Analysis

  • max time kernel
    118s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 21:10

General

  • Target

    43168324777e4d6d5be4c78236826cfc_JaffaCakes118.html

  • Size

    21KB

  • MD5

    43168324777e4d6d5be4c78236826cfc

  • SHA1

    7169a06016408c9fced5e46ef237d1ccc1629c8b

  • SHA256

    bcba5cfa6848a3e5d1e2d50e156c4d16e9990d3b695de3556b5e544b2bf7abe4

  • SHA512

    5bb17fb0a651f1c1ac893bf4f9988337dd1330182f5a29991c5405be1c3b6dd8935b79e045a0f135ad47392566ba029bccb811d71a2f1d07f0c1b94684f2e3e2

  • SSDEEP

    384:A9NJH38jW9qSMF6F/GiZ9w1PoODcodr/4DkFkqkLdklh3Wp3eeBWjv:WNF/vZ9wTDB4lG34ueQjv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\43168324777e4d6d5be4c78236826cfc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2968
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2968 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5725120639ad941d9a248f183a140ac

    SHA1

    90804307a263b082b924b123f30419d9703ad4f4

    SHA256

    851f6d632925b88873b62c3edfe536f07425647f41db53b15718ffd2207dd976

    SHA512

    e2727f1a15373a087de7db8ff3186dae863590ab49ff0b18f6c63351c360ddd5a2db19b131e8232a1286df2e37922b9b665186bc801b611425d59981aebb7bfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b334dceaf0e931b09031ea4178b164c

    SHA1

    4ccff99a3f992148baa08b83a88445aae38ae20f

    SHA256

    98765b0fba119c31dd2b139ec140ef53c2bfbf14f3b64e343b44b4c9bed4439f

    SHA512

    32858f0462252f7d0e6c2a2634880295800280d7945b653e1c200a65b2237acf85201cc29b412084d186301b1a8f36e4d05c8d1322e09b2bfb848d1e8a62db4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a024ac0249f12d437a8bfd32ccd11191

    SHA1

    2c42958e4f307384ab0574aa82e237cc72adee4b

    SHA256

    40195d077e0f211717e8ae052809af93740fbcc8e04fdbff64ba3e2fe7533d6e

    SHA512

    a8d86c1f936bd3c196c470b40f9bb6bfa35d3c2c7a548ac76da256d571b3162b047c31e52e736a7f0f137ba1c87e034c48d39fed22a689b4b1df69366204e69e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fde9c88f581da075f7f352f367d08a7

    SHA1

    e44dca612bb539fb04e7ffb62105068f0ff97c41

    SHA256

    93a49d52538525bc2e99e9eba098e3f465feba70ff53ce4ab39fb687f8239c44

    SHA512

    21a0eb46b1ce67b77dd7d923b9df32189be0c9b1674d18afca654c0ab4cb4c0585f012890138d0d891d83de45ed4129e4377f0b3373444c06833420e6c0cc833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40dd1cbb5f7b34228119aa80a0a42710

    SHA1

    6a49cda13568f6ab582b7e3b92e7fcdf01ff48a0

    SHA256

    aad79884fc77daf1a35b14bcff36331e7a4d58eb2ff3493daff38fe1714b87c0

    SHA512

    0762a128ba2eb838bf5894f6e3359251e719ee4f443ea961dcd0f32769c01a9f2fb499f2b8c51f16607256eea4dd74df8d2fb8bea7b294858e797dd125485593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f907e60ea435d563d60330b3892e1e56

    SHA1

    733579c7acd022046a2dc96087132a454b75406e

    SHA256

    0d0292221257fb4412f7bc891a49efa0715ce7b075fc8c343e8e51bebc4467af

    SHA512

    3b585257c64fb17fd42dfc02bf7a8aede006c26a2fa7a854d725da1a20eab7c5d67129d3df705977e97ca7121d5fa866cb9d06ca6c23c76079208f10f0f3e8fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0931a565c1bd66f467f94831eaf4e272

    SHA1

    6795945b250de2e9128c4a7e58dd7987a7fefaed

    SHA256

    e4ff01303630242cc51d0369faa5b33ae252f843102c601a9109eb1afb7e1b12

    SHA512

    bd0ffdd3058b76ab97fc6906d9c7acdaf61ba15f352116639247de9a23313927a8ca452c939ce72c3f02b55ed3cc47a99782509947664a09c11d2bc787ad0672

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e13b1c7782c71a1a3ff9ad0e5629dcf

    SHA1

    369246d96b9fc10991887f3314f1049f87fe3ad8

    SHA256

    85fd7193b1be41562508a28b253e1539c26ef0a38d9305244ff414463381bb03

    SHA512

    233a53ab4790e297ec117b0dded6f83ae82ed9be99ad4b9374f31d273c5b8a1e107cfbdc522d8c8cc9988cc79ccb1c87d2e4f6f56746541e595568bdcab1bd33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf1683264c6af11da0dfd1cb2092e584

    SHA1

    e03a7dbef39c05bacd16754ca3f18d77ca909fa8

    SHA256

    ae8049f8c73a9012056d44d6e48630ff25d2ea6f548f297a823fb115ca923bab

    SHA512

    44e4d0439d81bbf20b8038867c1f5edbadfcb15324b374df8460181921e9a57c0f228060204426463037d0dde2dd670b88cae2d389c262b7fca1cb49d8432361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1079f4eafa35f2176daab2c2ec2fb2d2

    SHA1

    195093baee21cf9de83ccd4f65dec73cd654124c

    SHA256

    e54858b5c384346aeab2bfa21e0ab5cee914ddeac54f7d42cc31f5b7b32e7b40

    SHA512

    fd6a83316729659ada3d806abbc7f254260e8168c522bdb28653ef52d047faf0316af5f1ead72a9bd3b73a0f91902a077a8e803e330206c1b4e8756b50185289

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e488b8760c5475d387e11c4c5d4e77

    SHA1

    2a5efea85a022f518e9fdce9a26fad8ddeae7089

    SHA256

    c9e77562cf41d81d3709bb5818e5767cfa7c93d03eec3627639d32065bde31fb

    SHA512

    7eebe47ea4aede81163a6e57f2f2f86edaf6fd4bb0d6d7b603930207de2023b98c66810981d146bf64bbd24a0964a13a6bd2acafdd52adddaae3254b236494b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84b32d6d715e1813b73937a482df686b

    SHA1

    861524ac8a8b0afc8d72983fc461d16e5b427b11

    SHA256

    98d8f6801cbb24c9afac3da65c9d58dcdf33b4986e48d265cca9fb45972b5493

    SHA512

    bb0b1bea4912dc5fdc8c84098c7a81a978633a9ba6fa95a0dd012ccb898dc824ff8b425786b71a08e5c52a1e7536703f06e62d491dbe2ee0b8e65e8d14799973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4433da1886d7d9d18892fd9c84f8f0f7

    SHA1

    f49531bc63933bf3c89df97d35fa29ebcabba52f

    SHA256

    069a9f792643f30b62acdc5623a5cbdc4a8f5d14aa887f94de2a1ef0fd7e5424

    SHA512

    a3273179cac130c0176aa8faf904d65dc001557f0d81e17c97d1c5360861495a9b43112ed4d424fb6889926c332f626c6f37366994849b0f5404dadc383f256e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4458faaad78ca9f1b565971a88dbf64

    SHA1

    22edf4c513d4fcd8bcc024e0028c87964df2a40d

    SHA256

    256a11f0368b87bfef92990ab67951db30c47e90a5eae1c200aa085d8c45b544

    SHA512

    b7d3d18a0d4505ccd865b1ff819b9cc624369f5958b2d8feb10c01783e2883633e86e89e9546e19a5d8a74fb9b828526547492c50b771d7dc9dbd3158ad22a05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a4811c6e397d573265ed22939ac4524

    SHA1

    d05d3317345fd9c53eb7427d396e241c89876745

    SHA256

    fdb60ef6c80ab22b5749eb3e37bc9740d75209295ae28c9137ffdedc84e30478

    SHA512

    0b7b8609c802b95b2b4d563ab14533756c5121ab6124cb1d224534814654178497171948dbf86bf426504a9a0b10b7d62609f4b455848bc44060fd1b3078965e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2442a5ae6b4ae4b6c2f6df0ca5ffb4c2

    SHA1

    84dfe50627f66b46702db4f89722238fe7ff03f1

    SHA256

    f21d05e2ed77277905f214e4fb3e970faa374cbd595bdb4797d3430f06f51a0d

    SHA512

    dcd9d74ba218ea0abc0bbe5df2cfec3e89a15a40e0ecc7a0119871f33cacbbeb80e73428aafa273129fe840d49d46991e6978cb4cbfa6c78012089c573aca74b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7cf48b9a819d0a033f60921732983cd

    SHA1

    c681ae9f755490250df43c4430267279d3ef553b

    SHA256

    b77fbdcd58a46e9894bd9588dcfb5cd306d74a90d1bfbfcc181658b7ebcb94fe

    SHA512

    972696f706656969e65f62df4d3896a07b6ebf9122e36909dc643cbb8acdf76398077a285ec90a33f43e7fd24b9f8e091dc2ea7385599139ae8aff804897461d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    649b6981047a6f533c747ea2a6adc7f6

    SHA1

    1ab8affbc0da59d74c5ae520ae149b202cc6319d

    SHA256

    3d3898814f85355f7ed69b2d4bc495c63e943fc0b09afd593a626d83d1eb1e16

    SHA512

    7c599d992890bf8c2aa1e29aa2136aaee7623c781f98e96ccfd82f23788bc269d1d62da324b7b05d916ac9759f9231761c27c2abc5f963854378a5ee4e1456ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0d5fdfbfd14170a6b95608dd5d1a1df

    SHA1

    8d47f00fb8501f3c6073114ade1a58a4550c7067

    SHA256

    11e170f01767df21851b1109c9eef7fbdbc56a27b07eee23010ff082b92bf46a

    SHA512

    a8e3188c231582291e2c85cd5a7fde3c211e8d9f8f318317b99c8943954408ff305040682dd1ea382cf03dedf881f48e311602f89f9e32ca377997803dc5959b

  • C:\Users\Admin\AppData\Local\Temp\Cab3813.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3884.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a