Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 16:42

General

  • Target

    4233bee10bbc55b9519691b10f33fdf7_JaffaCakes118.html

  • Size

    461KB

  • MD5

    4233bee10bbc55b9519691b10f33fdf7

  • SHA1

    37091eb45935dddd5bc6353f2e89cf9339e5a9e2

  • SHA256

    58499ae0a686b870b909bcf8dde2ca105ffecd776076c30d85c114df34ce1388

  • SHA512

    3d74d8c9fe3b496fbb0cd96ba08e8b07cc270129d17b1b295bc3492aff6c82ef5e3f1d112b8cc0cabc886118be03003d590c3a595604183b024ef130e1c26294

  • SSDEEP

    6144:SDsMYod+X3oI+YJsMYod+X3oI+YYsMYod+X3oI+YLsMYod+X3oI+YQ:A5d+X3P5d+X3Y5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4233bee10bbc55b9519691b10f33fdf7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e84534949024e036b99e656f196843bd

    SHA1

    d972e5f58209e6fe44859c1ecd62038651c86eda

    SHA256

    97a2ea93c2d78be1307c67b12b56408ea0d47ae285d5de690a502b8af4bb1bd1

    SHA512

    fbe177520a3f2c0a587a22e0daf03b34e4d77677008b7776c0a7bbb8a33473c8a3756a5f15109386e5c10d59938bbdc5fbf12d8589bc73c03541b65a714e98eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99d1266382c04d8eca688814c7994454

    SHA1

    45e5db39a97bfb836023424c8ab1230a73dd2179

    SHA256

    0d0f10896890a59717c1f8570473167de17b4daf2633faee4c5a688265d68b47

    SHA512

    3ce55a7db4ed78e159d4416622904f64d09542b643e0c33436b0e31b8710113bd29c014373a4bf8df870bf46c9e5e2c427d8a6b7168608336ae798736e055bf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c3ada3cb3f01cd23f9ff59233282736

    SHA1

    409b7b6dd298725f92dd924b733091ee612272c8

    SHA256

    0d9d9289fe13bf5697188425081063e649a47142723bd03a2a3fd08c653d3c9d

    SHA512

    117464748cc1b80d2dda439bbd102f995a3959daae9a38061a0909d1c948619d3bdff2a84ca91b84fb594cac87c833be21a4cc6df10ae304df5fff025a67b994

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af15baa89aa24b9848b5ed6f76db900f

    SHA1

    f732a624abcdc22b23fbb9df300de67eb459f1ba

    SHA256

    cc1e3e434dfbf75ea668f905bf42f7aea112069b0bcd540d524096f3239dc314

    SHA512

    5d923a1ff0a5ba1139663d73cfd4c7d0e60a87525a1d52e925028e21725f6612d735b4c679921e965211436c805ce0f1ac6ef586a9b597783901df6543a42c11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    989df66ec2e7cd8fa260e6aded1cbb18

    SHA1

    bfe1a6d7466bfcf718437e21911edcd2f006db10

    SHA256

    b122d4915a396ae78a68262aff7dc600e229c52fde43ccfb14454996eb1ae3c3

    SHA512

    a9640d8d86012c8bfddaf1342cf3a4b1f0233e6754c3c911650b45075c0adf69124246332a30a0da0b8a01f94e219a6e73e16c481e675613a1132fb909f1ef63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8330b1aac73e1a2de13072e70740760

    SHA1

    f7df2e10206bda92e92beaf682b890ec972a5572

    SHA256

    4eaf0620f57bdfbcc8e141c102535e16a44f320a16941263ea355bb95977d645

    SHA512

    fd6dd2327aff7856975fa5889e84af35ff990d9ee038e7c796e5ba56f1a448fe6929f1f0b7ff12b6c761cdf9913f0007b695fe7f3f9dac883dc96e4a5f943f45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d1d2e9eeab613998f0930ad3391c268

    SHA1

    ecf9c5b99041d7df62e5348cd510e4a7fe47437d

    SHA256

    8d0181515bf58d16769fdf3979c2b22ee8cde50146f87c4f0d889f0bf810f60c

    SHA512

    3b4fbb15f23ea357d6220498ee9396e6ba772686f72ca931a36a43926227e60892e75f7e7cb7ba8522647a8670a4c9e74abdc861974e9f2dc1dbd065590905e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b2d8ae56a94e27a07d35e83fa7978be

    SHA1

    0c6df9012cfd9a98652fab4c6f5039acaa886d4d

    SHA256

    12c325bd53e584adffd64cb69b71677312d97bb381b786858aec9e23e4d79e50

    SHA512

    08befb6b45a47f6d0195db2ef627cbc9c1f9f2ea639d20d41470c7cb9c588241a4a4d0bb3411155e3d53d957d274f0e5c2276991f94198217e29da64ffd2dbff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ca89013837b3b9dfadc0a0719ce9412

    SHA1

    d48288d2cd0822ada5aee622fe5404c30b008c76

    SHA256

    8c94ea3bd9fa017614065d98359de81f984554be4d28cbbf6772bba4d1cce92f

    SHA512

    f82547e7d2aec411efd37c6ff4582a875fa56b6d08e9c853c47f31436257b7fe6a26030ae34d86942eb78141df027dd6cca87ce4619cb85191af27b7c0123edf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    493e7e35966c8b863092ee4d0481f062

    SHA1

    11cdeb4b42f308db96a611df80e48c2c8df45aad

    SHA256

    5def6f090cb5fe3f30e00b53a1428150603f6db9f3b387a949d924b713da21ed

    SHA512

    c76aeb56375a3cccd7ed3802fbc5af426462fc4dec02a459c661770c9e5fb0ab29953af8ab7372a1fb9676ba99a708700522e5566ad47650a93def28f10c1d7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17cefb39efc09f90711d147c2c7050ef

    SHA1

    0f6ef2923f3bcb609b073e25ae7ca451361ff71c

    SHA256

    a51e64a64b7bca96f1f45022d513541228191e59d00e018daa11c49b1868e542

    SHA512

    d49047536ce06f9c7e9ad5c5dc97c0297dca69a5fa0fffc0f4d885f9559baebfa564ff6a9794387b196bfdefe681dc7627f0b38a5dc1af3c42d0337f627a2ef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f08b530dfb744db2c4d1e241c4b6918a

    SHA1

    11ff806cd92ea268d6e5c307b392cdcfd96dd27e

    SHA256

    2e37344c243528f004d3902a25166f03884d00890acec78918f9c4c1a4757b45

    SHA512

    2ae685a1b707dd84a057e769696fc730aa62c18318f25ab1c1a123c363837d799da1a304532c355f2e0a0c6370f1230e17720642626e12a911424e1c1072b5d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23d5cfa938eefe6c60f6f8b70e6c75a2

    SHA1

    80e3627f78928673447f2e37f1ff914589cb3ada

    SHA256

    e0233c23f9a56087f717eb4f12d1cf6a28463c43841b17dbb1cbbdf5cd6b32c5

    SHA512

    27d3ff17f35ce2e2b790065ec0aa3032b55ff84dd2385d30c172977c9f87f28f38b552612728572d67de19452fa04f1fd89abc9c8d10591adcbdd43f0ecd585f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28fcb77b2f24885bbe565d05e97ee2e9

    SHA1

    3da170a681d8cbdc4db64dd4df651038bacabd11

    SHA256

    c639f0af97e822e1d0a7291effc587d3957255d84a82deb75cd4b1b5352150f5

    SHA512

    0d1fd0a8ce4a8956fcb4076165e8a5df768cbd89d152d766857d87afb62249e585947eb4c333798f3c4cc7aca80bf3980ab5ede7df1f609d27eb6257f550df48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ac0f0069d8ea0bac78b074313c0e849

    SHA1

    18089d9eafc80e333ae417775df01ba6b767c634

    SHA256

    101c7c15ee236f13ec4d0657c0506cced36128340e75329f3e923d4123656faa

    SHA512

    1045d94017a6773a2e96e6679c1ccbff01e84fad6c7461124e1a634563f73b02a05985032d143fcdd60a637e438764db3faa3d02434b9f1eb83d0d4c5385dcf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13d3fdbf670394cbec1d9f564ee689eb

    SHA1

    46cd46e89862ddb687e1ee15941955710f5bcaba

    SHA256

    ed7ce1c87193127b43f920692b127a3e4b4eabdeb0076a2d6ba3a0b698fe18ae

    SHA512

    f8bbf1cdff7743ca9b85b14e95f9ded9e11e48c95ab6b1ddcbd707ccd08759474e6d969c59871122380cab98e0945bdf3551e5b055776a8e3618cf9654203155

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad49e81cebb9325b049b7519ff3d061b

    SHA1

    20cc281fe4fce1c40605da881631da9a00d7f745

    SHA256

    5d84c674f38fc7ed06972885453f7f347dbc7e52aab6882c128ddd6f410021aa

    SHA512

    83fde4abdf9198a0438484e1dfd1269940e9ca8d91a9503e5dbcda4769558cd055d490f674a91378d7da6cc98c8919c749b07357738741a29894a76b6903181a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d19b13e8305847204092b6487cfdd0c6

    SHA1

    e7b39c24d01b0f24fa0d44196e9352da6c4ce215

    SHA256

    dd2c56dd8e1280d864f9f1a7842d374587ce6b10a7286f47e0e8e54558f59aed

    SHA512

    d5a1382a5a9e4a464fb4f50968a8e248591454acff809c95394ab971434cf3686690c851f4ed2b08a1cf400385e30350c67e3bd2579e6da8abeb9f9e9c942c0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6678f417023afde56678a0d933cb2f23

    SHA1

    06539aea9f9d92c3e840282c9764e3e1a08201a1

    SHA256

    636c5062f14c649d27ff0abe3a2f04f72308402c5c0bd4bc78ae6f6d07ef7456

    SHA512

    4227d5c3edcade3442f5bb307b96dd1ef054cbb8fa05995de6aabb57af1f0837b40e6f3bbd13c0faf6f1fcc3a472e1349d5981b773a0abdfc34d0e0203737e23

  • C:\Users\Admin\AppData\Local\Temp\Cab5AB1.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar5B02.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a