Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 10:48

General

  • Target

    299819883952c4e86676a38b094e3e9f_JaffaCakes118.html

  • Size

    26KB

  • MD5

    299819883952c4e86676a38b094e3e9f

  • SHA1

    21f4c0c4c3b6b1c6929483a6d09b7ea3cb06f560

  • SHA256

    867e33093efc796dccfc8d3c7dd32b5daef25f7be719b203d127023b41c21657

  • SHA512

    91ba9aa16674b740699ca9fc420677a175aa1f132cca9318df6c0d990a7ea79955bdbabf1a9ed09738e2d8ae03c45ab031462e1a5a1a6565cfd336c622b15cd1

  • SSDEEP

    192:uqvz73b5nhKnQjxn5Q/gnQie7NnonQOkEntQCnQTbnFnQXCJVevo7NteFo+NzQ4Z:nzQ/wygcZh5i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\299819883952c4e86676a38b094e3e9f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1788

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          19215c15b3e827c8dbc39f59dad339ab

          SHA1

          1173887ec50f90c9751fa613c46cf03d4a1fc931

          SHA256

          cc2a17f7f8d621fd747eedc5b5013a70452a8a686237b6fce4b8f81cef73c686

          SHA512

          c2b1d37ce4d67f715fb5488b28437ae857067ad16078c9443e6920a6d85afe49fe809b769423082d62f68d7478708fe2345cb84a58c66d52ebc06043544620d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          845f825446580d1eb2f9fb9bfa67b22f

          SHA1

          6687fe19b55783b5df0cc0c13642d965456f3959

          SHA256

          8da5ea0e45d8aa59a7c72ce25786aba798fe84050958a97553b7f21d410465e9

          SHA512

          7db18be34e40dafea93437bb2f184b3fcb72771d66efe62f045dc4e0fc7a3c232c60ae96ebd738335c28fcb726733e1d3c0dd1d36f3898952fe699578620ee5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          abb4618eef1d91ab8fbcf79c97fb8a8a

          SHA1

          2da5c1fa4bbd048d07a332e82a8ac30c5ea8b12e

          SHA256

          5c01147db7d8988772f727e66ba6733ba2a75db8468940060dd87cf5a2565bdb

          SHA512

          d87e88330896e8b43951ec8941a5ec5b11dc276ba0aeef5fbb669b26b9156ba9df4ffca1e7b1a78ec44934fb604a6ee39825f36ff7761e542b9fe754a5d0c07d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          034a12b124122a3bd177fdb9a1c4b252

          SHA1

          d1cb274978996f45b4f825e971fe9aeddf0def40

          SHA256

          0ee2760769e79e5262829393d0db8e9a12455f9c3767296ce0b2afca32d8dcdf

          SHA512

          ec086e15a922af9ae3d6c6a56a389decf42ef58b5ea8b378efe6ac95adbe9f2b7606f097c7a4899d449da12c4d0e657482e95a8ad6936d907a065e5b95fba1ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71eb39c3b6a68f12e74091f82ba4242a

          SHA1

          1d43f2a8e474ce1229aa761a64b1a810ab1c8f40

          SHA256

          eae24e8aad15be024973cb83a5737d824c9a4676d403ca99eefa0c23ac21998f

          SHA512

          19956cf1b3fa84e4856c5af0c08417926f77e12cb67a49d3517772b88f62ea52edd0387f9180e81c4b9a5f1c59b04dd8e86b1bca7d0bc694b2f5b8ff53e899f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4b262dc301b3c3a89edd66b229b075d0

          SHA1

          c061827f123598dce702c7bd623d9998950c9eff

          SHA256

          03796ed886da8c921263b21f18f57d23eef243a1bf4ddfb7ec5467feca9927c4

          SHA512

          0c532bd978e56762314d94eeb1a35cc34bf2df7c37edbc000bb5ad29aa5f89d83e144ee811837f04d897e91848cf60e1cd1cd1aa7b47e5a8c7f312e7300da1c7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9913131b7fce1a3a990f03412c555af2

          SHA1

          b82a636ac1dce6c4bfbf52544929d52bd7e62109

          SHA256

          d9098c0bc578eb626107727de6ad517171656251d7b6cc15cb5a92683b38ad76

          SHA512

          eba85d3308c5daa13168007c3c5cb6453c9f41f536bc88d3c8459bb582e711b6ed2b2dbce403b75a4bd688aa37674bc205f77ebb7018a6bf69540e01cc8e3e85

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          588a92792341bd44267975a72dc701ca

          SHA1

          bf2f3ca4ea2eb96dc41d12e49348286fde0c2267

          SHA256

          650ba5b206ca0459a379c8a372a7622e2a1a8261bb8c7a5b28f0ec917c19455a

          SHA512

          89fe41538c74fcc6e97f7782154cf10358040eb09540d1c4d9c47fc63489f1bdf82287964dfc50d3b3b62b60f9e2e5e78002b6a8158671993e088862ab67f92e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          68f10f7e5c1308d2c11209832049ef91

          SHA1

          293a00dce47befa1b8c74ea500171a6853bb2fed

          SHA256

          503c9c6e78b24b773443a485f487d0d383c5c7772658547f67b25a8e9efdebd7

          SHA512

          2420886250cd3c59c1365f05e1a63639c1d860c1b6610f1ac576c8d8b030cb18f93a84bf7d45b8cf5787f3d260a74a3feca60f5e26f9d79ee477f004ddb9b2f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f4f58648adfdb8aefb54e2c34092d09f

          SHA1

          37766193ae49d779ebbedd136e364084344913fd

          SHA256

          d7c3f2c06cb5321c1ee4ab777d461207fb41ba19c7d89ac7edfed9e0d5055413

          SHA512

          428728bdd6fd7bcab18b9a0e6a819ec7cd4165219fa9b202d8a01c07aa2e31f0e99a801fc6be7ce553bf0bb4e028abbf022f32ac84912a2988b57fbe01f43ee3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66a4698cbf6a4d196267bb135383d487

          SHA1

          356979414df8226d6ace8713c81d5cfbd8d9d098

          SHA256

          56d8881d5fc7aa562e6a9e31b870e338d21274325b38556ca155a7fc9b651b16

          SHA512

          d974a1c88d3c15866d529f1a5bda13901ea770a9cb4d7fd6c3d34e8cab2ee9d4aa945e68819f83783df2a451e44b6e1fb48802524f5116637d3893e52fcce640

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e44d836ca7a567ed12f7bd022c607096

          SHA1

          8a2cc05c9b454785ef5a7d53758972b1d8e4b802

          SHA256

          399bad2e876f167fb7add56fb48113d7da8fab3640587a9751ada274ab1f6afa

          SHA512

          c51c4b558d6957c22621a325ef50e90b61418fc1f3f6f8e04ea201d37ade02a839ae740ea99b30e695618a80e8aa45669a5ca98dd7d613c5c412357de0339562

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          70e5ad270596393f24a99c794e11bc31

          SHA1

          44e6dd940ec1f81a3ac21ac55a2e93945cbb306e

          SHA256

          f4067d85db06e8b4ca71cbd3e826b9de885e9fed40748afa3c529316ad97c6b9

          SHA512

          884558b23d5a62f630b744b5627b9ceb92e0acfd144dc36cb4d60aa446d2ce7c349561b5ae5fda435417ff42230e22b80f22147df4350b6a9aef674242b5e528

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b7f3a303b1fa30ceba42f2d8965ea58d

          SHA1

          2119d3f525bdab2e5c629ee136f4c467dc491010

          SHA256

          29edb1a802485b9f0f785c6d7feaa933f54689c44cdc732739e3d2dcd8349fc7

          SHA512

          fa2a335c1fba9e2e60ccd71668be1e39d5a4430257cf0c0f96e83cce84f8db1e22a50ac7f43b1eb4001dd02a5e820e4ad0d5fb1c44184a05cab5f3c3adfabc01

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d868b43929c12aa6f1a727d7e40ca646

          SHA1

          9ff7766e3927cc10b921042efa25dd58da2cd2ae

          SHA256

          9a732545081ae9a0582b79eec2d442b3030867e8ad5c6d1c297334879e5fc074

          SHA512

          1fadd9affaf0c3b8c2a95d934935041752a34a2725b72d3b55811d2ee1654a5719b4a917c1320f1113dab04053efe86ae2b2e9c2a8b78920184a51d8de469e19

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3349f8ba9d393293a87a51719d7ad42a

          SHA1

          bd80029029be740b784204d9d07bb6c5506cb43a

          SHA256

          d72421716e4946fd36d56c883114d6f223cb4a43d046374da8f9edcf3b60d3a8

          SHA512

          14148e3ab878c686e5bd1866e33fc6355911107a624e647c2d6a534052832c27bb1ef81219315023bca5928bea6bb75dfae55f6752d104129b516a9dfc3f94fe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ab432be98f3a1300cb8e790652b5174b

          SHA1

          78da221da477d656df9bec397ac4a71b25c4133d

          SHA256

          f2da52582aa0f3af6778e9693d8dccfafce579f98089e2f072b82a13111eb41a

          SHA512

          b86040c6fef6afe827fab2c405d842103b55adafd130e9f2a3ff9ca67683096be80befbcd4fe1a04ff31d5dd2f90b0b2c89349e455b24e673e913dd584715858

        • C:\Users\Admin\AppData\Local\Temp\Cab2CDB.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2DCC.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a