Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11-05-2024 08:02

General

  • Target

    339258d025921174401c01fcb26fcac9_JaffaCakes118.html

  • Size

    70KB

  • MD5

    339258d025921174401c01fcb26fcac9

  • SHA1

    8dfffb72523d9cac3a370a4d73007e685d3d8f8f

  • SHA256

    1bec81a76d35da86473d3754fa2c744a378e23eebca05f9717f6492991815493

  • SHA512

    e02532819a56cf8e9330fa03dc1d92ed2f3c7e1fe401c1f4cfa2fd44a5e1615a8c5a75e16378e2f71f3ce5180481d7c2073f0ffc4ca2cd3d16e61417e4340b63

  • SSDEEP

    1536:6Qy256jIvq+MiM0QIbMnM1TyijiZx+xwsaM:P6D+MiM/XWTyWiLDsaM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\339258d025921174401c01fcb26fcac9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6653692fc2717e55f2c1fdcad98ac1d6

    SHA1

    d979dfed8b041bd30c5e5812c3a2d793324af3fc

    SHA256

    4f889fd80a49be45a5a2f3a3333e6c0ef6eb02194018bb8767adb0a303217800

    SHA512

    bd235017482ad592f21dbc47fffabc121363cfe3098e2929f5b8a34fbb41b98dee58fac191ecf2e22bf784c1ec775e6250a2ee88e1293c989518706a08c347d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fdeac261a400a9a5c2a745eec416b0cb

    SHA1

    60fc054355e5efd25198bd72ec80681492170455

    SHA256

    1af6ae560982b3e381615955bf7b208a2c289003c36a16e0a9ff54694b8031d4

    SHA512

    5f9347726e592f12ce650651e5bc86ced7921d63876be03cffbf0e580131fa9d5290233c395b7f180aa3964e07c4c2265d65e7e8178d9c9f472d57b03061b6f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42abfb5474416ae1a2e81dc6167507ab

    SHA1

    308cf44396492831b539dcc40102fcedee62246a

    SHA256

    0df87725d37cb6e2e9922ecdb0f2f9865e459b3600a53d776dc40fea039e87a7

    SHA512

    2b35bf2d20a073ff3fc51e2bbdd051fdf4646d8dab0157ead562272879450a326538eaed29caccf066cee55e64ae0665413108b10d4e7ccac8e78cf46b728852

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61e8e3865f4ab88c8a9c4b1e2891d4bc

    SHA1

    203d5fb93d9a03412c539d32d35b2ac29d9b2aaf

    SHA256

    de8428be6d16c72ab6d94f56cf6ece53b47b826d560e7e720e0f6a288ab5a1b1

    SHA512

    62bea7b7dc78b6b28c6aa29f95c621e4c255b01780c7030f2b4f6d11a16c5a5bc3775f7ef654df6de0cb8b5d8ad9ddf2efe2221de192eb7f190760238902bb3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7885f6c6a40032b97350b2c3691611f3

    SHA1

    60bb2ad827397dfa41435a6c158695e569b4d279

    SHA256

    46363c1aa9062602b11ab80e33c63a68f2ed2706511047508f7ca2989f776986

    SHA512

    5ba031467d7e94d2cfbe766554d75dc3de678b8cb87e92e8d8f37bddda698a953462b96f4f6548fdda6fa3b2f578bf5cd58c8ca251570202aff7f1a78ac4c1e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    010252f61f776c1667711e0f57926639

    SHA1

    dbf4a19a1365479fc409561d19d6274f3e70f9a7

    SHA256

    a877b37d62484555025ea0e03da03c6f49d40376ec68e7c8938b631662b150dc

    SHA512

    4adcc3e848f80f8fef9779e5fb08d1c571451b1312e177c560d866349c3285f09691f2f663777cca1794949147b8a1a51b9145323662d6d5e7ba167c40860f15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78fc84650aab45295dffa13826876f5f

    SHA1

    5cf6b1323af1e9f595bbb935a146907df36f0f07

    SHA256

    b73664cfa15eac2a5e8371f645413ebb4287594a12cf437754cc97422357dad8

    SHA512

    21f430c07e24922c0e2dd8cd2c96cb9645837218cfc840692c4eaf76414859d0fba9cc8bbb0a55237486409c803dd2598efad236fce0c0c91aa510b78b1935dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    625d31c3e5de50fb33637dbdde51b972

    SHA1

    8bd42c647d4b9c2152a659f1f57d0548f9630237

    SHA256

    847d849f2d935a21882b898eda9ca913c8b4bdf36933e4c13e598bc98be9e6d8

    SHA512

    e39f54ce4f4d19babcfdd292e158a746e6cb2a588f20c5ba5041ab7e494e14db28805812a532f1877cc460abbb0133b1560bef8f3259443949b965efb4b7d30b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7be1fdb4e08decd1042d1737d71f5e2

    SHA1

    d2da738e3f83805dcb8aef948fcb0c72e5129c5a

    SHA256

    b07af481a5b70fdf92bb1ab2e55bdf0930b5e5023c401eadb7915ebfe0cd0358

    SHA512

    54ae4c195b9f3a741606dcd3aed5bac0453bd36e8b325279d4f06d760ce6b175c05047e486a176012eccdce1a429a54be2f5f5fb48a9174b1e00f8400e3b3904

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96477c8451825c2d7e6f588c3af92e1c

    SHA1

    145daf4e85138b29877b542a958f5a852c7ced4b

    SHA256

    46ef385990831c21af9bf1ab0b201fe5bf6116fff81964718a9cd626ff2f88fa

    SHA512

    61b1ef7d7316514583ae34931728ad2cb7ed42ad8e58068ef8e4248071415431126c8f08f2a6603b2320d1dd2c2ef1950d2a58a6d1e9f51d655c74463201fc2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    899920736019b75cb89a562c9790e3a8

    SHA1

    0b3bbd2617f4e76f8d0cc05045eeb6cd13640b1a

    SHA256

    47f0a478325864cc34bebefa382ac97c78b0357501355ca39f871cb671a3638e

    SHA512

    d9e737f5fb50507b4c035ec376d6d0dfe21bb4f77ce94b8651c28d4ad9f11dc0f7261d2f6ecc7def40604557706810c576851760b8dbc4b02046fed66318e45e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35c24ad15a2b70837e5720e640e6c5a4

    SHA1

    818275b7e6e733264525a3a1b6fe347ecd9930e1

    SHA256

    8b5776c08aa743e68b4ccbf84ded8853ab09b5d23e83ff5f7723f6f0d6671b91

    SHA512

    ab3e68928a1cd710b7d44a7b72b54c7777199a4d7c94548f62b61fce89c315b3fa55ad750c20ea5430f66a2cdd5152363a7e82efc68d2a4bed7f555036f940fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7406b1d8541dd913b10a82443d8ddc44

    SHA1

    0f233bd16b0786d338594f3bdb9718b531fc901f

    SHA256

    8862b1e89144a9d9fdf0eb7bea51cb6ba48078e0ba3cb5085c6d99ce7a6e5548

    SHA512

    514b7dc43ac507e3ec1c188e195815515f0b1558a8b15ba65ea5029189720de4c188dfe9e9235f3556d4fdd5ad609f190ef1b15c42ba68127a9fbc410a3238c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40fd95804a05468f40c2721aaf478f5b

    SHA1

    be77b4df1c13038fe3b9a6afa20b97a6b7e209bd

    SHA256

    d70781784f853bd067c513e445c5b31ff0f19ae3ad6ea88645e3425d42d89e94

    SHA512

    1ef9e81ba0e71e13a111ac99075020fbdd82a24ac167d84dcfed102b53ac8cfba4de5b64fdbd8c978c59599b751909dbba2c9be164b0ea19a5e24a3c09a2a8aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aca10161075dbca0c93bd3faaedbc393

    SHA1

    0c0b674819dd5433dfcfc4b5b36c795dc470806b

    SHA256

    ac37eb7d53b9268d4abd1525d6a2ead922227fb1bc1c9a98495208a7f5fda323

    SHA512

    ec4cd0353ba510811d27736c51ce54837e0f04b604ea23388866645e7fc397e029cf77cb3bd12f58640567f1d495d1a7967213506ca23741afa59f81796f232c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe1f36faad371931ad5e49745ec1a882

    SHA1

    53fc9ba1e85b14f09cec3af93ef07aa8e349dfb7

    SHA256

    9742563342388d564b80d972b3da8b1bba4356dfee1ff0f5eff89a5974fb89e5

    SHA512

    58cb1deeb19320be4b6c63fa967ca22b7cce3ae479f23bd56743ab605c8b68bf6f70adbe63fdca08d5a5478ab682e6e54da62e19450d632d6e327f370c21eef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38d8e6af0e8b115b1c869ce54b4de050

    SHA1

    bfaf91899ba83b1ecd47392ea5ceda24c7d78254

    SHA256

    e2b52a5f2f803bfc85f520862c85cc98f606f5bb0cd02777c4b779ce5e5f0467

    SHA512

    5d9c2feec1c32ccae650283679553dbf8d6b9192cb627caaca4337923ba53288a10e27c41e5d0a6be584707d6f603c7fb2795e0568c221dfdfb633abe4baf11f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    618c4397542a61d216230c0a226b6e88

    SHA1

    444187cae0da25fe473da4b269377fd257f843d2

    SHA256

    7f4de18bd5c355b750b9d421faea3bc45e818ec86e995cba1ceb0b9c3f220145

    SHA512

    28f345097dc60acd9e811ea1c1cbb4526a4e993f299e25cea35efb7dd6f263ba288a5d436ea10cdb52ce387a03fd49ab341b12e68cfc0d9f44b00dd13f40a395

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89378afe5040aa6407300403f7816397

    SHA1

    3165f7749653af93536870bb64f8821d19ec995d

    SHA256

    a2cb28a8d82f6a8022e01615eff53223cc4d69f2e966b77776d7dd1f6ab383b0

    SHA512

    cfbfba14d7a8801e2097d6313a383d24496c04b9920d0caef5b67ed3ecf0e904775da959df9e38b183cf1c5c733ed5cde8ff2a03f3055eacfa69776a3b0d4fd5

  • C:\Users\Admin\AppData\Local\Temp\Cab45AA.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar460B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a