Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    13-05-2024 08:14

General

  • Target

    3e86cfc86192a3acb7227d547bb51616_JaffaCakes118.html

  • Size

    207KB

  • MD5

    3e86cfc86192a3acb7227d547bb51616

  • SHA1

    b763789fa492d7db51e82f10486b997faba13509

  • SHA256

    a2838eda304906750c97ef90a59903fdd1c612882a418c59e44824d8e219e611

  • SHA512

    e0234e8b8eee4759fbe3d4b0b0775e2fbcb5ec1ac92dfab7d4073e29087be1f94deb73c4470078440ee0660e63a5ce55961baf0459ec70b1a3ae042f6e440fa6

  • SSDEEP

    6144:P530DH6NEQwjcHXxQRVufJc/09O1k7/5u:PuDHQmjcxQRVufJc/mu

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e86cfc86192a3acb7227d547bb51616_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\75CA58072B9926F763A91F0CC2798706_645BC4A49DCDC40FE5917FA45C6D4517

    Filesize

    1KB

    MD5

    582eea038fbb5beea8104c8ecbbefd71

    SHA1

    20782497b856718e7d761e8ea458436589f8e6cd

    SHA256

    88ff5022f24cec960254409752c1955228c5f11cf0fe12f1f55c4ca1da3157ed

    SHA512

    d4b565c36ff4a66ec727e825e0ab3a73953b9ffdc14eb9c75d6b0e7a5c17ac4a9f403f3820fe5d333e775070e1f1a7abb046e0163e9224f2beaab64411e993eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\83D863F495E7D991917B3ABB3E1EB382_5F77C0C9928B8D1890CC6CEDFA8F13D9

    Filesize

    471B

    MD5

    1fb19197fecd37439449eba5feb5190d

    SHA1

    a7d9c7866bb17a2caceb15a186ec3395e02e098e

    SHA256

    7e7829f0c2dc43bceb8410175ea3f6b1510e8255e9cf77f2e437199369a4fba2

    SHA512

    7cbeef464aec3669e612c150e8829bd383bcc2b4ee5861d1d4c15a94145cbbe45e5f7ae8f8ef3d387d1df52358991a12477a659b001e3d502a6aba5bb8305864

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\BAD725C80F9E10846F35D039A996E4A8_88B6AE015495C1ECC395D19C1DD02894

    Filesize

    1KB

    MD5

    fa08df784b2cf7bfbf2b3a54c7110daf

    SHA1

    a001bbb789e4141bc43482a31f33597efc7d9b98

    SHA256

    46550e0cd62a49157a12f50747e09679771f372fe24270914a33667cbe07e2cd

    SHA512

    daaa67479aca270534a16c98452639bb04177c6aef30997342978e91185c1477daa6213d14eced021393a9a488a4cd7ea4202446bfedad227688d9069ee894ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    5ce5a360e47a0b451c503cc26a63fa71

    SHA1

    6d38f209805cdcbbf27bfc0c4d8fe1696fd2b64e

    SHA256

    b7b8fa2d2d4a2e988507758affecb5b41ed5e259db93eb3e4be031442e20ff22

    SHA512

    d6121d43b7d018e9d524ac505ecd6f6f0d4a794c4653ff0c66c0a2344113d848b8730d8f2867181da2ec1e457c40ffd4ca6efdb912127a754d5cca45d1afc91c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_4CE3955EB81328E9364A4F6718E46680

    Filesize

    406B

    MD5

    e7e79baa078a657d329922b8d46b5b65

    SHA1

    54cc07cd7b5f940e5be3ad5a863989bab4ca3443

    SHA256

    a4f3709ee41d43e6db141b0df6b237a35986baa40179c7428dca6d2437ec9758

    SHA512

    e4ee4f63dbfb93b8644956d5081cac1d7fd5cd0d0c58eb0126c914031d4c073d6ee815c771d79f3a6152acc46196ae709ab84bbf3365426bb03bfb6ed784209e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    158f8214f4d380cbab5726dfb3456f07

    SHA1

    52b691f4ca9334e36e62df7b3406f74434885e1b

    SHA256

    09494bca88f0549b17ff5a788d6a831c4f0653b1b0f7f7a4f7beeecf55e34cca

    SHA512

    c7f91a7b7ea9da3706869339546650e95276600602c3cfcb62844d6d59758ae7bfb5a073b7e84e9614f922137d8bdce3124cdfc910686f3f91fff52562dc8576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4167d6619f146202fbc44d4cabb4cae0

    SHA1

    ab20a39aadcaf22a56d50977d97d52e9618afdcd

    SHA256

    e2397a2fe46f124c06a46c17357b7c7e1ffeabedc416e28670fb789704e49d25

    SHA512

    17e5db549696548e72f5585e0a5bf67bbb71d47349b82bd05d1df0662a322851621e4baafb4408281b33adb37ba75fe6ce2cb3c4655973a3c22ded3be4ce6036

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    970dccc0a31054634d8166c71e02fd5e

    SHA1

    adf5f93587a865a87b8548082bab061234fa6d07

    SHA256

    2222ecae7a54fdb64e883ccc8839e4bbad4561e90d0bafe1c073e6052df5e0b9

    SHA512

    62fc2b10a5146c33b5321205704466ab08eef52627953a57526c7799c7d43f737b96e5a1547911d7f59d3348dd49367204d92e6c3433bac601fb38f4f5e51fcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb2bbcf2008675761511ae7bb1a43a48

    SHA1

    62f66de517f8ffe18dc922fcbaf6aa4276bf71ba

    SHA256

    f3569aa7909e3e1d2b309a01d61abbf05a64e087c0b0588baea553a6ba2e7079

    SHA512

    45569bbc2d15365d24b63c4be974d5e56414aaef65f3303d22f7932136c22471efe25b8093948fc8723ead36f7815a2bf51e4056f54797092b5c63c6a1316450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    427d16e373f2b6bb3c4540a942b46841

    SHA1

    ca1c3fcac6e71da8f908dd374e2cb8b00922e1cc

    SHA256

    fb51665cf8038af38140b06810c5ff2f1e0620c11af7335c2767c9836964adab

    SHA512

    6293d0be44bc90a29660114d9dcdfdebffa0df50a2461d25295f251cda9eb89f7f33ffa5e838573d9f62f52844da8c045432c33674463656ca28987550fa0ea0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60f4c635039141e11d913e6d51a63708

    SHA1

    e7857be5d5bfb069fef650b702f83a9bd6c2f40c

    SHA256

    e151c579978be8641b17b8a13f66b32714498e36ef9f0b66c08b337b4f198734

    SHA512

    bef52204dc549d495db0b658dbe925d8f40c7e45d0ea99b6741d2cc2912ebc65b16c5535422c56b33ced545ddceaf4364cf12871fe2ef72e48ce8538a7b2a7ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0019f3903476d17b7036464cea5aa6c1

    SHA1

    1742a8149e925d515e7d1b2dfd930007dc499a61

    SHA256

    95f54f6c62b21b67775ab0925890de45e4ceb27c927bcdde73456364720c82fc

    SHA512

    5896745bc632742461bd041e381cc7f32eeba3cd307818d68007752539525232141d95c8129d5964a510ec2ed253b6b265681590a186f38594b1b3f864d03c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    688041c2a91a4b5669b5c0a2a9749fa7

    SHA1

    fd127ba4c1c5d1a787f994cc46354fe1573847fd

    SHA256

    78f06a40f3a427b1b1a996467502a8d421998ed0f23d876c33a722fa081d7605

    SHA512

    92ae2cb5637bf6cd607b1df9d421624a1b1ed26bf19de5a69958e9b7a67055d1051bfc96fa84fa1c9bc12ce82284e5714d2dd7fcc278dde046682ce9eba9eba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3266016ded8e9cbfb7c6e75e05c470de

    SHA1

    22ca24000c40e39d85aff43475cf38507b73c3dd

    SHA256

    cd5ddca9ca733f06de0096863a5ae075f0c110813407feed69cb96b58346d73c

    SHA512

    0660201ec2cc67724e743a8f3b5204cc077af7d96e7b076b4b179e83ac1f37075373105c7edec19d104af9caa8cbd8eb84afbe896d7e0a1e9a3b62da4bbb05f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58cc75155fa2edf5f0de10c4f123155e

    SHA1

    a05599ff9c9a7ad695579da89e1bb788dc5a3a25

    SHA256

    24309f1610e42e533fe6c2b80a41c91f5757065e96fdb65cdcb128520096255a

    SHA512

    a8db1af108ac14e059e3c46200f4aae4c24301e681fc068d03413f36651f16ca2fef320c43331fbc6a6cc4a3a85bab4f2e0030a1346bf76fa11bb991d737b53f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5917090155c0cc6b97acbec954375339

    SHA1

    cd8e15b5cf80c6bdd757c49e2118e831e6c8b9d5

    SHA256

    de3f34a955640faea7d72f1e65493acedac0d81099be78dedeb2c1b0338a34c3

    SHA512

    310303542f80b4eadcf8e3a7efa341b472bc112161adc1dbdc2c00bf628a63e53f4fd835a09a801c60bbcecd6e0160f1554a6629a642130a3a47e65cef4c8806

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cabfc69a75d33469923b50a8a97ce1c

    SHA1

    7d96c681f067fc973d0a77f6a30e737ac45c9c5b

    SHA256

    a6aa9a33611ba149b19ad72c3160078ad18272754069c03b322498de480da0c8

    SHA512

    7a048e5d36baeeaf45314e0db33952723cf240bac46e8304cfa26d5e307c0db2ff2eebe4526ab7820a22311fa29604853b9b7c3b0e1a03120a03248de7230e11

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\js[6].js

    Filesize

    220KB

    MD5

    ea01bfdb63807abf86bd3516592876ea

    SHA1

    f5b96c6194a612c875330dc3e07c3a64cb2f1175

    SHA256

    11c7a81172dcfb647b0701ef7df9d6f278b6d2316e31d5aafa20320fb62f5593

    SHA512

    74a4a8e0b2cc25f0a64a29adfb25b808ee40c0bca219246779a611acee48f47da0ae966d7eeea3845de89ac621335aebee3cdb3d3016ad921bc7e3c7084ef51d

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\style.min[1].htm

    Filesize

    134B

    MD5

    4aa7a432bb447f094408f1bd6229c605

    SHA1

    1965c4952cc8c082a6307ed67061a57aab6632fa

    SHA256

    34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a

    SHA512

    497ba6d8ec6bf2267fe6133a432f0e9ab12b982c06bb23e3de6e5a94d036509d2556ba822e3989d8cd7e240d9bae8096fc5be8a948e3e29fe29cab1fea1fe31c

  • C:\Users\Admin\AppData\Local\Temp\Cab1E8C.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1E8E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a