Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 14:54

General

  • Target

    3aafb8684541c3886be6f2c434a371da_JaffaCakes118.html

  • Size

    460KB

  • MD5

    3aafb8684541c3886be6f2c434a371da

  • SHA1

    294846f12560aded125076685d4bc13c713c63c5

  • SHA256

    01fc4f31155318e81ca5b18564466cb88d3d5448e446e68fdfb73e93bba87634

  • SHA512

    07d13e4ca77b616f7f301f74577660c7afa9d52c6e159ba005afa126fed37c0a9beeca298d2b5001dcc7b3648e4b494556c3a637f856c7f06cea418baadf9b6d

  • SSDEEP

    6144:StsMYod+X3oI+YqsMYod+X3oI+YvsMYod+X3oI+YLsMYod+X3oI+YQ:a5d+X365d+X3R5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3aafb8684541c3886be6f2c434a371da_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2916
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2916 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4572864ffe986af61fa71d8ce4ce5d8e

          SHA1

          e95170e68632e61e68b136b473429f242f58bf6d

          SHA256

          4f06aa817bfdde3f75cd25004a6c59d09fcdbd1c9a663a9ffeed9338fec254a6

          SHA512

          558e43a4a16447393deff8418434bf36f7304431f804f5fc3d03ffe154f8e04c504329c750c897e4557dd237ab59c036131c88488b5a0a8e159ec8af3a96ebd2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c8dfc64ea7689477709aae4c5d7d41c0

          SHA1

          2b558193014c88f20cd3d756a18c8df151d451aa

          SHA256

          22889e1d6135d3868da9ec3873def607e7d905a331afe808c5780f8389728c94

          SHA512

          dcd65e04c1bba69c4981f8985d1129d38a670cd56eea94e1cea3c1b3cf780cad5d21c1b27ced59f183ae012b6656a660745e029ed0cf5ec511287b24aae27cd2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9cc69b1209cac1f04ddd133a82869933

          SHA1

          48ae2093a116e1152b95e70ba5276f5eae9e69e8

          SHA256

          6fdb822b94c38e70ba055e5204ffdfa8422f6e9a14f48d48e067c9c3a30902f5

          SHA512

          3d227aa8173129bba145ca65d85bf08a6a09ab7335161ded40c0078b76c0b4643b7fcd0f61f2a2a35bb3041590a75f2913820769d126b7841fa2df39a85314d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          198d05ad9274388a5db4bbcd28dc9c2a

          SHA1

          3a7778acf874495f829ee12fdaed2e391d69d03c

          SHA256

          262962d7c2530ea0b49563caa3c2901c52eabe1bb8894a931ab28a4e0df163d6

          SHA512

          dbc041865c5cc8e15b3a35a595853360a86592ab325900792fad3cbe987f3e372b68ed18fdf06534be0c4908ba306d9966d749f37c6969cd16a658d19c45cf11

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c560e34ac859be67f2d394bd6e2889e5

          SHA1

          261fafbde85578ef90d0c8c5646d87c31ffac9c1

          SHA256

          59ab9cd14d38a86d194426163cb8e9db0b7f4128c34806e322f7054c420fedba

          SHA512

          1fae4d98290df8da96d4d0e13bd9de9095c2606579b0f517f8502aa65fb67ab384128d034d3a32e7a9833d6ef1f50e597df5f5a329f68717222399e9b429e79a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71d16906088f25d107b0f1549380d982

          SHA1

          9b44a4242c969f3343e8af31b38f44d14a2b3ebf

          SHA256

          ccdf020273b2436cbd59b3756a2cd8eb6484365f091549e5d7ebb6b5a79266b4

          SHA512

          6e7ebd6e6fcc7bcbf4fc34fcab3a54580fe432cb7394038a7c47e2a70e5d15b7242a49e84c0fbf66228c213dae91d01d34ad67e91757e8f61ce9ac57b6e78596

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a0252a4d768c5b9c42a6da3dec3101d4

          SHA1

          f1a74c59ed9f93bb2d05a66a9aca164818c176df

          SHA256

          150ab123cadf40dcd49596413c44e2874751ad7ac3ef65d70cbff53894d641a3

          SHA512

          96f7dc400ae9cdb234924831ffb08164f96c364038de48c840cbc7c40ec01421f702206dc1b1ae6b1503e55fb2f87173a36284cdbf3030c909e747ad5c2fbacf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d215b4069de00dd5d747f3c6ef495a3c

          SHA1

          5c7e24c2175d786ce0a0e8d34116b9fb6bf85a33

          SHA256

          cd87ddee23323149e8407c8579a38c9b983741b31d1e0dd6a9929e02b7e238b2

          SHA512

          66e1d66615be30dd3c376a4c4811263832a789503dfeae89bc2b41c7cdb844a4ef09030818bbb7f4626ccf826153eb5ace70bb0aee2d74d4bc52568f6a9ec6c8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5f3a76dd40bce0aef06c1ee93f1a2d7d

          SHA1

          075f21bc6d5dc39194d55ac30722c97b9d17a84b

          SHA256

          63aa2bae75632d471259b51c5f7421a20ab9df92cac2852049e8b662b46b51d0

          SHA512

          64f5d98a3c5165f23802968745e605d51450923ce9afdd661b243d5fdb7a2b70658869faa00cbdec8003e23b07936c03cbd3c4ec4fde6c8da2c07858b68927af

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b93485479c2f05af51d4efc37c19fb10

          SHA1

          9f76e4477e9e7178712f5ec1b96add33e4061b33

          SHA256

          9699903d24dfb10dd231729199228a4ad79c73e8288d85e3b3491691795844f0

          SHA512

          91b0002d68675309b0fdf4523a76a2ee1ee8795d2b6446a27c9077593e1297ac5c6c7e6a8f7e193f6b99364b7e9603e5c18cf69eb2ceb904f8e07ab89459ec3d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a38f9a58103c9ecc6d593745a0294859

          SHA1

          50e16cf3f384eee991a85f6ef07f3bb0becc5cb4

          SHA256

          1b53dcad320698b0c21a80ddec365e16226423f954a01d2026e3187c26705760

          SHA512

          b07f9b4bc7767ecc653b24d56ecb240aae5c1e39d682f61bc600fffcd109cafcf657456404e4c8899ea5f1e44ff7379c0f60686ae1f31da61449bf589f7e506e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e38b670e976c3a96e485fc17da1d7c8d

          SHA1

          2d38950a6e4bc6334269c13a2c11dcf86b7e17c5

          SHA256

          b75f89fbb4c3fd88db97956404aac0349a3aa14e2111c49def8a5a011a879658

          SHA512

          e3cf5ef4ed4131d236365b5e8f952c86483b9d5ae47ddf4f15e564856e5245ce125acc339587def6ec94dd38bb78b687efc14e67a7cb28cce954547baed83fa7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3602899c84eb0090d3678fe0ec256306

          SHA1

          0a79176bb0a3f3f5172e922381e3661345d36ff6

          SHA256

          2518bbb8824ae3d96a1101ac6ae756b9c0977aeb2c4fb0c578b29863606254f6

          SHA512

          0f73646d7d53cfdfbd5c2c8ec0bb4fc5025faca03a0db3309df7c87eed4ccc868244839b65993b3bf3f583fdc1b09cc699fdbcdadd4bcb3609771f69a849f69a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1faf799c72a9181ba10cf9bb8faa2c81

          SHA1

          630c073289d381d9c32d8a682d31c97ec929b674

          SHA256

          c0df178ad8a7738cfb89ce460c2e4cfc366feaeeab14d4a942a16bac267987ee

          SHA512

          f45784881115f4278f1ae8ed4885225c2070c5745df8554f7ea8c59ec7bbd3eaa2e710e493924a38fc491fcb4c64167553abd5eab043bc31571a9202a5d96d61

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          50b542969833cf6121585018df97f8c6

          SHA1

          e91eac4eb51d81122f98b4762122b5cf95e5019b

          SHA256

          10534ae2ac6dbb9052f1345a47d8de037da3be6b43fa9ff0c55ec222c5c51664

          SHA512

          0e199693458eed74940da15d0d20c8faf410b29144a1859c5aab6662be26e9cab35acdb4eee284595f10f293d64fa44edcb92f0446aa34eb815c35d541c4d80a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a78281a27fa8b35f73d1687e393bd8cd

          SHA1

          f193170db02d30d41f8169f29b45057e80882cd2

          SHA256

          9b7f6fb5f3ff7328d9e7baf2bfec863e8dca413d54d11d8efb546d01a8884b11

          SHA512

          cd4996ef0092c4d489b6df3e739e936c6bde836edc9999676baab2a58ef5a16e79c5bbf3637e226d9b8d1a59770b459c7a4e43d2dbf963b8a282c7898a24d6fa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5ef35a310fabd8d75b3fe07c59395748

          SHA1

          aaeef729558062f08ce8f67ce0e78f2038e578e6

          SHA256

          62623ca68df2a52f320a763e2cf1b228f43650a7f812692ae9328f77e6de7eb5

          SHA512

          90849de75ba155af6ba4fbf1a218888c82237b7db4daceea23212f863688b00121556913cd45068a29e140f9caac05b61fe1dd0594db4c9f0fb62e5a8f77226f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1c13268003c87a03780b8202392a51a0

          SHA1

          82d3101882e9869564835f0c7a41fcd56105ae53

          SHA256

          915b95a41addf8d3948241fdcb1a311a18d8bb46020a636b0632a788b0a91428

          SHA512

          592d4ab1860ff1dc184473d07005685ee0af90e9156c50dbe132633e65b0b30fb572b1fcf6aa439034a3c64111a868809072b9c19e4583b37c166e11bfefc9f0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ef723f1e3114dcf197b4d468b530f685

          SHA1

          e0aa4a6d6f4f0c877f3a6d54a8517e023c97f582

          SHA256

          69954f23e66a049a66ba46cd112cde1a9fc6111e8994b3aede911d3c6c21ea1e

          SHA512

          dab42f18ae128fbb560188a26d3f7ab51abf30de78623c4781b794c4563cb9aa2f93d6c1ec1a75b684015d326c0d83ee4a1eca71dabc222ebc2699883c7904b5

        • C:\Users\Admin\AppData\Local\Temp\Cab3778.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3869.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a