Analysis

  • max time kernel
    137s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 02:31

General

  • Target

    3244b4c9c672fc16b4af591d2eed7544_JaffaCakes118.html

  • Size

    17KB

  • MD5

    3244b4c9c672fc16b4af591d2eed7544

  • SHA1

    fd65a4a22640f808adb491d30fdafe4ac0e8f021

  • SHA256

    64d5d27a592a66910904edd3652ee37bdb417dca979472da4f83280bbfbb6895

  • SHA512

    4a994462ffa04249a628c8e5a4ae9aa5fec529edfa61b6bbde0b9de846c3b6586c41b43e26d9ffdb51fb21f638152c6a5bcea8d2b5843c0cbfdd74b63827372e

  • SSDEEP

    384:SIHwk6z88Wz6OrVFFUjBQVxkHudBGVlDDYC/YjX:SWyz8806OXX

Score
6/10

Malware Config

Signatures

  • Mark of the Web detected: This indicates that the page was originally saved or cloned. 29 IoCs
  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3244b4c9c672fc16b4af591d2eed7544_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3036

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    2a3ffe37527f0307f74242c1b9a60fe9

    SHA1

    c35189ad2e47410df1c68cf6e431ade87fcdc1f5

    SHA256

    2dddf9d362169960d3bd93423687f06fefecd60146b3b531eaa5c6f0a7474a77

    SHA512

    9c96f33e240d97cea9e10a58e165144bbc3a0eaaf56e50de385cc0d1f24c7e7b3c580cab88fa14e19ae2eac62480f65fbefd963e2d1e8c37fe9889f167455987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d4900f4b5244110b12f7b7e18be46bf9

    SHA1

    47e8a53d92691ad60f1ff28b101579e16f1e19bb

    SHA256

    6005b2171e3419f5e884e62e063d53cf78f1997c2cb2d435346392460c626ef8

    SHA512

    cdfabeb75e1efbad14a7079321e79e3c5ea624b3a9c4863edccfa486c64b6e34638026b7bcc8e25e9cec5fa1f841717fabb9f4ef4cb6e1f50fa30d118094c3ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    38219db6e39362a80caffa8dc9c10718

    SHA1

    c400ba0e8872a06c00a22cdf075e695e60186d91

    SHA256

    975a04eeeb9e6fa4aed0be8df093df045ea6954662de6653264a14bb57f99edb

    SHA512

    983154e27abaa6408e530c30e6d1a871165815baae3e4bdab363b2069fb5042b29e1b549533d2a2f7b20c23daf75845617879432b4456d007588ea288edce320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    32f40b9807420e4fd3f669d7d9532945

    SHA1

    805b5591603ff22388bc4074b949510f4dda5382

    SHA256

    ac4b2761be63671d0e9a0f4d5ada0d657358b14975d01bb69f7f8fac31ca010a

    SHA512

    8a12bb3eed9967de0a32081c5ce30660e35b6e000a1f1cbf847abb0ad204b8648755d1420b3ed1b5854541ecd137b86bd8ff89a987261e7fd3eb3fb2d388655d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    8470a5ffc122ebd4cd7e0ba10b98f5dd

    SHA1

    ceede60035f2cd1889099285a8a4ea7c138cd98c

    SHA256

    12c789cb3581a11e49ae796bac7d6b9df7daa83737ae371e28d813087b898a8e

    SHA512

    960c8079a1b5970d17c4f7dcf92ab341d18aaef5e9d3d4e483919eda23cb7a40a98df24ba01a076eef756b12c5d38547db6e407b34b6cb35630a6c428ad9c675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    5259192245edc674d4df007dccb66578

    SHA1

    77e488e48721e064c722730281260152eaed980b

    SHA256

    32cb1d02ffa98cf207e4ee24d604da11c1a1418cb2980df96ff21ea92a468980

    SHA512

    4e11824f582ff972c53b883517ef28e056bbef6ef85ea834192bf64ef6e85713109c027242ee49194600c5011e14b7ade5275b99b4c23f731c9cc7ed3192c09e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d785ce5dcbca25d127f4e6e8ed8b02e1

    SHA1

    4af2e003ec786f592e7321071a35045b629d62c5

    SHA256

    7cc5a4d1233b49506f3387e6c60d2470233027d9ba66bb4283486fa2445aac9b

    SHA512

    0c841fd361353facf7e4228ac1ea7625cacbbcbe1f7ec15f810114391a07adba223978db2e50aa105f2f604a250dd7ee3edfe336c8532b58eb37ae7084bae019

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    7064cd5489bc405480f0c3fb5b722066

    SHA1

    2d33c7098605cc944097f0812d9a20d75bdf2533

    SHA256

    69a594e398471e8f739d6bc66bb46fc171a7845f707c9fca929d0086ce932ba0

    SHA512

    8a953e82af311e97e07c1fe06a4a36335b5b6d4f35104b79b57a5b9e26854f142438801a8da6752ba70fb594c3176c9da76c7b4b65b904a9e74f40c51f5e231b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a52ff0ddd3c78c49591f0dab9d1127a1

    SHA1

    20ec7f4eafd1e4fdbbcd947aa8998938b85b540c

    SHA256

    96bef1e00257ee1904ad037e4ae8f7498ba5b75273dcdb433a5187de38bdc8b6

    SHA512

    b94df44fcc61a861cf83fe60c9a9362d9ef29326733a69529d434a0cb33bb3a1e439110322ab63135a350ffcd890b70ce9a73e99e2acd377a2c9c50947e8527e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    68afde88354a030f100a6cf99e14df65

    SHA1

    568fa9a88804dde912c4c6d77953d7edcb007bdd

    SHA256

    0311a3f150f6420e288ce4a07c64eb933bf91de23274e1684b3ce8cba8df5077

    SHA512

    c051ab5dfa3091361f9e14fe1d6be6da598d8896b470edb623371b366320389eb16045772635ccb51dd62e9a26ff4f4b60c3ee15e59d205665fda076b70b83d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    1c970573d13b162e04b04852f7b89a6b

    SHA1

    abe0374c99ec8cb375bcb4515caf58767005ab8d

    SHA256

    f4e60074eae5d1ec924486b202269db9f3f3eba6cb7f5b28e5b85c508aa2d725

    SHA512

    68c1753cb91d81caa4780748acd1501a24cb0b24a845de41f183c4a0b0e9b077c4bc0997feb490b742c60f92d8860ae6d0dfee48a1241e43e3cc5654b51fce71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    9c00c88d493845d3865916eda3f4a553

    SHA1

    b77a335767ef23068d911e71e7bb0ca34b2a2057

    SHA256

    bb32bfc59046d1afc05556c595e5f02f3f08df328ecf831f336a65ebf504ae14

    SHA512

    5db8e5ed5cb21b5f8e8e1cd40faf9fe04e8a4278e78d74cb3ec7c75d01eb52f7acebd8e1c996e34984e0950541a2728027d090b3bb64befb159e1d2c984008a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    78e9f3395ceb965fb3c42890e2d52746

    SHA1

    d9c8c32de5516996f3cf388168f4006e5ab06db5

    SHA256

    cb64a7a5586648579776772d944ee6542c0a9cfd8024ce8a1d2fff0e34baa5a7

    SHA512

    d636273be64e9cf76ca9c7a992d34e300647c3176ecada4e5e077fec6590cb45c10606080d5b79ab8047efad7af8868cc8a00964ac1f2caa13c8c7751e4ba2d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a698b4cf54f1dff8a93e52703f8b9e68

    SHA1

    a4db458ad775166bb77e4987060dc4aa1d975922

    SHA256

    8aba27c1fcbc8edb7338207b151e7312e5403faa16a37a999bc090d6799fb43e

    SHA512

    c65461e9b804879811482a16e4fe08cf3fdeef6491d307dc5b711b5998a4a309dc815e8ec9bbfa7f4688f7b59e65658a44815695447b156d00afc08e15fd5298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    c01e651af4cbed945689ea77afc49387

    SHA1

    51e3b7ef44787180776d04efc2954c6b1464c0f0

    SHA256

    ded3cf4b91f0d5c597ef63621ddf3467c60db645af9b2ba3a9990eae215c2284

    SHA512

    273f7fce5d155c6df889cfc1f678518188c7c5fdef9b96761b37017cad2166e68e360f3ec18c8006e60ce98b355661e5305096624169c5eb8b50a6c16659f77e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a8f2abf67c5a7a2fd7bb495678346d3a

    SHA1

    41d6a33104ad2e5fae77e31ff09d92b71faf9354

    SHA256

    87e227b3699d2936b080a572d1fd7c97feb3b8578a5239164e88be9c29421d0d

    SHA512

    4d1aa2ea4714d0ba30e03177e770e1db062cdbed3eeb7b945cb21f1b98b47ed253afa54031f73feb87e3d85be1b76237954d328876881dc84e7767e1e467b3f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    45d26fb9d279a74c967e4ba5e6d2fb39

    SHA1

    a5e6a3d4e63cac0dceabdf8dc72940d660f4d55e

    SHA256

    5ab405a65aaf4dad1f4ab4755de1ee96680e3b410b038a1fddbe7d7d517fed53

    SHA512

    b16a5215372b0b412cb76ef67f699bf20af83a9aad9f4b55dd5102fc472903a44cd6d4e6a9ec374beecfd5a71ac48df1166a23f4986bbc5ce0d72507115a6cf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b019637ab372689f388b234ddc2b5bdd

    SHA1

    5e7a7b71a734703e525fa00317222ada3d96fe51

    SHA256

    f2edc3faedad3e8465ed5702e0056471d2dfa01997ed98b65b311d4b1143ba5e

    SHA512

    ca49d155ab0baa46a1d1fae79d39d48bda86edf97190342a7260dedc36b96f4c73c9e7b4e93fc832c3d0e7cf22cec6b34b417c67d357d8ba4bd959d9b0e5a29e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    06deb324a52558e083b9bcea318d9ea1

    SHA1

    77f3bd5a7bc8cc56039013ca3362966b4848e1c7

    SHA256

    7e4abc8d218e3e7ccb4ae13ff8951322da4b2133222998f4bdc01c9b7d37c305

    SHA512

    25c79d9b21f2574c3b00ecd24e0eb3db67862316065cf2ef9ef8893e1c60f9165170074b267701c960a237ab06b53aed17e9cc31f1b3e0ce8acb34b7dc0713af

  • C:\Users\Admin\AppData\Local\Temp\Cab18EF.tmp
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1940.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a