Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 02:22

General

  • Target

    4918eea8f21eadee4c24a3b59ba57a1b_JaffaCakes118.html

  • Size

    461KB

  • MD5

    4918eea8f21eadee4c24a3b59ba57a1b

  • SHA1

    b34ee27d1dd05ec17ea6e04a0e02d265573519eb

  • SHA256

    c804881e1a693c3efa7332bca5ab3a28fc58d349c5edeecf9f1b9399f55437a4

  • SHA512

    2ac5ca0986bd1d8dfb707b90eb0ce73ebed130bf1f4da9a09ea3aab32a63b51f0fe215c78fe068d2800885bcc9c12400c7fbdec4cbdce93bdee69f4e1aa2434f

  • SSDEEP

    6144:SfsMYod+X3oI+Y8sMYod+X3oI+YqsMYod+X3oI+YLsMYod+X3oI+YQ:w5d+X385d+X3+5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4918eea8f21eadee4c24a3b59ba57a1b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2192

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61a627afc4ea5a13c28570b839317d23

    SHA1

    9db41f964b58bc08f0ad498014c2c066f668eaf0

    SHA256

    97df08555bd11a17473288969ef3640baa182cf1096669bbd1efd8e5ca7e8c86

    SHA512

    e407cd94fd305310f382cfa9868a9f3d2d696307666db12f3cb22adbd57f846cd59997bfbed0c5292372bd1c198ba9e2b440417cbac4e77685655f4a5f304a70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90a34de16c086ef86e5245fa31496ac9

    SHA1

    b14dbe7d8acda9287f04a4e7dc4569a3e9aac6b5

    SHA256

    7152e3ee8e2f0a3261ab77008f74be1d8a2d2c5a169171e7f5c6efdab2e8c324

    SHA512

    127976e4fc96a8052423316a8110466c421a6c8dd0d1473e919df1a8e0a7ef0f95a0cc98cde878dbb82bd35d848cf75f8fd98a03c61145e92e3c804cd7bd0ef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3114321aea6583b0893c3e7c69adce36

    SHA1

    8f62283a4a5b21bab504088d72cdd001ae140ee6

    SHA256

    0ca403c4414f905d8327994df68b306f30fbd021067d55a68e43093c5f7b6069

    SHA512

    811d1fe12a89a602a0b46553a43cb5b82da930cedd0f2f7c6d335a62a106e3130ac12e2fe5d427d22167c229ea0c80f2ed703c6b081fa8b5e60b377cc1667769

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cfa7d9d2fb39dfea8be1616cbfcc138

    SHA1

    0e5c8a83b68252a683b8efe47a3ea703a0e36e5e

    SHA256

    ce8fc0c2c932cd9f88ecb2dc8fde6a76ab98c03f492cba73e51675700801f10a

    SHA512

    3f526473dc52fb771cd9729ac624edbacd2aea342ab9409ca47b10c237ba944775a9ae3b0176002bed0cc8281255419d8c4c24cac60ae604e4e93284110d77d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1e032c756b51f0bc6796936e9efe162

    SHA1

    ebf7707745f7894d8f74f3e02174b335dbc4c28c

    SHA256

    a21901e66b886320f4e3352d6f432cae69d82fec3c24ebd273c920376b4bede5

    SHA512

    f5a2fa3d5a36f563d2dca167f0360615fa26d77c4105a1fbe0cd9635371584db142577b3d74d7206f426f4d0a43957e71d4ee261fce7109e1b50c3309dd34f0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df96259774dce63adb62a2d66dbe31f6

    SHA1

    1178b5745500109a682801809fff50737bd0afd0

    SHA256

    b9e468aec07194899c2906127e5117221e6dfa4ad73df0fe1b24fe6bc08dd141

    SHA512

    f52f6809ede35390de1eb47edbc29916e1a3a6e2916aa20b1a6ff93d657e078aba04f4120712a63d8b213ab09003f7e0cd614e15df7126fa0c8bd3ca2194adea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4a885b271f3b1109b7b1bc64e23403e

    SHA1

    0ad9bb6b960468c945261d68ea1b91c8f7a3c019

    SHA256

    dab66b98c8a19aad619ab6b7f50b5f7a754317fd88011922235efa201e4409b2

    SHA512

    4505ca6acc10a1ca582202bdea59f84f6db87a952eea8057acbf7bc3268cd556e93e1dfbe74445a01b8be98f0210f5cea3945238dbc7d52df04f0d36f8da14df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d71fbafece4fd83aeb2e0203faef4f9

    SHA1

    17e475d1e45462577ef7586626bd0bbf88765c20

    SHA256

    599bedf44db3b5f50a411cac820eaf56f17686bdfccf1ac666248bf5a3964665

    SHA512

    15f1ba206a4c5d5dd461ad74cd5c1b8cf4d79975b8a2077264bfeb1f8050fcf060f3cfac4c5d64afa6fabb53f59ced5c8ec4043e02a5f9302b609e2ba9f5fdd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11c93fed7d1f64be0a7b4bb7e6335fad

    SHA1

    79b5f4c8847e05e45ec52610cc3c982722b53a51

    SHA256

    69e4cd0710d3c792179d0d868ef261c2025e2c8daf06a3670f19fb1d80d062d0

    SHA512

    ec42306fb0024ae6a5de7e08c3d87beb9d41a8bfea79e3dc70443b8510607bb4fd79a1d5f85a54ee9b26ac69c0ca30d0568b5de14314d63065f6cf11f8e2225a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2393ad94b3bb2289bc72c6dcece3897

    SHA1

    9021b4098fe506c4e7059ab4fb52385bdfb06dad

    SHA256

    852ae78a5e827df309f776aae4cd43804454cefaf05c427044bb9e9aa27ee286

    SHA512

    fe1986dcfbf89f1eea65446c82fe9697535d075a66e0d80ba9426a129fb2f725cabe9a79aeea6996ce24d600014d8a5889de2f45ca5e00eadb94502cdda3b8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40da52135b8dd091368e90cdb9fefdda

    SHA1

    47a26010d73d6e728fe0aa2b0f834c1ccdedb347

    SHA256

    55f0e0485e8dcbbbe713f7bfcdf660a57f0495935c5729982bc050393e2558f6

    SHA512

    e729987fa91009358bf0cf0ed8822c76c05a68047296ec7bda7776242ffa5a059297fa468ceca2aaf536bdc149d4f09c619ff25b21b555125c555c5e8d137c2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92b3b09cc206f1e3cdb499baaa520937

    SHA1

    526f78be7a98f135c88e09b60cfb523b9a4dc6b8

    SHA256

    0440d6bda76c48ee37bbf4b064e6a6fb08d4b43321cba5942d533c46f5ed97c8

    SHA512

    5ca3630442a15c0816c23420b8da4b38cf49f043ad04f0f0e85792517c12351c582034a6eb0ccadd3b0d65d3d1314ba6634a809e33f015e8c226c9545d06d089

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c03fcb67650ce29374742d933f283664

    SHA1

    e701ae9bb2586fcaeb75ad323b592aa4504f3dae

    SHA256

    d611ece8a17319a95660f48a7879288fbd63500b9131373c4585521718da9799

    SHA512

    abddb2e414625a6ed5407ec92cf49bd406ae90e07f1dae5d3a124e6e796a756e7a6ac10c9359617cc737229d9663dd77609289d5dc1375f0b2f851f495996116

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e8d5ef443fe70c067491c6d626e8d0d

    SHA1

    1ec430c18d64f7a8461e54056fda7b8cf49d048c

    SHA256

    839c5ce1050690eb46127666204b796989b172046b0e7c0b63f2cbe30578fa5a

    SHA512

    41ad78275973d1dab045e4b39906a7aea639ea2530aef083736a7266419516723d873ef543d2cc61d35b88201a64bf112bf165fbacd2ba215243de885915af89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cea7a3f7acb8b66029c4eae3b00896a

    SHA1

    44395ee918a1afb3446c195c6b8a858c56de93f5

    SHA256

    fd2af6fd13b4ba3751fa2fe25a50a5857ede89a16c4a3711e3ceda342abfedbb

    SHA512

    686f30be3bcd494c80a1506bf80e2a09fa68d5d6df36c0236333a59541972f8d3f3a0749ce653af4409f90d78f6085cfe8eb742e265d833417122e6acb9940c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    adb2cb74b5224f1ce5a3ea676143c256

    SHA1

    cdb4f3a5217f39d9469a8014640531ab12d5ab27

    SHA256

    0629bb00677cc03aa1b18920e3318bb89803b23cc5ec343f8829ba8bc9940333

    SHA512

    de5c5ea3406a490076881a7d76420241fb6ad93fc46182a7a019f6134edd508623807a716afe8d43bee72844500b17af7c9704b06682168203e4b6cba665907d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4a95f365a32d522a64fbda134381cd7

    SHA1

    27018889e03671cc67e9f18f47a6fe68e910adf1

    SHA256

    798b89546f2ae924f32ed5b8787f83d7999d79d0a8707fc50ef1002bae178373

    SHA512

    0fec68a0e20155013e0f7386a44e489a284122cef53055e9e257e018ebaef890a1e71e0a792e58cb57ac16b87fc37c7706c4c2b2b8ee990e9b6363ef2cd5b52f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16db7a2d07975ea2a4e908bde2943591

    SHA1

    c26838cd941af622209e7e43bfbaeafd5db46364

    SHA256

    d722f39e5da0e4bb56a34a3d7ac6103744b832bc06c79a22866bb84a57558793

    SHA512

    3cbca9f1c7d44d962c4d4e44285c9f307b0cd6ea65af5648aaed40180819aeb333a53d74a910c7e71a1b28378e1d85eac15f9ffc36f1d599b901ba93627a6cb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9ed0fabda68af9dd55ecd46ca0177ae

    SHA1

    230a8ad03c13cc110a95dbc0019c1daf31a14818

    SHA256

    8ca7e3ffeda31c27d8da7fbc7476f1487183119eaee61d63dad0f395addc5727

    SHA512

    2cf9fb61fdd105611dc852302ca1597415c00d666d08ec0a4eef141ab96204ae057e1cc1b526bfb847ed68ddd9c4afe17b8c3b7fa165c648b0410c5df8fe340c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66eaa522ccb3e8a4586478b6b7c076bc

    SHA1

    3c9848c9e751248faee824f79cc18316524b2da2

    SHA256

    6ed1330b67407588fc8256f1d80a89aac6dfadb5cebe358dab68ec07b789e20a

    SHA512

    dd26ccc18b54b2a61ce887e22cdf545005f84974d24154e840bc983bb39c08bf331e0e2f8458b39bf13579ed0561e2941139e138d56eab3aa89d60c3d73cfbce

  • C:\Users\Admin\AppData\Local\Temp\Cab434A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar443B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a