Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 00:32

General

  • Target

    5c479a1fc0ac589146528164cee4f068_JaffaCakes118.html

  • Size

    460KB

  • MD5

    5c479a1fc0ac589146528164cee4f068

  • SHA1

    e5f04d771f8bde0f25ad634824997779826da462

  • SHA256

    9fa4f67f97b7010fdd9cb3eaf0dec2461dcc8b18ffb91b79fcb909d4dc925d20

  • SHA512

    82f38b2b30342a0b64fc08cd84f4bdbe7ec9ebd58979a547a67beb051ca8e1e05ec43b73c11d9f570de91a714177d924ecbcc0402ce8ae39342f89cf3630fe95

  • SSDEEP

    6144:SdsMYod+X3oI+Y7sMYod+X3oI+YjsMYod+X3oI+YLsMYod+X3oI+YQ:O5d+X315d+X395d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c479a1fc0ac589146528164cee4f068_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1784 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbc4f5657786fa6f31c46493f2d7f0fc

    SHA1

    98c0a9b20d6608d04a21319f9c34912b1a9c2d3a

    SHA256

    1439ccdbc3358500505eeac47220b76b77cb927e3a3d715cf39011d77de14070

    SHA512

    c9582b2d2e38cd15e1b6ce867e451c91521288b7187114a3883ced45e1dda66ab9f8bd82d302cf411923b2f1eb75950e11e47720a019a70066a7f8eaa4e23d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2c906d8bf0d0791aa41a00d11e07a14

    SHA1

    f79ce3ef44fe1bf38a48012892ddc9a029ca0a0d

    SHA256

    07c56ad6668a98f9486c52ea814a5f1abe78bb003e844d5b9b8ebc1b80db4ce4

    SHA512

    2449a8701caa8863fdd228310a76959c1b7e0a4f6df8901623a0335c0f5e09901bed88e870ce6c3fd65a6029f859aa2d5849f86c5af1ea5fd8bcca0c73ba33b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    167bb2dd201c977dec78d29ba23b9e82

    SHA1

    bed91920dfaf0dcb9108e322f313f5c181649877

    SHA256

    84b2de0b1e83e1bc4f9781ab0a3c36780f47564b1f9584f3dc41029d3337ab00

    SHA512

    3410d39532f18871d9e2ca9d0999f9d8a57544b7447ca84c485332a76de333751cd77b0220eaa73e954124d6df2e3dca0872d1533b2e344bc14c501218988c25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7c0ec74700310c4beee06246afb4eae

    SHA1

    e542dec2f522a987f3e3120f30126022c32c9dd7

    SHA256

    0342d506a0709c35aaee99ab1d1765d86eafde7d8693a04483ff0543ec66fd75

    SHA512

    a107c0a4c182ab7d8a969d14e8b81c420541bd68ccb6b89e680f4ebb5b21e7c8d6655c59e7f1a6530918978c94b5002faef3a07b161b76a9617a44b5c4d2b2ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b84c40d8556ae368206a31b803a659af

    SHA1

    d18d552f2c54e368c176d3777d1742daf50f6bc7

    SHA256

    43cbce9939d27059194f3b8faa09d9e6848b36f3afac9a307ea30f9e56c2147c

    SHA512

    64dbed547931ece8139996d170f9ca34018494eb09e713bbd3e16e5fa4075f46c6737c245839452cf4bc21899843cc54ee2fa5d895bcbd191f5496eee98ec6fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fd0fdd75a33d50ba5cac0073543c0ea

    SHA1

    01e8ca036d1819e87e7fa9b0021466edcbab5f3c

    SHA256

    05b72d459e453fe5348420e23eae45be33d45f5d74af4fc24c662a8ce4f05985

    SHA512

    bfa5146fae9d498e7ce68a0c6914688ff5601a3f3853ed81ab24acf8cd2e7d8457595c5f8017c475348457faa9567fdf52259e816916185f8f73a746bb7af182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fd5093afb94c46dfeb7cd0e6388a64e

    SHA1

    c5545234d15430f2ffb7ecfc021d84a062cf2323

    SHA256

    9560ebf35039b9dea9cd0d7925d194b5a49d8c9152cb04e5bd4116997bd0174a

    SHA512

    2b15cc9721f6098ddf45eec7ab6b90e5719be6172be0dfde9ef2d373433bd92049f82244863948cbf5f977ec9edb543d0f89cb4d7f23ff6c5dd8e0746336f955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b2dd0437e91769995fb0503d51b98bf

    SHA1

    4676b2ab7357a0020b7ce1d6189553c38e2e4bcd

    SHA256

    78377bd146de687d25905262cbe9767a6e772506382b198ec78304b5d33c9856

    SHA512

    0cab735154c74adceb6fb91f566dee0a5b3d23636e3e9c9d660b875f971a77db78b8984d284e92848dec4c8439e71631dbe9ef85f1582eb8058e69e0b542aa2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55eab318781762da118fcf9b7d07e2ef

    SHA1

    d1749d02435dc7dcc6870932896d73cc910f0d85

    SHA256

    41c31ca9e71ffe8c9d23f692fb8cb5f22e6feb2ee4980492005b55c1f7c0b5d9

    SHA512

    92ab90490d80ab82bc1384a418ea5549ea7169e39dafc772f69f7cc48c3696943a33cafc69011b9bcc0cc4db2d1d9cccdaf18efa7e6a141a6b1bef00c6caa30e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77ca91c00bb3b6b58c1ca8e84157cd51

    SHA1

    08915726bc881fe7b088b613760d88554323301e

    SHA256

    3173d83750b153020d0e25c689a54ae665ea0e0a3f38cc0259ed68c26fedd03c

    SHA512

    a810ffd5fcb96b36a5a7946ad50d8631bf010ec0549c40a6d492adce9dc15ef18b89dee6dcec6b60623489bdaf0b2e4c1311307aeacb44a1af3ce7f5824d086f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    762000eee5b2d06df6922f462ed0f06b

    SHA1

    a05c3de79414b57ad725445fa04eb34e431fe9fa

    SHA256

    14bc25953123abcbc9368aea12e64e2a1512b134c551d304af68d7d2a3882910

    SHA512

    e83dbd81ee55cedde2accfb012132397b68f932e5d9183c88b02b449a8bd74b30a551364869ccd19054ea8d29355f262b9479249b41e13d5ffbf0ed565a6d41b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e03c49a03e85709b6e83bbeaf8fb026

    SHA1

    99d069c3a449143c87b86fb39023cec230b3c208

    SHA256

    b75d307f002ae6a2fb73c24fce9ba0089d8fc9e21872d85dbf5c17c9a5c1f5e3

    SHA512

    5dbe4ccc4afb1757d43c323f7f964d378e346a5338f2d7eddf4b70fb2eb7548dc482632ff9ba6c7c139f2147e949bdf2dd7a6a5f31d4a5c8125e1aa99d614368

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41de05578e6f9c06a69ff2df54ff031f

    SHA1

    ee9a6cba9f8d649116da8513aede5981878546c5

    SHA256

    d23ada9294b185687924eb9118e4c76fbd42cb21a0879a9e77afd0602f30fabe

    SHA512

    8f40eda59ab7b62cde25e5b8367570e1f45ef63abf4bfc18eeec1d529b63b7bc2fb6a7cae193b2566a1a4f11c3aa83d44739359214e6ae7d9ed0bdee2ebbcd27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    247e4689eff1281252a142621747576b

    SHA1

    890e348b75280f752a2e9e33ce30a49d172de162

    SHA256

    251516747ca46e458b4e77b261365c0b5dcfbbaf5de143d36d93d8c05f2cdc3b

    SHA512

    2f17cb99eae1fd2774c6176467a6fa33b122ae8000c8b4d070d678d14f99f35b93612af257100c5721c3a014425692eb91451e5fcce8a793c6bd597d8142c3a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9688360b05cfc7f14653fd90abea5315

    SHA1

    8126660711b4f4ec0c7b5a0374467b8f69d344fd

    SHA256

    190c130ab8c7a86b237213c6deca1c0249a8c3bdd870ae966ca699aed74f1bc4

    SHA512

    0dfb8000c9e81490e0d0bc88df2b0feb2208b655a908ac476212affdd326547d58828e2159d806b188ab8db3a66c3ade025ec5b6e0d718dca5729f37afba1d50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c083712a4f9571968c7bef90df3d8ec7

    SHA1

    7fafd1deb87ca39a841189c2f85951e98ba06ac0

    SHA256

    47e795abaac5b04fe288f71f8d931eb6781488c240353e91a2c4bf69cd27f12b

    SHA512

    eaf149d689ab9a24a8df85da31c54be51aa3852f98458bc098c790ef5f0952cf1fa9fedebc59c6f917f1e63c1daf972a10ae03310283e97411c2bb8502f57305

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    940a59be950d970ac469f96856ed75c2

    SHA1

    424cca1d3d3d9426c1985eb014eeb2cc9a1a3989

    SHA256

    04bc8497ef3a3edad7acee77c061cd1b8fe031a4b12c3a3a2f3d6836eaf87fa0

    SHA512

    850000714e9a3715417aa95ed1c683d9f96d160400be07b347351d09c4fdf13f48d254acace3c91d26ad32a28d090ee0058634f3faef2b9da90c19f35cd75596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf7fb58161a13244f845c15453d07d88

    SHA1

    4ee7bac37627100c53972dfe030452ceefa01aab

    SHA256

    056f5a7a7d583167b9d09302acee55651d314f4f249b4b3a4bcd0c9043d56b03

    SHA512

    186a21fd621152b971d28304607c0cdfad018ebb32087c9d991d9a0dcaafe05fdd0c1cd1d425783a07952d4bd802592cce8d2b28cb19a7e47ae6da0c6994e3f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0234073b5a2a9bfefce11046552d5862

    SHA1

    cb0356cf289853fbb0930f539c92dfb17dece54c

    SHA256

    96f9b1c2ee65d88aee838fdb4af5e8a2520ef7c7a25f6a04474da588881f36b2

    SHA512

    e99e6da676244e922a152b1d9c5d3069cf48ce3eb15d1a504d61c07449f8fc052d5dde9d683a3712ff06fc46060517321ee3c5ca54e1938f77e4d75e1be3c8fd

  • C:\Users\Admin\AppData\Local\Temp\Cab3823.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3884.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a