Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 10:06

General

  • Target

    4a89edc64f4e63db26d3be7a25edc698_JaffaCakes118.html

  • Size

    152KB

  • MD5

    4a89edc64f4e63db26d3be7a25edc698

  • SHA1

    a57695146b5e8f7eef72924f24770f572174abac

  • SHA256

    1d1ea305b63c5f504867eb0063a741772d292abda4f960ec6887ff8452e9258d

  • SHA512

    213788618feb31e7c300fbf07cd33feca9c1015f3ce19cc27a806de2ddab53a0c7c95a3cfaabfd3178197a0eda356fdee9d5226fd20c7154bd761ffbe43c3edd

  • SSDEEP

    3072:SHkjpdqdH8kTyfkMY+BES09JXAnyrZalI+YQ:SHEjsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a89edc64f4e63db26d3be7a25edc698_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2024

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d59e9512f55bdffd57df9ede0382a333

          SHA1

          32176b3471507d09d34b0e7ddd03b9bdb057749a

          SHA256

          096a456f3797e628da20c4e86948e42bed6ff438d737a8dff435e9f9d3c2689c

          SHA512

          fea9108518c4027a56d3a76e540fe176e74bfdb511cf990865cc5508c978c8ca3c632abb7d00b104b5c74d2e345192d7f1d3ed0479e7965026b225488ce2fc24

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7b015e05c05c4191253e598b476f48e1

          SHA1

          8d0c9a389dae8db7ea627911ba4387c2abe7f1c8

          SHA256

          d603f0b2324bd83706fb6267b348c57323add6e50b2a524d2bdcdd8237392de3

          SHA512

          65cdaa8d9da36491ca8d49b7ed971ce60f06f3b67784c34ef6b293bbe6a99252bc364e18fb5becdeaeb469c6bedcd7b27494066fc39feba1c52dcfe8bed5b17b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0a32459b67970ac83b1dc97f828f9215

          SHA1

          f0baf801dff78e7f85897221a7b5665a7f92c30a

          SHA256

          f2818109b407117e5a9f8a6a3f1d1251db8f58fb7e861a17d7e0bfd614c8a9ee

          SHA512

          5cc31443597977d3567ae7568e90f6aeeb541eec21e8373f81e60f7051b425a4b3bce4f99fb9f5be27021feca9dd3e23415380c6d9f34e97e4f1afa30d141a7d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          301d939eaa80a69fb025f833f813af03

          SHA1

          d9422227ddd9827926df952cdd5a2b1a66a899a2

          SHA256

          e4599f3ef5a5cc86ab203e0756722bdf02865ccb21fe1b01ce4a631b3033872c

          SHA512

          eb9b79930bc7a9c74f1e4d8e95e06de8b14a8f6a596dc6c78463c1905d044ee97c42ea0b79ad807391d69e46d315546d35207496f084605bb18374b03df1b952

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          44f5838b5d1c625fd282483c287d904d

          SHA1

          f5a90c13c1a26502e53b7f64816d313100753f3b

          SHA256

          e4b07963ee16c2f9c14e96d7441542dafc583bd351f4a22caaca1cfa9ce2b471

          SHA512

          b142c6e189bc4ef2acb4334928267e0c244516abffd378c9c18157daf9d17f477c3f9411074d4a1ad96841cbc6dd95d27849b088132a9bff39aed47db964d0b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1673995d0c51db7431188ef1a495a3ef

          SHA1

          a265ee3166fe7384bd307e0aac8ea21b145ee4d5

          SHA256

          c0d4e6fb2e0bc3efcdc2e5b5ac59a60915105518e3ce5f0a1c82713131731226

          SHA512

          e5894570b8f1eb4907ce9b23134b7908754da85f2dce403897fd831edd947b106602fc3c3f15bae8fda0f22f919b60db0fdf5199e3ae550c4254579735a16132

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          baaa29ed754ac048f10c35173b5420d6

          SHA1

          3f3e6cc2eaea88bdba0c5ec8e7c4e3c981bdbaf9

          SHA256

          72ed6eeae523ef7af7f2f0c39275a90a6dfda012bc031938a042d016752a1810

          SHA512

          b2a030f764b0ede7e9301f18e4562d489d3aac02187d9a303de419113ba972f5677a69560839b1eb8fb3a526df207d1d48f15397d93ae231fcb66f4f37a2f687

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ae60b38e22b306f1c7ae42e6d4768347

          SHA1

          ba1b53ae0f016e87b0f98aa65667233266b79905

          SHA256

          6902fb087265113ce43251d96fe71839d6f9fc5d60ee484dd99a649c851c2337

          SHA512

          7acc77396da641756488c1bbb61c0624452ff096607572cb7362dd23a0a635d605c486bcd5062592bdf2a2481988fd9fbd65ae1f8660e9cb2b460780617dab3f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2073b2a515b367087aeba1468f4fb831

          SHA1

          682ec974b017ad518dac66441083a3160ec40dd6

          SHA256

          832447744e417e095d95b34eac3c901954677cea0449420b1980a5c3d5d40695

          SHA512

          2240de04fa1a1700dc25c1ea10a05eb0958abba2a8e6833ad18d626729cc0d216ebec31fa0b8e092ee28651ac9bf9d09ec31e26d1021a60c9a88279f95faf1d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          45b22e4d72eb81507458df95b8f55316

          SHA1

          819d09eaa52c90c1fa761f93d2d2f9b4b407b91a

          SHA256

          c45483270721349ac856e90003fe9fb5ab9fb8d69466ba8de2f78a1346c6c73b

          SHA512

          1d1d27e8201ca0cc2e7774c20c985fed1fe89448c431504e536f93fd280264a44e5803d0adfd177b23da7ceb413af81676ef421bfee255de81e320aee8df984b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          919bb3e97ef10a115f5bc67fa72cd921

          SHA1

          9b1537d4a1e9dda3df800219732f78c64fe90797

          SHA256

          6e1bdd4357b54ebe8d5e140377c9985bb78ad08ca36fa62c2b4fe0365ab7a9f1

          SHA512

          ad008287db4da6b73ebd81871abfe6272ec0246a6cdc961a0f66aa1f02fc19010b4b02d958c8ab227014de0c11839e2ff44adbea0dbd7b86017806638fd352d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9dca0ff6bcea2e252e2d7f6f05af05e8

          SHA1

          7a9a718e9076d8b603503b965c5fc73330484619

          SHA256

          3878e85b0e2f5ad3a14b067514421770f0816800ce3e05afce56666fed7c8f3d

          SHA512

          59afe0ccd3f155c2ac7b01f2add6d5a57ef3cb33d825a14a478de616c0f85ea28f9c512e73b88a4f882ae7db0a6568c7cb099916d0a0d8c4bc6fc381416eb67e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0cb62086b8f47f309601b16d378d308c

          SHA1

          6ce0e826d3131925f0521d545ad496df69470404

          SHA256

          698e0d3d5bd62aaa55cf195179066bcaeb1ac9a42eb586bfcf208308091da116

          SHA512

          99cce631528e341b88cfd7a315b2c8dcd94f346d4f4436dd9627b4abafe0f52d7508e3631c6c9e67cf78d596ca1991d293d325de2182ea13f086c079a86bc80d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a3c35c8dc13de550bfde05b9d463b2cb

          SHA1

          af7f3c9f1ec3cf04ca9770f649f434fe8bc70a35

          SHA256

          8689cf8344e047e7954d0b447a37234bcf98f447adac0542fe7e0bfb79e22dcf

          SHA512

          913a39979d902e3da07808a1eb491b7b74490a90fe058a22718a522c3c148f948ac9393f63e3f23c923843d5a423dd2fac29c46f3ea7986a346b116d9bc4d776

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ffa4bce0ee51c143e20d8cdb565d69e1

          SHA1

          350114c2b5db3305b9f61071bd46992ba574c13e

          SHA256

          5602d857fe28045b87553ae25b2fa7da2c452856eedac9cfafef34ed8ac95016

          SHA512

          2bdfc051f91805b312f980f575d77c92bb1c78352594b14202e222f3ee7a9973807dc2ba11758a643354f98eeef6e6b230a90f7ea16836137b629734a6f21c98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          342b7abb33fd8d6525c4e7b479d27818

          SHA1

          08d60e65575ba491e4544310878b392400ab7369

          SHA256

          b130328af1f57f6a2b680ff9e88251db8eb30c0c227aa366d8b20597eedbf5f3

          SHA512

          c58e565201a6aee7cae35067debb5523502bc15c02ba07bf26e2a160e09ffc7f7f4335b4888fd3091074ca89a70e5061cc043b7c6cddb7cb2f6ac3cf8b84c479

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          49fe0024f9890e868e8fd8835090415d

          SHA1

          baa9f1afccba3c00d5907efe9187e2dc286f7a28

          SHA256

          725306f574030434723258097e214630ee1181a7b07132d4806540a1f654bff5

          SHA512

          6a967043dc584c94707802298d56a4e9ad4acda726f8c1911b7fed1cf14de192e61d91112a5cf17e85206157a84176f05b0feadd9a7d50f8df695c05aa9d9dc5

        • C:\Users\Admin\AppData\Local\Temp\Cab2DF4.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2EE7.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a