Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 19:42

General

  • Target

    512c09ced9791aa645d787f76af04525_JaffaCakes118.html

  • Size

    161KB

  • MD5

    512c09ced9791aa645d787f76af04525

  • SHA1

    6e9578d5f19aa3b98b2fb3ffeca5f161e7d861d5

  • SHA256

    97c0360b03d3720c0d6d18021e17a49ccff80c1bc555f74028f30e251e040325

  • SHA512

    d3405d9413c32727da1189fd3cbc17d02e15d0cc7d457f240622e3d3e7660da562969fb6ec1c248a11547ad83a9a648a867f443b4a9e57f3a7f45656b1c5cceb

  • SSDEEP

    1536:SFKoUn3HvMxkioHgyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:SFw0NyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\512c09ced9791aa645d787f76af04525_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f63ff1fbf082fbb00d13e1272e47997

    SHA1

    4438191da7c8f2d8fe1f046cde3ec1663591dfc0

    SHA256

    9733ee7cbe8658ea506094a5b2692c106b2a98a53365737448fdb92002d69bf7

    SHA512

    9a7891a6423e7239899c137ba4a6526e2e7b083f8a3c11a0be502d586b36554f9ba3bd09c65fc0f6e9558fd7ee32dadc308f2f696976aa0d99fc3f679e748afa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49915f9e39c5fd06c86cba1cf332934f

    SHA1

    d710f9e83ed446ed6eb04d102501599d50aebf23

    SHA256

    f67049946885653f557f4d60716344c949212c36ecb5dc7403fb01c5ce51c94e

    SHA512

    c0f890cd193b276aeb74d53c4ea881dd4542b25d28be20d9c10bfffb950de7b2c0cfd9f9449401d902943fd6d80f8a88808f37053c7c93528a4cf30549cc323d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4ea9c582d23b8e74684cf876d3225df

    SHA1

    3e3bd253843fa7151eefd3f0d81a9bbf37b04b8c

    SHA256

    3bce36b2ce327d42d7932b7831558409cffd08edcc084c5c6ba8e30e6d4eb08e

    SHA512

    dadb52af7080a37bddea753238522d530f2c29d529c5fa57b97e345f71454f0f78a0037090df2465a5cda85fecaadbe96ba574c7e35ca8a7c7c9f7dbabc7ba38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    832ef5d8108ffe1783588c21f5b07ce3

    SHA1

    d06036053874f6135b7d2d43eb96a97bd96dc2fe

    SHA256

    888e6b54f5c303269fba406b283bd7b876fdcd2a2bbd0cbd9307f66c04c27000

    SHA512

    7a5f51fee24a6764ff4b7cd0aeaa99c86333b08675f1b882319730bb11619f12d17e02896c9fe3398281cf7eaf99a15b08235a07c19581b47fe28c73778fbd05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7713a445ca3813c2707813ebcb404cfb

    SHA1

    a0bdea46d53208613deee638821f9a547b46c824

    SHA256

    3eeaf2b8d852681ec4ad5ca1cd276c2e6f09ec4c6976a41ca69fed030f3c58e3

    SHA512

    5b4768785fe6d29b97fa6ed41fd12a76baefdacfa2dcaec959380592c964dc7f12e3dfb973defd8feae92d99d9e0712c0160818405f36f6f5514028584ec4d99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db6e7f6c2d3b7591974602860fc13915

    SHA1

    b091b562fae81c505a6f0e73577209d8ed3dd2da

    SHA256

    a572128aadc936bed33b9cce078633747e18c4687d65c67b3329e27274f14f92

    SHA512

    d7eac71252c7a7883b8b04f7b3f4cc34322215e7db57ca38907d34768b62430a025d0a7cd5d6abbb8cd5029d61228f603ffcd548c4aad297bdf341accfaea156

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f10c8a454350c85465d94458fdf6fde2

    SHA1

    2c0a8b857a0e2e847ca5f3e064a5cfeabaf42bb2

    SHA256

    76f75593a7d5a4193308f958d764b7e3d128a0fbd363dde417315b8bb862b7ed

    SHA512

    826c78111f577a9c8fcdfd0ca78f17779f438fc24bc9a5776bf8f9cc255088f354b7a0729e8352a798b13d8327ccf691222dfff3b2312f0767146aa6525dbd85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49fe29a34d9d38b26eca459160cdec9b

    SHA1

    d1f738646945492472f2fa7f03a593bd82c8a74f

    SHA256

    c272070d6243ef9a6289e5cd6234bc87491a8af62ab7fc03e8df288a35492ccd

    SHA512

    fa7c5201f6bccef8280859a8cc27f14b7947a1c1c64efe0098ecc5b977631c08178e0ddb0d842c752dfc7b622ef0284ef06296e89170c4bc16232a7c4a330f1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0b25c0e5f8e6ecff2054242d8ac5083

    SHA1

    fecf734b2e61df25f5fa26b889ce4126905521e0

    SHA256

    2fe45096272ba7b2f23844222d69ff5fc28f232a09d20a820f827c560c2d672d

    SHA512

    121a21bf924635d5a6a6d3485421f6bc263e51db6e940dd9b34b8fa668911dccc38e6599f9925f85b19e8690b936e2392c41bd9f3148c8b4dd16ef99ddf4a87b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08fa39331a74f0a43939af60cce86e59

    SHA1

    7e9d3a6d85a0a11b5450ce0822cc422622f98d10

    SHA256

    fb92bd71e4a8beceee577e2704c89eb4e4eb74ce16f0a84c6dacd64ef65a2f4b

    SHA512

    1e9d8a3515344441c9ebc0c08827a4d9fe350cd5d8bbd07c498fae26844d0df4362e55cbd2db98f0eab54de2ad7264e4ac3a470859001fe86dcd4462a2380f6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7fb61f42d7a80405491d543d365bc66

    SHA1

    a7bf48b6219532dc396601b0ede9e56f3242d5c3

    SHA256

    ff65a49e13e50be0153109135ada18acb2476beeeb732c85e1523f4c16541374

    SHA512

    bca83dd25fff73c7584045c3a94ef9ef474a2387fe2376d516d4eb45e611231bf0de84b5148a7362a775766f042bdbd127b049605fc9f67d940cf0977bc42226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ec3ed905ffec131a14d62594bc20498

    SHA1

    5309d05a1903368cb5decf67819cd852c0645c1f

    SHA256

    bbb05b307d14f887db1acf5de0096e0ae9bda40e92bc0d2cfbb5292f199123c0

    SHA512

    c4bf82c19280bd1a4a4c0a9e7fe0bb9342759a4576815bc7c281650860d6645b7d05ccbddbdb0881d573810a2a0e46b9ebc24ea89c5745640ffc80f4252a0d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17c8a873850afcafd1d498a0f75613dd

    SHA1

    9fa86397d3762fbe0f8c3c78cf74057458ff3458

    SHA256

    47829f74c0fdd17a892bd6334cee4eeb55143ef747336402ea255c4b3b0209ab

    SHA512

    f1fb83c2319a07d9c5dd5ecb91ccd3fe27d4baeec1da1ededc6b38b024677a3009d1f27088bb5de8b208d44e1c821b738158968ef4c1d7d6d2e606b2ddb9851e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4115175138a73f94c6598d419d252215

    SHA1

    dfd22dd3562fb6bca3e227697ea09387f2eda518

    SHA256

    d8d61fade8cbc7f8e7bb0a771aa8240c4bd5a7d1e74653342aba3f90f71b3f2b

    SHA512

    e51ac6a54c99d4e7f77e0378cf345fd3aa1d79cdcfc69695c88c2d59297fdfb749f660f90107e5d2ae3997a547465be5bf46a8713da321480838d93489c7e337

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    989a963aa872b84ce909ac92d4559ce6

    SHA1

    efc556b0817dc26acfabe86265c34adb6e709ad6

    SHA256

    11f6a9e71fdb73ff0643e3b2009dd6f85073a856e0c0a641d31a683d9ee8ec23

    SHA512

    6afbf6089a3beb86d17d615bf02079a42c85bfa2038b2b84708ac7a3de4d43e018c922b22518e92c7bee78e8d1486ff024781dc0293124f3d35088c7f7f603b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb2a9caa7c7f6e0d4c8ffb17c80ab859

    SHA1

    43567ae7105438f14641912091aefbc9fb3f7fae

    SHA256

    8a27a852949324bc55487d5a198e99c72b0e4f696e1d3548519fa5c9ffa7cd83

    SHA512

    b57de9d7d5bd9bbb41df4e91eb73b23cd7f32213e0a9e8ab5f123b56dcf76907619d58fb59da11d91a2c32b125da6b79dff178ae1418975193ee34f0c32df9a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed0d0eaaba1e8181882e3807d9ab6a29

    SHA1

    7a53c32fbca5cb6cacbeb98d4706b1b23ec368e9

    SHA256

    7727c0a6de1c64492ee7345e6b997b41beffd3522583fea9e3fe9c1b538d0488

    SHA512

    b8d1d0d5092e513cc172b009c22b418a0d52522aa1d5eabc89e9285b38fd6e8e8beb16532d39642294dd603c7b96761b4d9a35a4a1e387221f582d8c388c86b5

  • C:\Users\Admin\AppData\Local\Temp\Cab11BE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1290.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a