Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 10:54

General

  • Target

    299e728c9e3b6c494c710164e8669d63_JaffaCakes118.html

  • Size

    460KB

  • MD5

    299e728c9e3b6c494c710164e8669d63

  • SHA1

    065f19ce35e45c84111cd45f7651cdb3368c1b69

  • SHA256

    7c6e792473daa3bcabe13235feec789443312a6322704ad14cfb4f87db7c9880

  • SHA512

    4ec37c726c8fffa8aabcbebd48aee81d72354678f2cbd132f5da2cb62cce26130dbe999263d4a46b65d8ec9c52bcb26b72105278bdb5caa1ac50f071989bb429

  • SSDEEP

    6144:S+sMYod+X3oI+Yd7sMYod+X3oI+Y+sMYod+X3oI+YLsMYod+X3oI+YQ:j5d+X3/5d+X3K5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\299e728c9e3b6c494c710164e8669d63_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1488
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1488 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b93d200d47d1918e544d5d1b42835ae8

    SHA1

    b6a7b41aac3a8e42b4d6764ba1ee3a812b99516f

    SHA256

    e892547e834bfe72b89dad9a366a407a2d3e798661f7b6b5cccc87a5ada1bb79

    SHA512

    deed2553b610e40352db49eca56a33acfcc800597c854be8d0c1456e1aa899c50e3be0a5da31cbdb14476ae5f2a9998061504c17b0f42964d12d86f7a9496128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2daf23cc2d3af9b263c821a4f1242439

    SHA1

    3263ab6dfe71e9f2f79c5ab283904cce6f1b4c2c

    SHA256

    2d830641b6a99cc19f69e3d224fda1eef8b3e624de4451c7904c1b08808bf2df

    SHA512

    7215121d043c8892a5d7e7415fb927c48ad1cdd9779323e358c445581933e84924e786fccde8707499261371acc2a74d4a11dd77c18b603afbb2d5934540ad4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    249be7f448b3e1e90860becffa0ff39b

    SHA1

    bea735bcbac9fa0355f8247239692c68717d7824

    SHA256

    63b232441c58a70b40a3d5de50ba1eb7c914c19487a5976ec1e743f836653280

    SHA512

    b5a47d9f80728805c74b13e3d8715f8d370e5b1aad8ca5dfd1ff68802242e74ee8619befcc2bf364acc5d71ae5b03d6e64ed00990468950c6178c7ea267eed25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b909baa5be4689554dd0012ab047ddf4

    SHA1

    9d34c193618e53958dd3a6ec91459f0c8587b77f

    SHA256

    58aa9eeacdd16318e75a43553fce3f71742b53cfc9741ab6d23ab59813841dbd

    SHA512

    46cf5e356f4b582269d68425c2ca2dc2da463b9e06ee3cfaaeb7af1862ca455609d5aa8b6fa9e73faa06855fcc8fe428874337e5c49241d8659fdf5fa9fa111b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f364752e96f8eb8c7631b02a75b9910

    SHA1

    95e4bcd76d353bd9611e1fb0a0c3e705361e6ec5

    SHA256

    255afc39b9338cfbe1e02e0e64f8ddf58da6eb18d3c02eb71f52d600d4314658

    SHA512

    5a4f3599c23687e5575029b0caed16b1d759ac82beb7df1d797e65917f75aa484b76661bea53433c5d13791c9f3359fb643a3b95bf72ac5424ba757887b7dcf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bbc2a3fb93fb443419f5032ed45f9cd

    SHA1

    06e236311c82b483eeba5b9ed3d431533513735d

    SHA256

    a2963f933012f59c8d33556679df8096fbbdaa5fa0e90535e34556c85f87510e

    SHA512

    3c7018a65a47ed15f7c4493e5f6f953840a0c9cf5537495c9a9eaaa27722ac6cd06215ca46f2c5b3eacfa35c18e1a84caf013cb08ec2123e1fd3f2a3517ac83a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    baa8f6d0b9a965d1dbaf75a6a72ae215

    SHA1

    dc14c7cb83e6e5b76658de8462a711e77c69984e

    SHA256

    6d439c40ad3803e63282990860e6fcb366da8d708fe777f16944c213bcb4f05d

    SHA512

    5791bf370514ae0ebd02c9e3e6d1032cc76e930a97abedf0ec08e5ecd26bcf3396fbccf3b034b7d8a3df9d22ea5402fa4d63366fd103844cd10d0417b0efc739

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6c64d2db41815b408d4c01d652e2675

    SHA1

    3fa822b70718baeead352c15c7eaf1172b8fa9af

    SHA256

    47d7ffe315f8d10979b904cc7b89ebf7b766817378d26b87bdcd819c54ef6d1d

    SHA512

    fdd0323de79088e68787f02828ef52b5b14118783867e93a9ccbb8acfdf896ac6bdced15ddf04ab2f59eb35af4373d5db310c6e889507732bb4bc5f85e4979b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    893de54c0e0e40de2b20a1897b3f5e55

    SHA1

    6d4f0040da4bb128cecc6a70aaeb124e403714a8

    SHA256

    c06f88fb04ea9d56d704f36a8da91270b72858b4f640b92892dab80a9d74c67c

    SHA512

    ea0b9a247158c57127c8b757dd949710c55065b9c6571fb049eaab44360cc8a8f505ad8b1e27cacc050936fb470b8d6d40e9b9cf083789c6cef3c46c2763e72d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9b8917d63d90f17b3be5e416ad743dc

    SHA1

    41bfe52f29b2b9df6649cd6b7b46bdb3fc863379

    SHA256

    e572e3b64ed1524e9e755e194c8b3b02227bd7c526ecd8b7848cbccc988e12a4

    SHA512

    193875d44c5c03c6f3486b4198c5aebd5abbf9e2fc81d30441ea2b8079db4fdc23a583df7b0939436f421ae1978b1d4737d4cc5f8035aefb13da241441a5b8ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28c9992486395d82689508ef31b5a4b6

    SHA1

    7e8e16204193b8d243a25435edb2d3c5c8da5068

    SHA256

    b8a544adb9b5efe2b722d1bb89d7a5b04b47bc770e1d069679984029bf2cbff2

    SHA512

    6a6d8dc3a384f2ee8b001aa0b2413da7e33ea3e8627659752ce932aefd4f4a848893fbdea9484e45ab4d38b3834445cea5b30685efcd86749beec8166966a874

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee8a3083ece527f192c09245786831b9

    SHA1

    3f54a746f44570b01c9af21db4a2c18a158aad4c

    SHA256

    378763cf3eb875532bdb078de844325f6973651cf7c0845f8fa53cd33c7d5cd8

    SHA512

    0e818dfa75a602f46e80e258b4e185db40e0c94522dfcefac2ce1c6563da086df26cc98d4381139e29c86341aee68442d2c07a0949ba5a2b0d8c847766c261ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68560a11b93d7358d1eabd625d153950

    SHA1

    531efc678df5f6178ec81196a9e595000b51b9de

    SHA256

    83743349555681e5b57d28c9614876c091798405325b5efc7729e469f1abefd1

    SHA512

    58838388bd8f5dce065a2072fa876a4c3879aebdd133a71172b6187e99d69a8145164b7d7c922cb721c300512765672fe45bffbc2adf9dcfc273cd4107b61f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    223efa037edc433c8d575f3a930f4d1c

    SHA1

    523820a92504d61c71e70ff0980e93a67ae1c711

    SHA256

    16f40683c28c041b3deb8dc00ba660139c1dbc65c92572f12733b64b41c5cb6b

    SHA512

    34545f512bd704f16c5c6279353f34000ac8c8f1d6d4410eebb85d5631fd1790007b0ad8e9e3390b65cfff1e23a83c645f4655ea080a0f863a998cbe22046a98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04e70986b82981e6525eb467ac21f870

    SHA1

    15f5d6f7aba7c8de14f749a1cb2a4f3c1bfbe640

    SHA256

    4229deb550241bcb7cafe1fa13655b43c9ec678d4c9ac234a906f6341c0a60dc

    SHA512

    35989da0d9c9bcff7d53750175f5ab6e82dc8e8b480524522d6ad0afac460a944734fbc3299348d85657abea6a7dc7259349b78edf0503cffde7e8d339744f0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f67b241826407f888a6986b1bdf61b44

    SHA1

    a197985ebbde78842643e6d9eb72aa40d61b541e

    SHA256

    b04bf066be987f2b54ecabf41d44855b5675303b4ab903ea676da52ff4138810

    SHA512

    f6aadb4eacfaddba9256e4e906118e7ec20496112bd6e57053f92d6f1b135dbdab1e0676b69a5064d0c6bc7f9803b67fd9aad3b4e2bb9451abe6796eefa24d78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b51cb27ed1530f9dacaf5cc28b8acac

    SHA1

    99fcfe7219d6e8823ed59fd4da071d967a2255a6

    SHA256

    a6d4ddf64337508ad49358fd54d17ea6b1e6022c0e61aa9fac897a16485aeb3a

    SHA512

    1ee53c98829bb8c6f5a55580fa53dd165a80a0da6af8d65333596878b5ab21af03de95f27fd34f9bbc648dfb055a128e8d1b0cba69046db36168a8130e208d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b897a5769cb8d1e11089d3ece98f75ae

    SHA1

    53c2af343523e71453deaed9f21f5f6670c687ca

    SHA256

    4ff7599a7d0705d7bcc2f847ef17b478bb4a50fac9badd5552fd1a175354f4c5

    SHA512

    2b19b5c0af080f4a27ed016071143436d0a0e7436d1f07bb2d6907834548f13cc25ce80815e7925762d56cc4e01bd2fd6a4ef1db36e5918a373a7f691954ea47

  • C:\Users\Admin\AppData\Local\Temp\Cab3ED7.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3F28.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a