Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 22:39

General

  • Target

    36e9ef29ede57f611eb9274e992f9b92_JaffaCakes118.html

  • Size

    201KB

  • MD5

    36e9ef29ede57f611eb9274e992f9b92

  • SHA1

    324e6e162a35350e79e3dc2f128ca46ccf9f60c9

  • SHA256

    9755e0f58d6fc054f771d5c534cbec3d56420611384a76ff224e037103da5bc3

  • SHA512

    42c2cefa18cbfb4e342aaaf2178c3754235fcb781525d936d8f678f45c7083d8d77f8121685b1eb81345c8a6a43c26b3580ef40b742c0cb4d878ef0b67c2f162

  • SSDEEP

    1536:kamdU0LUyIeFmYUvYnu7gLyOxR+l2IR1r6mPTHK/GvM:dmMZY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36e9ef29ede57f611eb9274e992f9b92_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dce9ab5283e960a2fd14acff69ee0522

    SHA1

    bed6dded17a2742a10814b67a83a4f60f7fcb070

    SHA256

    b6075d956cbd1d7a547b2e0753a26f44e92f18198111aa92b2238b569707c282

    SHA512

    1327ebcc20580b68fcdc781e6718dbfcdac262beac236c169cdac390273f51511840364e63b09ef111dec9830ef1490ad03094dea28e8d8886ae1ca1d6a022c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed91ab8c245e65ffa82e47d01042505f

    SHA1

    fb76ac4160eaeeb209750321c6f8141703e629a5

    SHA256

    085a461e81d0d50ac6137bf8b25501cd2284589226a8f9dd5ec5320655895e9e

    SHA512

    82bdb7f0c654c6d98899550aaf7288d1c82d8f85dd8ceb84300477e29ed84f669d6ff66702c3403f2e39869bf74f00d5795b1889da2a74b7ca6c0c4316549121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ff9b7374d496a190a326394d3b66b50

    SHA1

    2ab40340c57c10cd0960b26ac1d1477df517bb78

    SHA256

    65fe55657df5825f2a3e6e19f5f554002af072b9d89573b175b28cb346b51221

    SHA512

    f17173ad9b8b2ebad38a0877effc95360cd1ba60d4f7bbb5f8e059d7b1e61c230525296e2cbf3695327fc81ce297cda804ec3f6ef6068fc5f21b95dd46f07154

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21622e2383fdbb6cd343b91012fbc9db

    SHA1

    2881d6b813ad3326654422adffa9a6b117315ab3

    SHA256

    4d6d8dd2a4437d9d4b1a1d053e525336a5aa98a09745e7ec9f089ca971b12503

    SHA512

    80200f7a40cca5e11d9ca95ae6c0c0b728d722455021e7120252476196dcb0303bb707bf485a7d8fded37833635ae8d635ca390d6be78d9ebe488c16474d2f3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03e1c3030f326395da8a70d945b64826

    SHA1

    4911f31deb39c4b586063404b9e1f26e96d5f9b1

    SHA256

    bd77fc178cf5c2820db0b2c910a6fb70d5a499f410a7282008c510ee6c7dbe4e

    SHA512

    cd74bb11d98d86ac7a2083020aa5ee348c78945445a85022e9396e7814335076f08b2e19b7d533263918888bbffd47ba9687dbff5a4822fb15405dd1d67d0883

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64d3fbcc0ec184c135416fa5251d7463

    SHA1

    f2e9cab64911b530f1bd0771ba2d040f2eaed10a

    SHA256

    b7d0a07ade711f320339434614825cf91436b0362b2b845fe77cad8f52cde6fe

    SHA512

    4f1439d23d74829d92a304091643d4cdd1fadcc5bb66088840c19244e67439120991d83580b5f907c57975e3ae5faaf9bfa9f9a05e31fed774bfcfc53b004361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab0290f186295914370b2ff0e00dcb6e

    SHA1

    cab09a04c0afeadf574f8b2f541f99c2214022d3

    SHA256

    e19f07403c513ccb216b1ed465477d2964c09d4151091f5aae9fe8f25533e3c5

    SHA512

    e38d3b9b9d5f19ca869a46b169cfded6c9efd5b5c2fae42ce7bdeb1dc135e1e16abae62466069c5dfacaec3a10ea262dab47a488c8d55fd008364944fa21d30c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c85fbb6eaf709417c1397b85909635e0

    SHA1

    2bbaa2b469ec5f0d5340c707637741977ce54d23

    SHA256

    c6d8b548945d67d242b6d59449d3f2734228dbcce0af99c410e2ddd5af02c922

    SHA512

    47adf38e2e82cbcd3b94b83d8a4d55ba49e9f28f8fa1851e2ef61936086fc62739f3a48cc49c65ef6e6d6a77ccf17e05a913ca35a29a493ae65cb5f567ca9395

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e41af72f6db8f822c9f7f42360544e2

    SHA1

    4e83b1df2bb4d665abf7de04bdcabfa70535eafd

    SHA256

    fc3118bcc17ea41dff758b7a981ad8189cae93c731d8d40d75c56ad8abc00257

    SHA512

    648a4b95cf45a61a42cab9da6fb8f6199e2b6b90c2008b5558af92695cf1dff741fcaa141a976aef5dcb79612c94f5874666fb10e9448313f2be50892300b3ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1724a5a8974fe7e3f2d086135ef9a12e

    SHA1

    1d6fcd49424d1513915d2a470e85e531d4810f4e

    SHA256

    50b803019df34b2a803fd9eeb5c477d1cf6162beba5302c553b569d7726c1b46

    SHA512

    9608e2eef9327463fa3fab20d7b62d1ba5174e89962826da786255d3f014aeee818f200ceba8482ef0dbc05393ca04e535587ff1890c39de301e7ce6bdfd18b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0491c67838b049fa57ffc887a8c01c1

    SHA1

    4ce0a5ce23f66c415c0666401f7afdf4ceb51a87

    SHA256

    f47ccd6c24e11b502002a1aac47d9c76bf077753be6613e0ced1e67d0d469853

    SHA512

    a7cca7a95f49aa625a5762a70b8ee6974e121730d36f759c3397d277d82917bfb06bb0ce34fc7c3c40634ab70f9eddaaad2b39477c004186a2e0ed574c8ec585

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af64057128fd4e6375670159fe7e9a70

    SHA1

    4c14e043f9ee63a461aeb2eab78c829d62a35030

    SHA256

    040695d9774c17ddccda5a45b5b7c9587ed9a638acef1522448a5efd38edcf90

    SHA512

    6ec3aea1b6e7288570fdd536e69b14a29a69df3fb4bd1a167e75c5dda8250e486513d52f52c86579f0408ba238557030ba360daf726b661b805a3f895324fbbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20431c2a39f87ddc33a8bc8bbaf1a44c

    SHA1

    158e22f65aff40adf3729ccedfa5fb8c0a294bed

    SHA256

    d0056f70368b85e165076b549c2df13e478c1a38045749c5db56a481555f4443

    SHA512

    a5cc2bda250ec500142132a3959a5768c97b119015d917f6384595ea95f8883d5baa4ac40dba7661b4f339c77496f82f5d8fdb23605a21959b4405dff5cf5c75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d20a29ad3e913f860acc2f08b69ae207

    SHA1

    f67ca957e93ffd3dcd6643d3a6277c0748b38c4d

    SHA256

    1feef00ec1c3354f3b9f04da61fbdc530f69b50ea7df740adf9db354ee096b8d

    SHA512

    186ae6d26420dfb7d618e97f3f44d8713e92f2eecea2733c17a4970098786c8d97dfabb9c9a61f62f24e346ab46c1b3004a5038aab43bf7b19dbde5966a2cfb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    122da94d78144c9bbcfa65f84f0e2b0f

    SHA1

    fbddded19b602fbe2c2ba5452d8e819071b58a88

    SHA256

    81bfa53ebe45ff2618b461b87c428d4af396fa19e0e6eb651dc6de199fa9f990

    SHA512

    63ca20eb4efd057d75bb0e8ea386191dd687d889d68173bbe07a06d2877741049a3598d0b488a2498c6a8395e9cdcf9161be22dd67982b56f257e17113ea88ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69b6f422f1c1d9868b9c4d598d526176

    SHA1

    39479e885090d51deef1a988c6a6ce2d8edc8e4f

    SHA256

    c9a8c597c34de2e298a49484f3acca649777ee93baa365eabd7f3de1c9b79a70

    SHA512

    bad431cf7a30983e7d8ff082066029041d615fd2dcc33c78f864da0b89317d4bddc27dfa4754c31ee338463a67d436725d49878902f2175677aa8a473909e442

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0536efe995463413436713b4c4ccbfd9

    SHA1

    e3121392e69e512e842e380993cac836e6b86807

    SHA256

    162c4d6ab84d4853e09fc112bb699f4ae1c435d1dfc1b328308aea2a9510eb74

    SHA512

    3ff82131a16c776d78bcc56b7ebb188618d7be779ce28ef3c6248ae6767cbb3f03ec9392003be60ddde9a4934915e06152d0ca6c8384e9cfdd45a4ee7573777d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cab53e1b185e97de27160a651f56ab31

    SHA1

    fd2f9ec56725f0fd77d200c14564cbf6841c8db6

    SHA256

    b63d0046133cc2131d775c247c9d6097a58826d9584fe573e7f07203b387b4d1

    SHA512

    b5e22112d82dc5f24553529073de4ac2ae06151fc6a8cb406129db9829e146304436b2b030f90d06bb966d60d4d9d845fe4cbbcc3d163ba6134df8e3c1617196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f69c6e530e69770890e45db93edc07b

    SHA1

    7fc963682e377a8a83080268eb092632ee325fda

    SHA256

    343c9671ef4de9f61ba11c3c4fe89b80435589caeacc220385aa221ac238ee6c

    SHA512

    40c2a38f3318da43815b5561fd66bf7062f0cfe3d4fb01512f9d9b03c2914b9f68ee9cae2cc7866e824203606507128384d23ff8f0d52d615da0ee9d0dc702b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53af1b2624a3a1d4493676714fb24fbf

    SHA1

    018b1bb6fbc18feaca517349802631cd0a22b875

    SHA256

    21db26c1c0271717e40255beb73f1f6073bcf9c0628ba8984bde804f6fb9c10a

    SHA512

    6da1dd9cbe3067f76adf0707c5e5959b00e444720debdfe6b0411cec5bd7a1d7e10b3bd63671dc783e967db8c66957dbd52f0cf923fa1c0b5d3b1f4c6a19d0c3

  • C:\Users\Admin\AppData\Local\Temp\Cab1FC2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1FC5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a