Analysis

  • max time kernel
    136s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 05:09

General

  • Target

    4e8caf1259a728897896a740f42d5a45_JaffaCakes118.html

  • Size

    139KB

  • MD5

    4e8caf1259a728897896a740f42d5a45

  • SHA1

    45942e1b5ff5321c844d196c38c1010449556950

  • SHA256

    9d5555ccce70d4479b0cbb1892c098988830ce62acf6df8bbfe19142729fa0b7

  • SHA512

    ebce967acac365259a324d69ac48a73e443582ba6f204d38747948a2c7e902e097a591b9005eafc74dedef7cd49c95f87bff78068138e7778cbd55c4e5227fbb

  • SSDEEP

    1536:SptoslvgnyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:SptgnyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4e8caf1259a728897896a740f42d5a45_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2768
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2768 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec106530ff92bb0ebcb90ce4a9efcf14

    SHA1

    9270a22ce385dae565a544b76c02ae162408d168

    SHA256

    6aea52d204db2fbc5444ffff99560688a4e2d3674b0e32e48429a0aa503c42e4

    SHA512

    ff46d529bfa606bfed1fe56b5dc2b3af1af49c5e479eb86854b46c318627a2a166e11997c26a5cbc42161542a92b957e493cc9cd83b8dd0ba06738a8e6eb6b09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8daa1a02015cda930059d4857bf8d924

    SHA1

    909d6ca66f101e5a33b862d394d3f19b48bbd099

    SHA256

    a54775f109a43026c4a457ed34bce92c21b6422f9a3f127323f0f8375781ddf1

    SHA512

    56aabbb1a9a7dba3f357ffe132ae0c25d73f84ee90d44a44849f20b4d7a8bcc9506e3ab5e07fb2549b56f52cddc3b629c75307e535b6de08089f16c5251b5080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e8c47f34ed3e392fd7e192322979a3a

    SHA1

    beb4566cbd075073cb70b426c030e05b902828be

    SHA256

    a0f07109693afbdd8114612caf486384300dee9e4f0405ded293d5caf2adea94

    SHA512

    528e7648e90c14d1cb0b8ebd5bbd9b77314368687231b574a598446811f97480ce7cd164347cb389a12d0f98eea2465d4cb7a1ade19f116f95f4b23d358b0120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07b081216a3f7840252f68617f093b83

    SHA1

    0515ebd76ae3f12bbdd48d0c47500c5458013f6e

    SHA256

    c4549ec4a2edd7dc8c2006cce6437252a3e671f24103e49df2b643dfdfc9a19f

    SHA512

    b3ee7437a9322af4e702ad2fed6378103774166c72a65e6d4fa58bd44f873625679962be1f64a5c9a8f7f2c3f58503aa1ba43488fc2c069f49d5f8358bfb3339

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a26c3f433e6da9dc47c341126bcc0c23

    SHA1

    61c767115ea359aa8e693b7ad4318906bcedc4f5

    SHA256

    1bd7f1c75c63644a5bbbe4abc3bbe741f6a4dfb44b118ed07e2ecbe264f52922

    SHA512

    5f050e69ec2c80e36becacff3884fd5768e360fa80a51214c8804bef35a72097795384b135406d92b3105eb19bb2621efc3eca7efd88643125bdb94aa3b7979b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d7af115b6ab19005329a6b7399b500e

    SHA1

    73d761777c56139799e5c80588335a5e36257fe8

    SHA256

    6d1a528596e9344f144680110660489ae3dabc27b8563d1316efe5e5990c440a

    SHA512

    3cdc6d45f9149d362a34a0c77b6390e0247c65454cf1ed9ca586d0089720d9f1b04b976b0ae2b18b06311a907295382743bac6e21962a865e69cee729dedb816

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c41233407a3f684fbb69578be1782ba0

    SHA1

    c601b78584d8672d6dad99c8feb6b922ddb2fbab

    SHA256

    121781a0ebc809e707f0f35314b6541c36da196843d7c95ffc126810d152dbdf

    SHA512

    f6a128ecf8b66abb7101387ea95b44724c020b139d0e42a94955d2b7ba258693ee2f5a9d7a2c2e5b4a7486e5525d036fb2cc7b70b57e450e8cd499c278944bae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d74b868f1c413ab0da5f15f5526df0c

    SHA1

    138f2877c5016203d04c028c3b092236d3ce0957

    SHA256

    623cf27e5e549f20d98a75e196622ab79cd4fb29453eb62d95bb13d89d477621

    SHA512

    31ee4093ad6f515a0e100adbf52cb8d177e1954e4c991de9c5a5707a784dc6bd6883fabf113095876d020965ea391a68e0882019ccbf1dc92ccbc4dc84779a66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc5249497ff36ad6201fc6d1fc48acba

    SHA1

    028c26d3ae78a770dee92eeda2ba40c0345e3f8d

    SHA256

    db7d9cc3d6e269fbfc14a935f47b146b8cf4e2e8c5d378c9935f5153cfc3314c

    SHA512

    f70f11d1c74b5a628aed9c65b445fa0bd9185c09b08d9ed16412602bbdfdd9c3ec12f8c3b38bca87977e0531d79bf6ff87d9c58a91895689c2fbec15a08bea8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d232a63e6eae9f8061f45f18cb657bd6

    SHA1

    548b7600c5bfc260732e527c36ed36afbf81e8fb

    SHA256

    d2aa2f0537e106c05005625b076b04ee7c32f6f32a4dc4c5c55fe73a45a300c5

    SHA512

    6af17ba6463c08f8010034cd5174f8d3b7d121d8fdec9f3885ab2dcf9dcfbe47c9da304b0b7feaa9f14d454e684b8c55b3c166f1a00900932c42e9754a23f413

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fdbc3d7ffd358e0309efda61c0a88b3

    SHA1

    6c60ed23e3a1a9d6941be7c2d648ea229b15d161

    SHA256

    3840aad57fae1ef3a3aa62c92c8d9b67d68f28a3379dc8bea7c0a7e70917dd05

    SHA512

    8ff65b0965f68511009001c9f19506589cfbb0e04e8feb8e4f42612b3520294034d4a0d7d0d3d09397df3ed9063ed7729f794d7c9e3a0cd2549f5bb8cb717fd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bd1657b0be927069c2ee27cbed47cc3

    SHA1

    1b755d28a42fc72f9c7e3c66ba5a31da6d1ca76e

    SHA256

    ab6b9c9da97e6880b357232278ba669a19b50e0eed58728b987932650eb283fb

    SHA512

    86374d22d12285031a095a048445167d6d793a528a3125e73d9e88a456e93d9e2c2ec56142223e80834a72441301fe6be650f0dde1273a7f1a21e7f5076868b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    026c279f36c9fa0d441690119843cc15

    SHA1

    3d365cf09fb7a225ae4e703ac4cc9eb4ead22f55

    SHA256

    f7316c350d8593b2d0adc57431a5fb87596e6a9de696c0e40b29e20bd6edf890

    SHA512

    a812012d2b4578e3054c9e46822fc514eb5371e7c06e2a1a3d199087af8638c4a2b833348cc3a85e4b24692fcf8266e986afa1edcba428ca866b165c59a1fb62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66eaa2faa34d41e725b56474e73b9626

    SHA1

    ae61ad24f36f48e1350f88cb7143d38112545b71

    SHA256

    3e4164fce4ef3367fb124a6abee181081240f2658abf9cb3d902cee0b4b10679

    SHA512

    fb299b6312b9a07f307ee08878f26a3292d7987a34d92e5011480e373e43095bdadae962188161ffc130131cb5c081b662556ed085b08887dbdd8b6504b55f4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f293e56748fd7162bad6b4179e7ab54

    SHA1

    e31edebda20de41ebce140dfc807d305187da354

    SHA256

    fec674455d54fd92eb9b78d6ec63ce3a648c5400287b0ddc2091401afcdf69cf

    SHA512

    915e37bfc5e33ac93006f554866bb21dea3ed6d893fe39c08ce2a34315c4aa471d0342c4f825d813dc701ee8bd34904b1f33604a1deb3267f5e65c614e579a8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    268ea1fadf19e3a4647c24c0a14cc267

    SHA1

    a78b4f3dc3e87d91d9a624b72415280ea0ef00c8

    SHA256

    dadb8ec746d08579ae5ebdbbbb5694c69989a2bd63cd5c1d460aaa8d13a1ebf1

    SHA512

    bb3efc39c0c35c77387221f411c70382d22218c429f968a09f2588c9a8ec8a0e0f7b87dbbd46d3acc9107a52e424d509d282eb7077e336915f1de6409a062204

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    576d5211f0e4577b077e0ca88f523fe3

    SHA1

    bbad1e64f60e9e87d11c66840788625202a5b693

    SHA256

    7dd12e681ebbeaf8440b02060cc92c919699a15aaff07570b0d8188b03231a18

    SHA512

    ef3323aa1a67e7e0ee8fd325ef8cfa76f45b93a6688a2a9f7b8e7e80b5deed215ea3efd93a54b088037e0cb8f9155e6c29548bd3719b19471afc242df0543254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e76b5fafba54e2d7b3d5df1734628f0b

    SHA1

    55941d7872277634f402e373c0d19e1e49788bb0

    SHA256

    cdb88b601d35729a694ff9beaa4fc10010cd982cd6e1ffa7403565e5943bbb78

    SHA512

    e7c6432c9216fa8390ca9c34df1e0626f75ee1925341141ac0aee44a18af6c6bc25c89b5ec6987f40f995ede2c009f80cd2c170e64d8b48d03fb983c5be2bd98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6847b0232505de2f3e3f9b781f676661

    SHA1

    0d53abb5be8999509c52056c8a518aa7ee2e5afe

    SHA256

    0265cb299a2b8933271c1064ecb94caa69a703d5f8bf7beb1fd4cfd35017fe39

    SHA512

    4b16e93458d441914d3eca2742f95b4c5b3e04956622017561b98dfc129c946eb3c9855799ed5d2841851e672711b9aa2b7656e3276674787f23c5a41f847778

  • C:\Users\Admin\AppData\Local\Temp\Cab1BCC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1CCD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a