Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-05-2024 22:06

General

  • Target

    484051dadb745fb1429cdc3acf1dae50_JaffaCakes118.html

  • Size

    460KB

  • MD5

    484051dadb745fb1429cdc3acf1dae50

  • SHA1

    2f6b34c905e7180741ca650d14a536706b193a47

  • SHA256

    9e37bd8796e2634e2fc29dc887b121e067c4b10b07f2ac6b74ae893c940e6fdb

  • SHA512

    cd31f063a075cc689c0aea3d66f5383e94344f2215b73c02cebf331b7b2a4d42ea9be6a402fa30432984e83889f9bd178ac53583b8d2bae634d9bf1049fcfbc6

  • SSDEEP

    6144:S6sMYod+X3oI+YpQSQysMYod+X3oI+YCsMYod+X3oI+YLsMYod+X3oI+YQ:55d+X3l5d+X3K5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\484051dadb745fb1429cdc3acf1dae50_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2864

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77b2352c17b6981f887c9d7b7b759629

    SHA1

    27833cae5a468a0590b31eeb8cba5165652f4f06

    SHA256

    7a4576a183363eb7dc1975052fcc54a80a944ce4429c5361a963d7308555b3b0

    SHA512

    e6274a406b71d11c10c950c8a9263a8742b625eb0ccd1ee26f31fee76e055d99b0567e96e0f858e5ae3502fa43b7abeaaafdf5e82e69d207d7937f4ff6507499

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    324d9085b277d5df0cd00b23fd73d014

    SHA1

    d5fe4e58995f8b42edf07a2401dac833df90016e

    SHA256

    cb5d600a0d04f1e773e3d8508801cfffb265f87dee578a6a1bbb4f4c9ccd0015

    SHA512

    e7b4a9fae8db8bc9d255639e7da1a4a0126d7893eb5eee41473455b3d727ee60518a7ba393a23c14d9c94b67f0f132fe02e5155ed6436254215a4c69cfb709dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    907ea85dc2aa7bea1160ac8f5b70d617

    SHA1

    71d83c506a20679bae1d02cb0bc13a95afcf8cd6

    SHA256

    e26cef8a37e6fa8012853f2201792f178defbbc26fb6044744bf8b3158b57ba1

    SHA512

    46b68dcb5d30a3825921325d37c8bba47473728dff2f8a607ed609c122f77cc6293bb5dd14aa1b4414067c81c84799b08877ceb3a944814c5d0f1a1465eefaa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0419850e6c756c2f4d5963b010185448

    SHA1

    753674a27c00845595700f9c099a2933c753143c

    SHA256

    e43c9bc77800b09af4ed44133c452bc82cbbc9506ce640fe347175e5703e0d67

    SHA512

    eaea73812007e0ad97ee84e77b27ee2df4cacd1b5d0eb56829dfa6f9011989dd64f9ac48bd72581cc4d9058e593f0d5fdf12c48525500f1800f2a0239bbb23dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb8e6baad8426e183037c58cf999f826

    SHA1

    7106a06605990aa6c49af14b979385f16f38c1ef

    SHA256

    e3bd1c4e0921c40a1ed940ebe0f01b6398e9cb3ec4e02959d74c67de0b9865da

    SHA512

    93a00f3b49bdb0def95232c8a7ea13b4b9418d9f390575299a5ea86aa66a3df3cbf45047b1f406b5d763935bc86f2936304ba800faba0a51950de2b92bc74461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    907489e75e0874afb3d90da64307aafc

    SHA1

    03e7dcf24ff37e32665445f548c5d1096372baae

    SHA256

    3db5ea0a46592cc65e223533427e55c9a0462296e742a1dd2197757ea843ac72

    SHA512

    2b215230e78729bdd60364e593cc828ddb61bb386a1f7c40752cae46b83caf9e429eff8d4b4a44439f9cc2d40ea676ab011826cde0bd21918eaef105af53aaae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bc82fd15b3d7c43895b41317dcc14c6

    SHA1

    b76ed6f7da57a95c31bdddc10aeda9cdd4239490

    SHA256

    81c14330c59378082795db07a70a661d972295fec6a0acda3597d49fd8679f43

    SHA512

    02f6f1d7d11d0010dc4df135ea0439c46807d4adf4cd70ccbd3c1d26cbc26094a3c77bf9cea991683671e3a5ad4ff679664c090e66446bd0b805adf4681b26d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76929a39698994fec122451f12b6fb9c

    SHA1

    af07b9f00560ba39b2c42acf41165ed3c490c600

    SHA256

    856f836f6a5a8ba6c5437a7384801f790521dd2398741a4d3afd096293fa41e3

    SHA512

    4d45997f524b7a3b340f500a097340ebaba5b421cfc07d5c03cd8f7b75eb1f37436f09a2c23971863a1d87c0cb709b1221417455b2cd80309691f8990d583c15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68819961e8e84b6f885b3bd5fac50205

    SHA1

    43ffc492a4e95370a2f32e804e8d8afbd7b61b04

    SHA256

    496b8623428da9cf9c18dffdaccbf44f058bef483bf6f8ba6eed1ed27186ae92

    SHA512

    c078a8ca7d024de8154e05ad43fe77198c4f8bb949aef0a09d6460e49195bc9a70dc807d01fa7508a95c985483d7edacf0f0b7ed8e85950335d5c7c72fb9d0b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f1af20257f3955537b38a7ebc0aad26

    SHA1

    4b9eb0e8846fe38032f9bb6da81da3022faeaf26

    SHA256

    971e6a0f29bdbb789e7aea19a5fa377e4d7dc7499cc1a227383dedb709dda6fc

    SHA512

    a10419c9fcf3bfbc6c655f8f36de02968c436490592ccafb43188de393c386098ee3352baa70e288238f88563897572eed790659ecedee0fb654d59022efc5f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    041b1f18f09e5b854aaf1669299bc5f6

    SHA1

    5ab047998a945834d1dc236b025553c60dcf0a30

    SHA256

    422ae19668aa267935a89b06f08d7aa0cbcfee4b527ef4752509b11c1ed0c484

    SHA512

    8ceee1de56197d178ad7d9690222ba797219a4c3026f98809e5fdd7a0256ff1beab237bcd1e24ae13ee3f101fc8dcc12ed0601e305e0a240b19c138e85ba9a1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af9f863efe4326bc442d4a9afb696afd

    SHA1

    a22fd61fc46922c2716b72f0f1732b80e665d938

    SHA256

    cb61782f216138a1a8246d2a8b5421f1a8a41af5c7e9ff4533db3c9f85c35a58

    SHA512

    0caec9c284cb34bc9110705bcc17ec013e6d91292e42a8c9123f08529880e73eb688f4ebcff083358121790a06fb5f09693b5783bb194ed0d203d1180a89fe76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9117c572065f8815bf685378d2131ac4

    SHA1

    45cbd47764482da4fd3b07dee504375f12f3a4ca

    SHA256

    c0f08138ba451535165c3e8ad70c406dda3ae532b97be9a2d2060cf746351703

    SHA512

    9949afcf0ed31a0d99b3206279c353729a00af9b0267b83554bffd1b7cdb511be2943fcdbb48e66a62b00472a124de3af2b555131325d2dec053131f1a51abf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    525aa2d5b3131b6fcb10d898c045adf4

    SHA1

    4f5078dec47843c1470c5ffd5007418b8091c187

    SHA256

    6483a788ecd65721fafe0d2a6e9bbe1bd7fdbd116bf2b860a000142cae3ef824

    SHA512

    85fb6542e97a066dd2d736ebd54e4e37d04b2f406684c5ff2184f749a7a2eccec8b593eae6ff1a3e96a742cc95482054ed8595ab3666fa917f5752e73d3ed0ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f93e880a5e3789e331805dd3351b8b5

    SHA1

    a73ae4a3c0bd9557388320957496d02f1ce16e6b

    SHA256

    87a0941809a92a452001e28b8778e5bdbf4eaa2f5c3d741fcb9f1ad542f91f1d

    SHA512

    7814d32a6ab8cd3c98e79b302fe04b63db2ff075795ac9424961c396637ebc010b8bd87cca72067042390dd659cc049c1a751d7d2d2f719b85c9d980a043daef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fe4fc0fc3dd6655b5a9bbd424755eed

    SHA1

    b507da2bb6faa11314305ab65bf24992dba754e6

    SHA256

    ff909a3a451bb2f7dc5a757505b591d2ffb8d38e07af2ec7b5ebc5f3debfad0a

    SHA512

    b367a784cf654953b1a6eb55c1bca7f7ef4effcf9ac3fd338f10ca449ea297a0fd88b81b0588291044ef065465da80666d4ef908f2ca984dd0cdfebf42147543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d587424f89f878ce003af266f0e6910

    SHA1

    420e4909d6c3aa7c91a59ba9ee8075a34910d881

    SHA256

    37b177163b1ff57bb7224021044aee056caa78cfae4b27e15995a066e1c30cc9

    SHA512

    8a66dd809ca083334174fa3637a6b41fe28766100ff060d3e8951ec197a0ba4981ad9313c8251e151ff82f555c005e41fb592a8cfe2d3d4247eb43c031bc6037

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a630b52bce9c23c3155bbe21571fa29e

    SHA1

    7059152236b930ff67a060ac7cca005a602435a0

    SHA256

    cfa1178665742ab293010d2d27485408a61c2db151ff242721b7c0b70e29773c

    SHA512

    41a10a1d2aaea5ca939d5659432e501e1a79c1e199bee7ca3a5e8d1d5a03aeab404cf13b1e36f1e3e26605c685eee773200d9ba57cf175703594e75664b5acff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98a4ea469921fb631899060ff4ccc543

    SHA1

    ca75a44c5758992b097789a5ca2b382f287b8e43

    SHA256

    a88e42ef66631cc028abab322d7ff2ef173c626be7e0294e5d04f16432911eb0

    SHA512

    2fdac6825636097fbcbc337a156b23fbef9c4800956de094ad14939db78103d3a19f05e606e7179c3f6c48378522cc391f0496d6d3fbdab13b5401accbba0077

  • C:\Users\Admin\AppData\Local\Temp\Cab9A8D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9B7F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a