Analysis

  • max time kernel
    120s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 09:26

General

  • Target

    4585e7030154e76655b08c4db1ee615a_JaffaCakes118.html

  • Size

    52KB

  • MD5

    4585e7030154e76655b08c4db1ee615a

  • SHA1

    fc8c2a03cc4dfca38f93eb58c4ba19e61ad2ded2

  • SHA256

    3a65c089933c8d67778d056bd7a64b8cb0f3dc669746dbcae210d3e699995600

  • SHA512

    da974319a8769be0fd07191377cb89e98ca337ed08d710916c05c3a8c00d3156c2403c770ada05be97fa5a719138086a6d77bba92b48709c94436b9bea5f42d4

  • SSDEEP

    1536:4BaS6+jIcq5RRppqqddiiHH95OFH3LhsotbDdXbLM:iaS6+c4FH3lsotbDdXbLM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4585e7030154e76655b08c4db1ee615a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b80fada7161ae63a92acb11b95f66b68

    SHA1

    55fbe60aab0d11f37c5204421c6cbf027caf29c2

    SHA256

    55d0dd03d425930dc0dcf4a7077ca9f98daedd8239c575e3cffa933d0ca9d752

    SHA512

    ac7aa1f7c03552845d49899c5235f6c047a5b8364aefbf559576625082305b0f421dee76c566f83c1c260b975e73c9a077891e6e2660c5414f1762aba5975684

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b0cd483d59cca38c6781d63cf3157c10

    SHA1

    3b1ade62b0b9af6b298625db475e9417c35d8a36

    SHA256

    23772ce4b9d57a0401d17f074c86eea69caf619c2f63d7f293fd899de964ead4

    SHA512

    b03a7b60889c730131453ddff2d36c865d9624655572d737dacc1bc5141698ef4d31e83bd56ad00762c080e5a7db982071176b37e8116e9e85436b467d0f4a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    976e54f444a006fe1f49d23746685a40

    SHA1

    0fcf0142f655f641d1aa3b4701478a169424a2d8

    SHA256

    34f0fb296eb25f0953fdc884225d1d3896c9c71beb2bd399b1a37996d2931305

    SHA512

    36ade86283aac30f1b6f7297247bc275b4b5abf86159d66dd669ad242bf462cc962430b9970ef399325f29e0abdf7999ec7c2bce1c55a44beae680984ed233ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0b614e2dfbd1fa69505c34f03347513a

    SHA1

    87885e0b8bc8d401045b6aa17b8cd1c33189d4b9

    SHA256

    cab1171f8ce88f46e708825d9362045165d7747760ba510c51da27d41bcecb09

    SHA512

    ac87a92b9b8769e5f007dfcd804fc464994f72f22a14842804f4a4cdf0185d89902a42218386e8340dffa783bddc0d91375f638f051665faaeb99d04fc4b3a19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ace172d91f96822d3f13f60bbe3624a3

    SHA1

    28bf8fec44b2f993968e10d2f4d99e2f57a9dd94

    SHA256

    9ef27831b6e8505c5e5c278511d484cc92a022005311c26195f03471b228bfae

    SHA512

    edb2768af9f0c443aaeb181ce1a92af80da6b9581c681bb65e9a544f298a96e77b3d150f26c41eb8f49861426af7c13469f6a4c1d1b3f92dc2403eaf9c575682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e1b41136ebacaf2bc3c4f4fdb86a801e

    SHA1

    cbe4db8ac789fd636930b774d52aa092ae9453d6

    SHA256

    ec62bdcec240ebfb3343adb8936da3994ee2ab40ef2c9961781ff22200303412

    SHA512

    fa5ec7cba50857fc967167739ffaea34e8317f0351fbf0e4af3189274d4547e6b31b6e4d3c9f6644126e04a453cb73383641a6ddd32f6fe91292e1a8ed74d1bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    16bc8d1310ff298663a0a1112be0b351

    SHA1

    dc089ba3493541c43a9c2dbd42261b86ba128e7a

    SHA256

    4dd41267a0dbe6238051a816ad39c3263727905fb402798d3518d40f060f693a

    SHA512

    416497888ea3f458c51dfb7fea1af911bda407bc79986f4e9f4c75873c93f106c6a52b4c224b5f5b885dfef2b5bdc0fee21e7ea184dbe82ee884797bd0881509

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5f8ed4e18509dc55fe40737dc0e778f7

    SHA1

    352dae7dec5c9b50198fb301e246331dcc71e08d

    SHA256

    fa9100216e20a0f4b59beea11c0e7369dfda6225b01a4e94b7ebc4d8518fd15c

    SHA512

    c572fea3b09f962cd8b56b2a3c40a3124e1fcf9e15c7992446228dd30b7622e63b1834d41a84f2d980e50628fbd06d0eecbc3cd427b61c30b84204469581702b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f2a13b9589fc74dbf3c68f987dc12533

    SHA1

    34e5ae5b7ffb970e4e36a914c43ad942baf8810d

    SHA256

    8c685f3851ad6f6d66d467b02efe9128f2d4edf0ae4d3915d62bfa7f6481366e

    SHA512

    a581167511fcbe0ac9b889389b347d579ed3a02c6bf2f745aeba2623adf063e84aac77ec1c071b4817a432894606c306b869744f557707a71f0a3145e03192c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cc2c5091b2d7d369813bf031969ce7ac

    SHA1

    d9eee7eef0c370c1941c260f299d69875a40c52a

    SHA256

    8871a3a03de655a0e79a561a9c817624ce020bc211fca3329232eecc075ef28d

    SHA512

    5ded1f3a7181eb879814ea04097aac99d0a1ea873e8ead6db248c60c8f502e48de79f42396f4c475fb3b880b84508f738af9ce9cd562f4ac7a06d7eb1770628f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bb9b54a31cac98b232b208e0880aadeb

    SHA1

    59c9a9bb4c8c2fc1c4dcb63150b49af7e4d52128

    SHA256

    5369daf2b4a671b726c414142a18bc607ce6aafc34e40cd88c6e96f5930341c7

    SHA512

    f6b80bdd5044681cf2059cc914a1b3bc1285f8eeb58fafc646b25d7e12a85e49d63426fb487560f7f5373c88c53ab498f5469442c3cb8c20c0bbdde80b30a0b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ec4419b4ae674f5116eb7c346063a553

    SHA1

    ae63f70a96ccf939532fd109b85f9535282014f5

    SHA256

    1272f2e9021cc9da5d8c4e0930aad75d96098acd7a4824f67853648443a6c9d2

    SHA512

    918e01ad40d58ffcd054c7d78a4c66990a9e95b90f399a386050e258c89ec7be4c58fb5e986c364cb4057e98d5eb4cfd564e3c9744e68854b5efcd6a37e7e593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5d5bc7a755513816ec936c8865f9eb11

    SHA1

    142983b6ba7a1fe59800e1e863487ef6dbe9e596

    SHA256

    c21138160e6b6f570f0214b2ef05289501bad2ba098ef575655f123b75aeae5a

    SHA512

    c58de1e95d89dd2a2d2cf51ec08daf130d028a960bdda5e06f807448c1f484527b287207e4b5793c0decb404fcd5966d1cfc4fa63093c404b49e2fba87af2a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    aa267084d809f3ae5e4f875f320ce66e

    SHA1

    ba706d536726a6b0ab8770774865432940439345

    SHA256

    77b19bbf521e2dde7a07905ff9ce6f9871d80cedb975d7a5fbe6109fed43099f

    SHA512

    d7d6b906ed99488b6e3f26e697bc8365fcdd2d77e2f0dc3fc14df9006a130006bda16d783d7a1270c9d0898e3db96f4c5ac7b3bc45c5272f422a189fe9a23d61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9efb2a3e1450eacee0fa1f66079b6444

    SHA1

    a464210a18ac4af7a45abf7c50f55ee098def14d

    SHA256

    2d54c27d707ceec6eca7653c0e72a0ad65210a00a6d912e0c1e96c80c5cb343f

    SHA512

    7aff560da1086b2963f279ca75a916d89169d661753f9939a652d50db56ca193ed0d744b732e3d34c548b170aa442e8465d0f3371fbb7234a1b69d2e15e7d9f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3cd8437bfe960171a40094d849eb4332

    SHA1

    285c47a5e3eaca105737bd810f6caa8a0bd9aa34

    SHA256

    f2b4a5f981c47f13cb00b5a115107dfa78f0d04d74638956b389777545f36391

    SHA512

    e35c03c06f71dc05710a157defa78b2f7932894a551729185031b406dee33a55ce019e03e6e0b1d42229e144a73dbd8fbc367b1eac00b72bb10871d0b1962e59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    682a6b0959b0dab143ccaeaa75851558

    SHA1

    e232119c13310690bcda701fe2fe47902a31b4d2

    SHA256

    5b81c2647828f210fc7aaa6b20ca1a216dc1c73dbfbc70aed606594ec8f92452

    SHA512

    5ea5156d072e4ee8c6bc0ebf7ec6c6b67fdd0b24043f5f008aaa87742f1ea450b570bc64c06620a8cc723500f10174313f99b6625d30a08362c9e2b0d9bfd8da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b2b01a1b9121f3398067ac6c327b73e2

    SHA1

    9313cd1d8814d9cd9ab98b50fe76f58967248aa4

    SHA256

    8bc8402e250d174c3e07caa91b281d64bedcee96a671e2cf0f05f68f8735748c

    SHA512

    8ce2e0e748fd71ff6c32dfd55bb172cc00f4b1ff687a6fa3d593543a35876a6d11d95e7e8b82291c6c1f65b9ce8d65561ae5e663ee1831a4c3c8fb838f8ef79f

  • C:\Users\Admin\AppData\Local\Temp\Cab4128.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4219.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a