Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 02:55

General

  • Target

    37e1dd89f66d257f7881d4291e5aadb4_JaffaCakes118.html

  • Size

    461KB

  • MD5

    37e1dd89f66d257f7881d4291e5aadb4

  • SHA1

    732be942575074e2f72a5d03d777778537eac1f8

  • SHA256

    338f7796d7f6b1413fbfcec965152bfe21ef4e17160db4c149f6099767c79da7

  • SHA512

    88aee45715c1f9b1962c5f83d57af22f847c888cdd94dace16ff5694428629d205acd85a453cee5cd75cbd3335b02c145bd1063fab34988a06b47de78ba800d8

  • SSDEEP

    6144:SssMYod+X3oI+YksMYod+X3oI+Y8sMYod+X3oI+YLsMYod+X3oI+YQ:f5d+X3U5d+X305d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37e1dd89f66d257f7881d4291e5aadb4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acf476c64059235fa9694eba8fe037a3

    SHA1

    42756c7cf6cf3fe3599bef39660d50cbd8a5fee6

    SHA256

    e88ac99964c969099a11f660f39c22204a84b0eeb11158ea086f7bea5d68998a

    SHA512

    d77a47162729ce8e6b3bcbdfa5b3a997dad866fd4c9d180862b814e849316ac78df4203f256ff636939c22be206cd5f9f3e04f8dd2e74bd7246733c9fc34d601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cceb5939c28905a5a9e3b74b22f7cc3e

    SHA1

    4ff6ffbaff1ab15131e55d6ffc6a0a2fe214fa66

    SHA256

    73b30fbc94095b0d730aa453791a1116ec6e6a855301dc8a7bc4ea4b519bca06

    SHA512

    2729e430d855fcb658c75725946db2b7bfbf0f47fc3fa2a2994b4a97bc91d2f3fca70f81aebe65d311c7421f974f69d17e4f9a8ca44abe7fc2e06ddaa2bc4ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc413b80dca1dc47a8cb9b009b8484df

    SHA1

    bcfe84e59424af692180cbe163325afdd030fab6

    SHA256

    c31e85c8a40009ac275a523942f8ef76199d258a9ae2633d2241f625181c1b3f

    SHA512

    5c1b78d1a010cd03fc1dccd87ddc011e5f563871315a39786d933c97c0a7dde9ff07e60bad76e6b2b478ec375ff02160078d83369bf2b53394650487ce291be8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ccb251642520a8dafa906820506b2b5

    SHA1

    8eab26c867d1ecf4b6a5696a8afe6f8e4b43b4d9

    SHA256

    51bf2f96deae8add7236a846dd5251fb5980eede44f7d695260222998fcdb54b

    SHA512

    ae99d01b6e00d1c3c4fd1adcdaaa0bf3a1d71bdcdf8e4c1052dc56d6a37c1bd72ad19ed7201eff86ee60c81fbbc870a2041bfe4e73afb5d07aba5f8d863d4091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f95bda544dba9fa55a98ee9d8d96eb94

    SHA1

    7198475b2588ac01d3d83b05f86f40a2b7c0bb46

    SHA256

    36c34f5d1d2b3fb3d347c9075b6ec8a31db1591882ea3e0d87053a6b4cb33fa9

    SHA512

    02856032b7d3522770deb49d5945f066adab56ddf8be4712bf2687659f923fba502ff853ff8d97be8d344bccb36474adc25ea2019d7062544cf33f48003bc33d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4e6239bda3f9f59262ddb29db07ca5f

    SHA1

    0dced193e83d11656c0c62961195fde1429cb96f

    SHA256

    99209d86ef6791d5d115f3c27e29a23ac353bd046c957dbc16a4466bb3c46fd2

    SHA512

    b96edb5df751912219e5a4c468b20d35b42ad0b3b835f73f4644508bda36c0d87494d7f07246d4c6991022c3b7d2f17831db2b29b1097c73fac692c05c8485b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a02d75ba622d0e2a3a344ad43e2b7ab1

    SHA1

    d934006f403f3d85e53df467336eb1f354e8deb9

    SHA256

    38982da5db2ddd7485c088e152813d205009ff50e24e084bda8456143782d80a

    SHA512

    dcc5741d4b2666226f9e4ef0764cd1432a5194997b11b3aae669ac8df615e15b834a7067fad88a1dc6f3226577880dc475c2d207064a438d72cc8604a6461cf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dab40e1054b5eef2c9105c18364805cf

    SHA1

    9ff15d2c79e3a19b2299dff403ed72660ea28c33

    SHA256

    0c78044b22680dbb8a32628189bbe8960e7c1faf42fea9c6957eb1276b306886

    SHA512

    4fe4b14fdfca90821479d1e56d06e83053ad5018846c0ac7c5ab9099ac1b2e01f0aa64333793987a26db035a57f3eaf67fe0f310b387c068f67a0c5be467fa60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e0dc4731e83770cfc99c99ff0a1f50e

    SHA1

    9f42dd5c6840583d7455d2bb6d6f89f06ae2359a

    SHA256

    5670835e316e681c41fbb42982a531949bc22e0c50d4e1816a741971c4a889d3

    SHA512

    3535469dadfa4f534e821384f3f8bc80b8ba8a61f4d8351b94a087c7db096c88c4114c902cb1339a8ed7f04ca6268a2bfe6b0c17faec6bc913beac584926b4dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    631f8387f4c7c5c8600ed1ba2b785061

    SHA1

    181c4eb2aa395604b701de0a2c221c081ce585d1

    SHA256

    4ad5434f34bc6219af9a7e1f4988b245362e9190c344f7cba81fb65dc2bf9dc2

    SHA512

    fb005b2f322036bc31dfd7eca1391f017410ea201a40add80999bc2eaa4c29319019c9cbdb5b2ebea3acd7effa4a187e6d72a03158322b54906d89a1f23e5969

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c1e1879f5c134cac793fe60a17a3b92

    SHA1

    e3ae9f0c5a08ad25899f7c42181ebfa466ccd443

    SHA256

    0d0c1f25ccea38ca673f8d1ca245d88b86d534ad4b3db7d72370eae98cea35c7

    SHA512

    2528e3a6b07adfcf775eee77cb04f9936a804efa297f1703a54d3271dfb352a222255be5884c089c142a6cac50fc2761da67b6d66df2a003adcd3acabcc98083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2dc9ce802bb28b54ffdbfe00e6eeeae3

    SHA1

    c317311285005bcaafdc85899163b014108a4e55

    SHA256

    31ba00aee022a59eba62f7e85fe4e29fa5b477e150c1413aaadda2d4c46a8764

    SHA512

    c5486cff2d545ae2d7d841e8df1bfe93ce03d9cf589efa44d1bc223bb5f49c1ac520beb055ddf57bc30e7b1d102f90f99e1a48b1c72591e5031285bb8d323cc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3ea733f8d016b58792e0652a48e6de0

    SHA1

    47bca28679f64caeaadac4c9a2fd894e34a2ede4

    SHA256

    315b676a6257e497ec1867aa1936fc428b3ca3e72cc2d251f4d9bfc1a551602c

    SHA512

    16ce4c50231deb72c5c699826f3eeeacf4ec7b11918b6ad6998978b8b0e15fe02d596907791c10ded7968efd92af27068122da62e1bcd8befce9de0b8fefd763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55fbcfea67753fa226ad37f8639ca872

    SHA1

    b313b6f841f35a89a67bb1ffa0f0dafc1eda950f

    SHA256

    1c06dcc1a324d9d509bf0b553a29d168ac37c9c58e741ff958f36aea2dd9011d

    SHA512

    eba70e4a07bdf12e9fda56a3920f177d81833676ddb8ff236490ffa6175ab1678b58392577fc8872300a377f07c487cabeeeb1ddcb77e42a1f2900fadfd762a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    173405ed31735fe9744afdf4a6354b02

    SHA1

    338e63aca50dbe6b3c28e590f436c40e3a7a71b8

    SHA256

    1b9e24b46913604617a07be63d97c3cf507dffab54ad31ec2f32ca00d6b1d829

    SHA512

    c447f7624b38a55669b4041a58e457890838231777f04f49eca254293b7a3a24db35402febb0af03d1013d6f45d2efe282e95f8f608201317266ce65a8bf0f9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    143113eaf67638386c13994838337891

    SHA1

    bbbe170828d9aec1297a07cf074cba6199bbec98

    SHA256

    e520232c10118a6c036aed7dbe6e706bfe4d156b1cf8c435d5ecf5b147516043

    SHA512

    2648bfef6eebf328cb0e8a4b44560a81f8636f065163fecdf471d3f80b173111d29ad4989d0b50061b5d16134b54d7e6de10aa7a5fa3659fb47e4ddff9815a1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b1c8e389233264fd861b3dfd9fb9dfb

    SHA1

    9e6ddcffa175192b382fe0f799ab047d786c0a24

    SHA256

    3d894454f6506a7e9b7f76c8c87b585e3eae228eec8a15b20222291ccbe446f6

    SHA512

    0f77f2c111661ca610072834b8ad69b3eeaed4e657db4891745377dbd036b28ede28d9bdb7008a4a948b464efc2bc0839058b7296802340ff672efb1a5421e6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    781ef975fdab1cb845aea5fd0a073b2b

    SHA1

    fbb65614f57d46c2a4fdc69fcd6f4ac507b3a75d

    SHA256

    0f6c452b7edb5c46310277a0404412affd6c593eeb83de148237d7d1e8379a85

    SHA512

    b43997a26964cc736933aaa6eb6c56f04b242af1618a0da540004009626312247201dd8e25d461bba0de1ec2a112de3f4d8281f918b18fdae397bfe16ab7b67e

  • C:\Users\Admin\AppData\Local\Temp\Cab4A5A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4B2E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a