Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 08:07

General

  • Target

    4a218386d49b3f1f4841c5f9035a532f_JaffaCakes118.html

  • Size

    201KB

  • MD5

    4a218386d49b3f1f4841c5f9035a532f

  • SHA1

    ec37a856cac5247a3cb1ac9a9dfdfa522646ae00

  • SHA256

    b1b1216254d0026f951117498c57f34c3b0e3a03637476c8364793a2645eaec5

  • SHA512

    9213e6c5e18f8e61622620c4a267da6e58ffda64eb438fbf6582042f233cfdbe5e848db05f248afcaa5f7bfa31cdfefb6fc13260e229e06d81cfe095c1f9f7f8

  • SSDEEP

    1536:ka+B+wUEekCtKMoNoX2ynB3XsqOdxy15KJh32G3jX2lGvM:d+S3XfwY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a218386d49b3f1f4841c5f9035a532f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1872
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1872 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    825ef8885bb93581c961d4581c924a5d

    SHA1

    4b4f5819d466e5728f5a462e93e7474e16dffbd8

    SHA256

    02b92cf9a08cf3b60af365f765ec2b09d2cf1ff9fd6ec926315b72ba6d663634

    SHA512

    6219bc9901035667f5303dc43ddcb93bd9e0d99f9727af1b6e19b162c8eef934aad282653906f736c26c80d94242c471b27c2d71473fb10f7d8c6ff8434bc3bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4f646f843dc421cf05b69a18903b554

    SHA1

    7b71cdea9139b3747ade7ea215dd0ef6496bbc9f

    SHA256

    2d4097e7eaffacc880ade4103b30e059d1d8ae869a7e063a0b7fbaf0858063c9

    SHA512

    1ce70c0e237bbdd3abbf72e2a3a359396fdc526a018467dc824d3af54f4f9abaf4da654910edfccfc75ccf34605abc8fe04d7cd82264fbed88ea751af2a3193a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58304231132c723816a07439e2ee9484

    SHA1

    c43795459a62c88efeedd5d405fd6883d3f3c8b3

    SHA256

    bbd0b7fcd53a75a54523220acbabef7e29120024b159ef4bac406c982829f759

    SHA512

    7f81a553cb09838c4f2d540b03215b81b0b3f8044aa673c55057c5059a0ee7de97714ea1763e960a326d9cc1f62f8bf95a3ae79fe0b791522ff228449498f955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56d52e3c476e98d538cc3cc30efd982d

    SHA1

    6a67c3b6b3e8f88fb9650dc44f983519586ed815

    SHA256

    ce5523b63880997aca31f98df8ad87a9b9613717e643a1dc15a923e75141ccf7

    SHA512

    7abbefe34e0c63fdc9ebfa34719779aab3b87026231d7b81277678e2e57fa85002752db5413bdc9459e4cbc446130698ec9e33c26c2bd441d9678b3923ffcf50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f6475a28930520f5479827effe3b5ae

    SHA1

    e23299faead7f17a342c2a920766b69f2ac5614b

    SHA256

    eb89e51d33b364524fdddb8dd4e859df2693fa3860d20eb503a5763f1dc25747

    SHA512

    e20dd87adb78f529402251447e6e3eac7c9808f09ea8e9478401284164852b182f27908ca4156518ed1941aae26422faf428476754b828ba051fe57932242797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f0e97293cc65a1c55a82cccdb3eb63c

    SHA1

    0b44ce96a8c19c4b8b9c35e63aece3ba8dc0e080

    SHA256

    190dc66c22eb1f433295933e290dc9be147d6f5ffc4f224b99005fabf3024960

    SHA512

    7837a272b583e490cce569ba8f910c3c4e56737955e3d2b356f5bf59559175c983cde9ec52c89a11d46c3eb7c4da374460233b45a55587cdcdffc2464abe5790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cd839a414628b8d8e77e1c69ccec785

    SHA1

    2b33e7bf79fcb8403f65b846c0f30b7a1be36cde

    SHA256

    84b7db5c8a9847833bc121b898324a12c7cecce9e9b8ad0562629aebd83b1d06

    SHA512

    9f1ac845282f43c252cf956d823b0eff5ee7e0828e8e6404b87cc320cb63ba21e27172aa1e9a391572f1f345700c113994caa32f84e243d6f4c8c313a55b19f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41ab211f18e4d88b0546365f855eaecc

    SHA1

    0f107cfd70e2094ca99dc3148005328db928ae27

    SHA256

    3493b3159b52c00cefdc079c9051999b88c3ece2cb3c3dc72d79bcc013e8b740

    SHA512

    d260ef6e502a52d89d8530138471ca191bf51d06e505801a80ebe4d4ea78842bc58d17354e9d37882910414263d3dca1b2deacf751bf80d6c846456119e3569a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    837df907dc465af9f04dbc1f4ad68e98

    SHA1

    89925cb699e04134271e1b9f225f609fc20d3cfc

    SHA256

    0298ad98f3b007bb77dbd5b9cf23c73ef1b32312edcb3f8685cd80fd1d52a0f9

    SHA512

    4483a230fab6cddb0d9113ef41942ce426a1d485f775a4b9e662315fb14c60d40c7ff06acfbe8e519363c14c4174c15b181fe467585262387a7a7fe3fd0338f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c03ea5d80cdf74d28833ea5a21cae46

    SHA1

    08ebad5fb66619a587d359d4c7d08abaf20f3ef9

    SHA256

    7b03a9b57e6ef8b93779bf90d6e0dd2c07415dbc0799706ac0edfb29b9b91165

    SHA512

    2ca6e0573ed32d7c7913eacf085336b509310753d4b6b76cbdf86494a71ff2454309cbe9ba8be6505b60bbfdd366157d20690bbd41d30b8bd68559d91528e859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dbb91f307d57749d726537372a88ca3

    SHA1

    1b3e6b0ebafd4cd568ffd702aef92429161afc1f

    SHA256

    d8a2ebcae2272a572c5185e4ed8a0b7be6b2b8aa53a2ac969d3554499db293b9

    SHA512

    717008bd3ddfe1c4c803abfe878bb178035c7b596a38a613735699085a32c4e2871e602ae9eb5d1212bcd3dcab7e430c99e4bcb442792a3ba47b2d285af848f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90dc61b38eee70efedf64feb49569c94

    SHA1

    360c82e4657e365f894841b16483075720a0cfbf

    SHA256

    9890be238633032dcbe6034901ec33bf0f192a4f3b8f24b94630d960a016995e

    SHA512

    84e7a7998e79965fbd49a30c0291659e11f94e19aec2aa5236a47cfc7ec203c46bac13915cff54d026b48ac03980ab0855904b100867d9d39d23ca4cf8163543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a0cc1040fc980af171d44eb971e0753

    SHA1

    c4d500f5d250a5d7a4dce59f75f0cdc79fdd234e

    SHA256

    28632b7b3f8512d6018c6e26ef4a35f8cf96192646fb9876440c7d06c6d0db1b

    SHA512

    cc1baa38f6cdf5c480ed4d0174fa2c33806408527502950584d4226e94c2a019c5a7fa3f308d24b09d1d03d264b0a8b781170a4a19c26c59349f56b88deddc78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb54fafda59ac2fda4cad3938437ed0f

    SHA1

    efd4566fd4ccade53dee9390da8996b7cc3647a9

    SHA256

    2b6f522e932a8a95bb16fd96b60ed798a28a7da34bd7695c8e0135178427357c

    SHA512

    ba440669223252fa9fc68d46ea06d876eb4156e5583ada41c6f4976ce686b0543428a3959f6724ded862d6ab11184d473f8eac4e2f1b9097ae08d6111835d363

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88e8101438d95305dd0fc818e3c884a7

    SHA1

    bbf1ce8f47b0fd4df170a6ba368e5a23d4898b00

    SHA256

    183737a0e0c71b1a93019ae8b87c99a94f62d74fb3609d82aa0e31afec215433

    SHA512

    05d5398ff07f104fc6c6c3f73a4315475a4da78601d3bf0c1b859c5b32dd5dfc112990fd5e8cdcb8aa500037055fbf910c8ad132223d36828126ea47be5f3eef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    779bf8f21ee88928e43d6bb274a5174c

    SHA1

    a83f8460a19218003784abb765a8d9198d13a4de

    SHA256

    79b7647c7708314b0d1f6dec3077204864b1aa034f52cbec3b281ce9b673f009

    SHA512

    0a0bfab82d59f127721304b27e51835a9f5630549e6999c3266a9aa082418900f36b2e43e4b82b1073c6405e121b4f5448093e36c8d9f4a438bc95e4fa407898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ed0c793e6cd581cb68997f1be96ffd9

    SHA1

    71d8686625f164806047cd46fa8471691cc1c47e

    SHA256

    4483d993abad6cf3cfd16f3dd30ca441b67ee18d4457c088c0d1a6a25fe376f0

    SHA512

    ea9673467edb97139a17ba6ce1edec0df72bebd108953535daeb1d5062cefb65a76ea4ab9eb43e1a1de74ef1b6ab5b3387c1d296ebe29ce4dfacded6ddc02075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ff74559c3640fb435987ca5c3544d2d

    SHA1

    223337e17226e6b4b1d54e3716d61e85672b976f

    SHA256

    4d4717269cc0465d04f609197439f79be8111ebae8e661842e3e673289669c24

    SHA512

    772b54fd146fc4af202463c46c7d28377f9b4ee0a5fe19bbfe70b95c57935bfa5e90faac436a80e6ed89637f6235b0827c1f907e3702c414d6598b0a41a8f86e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1658bc4a0d2f905fa9d3a92dedc8d9db

    SHA1

    525380ba5d65ec89f933a3fb04404671613eaf9c

    SHA256

    b61ef56a69653ee0b7ea0b789e6b35a86d8f8954eb0d54b4be520676ea6739d1

    SHA512

    9e533a580cd4482cb3eaf7043f5cf8cab9f46652b0cefdb2235043c5f0baf0c379e824efa6a1643cd04715dda07e9197630a1dc2183e3b9eb4f005fd114b4323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23ee0f1b1773a04975469196eb22b094

    SHA1

    ba231994e074b021613ed28ea041d5e70698cd29

    SHA256

    d7491dd316d9194f51478dcd909df8566395076d5ae73b344b9306cd20bfd6cd

    SHA512

    acdbfb9ae0f2153f5e3f204dcfc850d4b4c5ae08b5ecbaf469e70717692afd9bfada334586c084b937928d19282efb8fa31480229277c3d2c9af01cb9552a4a2

  • C:\Users\Admin\AppData\Local\Temp\Cab19F8.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1A0B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a