh031OYVud+D6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\293994bec3390184456fe6de114a15ad_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ce14fef1f6427fe38d837bd30a02416

    SHA1

    31c35efbb35ab9ec80d8e98dde80211bcbbeeb5d

    SHA256

    87f18da147c4ff7521dd1e4ca188d0a4690ef20eaa5cc49797b1c215c9bdfac8

    SHA512

    23ae3e99d31e48750168377e9aa718d89468c6aabb5ab2d10f7cf0a6b6bbdfc0f2e5efa18b4229d088505e232e86e6fcde178bd36ba5914fd6c72674e36259d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    369d8ca1f6512d08d57e77d952d0b8be

    SHA1

    e2435115209982d2924ffe9195068d99512f576b

    SHA256

    3a7a6962c9dc4b8737288d83cbddcefb1e684506c959e3a5398f56a133491d60

    SHA512

    23b502c17ecd9d8fbb8a7c4fd267962e10880d35e0b6a579e0fb39ed48f0e82d105f9e716fa2aa272293c10b4759d6cda041dab8faf470c31b1995e3ec573471

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69086f2d6c4768ff227ae11bc0d9f699

    SHA1

    ef9d46acaa26e16e3e87aa249cc5f9ed78b911e9

    SHA256

    a5b5d47a3483cb8a67fe3c7e857cbaf8a5348519ef23f0ce281eaab36c74533f

    SHA512

    944402ff844fa0a67aec5d036a7b2275f3140641133df0decba335bf431566173e53c2213f25b074115b1aa90bed2afa9d85189e86e04ae317ed207e9d1aca14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30397e9d9345bb8940e8b183c72f34d6

    SHA1

    e3ff20162c54c2449299439b0e8f23f7e9ceacd6

    SHA256

    8106464c156436f82b1e3bbcea79e3ea5881817112b49587448b8f989e21864f

    SHA512

    461d3e17cae87f72d03d9baad16753fc3811a00098cd2a0a618570843dc583e29e9fc222c4cf8a5f1d2289d1837db849d6994a3986b3e1c471cf153fd8edec65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69ec5e0b38cc123d9572ff9d017dd95b

    SHA1

    79a334daa37b92b99af67136c02d8dbdf552e275

    SHA256

    b61c12cd1992e4b05e75cb6c5bb872e40fef5272232b9920c0b92896138a90c9

    SHA512

    53090df7e3bd16dbac9d10606221c22780ac5ed9929780ff108c41c2782603da6f5399497bdea3f66dd105cc974e0ce4d33069aa00886deb602241c44022c910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4a0746ebf51c04c4139130eb8ae3a46

    SHA1

    3a59eae9cd635f48d53cd01d22fbd23343c19af7

    SHA256

    911a73d76a444240d693096d2c2182579390abb08f0dbc6a320280bdc58ea741

    SHA512

    982861bbb586a19c25bdd0b2b03ab07596675e858720fa6ca54785b55bdeebe5f92c0c0a1423de9ed4f34b0cfd76434fe86272e1cafa87ccecf48e711d58b1cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d3b85a5744a27ed52a6c6a0081f76bf

    SHA1

    bb442db6be109ff9438520afcd0c2d0444907fc5

    SHA256

    b8022454581527343ef5f11dc2c49afa7c2e8b8de1aaeb71085d61bfc19527c2

    SHA512

    fb8eebcda97b70f7c993aca43420bf6aa5f6c3dfb817b1270b16b55c974e956980da24bddf0c7c2c0d9273790f2f553c86cab3afc682cf32b78df314b80a7431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    874ec6def43e3897972b79bfd4a49095

    SHA1

    c1b7528288419ac2bdb8cc696f44dd64c0086c44

    SHA256

    b037f64ed2e450c9838d58c6ebc9b9f5b2c281c60a804c0ed9962209f45ea889

    SHA512

    24e5f9ceac7fd95537268ba77d143815ba7772d8b6083fdd203db14e47ff446d9967d20796c315189b0b8702f464135fead480845cd7ed18d5141836450e84be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fa41aeddf1542f8150204d8e5c6ad25

    SHA1

    f4e3c4cc287c03d8e0d1c496fc264a6b30b1724c

    SHA256

    2670eef81cb47f2f2dc4ac9716d17e8719ceb72e378be8016f2662f24d712c53

    SHA512

    c972a79419dfff843318111bcea45a87b412cf64121c068525ce2aab125be7df2ebfc977991f20bad6da4a37f2a6fe003595496af2da3ca31c0e66e948ca55df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c071826dba3ef601913d5498e562da60

    SHA1

    997f5220bcdfc85fff2bbf6a33e7f81cac1b7221

    SHA256

    d956de5e4a9ac9e9de9108d51909fbcf9942c8cef0b32cdd515be19651f21bdb

    SHA512

    3d1d35245722e48e5873e25a85e3b957e52ce378cb427718f64d42423785a2ce63b965b1d75367874c722ca94a1628d1a00638d38bdc801dc23ee0a9a07e7e4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e12303c461d31c6e6367962929dbac49

    SHA1

    d18276421688908bd829f76fb2db299e3d90aae1

    SHA256

    5333d4469cfb360c45236fed4a2b8c0363b8e86b9f6592583c566d814dc207a0

    SHA512

    2015bfd159e7dae7c6b4b298948547ad5e8a83ca2d0f5bdca5b62aa91b64b56f55effbcd20ef4b4d9405f88ddc8d55f410e7f2049a09879c03addc4ec55b826f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b114f76e8d8c303ff0b35d1a0f780b49

    SHA1

    c60fdf48dce0fed79ec095a42b77533a0bcb4881

    SHA256

    d23210701aae0bf0dc1e2b2bf55ad2863140ba6f0a1160084992599eac815372

    SHA512

    340a0fecf53bdf92441c039a78b7bcf54a8dbd8533638cab9f126d9873f2401f7a1f67a27a6384b6dd0683a732797b6be1ca765783c24ab680a9360075c26209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5451cef69ef2b07dc8afcd335d79d063

    SHA1

    7b19d1539946f0b274d799814f3a15df75647d97

    SHA256

    84bd0a2620141cc4f4c79a187e56ac37c8e7a8aa11dac6bde097f41eb301a626

    SHA512

    996ffae9617cb837f0f0603dd4c25207d2adddc37b816882e968bfd2a46f6723d0659c015777dbb84223e6a44ff95d7de74ca8cf2368e411ebcf2015fbc7af82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a8726a50d514c6cdfc0e31ed782eb08

    SHA1

    760d136861269075652e297a503a18420f0a42a2

    SHA256

    ddfef74e73688e299068021fb72d70eeff65ba986d3a946c650e994261badecc

    SHA512

    39e373123e091def001ce8bbc6927e2ecc7b699f8ea970f6b07c0e4e3e376710c614e779c99ab50491254c7d77012ba2489f48bf5d0b72d30d9a72b203c8a55d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a04b0edc6374ca8fe589a207776a5199

    SHA1

    7e88fe61aafef3bcd2e4a484d711ae87161a1332

    SHA256

    d8031a0262fa2b01c3f1e0443aa9380e57e4fdedc37512f13970c562986f2533

    SHA512

    adaeaf7863a4f7dd8ffbf0f9ef2cd8cf9e4ad402f8a9f7c7e623b821d855c2fe9ebf7230330b21560f1a91625c0a7ecfb29fe7b43d963ddfae95e9ba1afe35e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00c660a05a37b0652d978b621c17fd9e

    SHA1

    86c7ab55cf17d05b39017d4a6fa3bca12897633c

    SHA256

    81b5e1a5a18255a20d64857ae42aca9ae65b7adadbd47f849ed34ff99149b296

    SHA512

    41faf108f89837ec433097dd5e88772ea305c0457cc94499a52e82ad4688c126ca312381b727293ff8547a07d32be06683c602013a8c0c0d1804f8c01ba0b37b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dede075a8d252cd06af06b559787993

    SHA1

    dcea12710598692f70ad97dc65fc5b2967500465

    SHA256

    1a33bab99da9c2aa6d01d2cff505260bacd8ca96025cfb19155d3f0afd28d783

    SHA512

    b12a950fe86eb787f336a95bc8f0047455c0410c51d4defe678f499c7cdc845314543a9a524f04c97db1d534726138a3fa266004682ebf75fc4e610533deb3ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29ff8e35ea3ddeaee225725790c11a2e

    SHA1

    ecdd2de45861c7d7ae24fa33e2fded8c05bd4aa3

    SHA256

    1b5558c796084308a0a27cd22dece89cb08a08e6fb867452842bb06c18ebb51d

    SHA512

    4ca0b30c87a319f15f975566145fedc81d844bb21a5ff77d9aebfcd0593a35b65a74253ea27b5af139b53d0917c129e0596a214ae9092c60940f9aed7bfdf076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b8a0d69204916c9c5c6b805cf5bb3c4

    SHA1

    78d99ad1138b6b55375b9e3ff950f67175ffd0d3

    SHA256

    84f5bf4799e87f2f69360fe786911b3598acf727530e3f2455c52a80a29e7031

    SHA512

    576a59d43b50dae26e29785d9013d6427b19d73937c17068da4ba071e0b3f2ba9dda577ec76b32cfcee50f788ff98149211e44210a19fa3dbd8eddc9137aa89c

  • C:\Users\Admin\AppData\Local\Temp\Cab259C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar267E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a