Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 00:34

General

  • Target

    2c790c90a1bf13a92f454d7fd19003e8_JaffaCakes118.html

  • Size

    34KB

  • MD5

    2c790c90a1bf13a92f454d7fd19003e8

  • SHA1

    42b2120f4ebe8d26f82d3c440fb15c23c0f7b856

  • SHA256

    89178971060db5b3f76f1d7f687598e203d39928be0bd18d410c8ec87a9606d7

  • SHA512

    3786216b46a28a3685372fa2af9c279c233b69413f5c5f91719665f75c517ca899dddc26e41f747ed17f752ba4728d5206b3513315a34e4820d7499d16c8d3ac

  • SSDEEP

    192:uw7Fb5nTSnQjxn5Q/KnQie5NnZnQOkEnty0nQTbn1nQOg8cwqYdcwqYdcwqYQVD5:DQ/OgZn5VDXqDBi0oX/r

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c790c90a1bf13a92f454d7fd19003e8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1560
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1560 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3cf75bd50f491fe8eee6198f7019cd9

    SHA1

    a2848dd30b05e01cb52ecbf0d31c2982f46f1f87

    SHA256

    2628c5eacace88f5d50e3058bc4569418e7f07a57f8e8a33acccc138e54bf22d

    SHA512

    42401727a3230ec7ce8e1b17c084661a04f963b99b581c7284cdcf333352375bbd7f5d6a6ff97618788242224dfb7aa1df4096aa478d56fcb349cf79425f7f1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85123e00c574d4041b688cc0186d91cc

    SHA1

    8fc4d798658e08a3137cef1cf6a664b840e2d52e

    SHA256

    c88382efbc570216ebc15b712865a6a76c27a93ac08f7f6a410a0b03063d47f6

    SHA512

    87e4bc0d2ebf47c89408cdc3fa940e8798b269b9a92f98bfc0e52118895e2356e8929823b17a606c33b5470853be582c530dd71623a7661cdeb02c4b958ea2b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5eb3360ced39774d85c32c2f8cbd99b

    SHA1

    f471a3c58f89bb0cd517e67387bc27fedef6b68f

    SHA256

    bb0f0157c9824d0801aa491315186462bc89c658841fd5085efbeb10233f7a56

    SHA512

    4301cb64de30ceba3f8ff61313d4f73ec3234b2176a815f8d50319afb3d79b016eb86d54a88d2426a777044c8c9a8dbbc581bef2680abe69a549fe7fba904b09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db2cb66bc24ac583039f8fcbd9cc2249

    SHA1

    db34573ac374c49ba9dde2128ff69487033d964b

    SHA256

    42162dda86bac0050cb5267feb0b512296426ffcaa040f0b048fd26ded60eb44

    SHA512

    cbe8cf68bef822f91fe7aa0f54a5d999c10f1ce6f82ad6279830259759693ff790c1e0a32a2929e3d8af8f958e1b15cdff9d969b802f30fdacc4017c9d52edbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37b10ebbc6b1ba1d172e4f6f5134c0dd

    SHA1

    70b4aa0e09a03217250bfed0746fb987714fa303

    SHA256

    323d0143f557a31cf23bf8963ca479ef8c25edde6444a74921894cf594abfffe

    SHA512

    429c50033ec30c33bfc73a01d587eed23e229c443a08dbb429663cb9049284edddd4297ad912f7746d440c2ffc9bf074123f2154c72e7cce12163d0f57edb863

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1e2a69f3fb3862bb761f479918e6fec

    SHA1

    45474346ce81ef0a778e4a79873c030a5fd09db4

    SHA256

    c1eadce0801d101faa08d1bd9c8fe413a85b8599d89d140eb6af50d56440561f

    SHA512

    d8ca0416df216162fe3dd8038997d45d17a473f3ef85037eff04306636503bb7055519eeec2fa018b7126fccdecc59c1eb1da865fb52ca600f277a86d4e5d2c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a1931743ed66b55a252b788df470e7c

    SHA1

    878496b53cf1b7299a8f59616fca510c7a14e614

    SHA256

    7cb6f6962fcfef260311b519dfe9e7cc8ee53e9a6555129444e07b6de123e27c

    SHA512

    3919d512335a3686f3dace79db105196cb022162671498238a7b8364afe46e6f88b109d0938e78d4aa3aa56154523367b3d6461e807e7898e4eb19afcb54a28b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ea6e40eb9edcdd882e8c630647b3f6c

    SHA1

    4c2a4d6ff439d6cc9420bc4edf093b28d97829a6

    SHA256

    191ba0f3cdd6156066c949130ce5970482eae97b7c72660dd156f5a097a229f1

    SHA512

    a5b272956bb36d3f5506364fbe65b6d3dddb777d7e56cfc5134ab91b128577b02f188d5e59d1eaec49706e8a81d33c2820560c631447b4d3d06bfcbcdd296bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0b06de4e1a719a5b9e4dcba6f4d83a8

    SHA1

    9506ad91c657536cb6b77d626d0c446db16bbab8

    SHA256

    d5500c514441e43e0ca92bd7f286886d54e8bddb68e213446009cef986a1dff0

    SHA512

    bf563c53de2da8c6c429a8bfe1d1d26beb7b51d2c0724cc42539216fa6a2e7a633be851856d78838632aa58be244b410b6169d719650a9b5c9029b7f6d6b4d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a03d7d2be2286c5b8d5bcbd3adba5195

    SHA1

    40d39c4587eeb1ce47d9a6d7ed40ec59d643ae74

    SHA256

    35446e1b6f522c49fdaf37776222b4fd2787bd97c6200fcdcb4f80051aca4126

    SHA512

    f7e96755b439789c305ae6e8a1464b7e0dfd945316137154c63e851a060ae16b545a67bcca89cb054ce2da53d06ea57de08da1ee9471daacde69d92063cc5ea6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0977a05519c094ca543441e2169e3459

    SHA1

    8c79e426004711ddd68eb269487f52713b4783f5

    SHA256

    6bdf5ee4b1b67156fc26402fa3635818215ed120eb29fcb7632b47a2e6713c64

    SHA512

    577fcfabc68f31f58f422ed653b7c7783a12038edb78c141766c97c6ff044015fe2947ad8316fd95936f0c63c6b11752f8490cb59183eff5d6aedc4e7fa4d751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32265715387cb7c127c61b4f504e6423

    SHA1

    f284412c54877fcb86ae01ba399149e17bb13833

    SHA256

    7e442f820a38b73d83c0d61e659f7b0ab87a63cc5c1176b73bbd5d1583eeba78

    SHA512

    763fdbafbe44e22cffafcc8cd7511987af383a4183dd0f9305763634f3dd4948fc4227336c15857d16812f20be932ca7970d35487a8c40c1d5fd98563f9f94a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31d4bbab02bd87e6234c12dfebd44338

    SHA1

    6f248591c787fc7b424ac9da2a8618a2c55cee1a

    SHA256

    e31383546e4112388e821f6a661b4b283221684bb29fc9567290f6ce8d5c836f

    SHA512

    4fbeb5d825e302e20fb2ef99a3fb26183ab5e1cf2f06d8cbd51cbeec826e850f68559a8136b3332d6e1807239d3eab8b6406e380a3e146972f614702726d3dd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89ef3e829c799d383b856c0ddee5641e

    SHA1

    aff9c1d85d9db3b077fa9bd581c254e963981d5f

    SHA256

    2f7e04a23ba7db13190fbeee439768336260b98ff1d2a041ac8f08f1a0faa75b

    SHA512

    f773b3cdf8b8554da6ba8c463b5a2c38e8cfeec883c35ce2809e1d9083a99b8ad857b1d3f630ee671d3da162e418fafa231185246b9153901a68b9540d2078f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7f903b282afded12108457d79a4ac4b

    SHA1

    a20e08db9285fd30746a178c523833b24f5f4603

    SHA256

    ba802161bdb50c17abfae146e20bf7a8249de45bc9aa828f425e958ce9923a29

    SHA512

    c3ede92641cf027d84d633eaf915ee27857980fd961c1c8a9f5394a34009a95b192fe1a9bc21508e6f717311e759ee2fee1b02376d47a4de390f7cf9baee8307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae485d945525c2fbc14d4362875a5b43

    SHA1

    809b00dfe0e600903e54a810cad99441ab964441

    SHA256

    fcd49bcbabd9e6bb7ba682884e57afdc11b94db89b57e7cc252efdcfc34e14dd

    SHA512

    25ff4c747c2df9e86c1b62659084fab69db1c8f9aa318e9ae5cc9135dab476628a4dec1029992927861108ae10cba2eb19510d7df6ca632b68ad49e9065d8148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9280b4085dadb376d48de16ed1eaeea

    SHA1

    cc9e22fb80b931e78c5c1dd7715504fdc035e0f9

    SHA256

    44a8fcc3c8fb0540a9b681a9b98d19f05205891bea88a9d7a33b42f1ef15bac8

    SHA512

    1b90b64458e179e5126dc8a2cf89f964a623d2d839c56bb12640a6e27fc99e97382073fb3d0a9543c11c5f4b0147637835e9df2dacdb3d3d723672135db5a6be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9edbf4a1609cc52311052b9ef9b52972

    SHA1

    008f0c6950ff7c51c8f81dcc1e5939c0535a7b47

    SHA256

    94dd1884d1d5e252e69536ab2f7c9a2c957bb3f4cfe64bc22ab9e93b52cd36ad

    SHA512

    9c46149da8f79288f031ba6f6f890b28cd4faebb7856268fe6f364220da2fafdc8855a7690389ceb534b4c06cd480abe0eb76efb7cf5edc86ab84b20a3f4e568

  • C:\Users\Admin\AppData\Local\Temp\Cab2FBA.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar302B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a