Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    19-05-2024 21:44

General

  • Target

    5ba341f7f5d32406c82f578632343a9b_JaffaCakes118.html

  • Size

    21KB

  • MD5

    5ba341f7f5d32406c82f578632343a9b

  • SHA1

    057abea3e2cca61cb307a8b6e563c3ab192164e2

  • SHA256

    3af7fe37bc5c7afb78c9f758f22b2911319a9f0fd48e3bb175cbc65107a0c6fc

  • SHA512

    b0318f1e52093e16526f67238fd79afe1a02759b45e5a6b8347745c4ecd6b2f026ea59383014dfc482451c139d8076e81a70c3ba0c98bb892f15e4bd3f4ec849

  • SSDEEP

    192:4NarN8f8efCaO+yEpIW4K8TmV8IpWv9MW9NM89M8BM8UM8I+s1Swm9dwxzowLKpK:ua+adrFRsI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5ba341f7f5d32406c82f578632343a9b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1044
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1044 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    784e5937b5c1a4f1bb2ddc89fd943572

    SHA1

    3ec9f71332668e3fa4c3778ba10fb77d526ad17c

    SHA256

    19957a5d0ef9d45052336e74c9da3aba3cd87dde7ca04bca7e40f91db0f1ec53

    SHA512

    9ead6b4801ddf1ff1ab94e8341d138b634805b36c212a505a364022aacfce793d8ffbfb7f0439a5baf5726ac6998f83fcc669eaf2448192f34a5f8c2fc97c256

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5745174876cbaba3a862660c6e6e7f6

    SHA1

    05603e8f16142b97da098e73cac3fc7d488c2cf3

    SHA256

    d370ca965977ccda6dae22aa2d104026f0abbb665fb8295eaf75f4a9b4ad706c

    SHA512

    cc23977fd30a7bbde199aedc06a80769a31132bc9188e3c8bcb121986604d7bf88dcf9345b0ca190a1453ffc40fe02e794ce7ab10dfd55d79eb5d0e920b1d0cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb174ea02f5306f1e5c702c3fd6a707f

    SHA1

    16846ff9c1bab5f34599334f3dc13fad8ab0938a

    SHA256

    997e794eb2c5cfff32c90e511ba5ca1856a92c0100b3a55b4f8193a9d0d60b72

    SHA512

    22a4bb269233be9f47de63d7bef9d8ab893da3afee0e8e7f6616801dd9a40ff2e83bc275ab5c7afd58cc40dc9cd1f0050a70e9c778d294a1207eb042440f6fb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    850288507fea96125b5da0fac915c9d3

    SHA1

    c183685e1a46967f97ec1a359a0c502e6347b08d

    SHA256

    4edc67762691edd1b91b4deb5c163422e48e64b24f60485a91b4bd004a1a1969

    SHA512

    1855799bbc228a199226a202ba4b4f0abe5fe8f32626c012e48d09c2b67910f2402394951fa01d187578828cb1888f41e1bc365cfa3ce6f3bb5d790daac8ab81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3f8edf069aab36f97ef53bf038a0968

    SHA1

    aa0249be6e3ee534f30c531478f30e1d6f7d182b

    SHA256

    b205c576f5f7177d6cc6588a228a67a136a785104d247b5b5d223220282d5b92

    SHA512

    7b2e537b0f13ae6d18f844a02a0f3db4bbab50b1f604eaa1fdbecc159a44a3a5589f039fc22c1b7b9d8350497e4a8c4c168de63f32069c72d38cd5d839f25f53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23a5ae6f32cbf599030b627d05febbfb

    SHA1

    3a881b759785b0c9971dbf6aa829a0f0b4b63c08

    SHA256

    48d4da14e70bb085cc9f8e92a52161f91bae080c9beb6c9a6945172eb2ef6c72

    SHA512

    faecc6d7b1bbeffb357da3d9fccbe98f4a2dc9094f8d3253849817abe288573d76b20d8b655dc60483b6f257b855a7ef9e27093425a3c0565e02469c69167dc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c947ff5629feac665c9531f25ac0e800

    SHA1

    044e2e93471c10e7ccb9f042cb841a2f4be5b113

    SHA256

    7a2f7084fa4688d57ec1cca7ab586529e1c1af275ec249b4aa7d9126bb651d8a

    SHA512

    e3b3de92c069e464a5413f4535aa60b5abb9381e7665a1d5d05cb6c0a7f4a7d62107dc38606584f15488eb3c221a3f186118522a26b62567de125f8f6f30e1fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2585123e3b47cec65d2cdd6efcbe7745

    SHA1

    547525bb6be420392de9c8acffdb37a0b4f9333e

    SHA256

    2402d45c8f2248a15cc5e5379c5a2d1c050138bff8b73add03b4591018a7acf6

    SHA512

    9a1e21c08e8d0e1c91e82116b2cdfffd4148899b35f56b9d874f9276a0c2fcc8c1c65395367e245bed509eb940d93a5d2fb8fb03a55794ea0e9f71a6d25a2298

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8227fccb4cf4a9368e83493b889f9134

    SHA1

    2dc69f95c49e3b71b5358ee1d3bbe80f6bbaef11

    SHA256

    da1a64a5e341804988eb1d2c893e783b9c7268e35f2ceed17cf13c28cb8216c9

    SHA512

    712e19440503825fcee7685a06c8b3f4c4a91417bef4a1e8972218e37b9981cf5dcc9deb57bb9d30077e0199dff424560be5db70dfa0252c4323e7f3cc18e398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0094b8d0246117b5d39d8d24f222a0fc

    SHA1

    15df5bab1c6f8419cbcfb9592b03346b0b246d26

    SHA256

    4bfb387821754f0646539601b222228e8acc6f05450258e35a131ebbb57f24f2

    SHA512

    09d7a3a1e43a48aec15ea146f0808360ef3602b64cf284c8c1c0faccdaacc9d923406298ec4dc4ebc37b33d6726a99f73a9f34926c4094bfc43fe0b802ffc192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f52447f84e3070d7b39e51afaa14bc42

    SHA1

    0b2c8e3150670ddb83402f6bf2a7782cd0231986

    SHA256

    fe805af117630b0a704024818f021db19a6229cf418a7c3011375082319323fc

    SHA512

    ade8d3b1221fa32c786c078b84b52af8d5ab3b53e177e7de136bae2989c92b94f9ef079e6b9e5e5638b450f6a800d2020540dad13dad5001344ecf0217185fa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2efa096a97c67e6259d4ef54a311a7c4

    SHA1

    95da0a6ede0430823ccd899f22346af2b0883d0f

    SHA256

    2fc490f8d05954b36454fd44192e2b47b4857549110784088255de9894aee46b

    SHA512

    125c5840c85e5f8e653c1f354b654b1ed910e4cc099b9bda9aeeea1425da75618795b7fe6c07d729afd072d8a1d87c25f06cbaf0a9876830fd0bbc1479fa6153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91d1966b3a9e04a0fae6f1963158a9c9

    SHA1

    d084453ff875439a5d2db0bde17cc96bf68fb943

    SHA256

    9cab1acc8178791edab32eeba4ecc07b08bf09ab1d90cda557c7b239b2c3a807

    SHA512

    6c27e4510c5d7ec567520f5fd97b443933a880310c66e1715b274617e0325c8333a5ac2f4c927f6aa8254ee5c01f0adf69d8d9223ec12a228777baa34504e552

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed5508225cafb8228c5074c760af80d3

    SHA1

    cf36661e3a80107692a5d32606266eb8edf9ed2b

    SHA256

    0210a2c9bf1d0213d67369ab50b68844af8d0dc4db1e6da9dce2107456964869

    SHA512

    814417a14746fed61ddfa7f46ff7136535a5b973a7b5c15810912ea4dde62ab7a355998d9cabc842ffa193ce76ab9525c01d6f627a1b00867b734fa8058bdc10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cf6d3feaeef2178312cf93dd6616b3a

    SHA1

    298be059e0df9d0eb4fc0867e263767cb0c1e6ab

    SHA256

    25076a82f33fafd8bb6fef689e97db4195be7e6f05c0d5d2ad55b92b0c48073e

    SHA512

    a5b5a5c560ae2a5bce53d4b1e702754c1b2a80117ea11448b3343d198f4636364efc1db0b15d6ed168aefe52cad3cba248354e57b4ba25046b676c67b72b8795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03d2345948f9ab0d27611835cdb458e9

    SHA1

    2a2a525239dfbd842f68ed04a838854fa4cf1625

    SHA256

    608e880c430287467ec3bd1a92b6a8b85a91a7c348ab2748c4ed3cfceae73192

    SHA512

    2ed64449265e5cdc69775dec4e407ead2cfecd328597c437c3e219db5bc3b00956f7a687ecccd68f5cc43a0bd4ff1b4dfd16546024575a929f26c4a46734fdd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    959a069044fe077e719a32207e777e6e

    SHA1

    dd8f7bfae73d241fbba31d13d4986c501d240b12

    SHA256

    58f4c2f632ab51e098818ba5dd0c9a06055f773fd185146502bf032f8bf16e1b

    SHA512

    1f3e73714fcd234e6ac475a75536dd60d239b6dbb536eb433f6f7423bc1546b4a436ce44e48b26771a8c758af72dc7d4fee040dd3d048d072d35a6e30d6bd358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    940d175c3dc59291ef67a11e91d75556

    SHA1

    9c9b0cca541699e92a8d979826871ca521409454

    SHA256

    b2e8a1bf1a6f40d6ed6d3a2f8ce8eedac0b9d18e5103355d8da5b1eb8e2ed76c

    SHA512

    5531ad8ca42312d83c76720127cf53b0f6c3820e7157c4aa1254933578939ae25249041b861ed2859a9c50f8066befdbc398be04ff0ed0430bcc2dd8e46206bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed28e40611e9facf11a5731dd9b46764

    SHA1

    54a2a8d065540858cbba2c9013b2efce8330d547

    SHA256

    b49547f51bc2c83c84a71a3bf74ecc384a9605dcf9c07a506b6ff044d282f91f

    SHA512

    38485f81538dae55036aa72c44af0f8007ecc6a51c2db2acae331a9e78898f8691c0ef6432a76934e8d38cb370036875c6be165bc67ba3f9cedc766342060651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5cab6bd799c84a479b591b493c12770

    SHA1

    bdb3e28be95c8b311f844cf7ad69daf21f0f35a6

    SHA256

    a7daf72698354f8383350df960c36bd65df56d2cdb355c83f9799b8c04cf8b90

    SHA512

    9f86c792f3df1724d837055ce6d9d1728f298e4ae9ab7a4deeebe7c6df97b933418b4527c2b883e275bc908ddd9f58eb96ba6aed15d8850e55cd7f382e6082ce

  • C:\Users\Admin\AppData\Local\Temp\Cab1CC6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1D18.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a