Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 16:24

General

  • Target

    2ad5bcb9d5a01b441ae650392bd3cefe_JaffaCakes118.html

  • Size

    121KB

  • MD5

    2ad5bcb9d5a01b441ae650392bd3cefe

  • SHA1

    7fc751a00db682d4a860c18dd95422d64d77a450

  • SHA256

    d58d0a0f1e57d853230358cb1bc07b0d840bbdeb156866c2c5ded60c470791b7

  • SHA512

    b6a2ba87a716eddc747cce258f945a7e71d5c9799e16338a3df576dc231f33f83fd582209c60670a39acfacaa8be0533f235be9961b712e6b222b1789b4a3fb1

  • SSDEEP

    1536:iPhm5ZXbyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:T5hbyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2ad5bcb9d5a01b441ae650392bd3cefe_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ba6260aa2b16ef15192e232ebd750f9

    SHA1

    5ea035f82c5b6508744ed194908818893c6f6acb

    SHA256

    8d5d4b1926785b31aa538c3788d5fecabf03624d80ec971a2c07e3ed93e8fc09

    SHA512

    6233b7de78e12eda4833f57f952ecd17669461ea563dcc52bf0305f0f0b318d06d4579dcc7c88f537b55a63a3d7292d0bb05cd7dd1dd6c8164720d21de87a47b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2afca0b1ad72b4cb0f424cede8237846

    SHA1

    892d4b67195ffba00c41417ccbb62e65ab2ed2d0

    SHA256

    61c77c48b0c48e0ee89ad44f0d36038ef788c9fc74220de0443343ff8e81dfc1

    SHA512

    de69e85e5a9296343a7d6bbc444297646dbe3a9a2bc17a5f12cbb6d69bf56178f210dc75a30b996ada016ed144e018677f71eae228b244faa93a57b7ee55bc0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4c46dd823b240fae8c38a63944eef6f

    SHA1

    a7afe3a1ea6e506c81bcee72e5b56707071d2948

    SHA256

    8ef92019f08167434041bfdd782d18469fc5e2f8bea09420aa3629815e1f70fc

    SHA512

    e03eb4dcab50d7baf5dca757e29c2602754ff0189e1efd6e6334e97e952ab68c6d2a66e96e80880d5bc66036abe5967eb967d711a7ed6be35e4fef1bce2f2ad8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa104c5eb94e663e2391927e1824809f

    SHA1

    72750462edb1c13cf195f5cbd075a37e6be39e37

    SHA256

    8cd0fe9ff532001f342ed405a8b00e092d9022940e600456a227168b0ea5ffc0

    SHA512

    631cffe52830121a3f839226a487c117457d137daf3444ae8855e5f76d1094f6823270607d18485e2c5409bf6e1fa338743c4a40ce79f450bf3bd5dabd0b3330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3768dd6653cff092259162ad6c88c97

    SHA1

    55898854eb4b1ce8cd12ab61f84dadfe7f5c7f88

    SHA256

    5aae97db270aa7cccf408c798134c606fb099b7facbcc3ddd8b022df38b9aa2e

    SHA512

    a06da65708ae9c42a08b10cd553d153ba09593e26b38d533a37cfc028e43ae1b8838654b6928a2b4c36984fefb6e9141066fcdb14e7a2e20c85f2035cf440f11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    270d6254b64693510423700698bddec7

    SHA1

    e57affff2aebd7eb409e76065a6f6b8968109c94

    SHA256

    0dfd2406e654ba7ed7688341fa45c5e47338a3790fa84c11b64dc526314b0870

    SHA512

    091df787d9a3b30ce3e09399542c4774aa27f0d31f485530ffc16a81524e4a7e7c629b5f8f4b6fcba83327c3cfbde2148cbc25799da64817a4a345b7d792918b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33d3b19019998ff62f286e1ebdf5f037

    SHA1

    6b2e6fc383ca84e0a46fa268bceaf6d9c927ec49

    SHA256

    495b8fa4c656c6584415b561e034e0d993f79de2e5b1d184b64c82e961f1d559

    SHA512

    5d6908de856d660ba8fcd93cfc5822df732482fbbf81784f5abc2cc025120a6abec9e52d6a51dd8810d535c56db74587a6c66ccbbc6875a79bf54a6ac53135db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c0863c2a096d449fc55902e54420052

    SHA1

    e51cd496b4cfb857cd9eb444f3c1f689c5091df4

    SHA256

    406ff565ff333980f480936d5e98d5bc9612b5e1b1ad36987e03f2a00567f53d

    SHA512

    b2611a21d39f8de8f603a6d42756bdc5a451489eb9f9e02500293fe46b794e0b857b1c96a04343b711669e5d0b5903a71f4c32bb28affd1f538939318df1680a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a15785c54ab5511a3f226b27f64e4028

    SHA1

    ce85467ef8886ed89d96d5429258da342edb3490

    SHA256

    f519d22e82b10f943a1fac14975a19ba787009e7eca738204e8849c4e124f202

    SHA512

    3c1f5a21b8f07abbe30b6c0f69515fffb79cf45c76b6fe9a08e87976b19012e87e3eeb3ed2b4a9cd789711c7515076cea578e33b2330af3d1a87fdf7201f2dbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0940e3d05e17c13f285117fe3e1abaa6

    SHA1

    3b969c0b14b6589b11130ac40de930e41d21acfa

    SHA256

    9a5ec3aff3f89e61610a16fade99b225e90324161a5bf1db535a8ed9b19cb07f

    SHA512

    c27d246302665e5583b5284a5e28b5fb649b68a619763e5c818aec3ce4ff0d785ff24c6d00db734e4ee754194afb1bc8f50bed2f146fdda3ad85b6fc2561c82a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cbb7fa5e63bdaddfc1a77ed6404a503

    SHA1

    2ff33075da8c785590c814c1b6f99434484c4ab2

    SHA256

    a17194f771e124ec1c66de026c8fcd835390afcfcd22ac3ef34b789c5d019b74

    SHA512

    dcbbd15979d31413b5a903b3dd06f99725476f10fc0790559e967bba279c2d29fb076b6451be114a062b906b1e1838888ea46605902122b98a151e5305bbee43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc54ba005c26f06fc09b85c1dca94f76

    SHA1

    db678a15972c9ea8e98d13b641382d2799c7fe79

    SHA256

    abeeb0a6192781f1d328462de103f6b81a8ca8cc52614aa368b6da95fab666e9

    SHA512

    c818dbfe3a8c240de5329da34d87cd2d8d9a7ab9f737b3e39df705fb46bb84bbacc9cccd72139f264ca1b4f31129f59cab5b08196dce5f8b991b87c3be859d11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1b98419dc1ec0dec90a07dd093be5dc

    SHA1

    d12af1d797e5e8b3fed5c9edabd592d02af847b8

    SHA256

    2f25d6af538a017feefae2600555b216e35930da951d96850b1ff6213afbcf07

    SHA512

    f3c0a794fd8e708fb8fcaeb1dc62538b441442b565ca8d641d34a26ef8ecde28906c67ed69a1739de51e87e30ff4050e9c571fd1e17f2b33331ef3a0e3a6349b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dae2f2c48b7e623397ea25de53859089

    SHA1

    896c5946966946699319038d8199ed7d2bfd04c7

    SHA256

    5692c07481b486c6be2a6f236d2348d13383bffa329332c1cf47a781df8acc3a

    SHA512

    c1bdab25b6ff6ce940f11dcb38a680ff15a3896970f061ef77ec59339876efe3cdde4ce529c09ac810a1df7df296b20f59596cd867a2e939299d70635f880531

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c52491676d851dbdd1da4c9036f0057

    SHA1

    1c85952c599f82288bf63be89974dde134a6ca1e

    SHA256

    5b39e1badc53f1e5d50020b9eba766b4f4268e7aa2fd24c8a352f6f646e9fd31

    SHA512

    adf8b3b25122bd922412e22c5b55b067b4ce29aef8a28f7bf909024d5ba037c0af5382094084fab8e8968c7bd7375d3a55eebc846cd0f675196ad28f6325cf48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c29fcc153786826c206a204529b2cad3

    SHA1

    22c6e11f12324a5b42dfe6998e0a2822ad4036f9

    SHA256

    cef90306e275332fc10a5e8e0b605c4a6d525820aa7b6341828bf04df18827f6

    SHA512

    dc7bd97fb216ae476d8c71fd5d0efaa05c8283e13606f83a2f051c407f1bb798ac96d10a17a2162ce09bb1a521a79d9f80b46b0555f9434481f540f7a9f92ea2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ee8abd25ca6cbdde193753cc3ec1201

    SHA1

    227f8e84a07e0c9e7ccf6b442c31785d91ca3a73

    SHA256

    2739c3382f90dfd9baa436c16e7430c4df18010b3b193d967e26397667a80567

    SHA512

    b30783570db1c95e6154f8d1030f170fcb74d0b9035cd00d18b3da9402a966731cfa02041bf2e294c0ee55917533efeec654266eebbf91b378457ec3f4174938

  • C:\Users\Admin\AppData\Local\Temp\Cab1CF5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1DF8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a