Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 14:18

General

  • Target

    35019f75c54aa385ceac27d0db070624_JaffaCakes118.html

  • Size

    460KB

  • MD5

    35019f75c54aa385ceac27d0db070624

  • SHA1

    bbac6dad9f68a9af227b3fb3ff2d58903b8c9ecd

  • SHA256

    f568612aa1cc0a1094ab5d5d25a54bcbc1a85e0a3decdfc303022237ec246a8e

  • SHA512

    6d372f94703c76842cb83cec512ed02d52f33efe4cc4f0821e8ace81db26852a0660209bc965ca18158047c9eb3b124f63f65ca94acc261715e4d25f29e0cf90

  • SSDEEP

    6144:SDsMYod+X3oI+YdfsMYod+X3oI+YUsMYod+X3oI+YLsMYod+X3oI+YQ:A5d+X3/5d+X3k5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35019f75c54aa385ceac27d0db070624_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    979945548f0540f292e8c3d8691d5267

    SHA1

    444fbb58e10cddf697951f5ea57e3e4fb129951a

    SHA256

    bec605223153352d66d4f0665e322aa515be605dad7ca52ac490946db892ae30

    SHA512

    d1df8bef5cd0e9cbfc2b420592c9ce1761abfe9c8954499dfb059b68d069ffcacd6acb0f8e9cc45c4ce4970e504210742c13f1e71b8015fcfd893cc3162717be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    33b19293d2fa82870bceaa589c65b06d

    SHA1

    66144fda1184162f7d64ff297e5098b91071bfdf

    SHA256

    24f43fe9b0ee17adac3eda4d2f4aafb717de7842b0ee5b521b1688a72d445b28

    SHA512

    fd7e31ff0d7fdb3a85b567dee883caa8d613233e91cf9d66614082b699fca80d1135ac121ec3c5eb5794667fa244e60a98b113c7d2042788e08843479d61d885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7b0e122ef03325e58cce35e583f5f85d

    SHA1

    c5aefb0e3d0f4d97f0d196926011343c40e6bbdb

    SHA256

    6f614f839da962caead69752c54d1e03159fafcd12db1af176dcf7e69c86504f

    SHA512

    f10e3cced05e2bc1296d34c7190ba96d40ff014943c3d6fe8eed951b9f443e231de455223f0743f24e3ab3cb3998d504b99413efc4bffad46f2fb96af8579e48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    adf450e35384a25b69aee1be096663be

    SHA1

    cfdc7fb501327797171e23af283f7c09c15be7f5

    SHA256

    081bc7432eba99bc2d86ce91eac286e7a86a2884b9fe152366edeb3bb2321c54

    SHA512

    97ede42f87f4edbde9fdb8351fab2bcde54ce2354eb5bcd7352079b5b3380faf0ef107813a56a3b59023d49066c9cc6e47c203c50cabf406c76895283a663d4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fc3ca2d5df50da04095328a18489aa54

    SHA1

    735660c756826b49a33b7f713f0057297b31ae38

    SHA256

    428940ef1bddba30c886e07631b3dbea4ad258b569a2dd641eccfa3501cb6f16

    SHA512

    be3710a6488010f49ed399e8ff97508a5d3bd7292c4c63f9fff323e5802976e7c07bd7a26e05a1c03f28de482b2b78781ef2275f3e0e6ba812db163287698d8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    477e3a296395d778e300ee19d74d4bb4

    SHA1

    fa77e3fb370969e135e1c7c75ed5f5f6bd50bdfe

    SHA256

    3b29eeeb5c6c2c9ceb7c92fd4f4e89fc8aa803b29c7ad829f9d35e3ec293be7e

    SHA512

    867e87dc53e8c0e461d506c81b82b0319daab5d1872dc3e8331c8311299b2600e13a42e05dab1035d4eeb4964606c5b75e0fd7c3aaa9dab059245558844a1e8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8b5dcdbf16413398aa57a49cfa834178

    SHA1

    a6b9e50a0b7268ca199f2e33809f9fab46ac2080

    SHA256

    5da434c47eb571bee385e71cda8758681fc0a6546c74a3eb8c9d8cc98f82bb40

    SHA512

    e35b7947f3541dd447dd28f4813282a60f4f94cbfb63cfaeb352a3b851efbf672ba00a620b2a5d96c5f9782894b51da379f859cc9a37866c8ca8c2d5b8c419db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4c23230112f111d06286664f20aa6ac9

    SHA1

    8c93c755717fdbbf63859a02d170d3d338d7cf48

    SHA256

    e88944173ec68f52be88f5a8a2f2ca0fd0bf63133cc41c21734eb6dd6db23749

    SHA512

    21749dfb976ca2c6a1caca3f3b5c09531d5b78b51abef1bcc6f626559449505765071889117da862a68cae32a577da09712f0deb97fd2df8e28fc789833da9ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5c657f7d83d81c871e89dba3c7986d76

    SHA1

    70a1e7b7cca0f53c5476f8f19ba1941cb8739f25

    SHA256

    405ca3be183eca9fff5b5e244ce511e85d47ef4995c912ebc4b97de11739e855

    SHA512

    5680f220686c66aefd1419b068999f889dfab019e21249363e0fc9e36c02aaddc6e15dd9a0c76fc735d879a6a4f7dec2f7d00e87010dfb353c4aba2718e0b404

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1ab18f1c387ff87a6f49aaabae2bc297

    SHA1

    78d7d0b09f631f68cd9607a4f9a2b01ea3e191db

    SHA256

    9226b6c48c3424cb0bf680f81140059c1d790442d8cf66f56c2cd5622e7bdc74

    SHA512

    a483cb4b75627ccca6cdf6449ad6b4521295c998213a2651335b84e94d0bb29460f89c8c92e8d98fd107a8b942ad6758789cf84133381b40bafa1c302bc0d4e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    aef795d8f549d1c31f791c3ceeb52ae6

    SHA1

    ee49106f79d82044535f486e22e4702d9e9fd6cb

    SHA256

    bf02771175fd4a85108d8639075f5fbc471ba991bf34d3cc072d03cb0e8fe6e0

    SHA512

    f34257aa7ccf7113ad31c15deeee7f37d7fe4a1fed53b4432c8b06af4664242994e8bc24e99146732155994aba8b0897c32f5bcf843d6c0ff24fc11729515364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    46aad8027b7d45c5b6c1b04164b4da02

    SHA1

    d0228bba0ce4b7903bae2eba0c644c41675dafa0

    SHA256

    fd35c305d4ced021d76039b337b38130b6dee838f694fdfd4224ae42ed2f5d9e

    SHA512

    422b870df3a19c1f782ccbe32e0b42d711a37d6ed977c7ba6aed931bcec5b9adb369bb2aa64568e8e05e02053bfd21443aebe85f1efd2ca137afe0748e16392a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0864535c5d603fb7c98cdbb1a0f5c531

    SHA1

    209be451fecc4ff15b65a0fd366c093de42a4a7e

    SHA256

    e9a21c7ea48ac81754e68aae594062fa7b5465dbdf27d7bc271242f11e06f86c

    SHA512

    26c4062137afa6be9b22cb6f6026dfc01a0ac687a946a2ba2519cae617a844b63001f74c9f0a5413bbd41666c4abaf75a8937dd5243f188326bc3d00fcead974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    828f7541b1ebd587e5e6199e4c1e133b

    SHA1

    a706988fdc846352c9f7dfd49e78f8b5e98cf9b0

    SHA256

    b57206c7a2bd652e4275b1a01244bffdedddb208347ae5e771532ab89bc94792

    SHA512

    35abdec0666dcbe7f0e15114b2558dc0956645b386396925ebc1c627aaba0f73c3ab7782bc720e9e995d1f5f057e3bff7ce778ac67b17c16da5c1ead9b808b60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9f04e57f256d1fcf2ecca04546ce2375

    SHA1

    653bc12987d68fa5e2ecde4070e7216aa3a61c2f

    SHA256

    394ad9fe831906bd073b1fee3eaa6d0f4a8445ad347c52654c92dd3efb43868a

    SHA512

    8795abda25e2e4f324b375f43396d4c20689bbbd0a213b43f88276c94db460be1cd81ff8fe84e48931c9872c057fb1d28037c8e72d5ac596f101121cf85a2320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    847538dc45eb3a83e074b7adb671d377

    SHA1

    d154a1e9099ee9948c8d41d816a5c0656fea8e38

    SHA256

    672b95ab69a185d3547099b68c6c7a90fd152be5afe1fcc70e98e6a6565f5b2b

    SHA512

    1d2d5e6b0687502b11043a9a5e56c754f35993439a22a22fb128454ff7fdefaf796ec85f6ff7a1d9cd2916a42560adebfe52b64a168a1da44b000e84757542af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fe2f8686840280724afa19215d4a680d

    SHA1

    ec3210dfc146c97d752ecc8af86c40013fb8bfa3

    SHA256

    e214266bf79d7afa6c7bfbcb1e528f37d7b414f24b8ff9d1f1707243f7eb795e

    SHA512

    255bbe3844f57fccf297e3a9bb95bc31de054996d6cc01eaec472a5651f2fa5af4f91256f2235fed4b35ef895368ef5b1d249991b62eef746f2ff1e0562131f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c9ac69506e50a01e3e2d4e266a9cf448

    SHA1

    60eb89a7383e5b21876d7148f43d822078445486

    SHA256

    a7d1eb3e390b07ee9e5ae3d677077b85020c16ed0853b675f9c55cf61a6f37bc

    SHA512

    2f57b088e4bb993b074a46cc104b9da6defd8ba473149f6e73bd6ef6aa54caf20f0577c8f2e133c9ef5ab9a9b565cb06d7b84129a5caf053c541a0c0420b39ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e1a89b457a035ce17e10c9e6c3ff58d2

    SHA1

    ae8150251d987398b0199d1e51afdd0353a9ff39

    SHA256

    47cf68fa03cf7695c7e0f34b3bc04bb4129671e462af1f26b7d592f48f206842

    SHA512

    7316d28e13dcfd0b171af39ac43fc858da13cf7d95ad57e08a329b3c2d2a6dee4aab0df7636a5d32416c9b1c645b7f29dc19b37a917aa73d5d602dc43968bb1c

  • C:\Users\Admin\AppData\Local\Temp\Cab403E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4110.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a