Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 23:35

General

  • Target

    372207e5b8b7c2a9223b8ff2542a84d9_JaffaCakes118.html

  • Size

    34KB

  • MD5

    372207e5b8b7c2a9223b8ff2542a84d9

  • SHA1

    1231ecc20cd32637ad929e5c2e3215d3b888929c

  • SHA256

    1c4875c1c8b6f7fb9e59f5084d32a0a2698a81e39a53322e0e1fec00d37d9f68

  • SHA512

    265b0f588dd6cf7ba8a86ba82fad2b7b375707c7903a8cad8c1430ee9ab50f851dc160615e03c59f79065a5428adb6b8d5c37a4c1646a812a1998c98e1742afd

  • SSDEEP

    192:uwTLb5ndanQjxn5Q/8nQienNnCnQOkEntsGnQTbnFnQOgOcwqYjcwqYHcwqYQ3ZF:DQ/vSv553ZJAd3AuyHF7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\372207e5b8b7c2a9223b8ff2542a84d9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c0f8b262c0ccc38fde29efd21d5ad03

    SHA1

    09b9baaf50024167bc71d4f91866de268c223ea7

    SHA256

    8ba9dff26ab5b50c26d0338d97ec8817fd92a2abd16cf173fea451ca012a9d62

    SHA512

    b30f11f9be5ad30da118f0b2d4b4b6d407f6f77827eb888de657a2a2a6f28cd9b2fe7e548eda6d715b03250dc00d62971d2ff77a0edbaf9c00165b3f0b6c17ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c77b583decc46154433597967a7045c8

    SHA1

    d3eab4173a9b3400be81c74337b2425e1373b0a5

    SHA256

    4917d3e3ffe39ce1b5b1fd4c1cd856f2800d7303b97ce62a0f6164cc7db5be14

    SHA512

    f177b57a93e804f4737927383551206361dd098a88053e3b79470433bcaa4674c50ea43e8e7a45ea2c30646d3398f74b1840f1a83d3605837d9222064ca6b674

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc81c28630436338c4a0e35f0a5fc093

    SHA1

    12ec12f2b3039934ffbe6437f7c461dc9a499a02

    SHA256

    60cc332057783a5fb390c18795a65f17f7d7f4c400f9fe82a2d45d97f2ec45ed

    SHA512

    0219bc1b7cdaea53772f6727d09efecd57169e731d2d4d66c0e552419960ee24dd44a795cb02669b765432ddbbdfdd892d27152c0bfe382d1e9e174f739df8c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dba60ca37fb462c855b5ba917239d9ed

    SHA1

    8eee39740dc3f907311e35addfc05f36d9f987ee

    SHA256

    24d0947a019a8e63cc9dc0bf0ececdc51ea592a446da6fcc9957003e7c92f355

    SHA512

    498bcb18866dd7a8daff4969d186ce691d47f6468e8eb110ec57f47d7964f90eca59e182efe5b8634ca62d5bd4312fc1724146e997ed94f2affbd3a6fdceb8b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    904e8d7a7f5f0217c0b1c6d6e7da7c6b

    SHA1

    b4b557f7fc1979dea1f5eb014f9d42f07ae00a35

    SHA256

    7091240e401806c691b9ac8513807270e69a29e5c2bb68be4cb4f7eb23f74cba

    SHA512

    a0ad5dd15f599d1842e252124b62a7a6126136f2ceedcfdd65f8295afa49160707d523f68a3136ed29a8505ca20eba8261f4aea96e225674e35b40bad2876478

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47cd08a56c02ce31bc2e016c9fab1f2f

    SHA1

    56c511470f2e85b4ca699860475d4a544c873cfd

    SHA256

    0e945c6a4d7b9e8d8c5ce814000b54a68db663736120a2f73c08b3ed38fcbed9

    SHA512

    fa46826c6c443852290b58477871e88fb1264b3899d5c86d7e6e69e315a284fb9721f34088c0367f4df9b8a66da4a35e1616a278979cc5a3c60d5136e853e3dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acebf14f17594ddc8274cf6d604f3c84

    SHA1

    711889811bdd67b1ceb251381fe9cb92aaf8e1f6

    SHA256

    f385f09e9f8de6df73c0a8a75b77fcc10f704381ede47322ed76632cce67b772

    SHA512

    4ba6d38eb00d17c1189e95ccce7af5e331271276a7fc900ee4a0b2e577f83772cec86d2c1cd3a65c66451ad181d3c7b1047361c9c896261edce7d06a71d9d5e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdc2f9e1f19700f76ca7085714c2defb

    SHA1

    b2384b9f375b3c3f49eac1cfed8a77b6ca48a519

    SHA256

    e3799b533b5de64a512ed86c8747d1d34e27706b9d0bc7e0bd859799448e2d44

    SHA512

    5b3f81d0a72b456daa3915da7997d24ed638241babff1f9b52e69cd7a757fb157d67e6b9cb10e2ae4505f6ea87216c66116885e52c85c04ae80800c8bffe5ddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8d4a3740853e9b3542415f8b7d21cd6

    SHA1

    ff966ec455d30fbd0f9cddc2b73b1741aca4830f

    SHA256

    683c91d9cf662f1fe42d6cc120f92c4c0e023900a634244f2d9b36e55a2c8b8b

    SHA512

    3ea48df65c0447bdbf4fb0c120de9a01008b44ddf913e59861213929410601e1ebe27fe0fd51aaaaf950fee1a3e074993d0a4ca7dcf1dd068eff40d9d4ef0028

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6111ba8a620d5e77ecf3b41648193a8c

    SHA1

    62ddc8cc66cd29339c35fe353b84f41b4855e053

    SHA256

    95fdf626a75d20c273a71ac3db8b8c76ed413e6c01630e9b84fd4618836d6c53

    SHA512

    f1b45e6b7e90ae3abdea767e5cf3c492c3da755e515a51ec7b6bc586b48781113effee64d10df589f5e606abca54d74d6d44be81c72955632dce820939f9a54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a6bcc25289fc40f12fb0278c31a0280

    SHA1

    c06915463e4a18e689f2640588f8abe73614cf12

    SHA256

    25e82e15899727297df1161ac30e1f4cbbba9e528f1dd7f8c16553b5870d95ce

    SHA512

    4a963ad414d96c936a00fd6976efc36692bc5940e48d110d9737afb88e4f4a138c3297adc58e177de14fbb5d3deb284ed69f5d0c333810b28c24a01b73f1d4b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f11db013249cad752e8632aa667019b6

    SHA1

    6dd18c85f43ce049f1990a296d81e29fdb1e01c0

    SHA256

    364e5acb1e1874e4888bf5787a5cad61475e6996c207aa55878761fa8c08c303

    SHA512

    8bf84a714b96e3a4abeb9262220c5e21bb6a51586d2e646516eed7a934ec39414bf45ee19b9e5a7ad39f1405a25273aa5a902cb473f03c73c7205528db8a5f56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba251c05f40dbb356064bd8504991c84

    SHA1

    a6bdc6a99f62c21d79eea18ac066674a6f1cddea

    SHA256

    7bbf667cfcfa56178c99a909325502c46e49f33e8fdf384fe23fb6131fc8e1c9

    SHA512

    5f2c7f29d6ec81f2cddb50edf97f734d9c1f4424aaf18160a5b96a9fe3426c1be515d6da104e6cdb7074c6a18c788e8e056c0642023472c06d4038eb8aa5a866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f497802dfc9a6a70f5a451a38761d2d

    SHA1

    392caa7fd5d9b14a3cd36f0c571be6332064b8ba

    SHA256

    a272e52e1295c2f4940a872d8243eeb3a41c750944499ebfc6e133c076235db7

    SHA512

    4549483447eab2536df70ac43b228cf408505f8549b2e3f86ac18aeb18d7c7a664d62fe6b4a2ea1ddd6c37ddc603362e3fd69f9ab43470d20e9939a6f8205086

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e18176a8d855c0fd70a80f29802d38

    SHA1

    ca950d20099eed07d3d91b340fe05572c461ae7a

    SHA256

    93809090c4f06a4941446a6dca6634ebff7355108b9fafd54ef1dcdd69fd3d7c

    SHA512

    209e214966295fbb6d3236d07c0a94e6560e69dcdb7f7d90ca7d7cf48ec3f32d2aa6e5d8456a1d4df6a0e60b4c75e0fbbce0a6d40c4b67979c78e8bb8c07a214

  • C:\Users\Admin\AppData\Local\Temp\Cab4A3D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4B6C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a