Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 17:53

General

  • Target

    30511c1a5b032a647e4f42b6c1ad5f5d_JaffaCakes118.html

  • Size

    461KB

  • MD5

    30511c1a5b032a647e4f42b6c1ad5f5d

  • SHA1

    7d5f93930dab9f9ab618956097180ae76a7c183e

  • SHA256

    83967534a7c27b3c8cb66c5b6b7dc636d2e474074314bfb81f8a66a466552888

  • SHA512

    b3c3d3cbb2237fd6c37c8660c9ad32b157fcf56fe311886244c6f34b4523f174c53250ae87fcaaa4af5ad8351fa1c33ecfe901d873859099088dbd05627ea5de

  • SSDEEP

    6144:SpsMYod+X3oI+YHcsMYod+X3oI+YXsMYod+X3oI+YLsMYod+X3oI+YQ:s5d+X385d+X3N5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\30511c1a5b032a647e4f42b6c1ad5f5d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35670444dc601d2d0626cf323762def0

    SHA1

    1fbab4be0ead9d5b002433ff4940ab206958fa56

    SHA256

    3d554cd007b55e6233ccd63ffd39af6f25767e0e826e83b9dfc20787ea51cd2b

    SHA512

    5d2467e1dff13ad3f21d486b9d811a18f011e57b004dd7bbacceb80ce243acc02d765ec6e0aa9c3c9411f504ed036f347e60c6501d99d7d0e0bbb783487fd613

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f76fee710e5258cbe5a2c3e200374784

    SHA1

    120d0af0e24f6be5e959b314f57b1b6965ad41bf

    SHA256

    b992af14d1c45b1a9e70a46503eb78067c854df2e2582a0d807fdf42b968a825

    SHA512

    79dc1d326e652454db035219e1efab12b76a401fa2928ba74520c8403aca676873e5eaf22a2cdd5927782ac305386372e5b7b3064a1a6b5e24298c91fefc93ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee4a50bb4a96e90511e25a0f80d7213b

    SHA1

    8cd5afa6be73ebf481a1769a5490b0c9fe4c38d2

    SHA256

    9998da80f6c56775573cde7f247dda468763ec60dd59800700e86905646e33d8

    SHA512

    a6ebf60b9d3ef6d2488f2a5a54dbf410d71112fd0419a990cdf0eb46edee29739debf32cb331ee790880ce5307f12e93e38ecfbaad1cd52a461a80c2efb30000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09ea7cab933576c02db3183f34fb951a

    SHA1

    e4924c365bb8d94f47bfbca5023f48de0424e4a6

    SHA256

    f77c02b40c14d68e44abeca239c254dfcb692c7e8e7876f4fb01644ec499ad88

    SHA512

    2cbca2107f608ae9356f69e9e265f8c28b9f90808fa8b490fb896aa2ca3cb9d422c8eb3a39490e514ee01b49c7542cea126743fad1a80aa7f6de1294150f503a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e5025091608c477dd48b3d1b248f268

    SHA1

    a200d414c3e7c6268660dca2b8f62503c06542e2

    SHA256

    aedec551ec2c464ba2a9fe2b607bee93064595124ded96f529f1bf72d7fac9cd

    SHA512

    dada5e75a077e68b3ce83d639600844fa7730ddfd7742a371716d132a04402fbffd3dc841e5dd6214e39749458b5e575cbf0eafe2b8abdcb3df888ddf6281951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67862064033e608f343ce9cd36f01af2

    SHA1

    2799426069cb99884bb4e21e9d7e0292b7887f55

    SHA256

    240062463e96f0d786159699635a74743d3291f385a02e164350cf65db47333d

    SHA512

    ff221ef660abc4ed449f7c44d39661fa96c4983c39e34a286aded6885154b0df239a9899dc8f4eb9efc52451a0b7a7baad5839590257a12f4be2a079f640d08e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfb3c8fab06a6ad7f56716faa45c1fc0

    SHA1

    2363d27dc4a0f70fab4141c624159e4fea227a3b

    SHA256

    3c8628bb6a9ccc8523928132c9fd29f9877fff1191679ddc1bec140491313409

    SHA512

    542f2763703231f2836f2c926560edb5fa2342c06c2df4593b04690ed5e94b59ba5c1adba10852eac6f27255dda58b7a08e0c6ac82c59e9ec1044a294b9da143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89bdce900b53ec006d2406484304d2ac

    SHA1

    872b82b12dfe3218abae0ed65eb15c8f0259b01d

    SHA256

    19e16b5cb822efdb39702cf1a4200a988d158208edab8a3322fefed604416f70

    SHA512

    4c85bea97fb18c13a519cf788fa2da31f0a0b2eaa4faeec45bf2461a22fd6405356b5014f76c03f80044e9b59185f0eafb6f893f4e9054a88a81d387ea37d907

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67dbc260014bd2442d83ecda11bd86fc

    SHA1

    baca43cf1428d8f39f6cd7f6ee35de8628c8094c

    SHA256

    419a82f9ba2af17ae677f9594f54fe43ff12eff02f0031e2eae7af0498262553

    SHA512

    70da93f2128892a6befad771b295e5c168c9e866a01af6d0bbbb478afee4a8f7403d12b2367d6c59d0108233c1ecbf81ff957a0677bfa20c96500c1da2fd6554

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3476624070ab2aba6ebf591aa22d2cc

    SHA1

    68d8e4b1ca1d606fac51dbe605de9f7834e84468

    SHA256

    19a92e8b10885277548063a96cb60102059853ebeac49d1217974c02ea1f602e

    SHA512

    27ea0b0c0ff758cd8e88e5f43b9631c620ffa870c435c39d4161e913704b9cb440b3c484b1ba7b9e4c26f3960d548ce03b8c541e93f41cc42cbccd6ea440ec6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c3aeab5d8b510d78d1af1b265907677

    SHA1

    7625f39c44ea21508d0c9b52611f3e5ebd867fc4

    SHA256

    2b79245dda1064bd9183f002ebc8ace3bf289ad6d67751d3ad5390e44c51bb46

    SHA512

    78a7d68d786339f1ab8b0d94d04d840dfdf5eb92cae0e86aec4bdd82755eb34294e534d0d901f69cbee2bdd922d882427af8c96969616704224ca75abd6ccf6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db4cc2444d56b7711e937975a585645d

    SHA1

    699b6ed3980195df67174a9293c9401b22d341a7

    SHA256

    f813504f26dd9dc7c252386bc03879782989b8154d2f922a5ed4590c02207d11

    SHA512

    97cf8bb12af8d73757b752d0663c4a3c2faa314d78e668185d4a7c20fd7312a76fc84d235b7dbea4451d372af952e5f9835bbd109e21a6fc509c36f66d8d5e3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    515ce6a2a444dca637e73cbeeb2f19b1

    SHA1

    e53fd766f4b5c40536ec7ace1372f396ce67d336

    SHA256

    a985cb47f6face0613dd7980f4d436f4b878f8cdf2d9a1cac63f2601fbcb625d

    SHA512

    14efb804337cb4c8b915135fcae5753f6b040d91005c0b0ac2b3d86d211dcba8555912f2649a05c8e747ac576b8863c1c3b91cb26acb2ceb0e50a2adbcef3c75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fb449da2121914c7d6beaf3e4b613a3

    SHA1

    84a7ef61af10f70dad6d0543fb2697434024ff3d

    SHA256

    28b56d55527e32e61059b639715ffd965a50d750c1e28a1efb16a2d01e4e0e55

    SHA512

    4efff967c3181037401b47486e9d7045b3606fb4c32bd0be523e203cd6565fb2b1153edf2fb1b94290243f207631b0a07b7ade06686b15f3db31f6c6b7ea1c5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee724639bcce64378dd463b5a995e003

    SHA1

    77bcdfd0b306ef0e775d4e25387db2f9d22e2041

    SHA256

    088a03fef3770517bcfddd496edb7b55fb07320ee2f2474372a432dda3f0c8af

    SHA512

    b0b56b3659b50b3ed27f13764df40a0e6ab2592d9a18f43f746215840855f333ddebd4ffd1b41fdbe1df347e702b386bb925597da00c082c48f3ee9cc7e7e725

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e03cd888dfe559b2ae2b078b4518f4b1

    SHA1

    72ade82c85f5f9962e218a784968eed8e42a2c0f

    SHA256

    413de92b866156a7220243c3bb8747823d0bdc2a59b66754ff187206ed8c5e35

    SHA512

    d825edabfa18322b6d1828c632567cf42c7a1c2feb7cf7ca06e182029bad0b40948b7919bfee108f06e97b229c9aa8ee9225bfab779a74ff08b85dd8e97a289d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    278a94cd291a3689edbf55e3130d157f

    SHA1

    efd455d632f1e93253888a982a9b24f6b80ecd71

    SHA256

    d95ce2ff35382b956f19667650d6d66d99587d4f1162b060263475bfb06b2e0d

    SHA512

    5911618ad33e26c00e4d597c4636bf9395976420a76ec8dbecda71d55c2cb67baa39a269cd006af5ad838108efbd922c63baac19a4643317368241f8d03af173

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e8dd2c44d38540705ace6018ab5beea

    SHA1

    5ab93b0e40f59b3005c9b3d19672bf9b7c579106

    SHA256

    8573eeba5815fdbef8733758eb7ffb3431d551f8a95cf71084c990b7e4979328

    SHA512

    7cbaf2977bb023dffc3dde43880c3cec4a027935052f73d2af2532b0922b41d1be39a12c085a95302e5a3c5fee3bf8091e2c0e0e46d7acbc1c08e8ca580b2683

  • C:\Users\Admin\AppData\Local\Temp\CabBFD9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC0BA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a