Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 20:23

General

  • Target

    30e3eaa95de94100f1fbe0e027670fc8_JaffaCakes118.html

  • Size

    461KB

  • MD5

    30e3eaa95de94100f1fbe0e027670fc8

  • SHA1

    b903c1d4e2bb09444b691a86bdd83f81707620c3

  • SHA256

    6d61170ebca6f58685db29fbd2b6c5aba0ee7029d764a15fbc3c9be7d0daf7c6

  • SHA512

    f799d63193502bce8c65d6ed46717cc03fffac5b000cd91e87965588f69e88ef57cac03db1995112d63569b5a1e1d525e85151df584dc2f218c0fe4ce3bd58f8

  • SSDEEP

    6144:SbsMYod+X3oI+YtsMYod+X3oI+YSsMYod+X3oI+YLsMYod+X3oI+YQ:i5d+X3H5d+X3K5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\30e3eaa95de94100f1fbe0e027670fc8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1736 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb494f4a5c8ce305d88ee98541fdd0a4

    SHA1

    1e97eeafc5527ef08f105d2f8e1ab19e37cf8a35

    SHA256

    b7d90700766c308d31b59a89944fe8e900356128d1c59e94d5cc1c67270eff4a

    SHA512

    4e52481ea96e2baea601477d9da6927727a66f8c82fdab7fb553095d6afb580dd25d606de452a81d0a3eba86e95f88b533abec277c0a6995fd00f9bea5ba3d52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    feed632d2dca2a4940026cf3198d6b06

    SHA1

    d53f5b2e2fdd1d46779b1d1b9158b536db907b97

    SHA256

    929570036316596edd72cb792724d2ce72c7fa3032ca3d5d6a1cdfa5be45a4f5

    SHA512

    e1071de26e55e891e0f2c266222e43534ec8b67d3abb1f50ecfef9f777f9f63850680b0f10d21ef67a356d6c8b6746308cca2fda096b013339320ebb1600b857

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7449568466e89da9f8a975ef81fc7d1e

    SHA1

    c9b5f334e1234dffcb7b1aafca003c748e603d8c

    SHA256

    f188ed7e9fe7e4e972aba0880bd5b1968e2406e97166a77e47650f997cb9c219

    SHA512

    df856458e7ed07c3e9e090b8135b3cffb32e55cd016b6c723bc952e400bfdc59bebde41d2e24f247f7d36a14068fb0fec2d9d0c48475de63d9cfbd0249bbc65f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5de6cb59b6cb9bb7d8ba43efb47fc2ee

    SHA1

    9ef5b74044c5a9e8574d53c8b8b6249c822f7822

    SHA256

    86ef02c4f5f6e2bf455f75f334f824323a8d19d68e11d36be0140aa65d15df0c

    SHA512

    c195b68d2cf16a53b9ea797723ebf4b68a216533dabe8ea28d46d456c385052079aef951d2c2162388378ecb2fac07fbcc1967e579e5169a5e69abd168e09708

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb6b2e42b6e604224be3377a35523f65

    SHA1

    00d728c8fbae1b4b9583d8fff6c2953612a16305

    SHA256

    9d6ab0222d11a4210bd21a8f6d8e69b7923ca6b9711d40ba2cab3c01addbd435

    SHA512

    d23397d2e2c11e286a36d6374fd36c871b8e4100c5df56771bc8feb8668a23d85079fcbc40f91785db2fd0a17757cd22edb868b9c1eb747b2dd82f800b859950

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c94a26de69591dc9f4e75c4f5f5d66ec

    SHA1

    bdd493c8f0cf2e2523ddd478dba4e3c64d07958a

    SHA256

    b1894aa498871717538da0f2233a473e88d3446192584c6738e5a6cf9c303120

    SHA512

    7b1859884c3d7e8cb5d585fac0f37af09b87758c52d1cf67657f76bb8fa1d0d684878a2dacb78bc5def4b5083fb235862aa1baa3c5cb6346f365b99bea74247d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5a4b138ee1cb92c673322e5aa34000d

    SHA1

    adb6f1bd300292b42612f32c1c3750432565f17e

    SHA256

    89fa639c4ac90b833253c49104a0835af46f01d2602bf4006e95576c6004a878

    SHA512

    c20af17c2004b551a255e8924540368fd95b0a0d6153927a4db87ad531abb83ab08362a072d0d837f1d2eb1cbdb553460cbcc88886983963c1fedf6532c0cd99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15e8d543b7b9deb872c9d296d91689ab

    SHA1

    a36664bd971b300dfc39d159f4fe1ad4ccd70434

    SHA256

    fdf3c80443669967bf87e6180a26fb7deeb6fba7e0e462b69e3b10915446ada0

    SHA512

    281a18897125b0e6de38b4f33b22332befd0409cbcd3114fbd4808cff572d57b02ae7f0b0e167ea4fa74825718a5bc71198377149124ca4ae81c29a8ef7d4773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    978eca9adb64cc380bcbc9dac2924f77

    SHA1

    7238f1e2574542dcef267a5363d19d840143153e

    SHA256

    65166725e1c8ea5c0cee3e55cf16bd123e7b10959fb7e18270f93350fc5f51c2

    SHA512

    368fcc7aaa4fc42f7b85dc4cf42499d718db0e562b09d991bb754f7cc969b2b82b14d2275d07392b59162d5dc2c32bc0d4b61dc969a841a26491502bbffe1e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e4644504a1d0d57b5bdbabbaf4b6791

    SHA1

    e66640e7168335b5a91b8c8071e76a7fefa4febd

    SHA256

    e540d69fbe22697eda1baa97b90a3d08d9afa5436fd050b7102c8914138b3924

    SHA512

    135ebfe86a79738bcd0bcb99c3d3f017aae2e5d32fbf307e365d3849c88196ea905867cfbb11a89c0e46c17da9adf72d20680634e87f8ce6c3b7c6263e2c42a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    341f23750321cc79e3ee531de1d8a395

    SHA1

    4d9ea212c4d91d998f6a9d0b6be2f4a712cf88a5

    SHA256

    9b7579a830121441cd7360d6a1a9fffd96bf6ac79a8d88452d825ef1f900aa3c

    SHA512

    6866b9ce7839755bc0b3922229d715418348cfc90e78e6abb79f5da961e0bc0dc06a5fba86088377924b9c6dd8ec60fed0a7d6003cb03a6ffdf4fcf6efe9c46e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8509b838b4de565b06a0cd68c8424342

    SHA1

    035a439ec732aa611855823ace2b98bf33a6c772

    SHA256

    c3c708ed26f0802078bd0e59e15c401423047f1751beec2f5f6be5f16ba226c6

    SHA512

    4842c27d7c02329434bd42085a0bca90b113120b806943a6a5bed9140fe75b297ba771355633b8ad6b8f3761285505ee1a76b83d535ded524fefd761efe49442

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6d78fb642f5015162fd424090374432

    SHA1

    0ec23118a30a65e07e2709ddad1a71845b71e8ac

    SHA256

    d664c7b4874c308417adea19268fd4fc39b9415472a0526e49d488e2211a092e

    SHA512

    8541f7e8c00de35b21af99edfb8d16e1c1e8f2bc8558c629937fda9d72865befc91d4e327f6a7c8d9b384835aa7173353702d95bc228bdea3e4d9956dcabfa33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    657a59b66be5d9a939574290caa4e494

    SHA1

    22702ca329f6d00bd1540359db2c4f94e19a705f

    SHA256

    25ff971aa5b466a55998831a20521aff0c0b63c0de83d797b4b81098289bb82d

    SHA512

    acecc54bff7af0ec8769fc1e2cfa96df8c7af53e25f4e694dcfc0354e168d5ffc296b3ce211fa3d10147f1d4b62effdb407fc481c8b6fc1c8ab87206f3f15719

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79429a3325baf43591e42964a0a22ec7

    SHA1

    db826defae1ef735633cd56fc772c573625abc06

    SHA256

    872070b1a64dcf8366d02dc8c3dd89ccf43e576871eab32c17638bc1fcb6e74f

    SHA512

    2aa5b0351d3d908cd45770c4c158938622e8f98291925b93509e452b77669798e796be99fabbe0dba1b5fc008677c7309a0b6b6238becd33b8c5bde4125fff57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0f259bb4c39c4890f8a704323613ad7

    SHA1

    a01745c6148d298d151536565dd72769cd9a0496

    SHA256

    f4da4330e09af443081ede15f7f160390dfd90ecec15b3c413ab6c925c0116a2

    SHA512

    da6583b5564edde606870299f1272bce1ab18e729c61940dfffb25184a609b9d8d33fb81154ecab8815a8fd11e730cb92a56647b8d43b4282a9f005448166a57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c555163d75ebb7ce6363e5fbc94283e1

    SHA1

    e2aace35d40647fb7041058bfe1a25e2583a2f08

    SHA256

    5685852ab4e4eb74faab96bb370dc8a19fa29f6c90e890746c12cb415cde0c23

    SHA512

    b359422dc225e879c0914ddb89b0a5521a44c7f68d2643f6c5de8d1ab5197b4809546df52e2da05570465a8691b443ea63a5b3b3fa04e8a829ff06637456cfa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc0bf745316e81fc0a2ba423ec353576

    SHA1

    c96b8dac935020fc87bcc25ded24242d56e8c323

    SHA256

    6239c7a945ff4901bf8331e21aaaf266c0bf880ba4a47b40b3e4257c1ecbfb65

    SHA512

    ab9834e18790dc4c71983986aa61c016bddfdb0dd1aa36d0e98ad3a9cee8329a24b34c5c865adec7f8c110489af6995e7bf41a8211bde358891d9274bdab0773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e79671895d8daa2326577df14f81f5b

    SHA1

    a6f4e092d2f2c1a283e9c3bd37c5116633fbd54c

    SHA256

    0fadee08ad65bff186b25679bef1744beadc74fc71819a91d647acb020c2b1b3

    SHA512

    151cfa866456bdb3cdcbd4b93c0d7c7e840ccc9f94de0974b7f5ae6d25b149910e656baa0e71308cc9453a54a7b47d642342f25a6e2a0452d9fb88b56fef9dc9

  • C:\Users\Admin\AppData\Local\Temp\Cab5CF2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar5D52.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a