Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 13:24

General

  • Target

    3a54194b4a096c89d138726664938d36_JaffaCakes118.html

  • Size

    21KB

  • MD5

    3a54194b4a096c89d138726664938d36

  • SHA1

    a5c36c9b69231a81746578d25649311232a5c0a9

  • SHA256

    00396f11abffcea4cbfc50fe719dad30dc1ebf6ec0132cbf9e30a37358a331e8

  • SHA512

    8b445478dcaa7d118733b52f6094822cfa1e2478e4a20c733e4728b655ca41e5e10152fe0d670018427e4bcbf82b4981fb5306ebbedd7f199628aa5891eb78f1

  • SSDEEP

    384:VOEKqq8uh1ABtV4Rm7zKyaYJxaRRBcxo61qAVqzW4Zb7+P64S2rqNJK:4n/8uh1ABtV4Rmr5JxaRvcu6O064S2rH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a54194b4a096c89d138726664938d36_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfbef53db9446980cb33ec10a90d9c4b

    SHA1

    47e20ce19d5302063ce2eb74f308b7b4c7897979

    SHA256

    fc815818154c351a307dfaef476b7edc0e63ca708a19adce9a7c34f780269052

    SHA512

    16063eb487b4a1c700db426ad07578b847afe32b12a890b1e7feda28f0822f826ce73f2ea24bc765165aeab19da45d9edfe6acf5218162340a8f5389fc6a75d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b448bb4a241cff48c37a95a9e08b1445

    SHA1

    f48d52bb6d287091affd6822fc98672c08c29d2c

    SHA256

    4b3a510b2d99acdb71a1f31ed66f6455393e21f86f73f2cf15ab2aba681f00d1

    SHA512

    49510ff687bcaef98e97d3a786f02603b048f1cad1efe0c9d4e756f429aba711928ece2740a9ae61555c17daa7a9b91aa73ea062ebd25a722acc9219c8a83dbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31b052a14f85ee9ebf2e83b739193eb9

    SHA1

    d73c0f5e2cee687f391ef7c5392ecebedd41cfae

    SHA256

    fab23ca7af5e6497311ea9e7d0cd7eb2a2374f95fca32fb73f3322e7c1e5bd78

    SHA512

    151bcc4c44419664209a864870f392a1975b0e80d3474a5f610df5ea5ab01abf177bd822789930ab60fe028353a1f5f4bc647971b07e943c6e0499dfbf6f5fb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf2616369ea729a49af33d999c9d8680

    SHA1

    fb3ba979a05b9df9510cedbddb3fbf6e2bf0ab16

    SHA256

    b8343418b7b9639ce4460e18c852d513cbbe65601ae960dfbbcced098f6c2fa0

    SHA512

    b35f6957390ed569beed57b0eb1d603acd1ef2680a744e2df0b747417f57fc4768bacf174d7e8b86a7c8485f91ae9eb7d0aa8fd5f1b947150b0b94251c4d50d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dbf51a0a5e198e9c60b2810a6e7ac22

    SHA1

    2bbc2d4aefbb9c8780031fecd3af6b523423bd82

    SHA256

    b609cc3b487a3e481951b1b7a49e0d8e4aad462b8d6c2b1abdc2197be6d710dd

    SHA512

    e1f23d60dbbd36279c87f02dd665bb60ca6572856e780210064e51bb1e1dd400f130ff91467220876e789d5ab34c4976b5ca9d7b4d5ffa80fdafdb8a2ee0392f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f77a68b99084b7380253e89313c294fd

    SHA1

    985e512ca0f3494a0bf10a1ee6a47d81c3f7e894

    SHA256

    dbcc8bf34972aa219ec726851761df75ac05df7e4cb68e29967b48de441c8650

    SHA512

    9606c09876ac6a7beb40bb3f20685b58b2a9a86cbb29d4d0ca5c33c4e7692185fd76c859f58769497fcac42a05a91bd454eab27624435d7b9adb81bb8ef7b1ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7115514bd6491c8ee6efc6bf298c591e

    SHA1

    cd74587358ef3fa0aa9d50a0d5711b18f6469a74

    SHA256

    bf84cdfc5777c4040c7a18ba22a12276faf8edf9996628e331c6fd0f44a5e5a1

    SHA512

    be3a87c298a5a6558ec4bcf94a58cfc442c67c87151ddd9fd00075ffbeadc3a1bd9d3714ff43fe3f23e6cff604273db345144a687490b654fe5019c45d150731

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e000965b9426b488d520e588ecd03062

    SHA1

    14a45001699553994accdf0cc5971f3fdf219e4d

    SHA256

    e55c164c6cb7395781615e36265ee11a9bd5676c17c26feeaf05fb66283ba80a

    SHA512

    038944cb292eadb139af5f9f71224c6c987f8b1de65ad555e5c6a0bb4d0b4ece1a7c03bd0b62b0acc9e0a22c46582230bbc52f7ddc241d4533baa3b811cd2841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80ea1877f0a38854f48aabfac8ce41e6

    SHA1

    8274e3e1c2a74d7a56d0d80d7fd4d5c451caba83

    SHA256

    0c2b8f086534b3fb0fb12333031a09a95a1ff6ac33d51833b752cc5136bbbd1a

    SHA512

    3ce5831d4272056c8379e4881c425758a6cf5e78a8a04e560417d82d3f5fa6169c425a077647022e07596f06cb21bc6827466ae172475ff61956b529e1309cbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e45c69a56ac296b250b2a7237c1656b

    SHA1

    d378ec154c6c90a9c320754c1022bcdf945fc04d

    SHA256

    9f2e4817703e138eae4fffac49e125d6770e297d05aa00a6cc5af0f122dd75bc

    SHA512

    51599d71073c5fbc8471396cda272b26e4fc0bf4715efcb532648cc5d4ab4314dd10e4ec1b5b29ce3fe1c76721a74218852a771d27d52198cea3dbe9238baf9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7de954643800bbcbb17224d4614fe3ab

    SHA1

    bb8a0aeaf8882cf3461c9e08144d69d71590ba02

    SHA256

    58b28db8f68b3f0f825c584010d5ed3b6e1093479af373dce5ed4da4b56c1a2e

    SHA512

    6526136a7a8ec6f63de543d017e0e35e7209f44c8d0d124ff44669affb683a18b0ca7659587fd4c8e009a47c33d79bbbd7178a65ed014869885206263f200944

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    092e9617150e3f20f2fb61cc8cf5c26d

    SHA1

    471948aeecbd9c1af1aa4efd10a1ce443197c5cf

    SHA256

    d9995f31f88e09c674e24551e44ebcd00b454b888b936cb19bd27fab6f511fc0

    SHA512

    ad40169bb97ca4c3c1c05f9beda1791321b3198adfe300e1f0f1119175025d589f633d999683f36cd18c29945ceb55259cd82612a3b7ac70b52f4f57b7238966

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba112e854b65d46ce62f93ceb13dc307

    SHA1

    eb8197e2a7d1cfe05cf2457dc2d3f29d3114c649

    SHA256

    75abc6a22065263c73c3d6acd7688006c59b5e2a55a9739e57451921da85f787

    SHA512

    524d9a389832c0da29970edc7e033a9a877a33a7e44bfea0c42b2b9e1ffdf3fd38b773bd87fbccb5083d42516b57e4abd6509b14659622b2205dfb52a0c94e76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd97bf28bc58df0715f6de638cc4bc32

    SHA1

    29c0050a5538d7d9ffa9ad1e79cea40a14bf8bbb

    SHA256

    9e8539267032378591cffe0e4cd714cd7605b5e3c8699ad5ac50c19895283100

    SHA512

    97dd99da2612da7a9d1ea696e463833492acc854ef0cf379b9e2bbc10255705ed345be44c67d753773e2b73f6b6df3e74f780241451467928d7e4e2d6dc4a427

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7507962e0a071be8d7d4d39012e1ce38

    SHA1

    9cb1eae820da678843236a32df641599652625ad

    SHA256

    0669d6a1d5c0a5593cdbbc600f6849bafda28ea9254b07637337372e6692a7ae

    SHA512

    8d60c4140c60664a6d141c660c5294f4f608d608d49fe6d236d120c8ad0ce89a8271a82712c0c36189974daf0e8af5c7e5f10513034d0a551c1bd99eaf717980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b19afd2f2407f4f22d1b20a9ac0a9bcb

    SHA1

    bb1c75cf3f8937ba9f0a8c323b13cb391aa9c244

    SHA256

    3c3d08600c7e909c54d7cc6be0e550b9e571ab8d51f698b0196810b8d43a7f2f

    SHA512

    3e9765219469c888f5cb18ab8bec8c030c8734b005e840c220e3f0669c5fa18ab2925e0e30573ba0ba85366a890071d0cee8f185e65c27ff11790e3d3b43cccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05fea28fd0a75e4e1003119a53010dda

    SHA1

    2d06ddcb1d10f57117647d0d01d797516bc34583

    SHA256

    e20834fe5c9fdd9230670a992eb5d7c0808f4df44ec1d02a1e0d6f48cccbb564

    SHA512

    8d494efca6b484ddd3d04bd2d27971fb6471035f56decc6cd011d5f929e6e925eeb44a4441722aac29ed36e4ae7fccb7cf53d61efede9fab51eb292e353821c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04b74ae4ba670300128f1ffc7dc38c2b

    SHA1

    1a381bbb6a67da202334117d1326671f1e76d77e

    SHA256

    6b730ede46bd3c96f511083ba6ff4f9c248ec5736b9aecc74a799054189bb683

    SHA512

    195b1e446291942ddb27b276309f0521ca691452145157ac1e2994d22d5b72dd7cd62e42ca11b9542eae688193aa653de374f0659fe9c06799bf1a12518187d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    381e80dd762047c62e23115d1b2aa5a9

    SHA1

    e3c2ab44b80e7e0ad8e96627d11435d3921595ce

    SHA256

    5c2f03a0e7e9b51c3107b0cdff9367481a0a3bafaf16ab969ab79bd73c9d844a

    SHA512

    7cb4c66b09b43e5c99b4dd76546ab4f463f709b0821dba98ec0bf3dc1c88153a085128704b1a43038f7be3265e4e3978766274f5391ff5856913a6cb2c22eb69

  • C:\Users\Admin\AppData\Local\Temp\Cab2EB1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2F93.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a