Analysis

  • max time kernel
    118s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 08:06

General

  • Target

    3e816287a603d687071bcfd78879cff2_JaffaCakes118.html

  • Size

    30KB

  • MD5

    3e816287a603d687071bcfd78879cff2

  • SHA1

    f9dc8713dcc9b692705f8096a5be93672ec4eab0

  • SHA256

    c33de072d820c1cca0e6c1dc908c1e1484b21c1f99c29ec12e0e8e3c62b5e962

  • SHA512

    9c2cf6b6847af054f7ebf10ecef7119bf5eb4810b47a4cdb9025efcfed4e69b5937cfc5b6b9eee3b132a04a21b9ab1185f27dd8de24a5e095e80615a3e921fed

  • SSDEEP

    192:uWPZb5nojWZnQjxn5Q/WnQie9NntiInQOkEntmMnQTbn5nQLXCgA+9EUkcwqHAaj:IQ/rHR5NlnK0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e816287a603d687071bcfd78879cff2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2403f1ea2434135e031fe2835036272b

          SHA1

          63713b098c0d8f349e2bd93050ccc2303a966b79

          SHA256

          e2eccb21f0a95c3863a5d8aab41f7a1592b142e671bf3c526f350fa01afdd68f

          SHA512

          3c0027818ceaf72d73c37c3838f7440172b4ccf91d13a31ca90d9a17edc77fae6d6c270c4c30cfee3f66865a9b974580c1af1ced4531732498f83b445ad896a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bddb3b35daa368c6eefe00825e318974

          SHA1

          c581985dde3d7fef9e2adb6040b3bb1dcb1a74ac

          SHA256

          16d68b2e8a7495c15a6f22437ddb07ddc4863a093d791fa4139184d0741b9a78

          SHA512

          632cdc5b2ba85002a4b881b9212c6ac76ecc93602652d05c58b78d82c307adba0dca8c0ad93755c0e607c4a08c3940d7736a7de350b9fbcdc60149b1336beb35

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5972826f4dcc7c2d7802d0273fc5519

          SHA1

          582767205d203981701f1050eab01f963a14d72b

          SHA256

          7da48a1ed1fdea54099de172e61ce55cea3e7382a10d672fbffc72e0c3088f41

          SHA512

          7ca8892d9d82c7c2b5d5938fc0d6e47996f7f1d9ffa37cddb6a5dead8f86d601c33caae0adc027b80b860a8cb4d8c4ac002832d1f0ecf06ae93f956bc4a1d9ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          005f3e1a3d53b766150c508a8a8ac412

          SHA1

          82ba57241703ac30577ea4fc560f8df8f1bc846e

          SHA256

          04895ec48d50c46e3d4182cb454923d10cdcc20dbf0d5dbbb73924897c1aa074

          SHA512

          7f8f9079bf5b24f63b16b46f41e10d157dcb1bbd44395f2465e5b16bb79c408f0a445b7f6f60aeb3414062cc8ec53b919734bc3bf333918d3e5e22a7c12c6ee1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          285fc61c0a60ed5c7fe36a98f3cf47df

          SHA1

          4bdc2023bf1888208b252818e2adb588b7377856

          SHA256

          f466cbe756d50d972c105bfc4d46217ecbcf8a6b9e676d9a14374c0cf13592e7

          SHA512

          259d0dbb9938f5f43efed844426693f3975fae4a7d60b4456707977f1e0967b37857ebc27eb4696b831f24ebe1a1922dbf238d68ac12b5fc53dd1b9ca4c8fd85

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          012b3b900378e4a444400ce0dd03b3d5

          SHA1

          63efc7c9191df86d39aae73b121913a5a69dbe95

          SHA256

          4aa171c2947bdfbcf524fd94201a59964d012cd9d33ce12af37e0939b2fe73fb

          SHA512

          30f6235c1924799e847b629378de9e1586b79a815ef75d6798d2221a68e2a89c2e8fcaa31349e4f3b6e906ab3b104e7a61af3a68cfa967d26c44d350115bcad4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dc39bd3b57eb2741af3320281e2fd560

          SHA1

          97ba061df0a129d6b0766d8a3dac4b8e1f0d31fa

          SHA256

          f3c6ea73baf26061eccf626dcf6c85041909193f6155cd5beb5737fb6b1d46c3

          SHA512

          6cb77fe9c53010db1edc2da96209504b41a9959b4f61535ab74e2af4395c2bb57992089bdb2c997bfef8c9fb08124da9c6974f3690de57de8cfcce13aeb8ba31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          39f028a11a1cc345c87fcc835e75e7da

          SHA1

          3c220f7656a0b2ed0f56a7bbd028bd78e8d12d80

          SHA256

          7d6954c2e96d4af4aa790b1224c47bc233cc8ea0dab60bd70970e1ec4b1d4a5a

          SHA512

          a68a0526934e8426ec32ccb631d7dd6fac13793d2e70185e5dd046e0e7deaf78db7525b395cec37dbc67ba4e685bc504c0425ee770d3906422773c1093fbf64b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          00f3874c1031625463376e415b4d1254

          SHA1

          ecf426a451c9fc1a5ace456bbdbd68083ae3123e

          SHA256

          f79557b91e36cee7f439f3a3f7abd366d245dcbda79fd97e5143246d186dbfe2

          SHA512

          154181513d11f2a836e7fab5af9f1c154935876352f4ffe24b1b0da628106cc3c2b2a55b5a318fcbb956887911efa4fb1a346a22b188e1b12683368a25685c49

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cabfe629cf944b51c19787e3c33a2373

          SHA1

          a72c1779db14d7f1ff9840aea68813b1c2682b2e

          SHA256

          00311d680c4c955e8484661e9f4867c14f3751512eeb780283d2bde7e5832c32

          SHA512

          16b6e7f71f88635ede85511067a8b849709dea5b236cb9e0e79efa4329277b6bbf8ff2e49f4b16dd8bb325474f937ce24a31bce2efb112cc9f478b7048684bc2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e5881249f280d67c87f48b4b30b18988

          SHA1

          84b08ef04c05e5ae46c82aa0be6f75b3287dbb1c

          SHA256

          d3ce51b4cb8bfd650fe30880589abbb680434e39f52e137ca95196bf34842ea6

          SHA512

          3ac62bd9849d4625d4497192b7ddd20c478751235629579bca1ef26988b8616288fc1e619a2e1d2ac75bffa8fcf46c7a8f20d22efca854eef26bef37f59b090f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4bc96e238ee63162422c039ad4c14ad5

          SHA1

          aaff5a78d75d3c8f000adb41d078c946f8b4c173

          SHA256

          ad2bce55a82ad28a107408d6c10f4bb7317dcedc6d8acf89649a8de57fc90baa

          SHA512

          f9088f8db431991851c7af70bea48c00316a9f9173996d0c2c586afeaaa6aaed9e6157cb4099388b5c83a47eafef3c85df9f33f4f6b39aedff0de510d6b7deda

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b22937b582c82fb35d055ff5ea74c1f

          SHA1

          0fdaef1d74a16b833f0056eb9f9f5dea8006aec3

          SHA256

          997aa47eab46834620307da7751d5aa97d077bc71d200cc7ad12fa90a912fdc5

          SHA512

          e884eca9ac3b90d226044d9631587c21c407b7646bc04b4d1adf7bc059ea6d70500dc562653a9d225102d4681bb9c3c45277712041cdeee78e4ef35109739305

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          47d2f32ced191dd77c0d29c2de1beecd

          SHA1

          56d349f9cb984f3f0d741730fbff20815d9e9495

          SHA256

          3c17ee02213bdad5957368cb70a11b467784ee32a3084d516d745da05dd5aeab

          SHA512

          bfb8658c9ac07d15be5dc71bcedf1bc99b6033618b232e6885a6b39e0606cee56463faf8f56349d1ed4a500f81496b486f895d643f221815cc1d46c051d9fa5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d39f69eed0b1a087d9c74138623cc0c9

          SHA1

          bdc8d03fe91ec65ed95a68a6a5232b544fac337f

          SHA256

          8505aff01cdf70832b60510296da636d6181cab6e094c480cbc80f6f4c6821ef

          SHA512

          687f80b2ed7f218b5674f7c20c392fe2dd6c016d5893eabd3b76d90d1e598eb07d394ac76b6560e8124e8ae25b9165271cb27f195ce371f025b2dd3dd2e7ae97

        • C:\Users\Admin\AppData\Local\Temp\Cab3F25.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4055.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a