Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 05:05

General

  • Target

    2d7fbdb3d60cb2699b46fd8d55c233e8_JaffaCakes118.html

  • Size

    244KB

  • MD5

    2d7fbdb3d60cb2699b46fd8d55c233e8

  • SHA1

    caad102edf2696d4ba779422a6223cc790ca7176

  • SHA256

    b0fc3dc64f90563b2e27964bc635850d8f64dd95d944020e524cb5f3a7004c01

  • SHA512

    4b2b6351ca8d05d339ae10bfd129c60744c3c7aec58f5ef5bcffa66c35319577abbf672e85922f107d5e3164da6289214acfbe1cf6289412519745e890929111

  • SSDEEP

    3072:SQc+I7hzYyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:Sf+IlzVsMYod+X3oI+YS1tA8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d7fbdb3d60cb2699b46fd8d55c233e8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c53b9a4cbced4e03ac9d84e243a0711

    SHA1

    3911b4258920e125b40bc2f9dc9beaf3f7a8859a

    SHA256

    499c40b4bd1eba9d07214bde6ba59cd780c5a854d58e240f9a91072b0e1086d5

    SHA512

    ff71862158a6c2d055f0b3e7d97615c631bad63b184c345fd2036a8a6e841a63515bebac7a90c86b32d087a21ac6fd5d9d20372c576a6a550bfd1974e89a06cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bb179d58de7b6b6b9807ee4a6157cbc

    SHA1

    485ef9bb9491e7199cf06bcd32de05057ba58144

    SHA256

    5aee7c09263c8d3f809db8a5002d18fe101ec78a457a3d608a8212b7f4b3d907

    SHA512

    a00396dfc2c211c24457dc0405902050cd9e5c5b2a98072a87f79d316cd32300a11b0dcf039a93e4d926f774785eb9338043ea26d6782844500b53d0aa88bc2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    550e962bc844c20a92a6850963f4fa2d

    SHA1

    43d22652dc158206d1094d648e16ec428b8b60f9

    SHA256

    c304ac6e04c9f54e28d26e55a7fa7f78c05bb2ac6336a947c93143b5105e2c52

    SHA512

    6ee365e03c0001866d77548e90a6dbdb6494594299b80eb39573123c22a4952b476f31fbb247c6c7fb8dd342896bc5d15ab286a1c369b6fed190c5171017e875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    591ea7bf036f14ec848e18e6910291a6

    SHA1

    79d31ffd76aaf73d6c227bfbd98df5417e817557

    SHA256

    9a3f99805234ef7cb2b085b16d1c1b886c3e8c31c4f318d870e70c6e024ce6d6

    SHA512

    220ebc85f20217461c13a20b10f439672d025955616b538f6dab36b59f90772efa40d97965c4e67ae2cde25e29cc0100b13a7b9303076fa888eb65f25ab966d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e71886f3defc1f1fd266bd7ae66c73bd

    SHA1

    3bcf1c5eb19e8839cb1ab423014ba60a9437da13

    SHA256

    a3ca222c9a3760ffab4de0df129374b21614a87fa1360b536064184ac1fab516

    SHA512

    01e44b97e234bdd19efe1aca2426fba5444b0a96a115df687663315cf9040c55f1c2de5074cc0240b62798c0ca7f667f9105e90b36d9b3ce58ae6fcd13fd8bf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dbc0a6aa53bdf258fecf27026a866b8

    SHA1

    eeb477b9cda3c7ab4a30bafb2611fb7a28ec0d1c

    SHA256

    d02034b60012d80cd3968328559b3a0f9734309febf0b58c7c87ea3c3a9f4262

    SHA512

    0e13bb1e882281425ad26fb6a50d28dc3d12f75e22491cd49e6f71a47ccd50d9812547475344f76505317cb664429101c7d0a7e3c81199f40abae8a1e9003ef0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d55861b047f261d2a9c46daa102ee006

    SHA1

    2a7d6764f5bf4dd3b7374d6b5570f981f4a70ed0

    SHA256

    dd205647ecfc4f03cd52aeae01288c52e3de3c3072d62333e60b70c238685991

    SHA512

    cc06338788f036b6af1d560390b5c5421779ce5dcaa0ebaa33fc10a808ec1eb63b2ea39aab3bf25076da2e7a2c40b1a2cb1ebb8dae7871f71aafad034f9d4b17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6536933f4334d3cfb052783296b70f16

    SHA1

    1780c1c31d3dc6b42fd4bd0f101fccae1a49e189

    SHA256

    43892726dd07e231f51be968b231c9ac70de944e0254d2d9663b15a3ea415018

    SHA512

    e75ea94320ccc4e27c4dbd0ce482847e9b6e84789770c474fac26662b4fdc2f05596dc96a5bebf6ec9fe060c07ec9bfe78d7dfe68e2939fadf0769a413f60069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a49403310b92b4e48c38a790f7022a5d

    SHA1

    dcc26908eecb587c5eb76174dabbb0ff4932263d

    SHA256

    5f5f2fc41d92d01fd8b595ac78ef16e32aa20d9e2aebe770202a7834112b569d

    SHA512

    d36cd5058059fea0d6a9de45dd5c7d19fad2fc8e6b6b01186c51f1378abd03c930fba89c610a75f57f58f43c3860db5b663c03be1b0ede071b4e325ae672657b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67f97c3abc016d804d0f4dbb12401a27

    SHA1

    7ff3c88b7097ea4e77eef7154d6c85880b3d4733

    SHA256

    cf85a63f58cc6f91dfe9c51b88b55a20f890afbfba844456d6caa05245566e67

    SHA512

    39bf8f15eee72cae54fde5c191ae8c2f1fff00c649e33e5d4b7e0c6cf9282a613852b270dba297ef5a50bd3aeca33b1b7c4e3be978764685e9de5865f3a80b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a395448222ab724be4e7c542949427e4

    SHA1

    6b41cf4d41e0d7fa698938bb02bda636537abe47

    SHA256

    aecd3238958e484858a346d6081042bbed2681cb47d052e239ba10ce0becfe23

    SHA512

    e1c473883f6e4a262b2e611146ef9b665e12706b37f84d841a4885d87c7923bcf2367967422b1fe65427556c085be883a0dff6a3242984728dced9fe7c5f5a18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f30a305bc2fe65279874046367ffdce

    SHA1

    4ce3f7f21b15824c21d533c8af3698cab5510d47

    SHA256

    4184106a6940b829f62bafaa3034fe4135cce22208642f2d129e15f41f3743be

    SHA512

    cc9271a86178cf876ffd351d2c980d0ef77f90ef77f4c9db6bf16b5eba212873739ccf7b0271412634fceead8e3e2868b61d59d1bb20f96881c2b300e9728dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1798d026dbb935da28fdb30cab4887e6

    SHA1

    6b06984b0e57316291a8460465344171c77fda3e

    SHA256

    871ca4f6b0ed42f2a489640b876d80610e2fc0ea7cef7c8a9ea5ea6fe28772ad

    SHA512

    cf8af06ad0a8aceddb4dd3c926e0ed0e9d859cb9844fb8bf16a3abb077d37b04a3bfd60e52b55b7c7a6943575c501b9b73e17002798794a81325c34c22485cd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f571c71c65f5c44199e66db07cb70300

    SHA1

    e95296e22dbe224cf770a4262b5566d0e161954b

    SHA256

    5e65fc3de57da46f1bf104d7fcb46de89cac36116c826fa73552beaeb47ed082

    SHA512

    46548cf44ed9fc5cbe0f64a8658fcf6a8d60d0043d5a1d6f6bee65eb5e4d99de0e45ce2c463919f0d1a49d8d45c58218b6c706f9cc20cdb7e2e1ef85b1a6a669

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a87c912cd57ddb4d86a31b6bbd1ecb68

    SHA1

    83f9cb9361434e5d4dc2ffa1abf76ba713a25514

    SHA256

    2143fcb7d7d0fb929d0b1985dd887a390947e3b2478df2381a41bb5a5629586c

    SHA512

    af6097302845e6719eb72a9d2c8228b2a043821b61bedc2d98448d232e5aacac39902a31293fe4c65a97f0584627f9cb34ed592bffd2c76f6d9f007c8d852d6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d29476b8144c604e6d948a442fe62b6

    SHA1

    ed1b2544083550b5a624049226d88c8aa0ce5f0c

    SHA256

    7565b78a460fefb626b3bc46cf0355d6f4da21f999f6d03f9556056e4f0b6e0c

    SHA512

    66ea3db25036c89dce8f0fa7b4eab201f341a197a8b572100bbcc2ce3f001eee0e5c656d4100c7beeedbcb2ac78e9d1287258fa617576d2711848f33df364467

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b976fb61f932604d9d548c7b14f04a35

    SHA1

    97130f9537b49e2ce77cfb79366459b9ff2eb430

    SHA256

    3eb7b3ad52ed9f8727bb24326d50b2476f74962d572b2818775de76eccc83d10

    SHA512

    551117c5b0fa518cb2fd172e5d47ca2c750911d84e201cea2a8d044ce4b26597cb0b73a6413951788ecbd2cde9ac271b937c7cfb30c7833729b6342e63ee7a5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22a87f7e275fde20c84b315d2063136d

    SHA1

    434fb3536b3cfac5804e07439ca8448826516adf

    SHA256

    97670306b45dc908a869f2ae51636747160e01d69345144fe96cd4c330171d3d

    SHA512

    e5ad53a9b263ff50eb5c54ed4a4cebeb47b42f089ed67d533401491d11b70a049be248d78fcc5ceb24c6501911e7e750b75c96741b733990c6775a75d624bced

  • C:\Users\Admin\AppData\Local\Temp\Cab403D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar408F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a