Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 19:02

General

  • Target

    4c97af40873012190ec0f6c98e5f699d_JaffaCakes118.html

  • Size

    55KB

  • MD5

    4c97af40873012190ec0f6c98e5f699d

  • SHA1

    bd3385ac8e9ac269f7ba639e302f0113753969bf

  • SHA256

    16cd7c6a8d6131257d6310b0e09717d849575a4f675bfffc18b241386aed4d20

  • SHA512

    8e19607e2ca314f91b0522b3710a2ee510d501a1f406fffea7a851b45a4da1eeefb94ba120414b0f9a3c76577f10f47086b28f55c740fe9edba2a4960738179e

  • SSDEEP

    1536:gyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09q:gyfkMY+BES09q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c97af40873012190ec0f6c98e5f699d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1096
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1096 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8415b770ad921e75fb64c398353145e6

    SHA1

    2cdbb9342479d5c6466f9c0e4146f4ef2a675675

    SHA256

    a0770d6c2ca9bf223aeed5c2f706eab59821af12259c4bc6023a0ce689046dec

    SHA512

    92f541cb0f97b051c728e3995b080f5cbaec810c12f6af4ab99fb307e10ad0635e4add3651ec47dacae16e3d399f995f560742c6a567f5a067ddceb439bdbbe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67f70cf95eb2704fbaf13ff891f82b72

    SHA1

    8296b90c5459cf919471480234cb184db948e2ba

    SHA256

    0ca6e46a684c619d001769bf515cb43163a7286dc5e56ac35af2f9b5305aa600

    SHA512

    11953677a6f1f212a4a2fd231f50888a83ea2918d51416e7e4293863428bcdc8e0f455f5f0812b4812569b36a9be5a0cd8a1683136fbc3d087b6a4bb22bf517d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf7747c5366eb0dd0bcfa1271ce4e8c2

    SHA1

    e3ce7e32b55745e78aa70b733bf632536911c98f

    SHA256

    5a6a3d276b3a8d92d2d9ee077334c17cfc07d04049b496237c33868e7273efd2

    SHA512

    bbb3a5357f003b3015e0f893085e9313aca8ca261f6d83f6aeb6485ae059c93fa2dd61862ac116f1985e4e4d38bf55e00e484aeaebff3988de467f0c232102e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63214e1eaacd3fd9d17e042768e28c5a

    SHA1

    ccde37767798662459d639b59590914cf4f31450

    SHA256

    1dde397be0fdc16993a713a05e0aa6e9b5c69dd31546f06371489f4fe6882287

    SHA512

    359a37bc6ccb816961feccf812029eab9ea45c68250c84a9e67360f2f257543bbd939dc65695e59a3259b46a2d50912cc3059dd877f5f8bcd87cb753792c0241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d068f9800b814f053f579bc90fa7bcbd

    SHA1

    2d220272526f2dffb126273a331ef6c68171bc90

    SHA256

    585c95128c178d0db1eec1f06388fc498ed5629ab73805d2476c295ea19061fe

    SHA512

    60c07c65ee33587a996c3878e3d263595fa3d7ddee530c0d68dc446d60d31ea7a828c831518998d01f2b2ed9369e2226b63bd6fe6a8ccb56ee21e438efcf5a87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    753ea62fad3afc5e1a05a1b3ab35024a

    SHA1

    59a9ffbcebc106de625baed48e50256eccfd7708

    SHA256

    88ac46b9c849a103b50d4623df7cbf255792830df526fa4e4fc70cd41878f25c

    SHA512

    ca963f9d7b0d63a2fed6f410981a029f844a48ffc9eceab8cdea27323375d64c862d65af741de5381ef6921c0d7aa761e39ed62ce29d32b8fbaac46361b09170

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e949ee2384c06db27e95d875278361d5

    SHA1

    c82ead653e41f94eaf61e88105da77f0dc01cce7

    SHA256

    59adffd9a832269398c7410122dfbf58a52005a891918ff2b5c5dff4a5f580dc

    SHA512

    05ea4e684a422279ad6aed72aa617d36689ad28a5f09b8b1ea80de3fce5ce6019cde7244eb1e7ba25ba88f2d880c755bc7a0a80f51b5ad2e53782c32c455689e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca9488447544b027b0f994e49733fc88

    SHA1

    dc6d83e15354d111d022ce1fa287fff92ed810a6

    SHA256

    59341a3e03105fd3e023116eff93a883a5dd3a15cd822ff65fc602f217faf4de

    SHA512

    d7be7397d9b6b5bca8afbb23dfa2081505c7b983936a2057c11462b2d3a7c497a2f1bddae6996aa842a0d3b7a42db8bf6fcc036270f8307012e4814417067bce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9eb078b54513cc8c2d3e062bca4dfb48

    SHA1

    a5df7b81124404e9fdfba4deb01fba541ac6fc3b

    SHA256

    47d2b55e0ff1dc3fe7dfa9f09e556ff87c99a4090a207c4bf90df3ffb23fac1c

    SHA512

    f68d06c15dc6b917d46189fdf5d8b4a8171e6cfb0e6593a42d904d39868d49a0689c4cc59dc6c36cde4b5ee34079f2862745a176d499d73e50eb0dbc935662d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82ac0ea4e8ca5f16682965b039923364

    SHA1

    443ae25fc53c368c1fb06e4cb4ce53a084f710b3

    SHA256

    f2f7a1936f47fc2266db51d8a6fd737598016d004c5aca5240cb4967109ef22a

    SHA512

    f705140bb236c1f06dca52fbae0726135af3540dc32ee16ef39f1c7b83bde1028ef1ef6307b8c1343fd8dc2cf760f136a6456730c28f6b4885e6db0de89ad576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3cb8535ee04646f180dcf4181f49abe0

    SHA1

    7633f156122e416264812adeb01de487d4381bf4

    SHA256

    e33de8a3786072bbf461d204590e28ce1e34d86e18381bad5e47b4594adeed80

    SHA512

    cc6f08d1abab75feced46c84f027f41eb95c452fb69bb70251a60d744950ce66bfc74ed0e34867e4bec51fb813ff58e17c45da84902202b8935b71b8c0760e04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de76a9c12aeee184239fd21f2f83a7b5

    SHA1

    b3b1f1dd04c6ad652de8f910202b5913a1c014ae

    SHA256

    f9b792289911bedc67e47e20fbeacb0db8c80c36a1af78608fbc3ac1bf5aea7b

    SHA512

    19d555d7bf4817e65912d2ec403a55be14170868da276a7588f183ee207e9dc16143a1ce816d304d45dfd3f59389aea1224cb3c500cb9ee438e2936c2e193c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    885585f8bcfae67bc8b04a05e37db277

    SHA1

    ce9ecb4e306f7ad2cc257b6f17c29d7cd08c0b4a

    SHA256

    3f6881eeed52a254d3433659b40014aa8909e73319509c8309ac25075f5ce26e

    SHA512

    751f370fe3067f0c559d4568ef2f96f4e3d60c58805f195e867d09e4139fd65fb60f2f7646ccb83cb17d7d1b619cd52e03c864ed2b314bdbf33a8701e12fdf4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9bb184db0ca0075afc0af794c08a365

    SHA1

    9dacf277ed18a3148135372c3c18284ef930c1e1

    SHA256

    db1f4fbfbadd373ad1297e143a618f44f9b4dee3499e9cd69f372b8238d0c1e1

    SHA512

    d366ffc4870ba123041ef2cc28c44a3386dd7eefa837e2594e319f13dc8f2c4ce183b323e5107366a784665395dd5d62aed37ffe4fdd54751da3bb86c2e7f404

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efa5af741114f2ac25ab708a3cf3afe3

    SHA1

    789732d4b9932303ff66bc2f8774e6334ebb69db

    SHA256

    09fae5257a1621f9a46b298181ca391d7b6e865cd2df31c8c0647648236c8f02

    SHA512

    ac3845276ef2430b2b81e6b47033866ce66d32fc590eb06ed04fcbfdb52472ff70b30b008b8233014f65242e75e483cb0f484f338767e4203d898bf4b8711d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d33044a8a9082ea468daf86b66319c8b

    SHA1

    5b6028f8c701c8e52243ad096a1c58dfc8f8e1c1

    SHA256

    9a161282f3e3b32cf11a2fcc092a8d047205436bfcfe7aecde674ee35b3a054a

    SHA512

    2db2bb62b7283f532268b55144e3b4c21868d64852eeef8516b055759fa4c4f864ebd1ebf7d6b8e10ccdf4da6a9bf585ab7721b3b2a82a6de184ee3d473a79d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e09a3d5a6c2f7100d4283b71c21055ef

    SHA1

    cab06f46494be073ad3b6516a5c68bae432561ee

    SHA256

    c3ac9143d0fead795b49655f6e76554baf475216744018ab6ead914d501c7849

    SHA512

    fdd7f0a9e2888531038275bf62b8561fdcdec54eeb6dac18652aebb18c7d251dbe486a2c57320f6bd3a03d5563c898cee8e36790a8d650513cfda5321c9d8f2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    099f643e4b2b3bae7c53fb3baca16630

    SHA1

    407190367815d9eb18c0e9f68dd9f7d343fdf2b3

    SHA256

    0bf390488a25f07722e5f276288b9a4dc2ba6b457233037c0a75948c4a839abe

    SHA512

    386976d08785434070a3f8c463255f97c77b70eaac911fd54ff21ab8961ae95873e76ad60651ebc43d78c10f2dab3e8d79a2b4792aa8cffbf76901aff39a74f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96c5fabbadef663e262b9cdc18f2ac2b

    SHA1

    b65c4160735bfcd17d76850c7667222287eb729f

    SHA256

    41b43be56ed18a6183fcfb551aabb096f18ccf3486a610bc67699743813b2d43

    SHA512

    fef8b652a1f667213e683a1c0102356f25aa8b31e249d22bc1a2029f155c4a6558d5cf03044ecf32fd303183f47f354399e947ca68c481337a35656cf0de63a9

  • C:\Users\Admin\AppData\Local\Temp\Cab392C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3A4C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a