Analysis

  • max time kernel
    133s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 07:17

General

  • Target

    5dd16e5fd1fd60857e3bf0f467fdfd97_JaffaCakes118.html

  • Size

    40KB

  • MD5

    5dd16e5fd1fd60857e3bf0f467fdfd97

  • SHA1

    87257ab623fbd5bba3a460c819b291d4cd43e909

  • SHA256

    8409b59ba01869c39e845bf883a62c1e66ccb622b47b74feddd8fc25fbd94bfb

  • SHA512

    36d89bc7dff0597e0c4b332c6a202a8340dedcdd7b4e27c6ae9ffa6c994196e3d91ce935e6dde69c92c3f4a928d4ea80e1796887ca21c0df4697a0d2cee212aa

  • SSDEEP

    192:uwz+b5n/N8nQjxn5Q/znQieCNnmnQOkEntB9nQTbnpnQmSrx4/RRJyAhfhK6pfbT:GxQ/bQxUzpRLQDGeg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5dd16e5fd1fd60857e3bf0f467fdfd97_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65bc04303966430179debe5ff09d5865

    SHA1

    e5afa946aa38a5cadc51f543c51e299f0fb02eae

    SHA256

    b11c2d13ff6c26fa5f49d9b4878f5c7139989cc107971ee2c75dc4ab7a478f23

    SHA512

    9689f0801eb252e21447afdcdada1e5118844a5bc50afab1b036f89e613641dd0f27e641fef1216bce9a5738cbbd08820f2f975b19b62bc53c034f2fbe0f2cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    935c4b8da117389af690f3375eb7531a

    SHA1

    bc28b717ae958f107d49eca1b1036137fc6b59b6

    SHA256

    c40a33b7a671cb7f2804aaf0fd7c97f471c483c25e8581db31a4d6493b9862d9

    SHA512

    b87e29a8583146ecce3ff29b38303a9f6d71e70ed9a198a2804f27079aa5dd77e26f8c6780cac61027f10d98a623d7be5f2c2adec7fe6dca8f2a8656f7965323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31963bd358d51d3ae5f706a448c634ff

    SHA1

    fe1273098643039ce44351565c75f3cec763b042

    SHA256

    219435893262c9664beecc927ea2d4ebbbc9fce6088826978c8c665ec8392a07

    SHA512

    3d214afef776215cbbf9f050f7e0881a0894a89b708280c0faad7cb4acd84b3abfa4e1f651dc286864b4e437974f989dfa16fce895b8fdcf4ed9e6b86c0d5c25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10460d3f426bb4bca0f15cd9ce0e880a

    SHA1

    6c2391fc49f155d5681d17907bacd5cccc49192b

    SHA256

    0ffb90c75364396122d42e103cd039214de9704b1ae20240dc020ea43e316bdc

    SHA512

    e18fd954446825faffe43c95951632163d28b53174415236edc031c6555bdfc28c890175ff75c9ba0a4bbe0a212e10489cdb290c0ddc67589191fd8d46948fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a78bd4ad5db0e4c3359a4bc3ad0b130

    SHA1

    b58d06529e23dc96c332aa35738c030e62445e6b

    SHA256

    7cffafdd2494dd4631fbb19426b2acb6407eb0320ecc9ea077edf080d5098551

    SHA512

    08ffc245fe808cc746e5961c32bbcaef882038f7de77c7124c72e83eed44330860214c792d6ebd9fb3803176367f719b4497ec64c35f846766f9da101a005af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdb2cab74c4b0fe41bae216a5e23b47d

    SHA1

    c4f7abd03e762d77555b64dbc5d2be9f4ceaa638

    SHA256

    5438a0f839a9c4aa2c698af8cf4e9699e420c6800ec16e74d175dafded665fef

    SHA512

    05d12d36e58a9f79fbec9a34c4c8cd9f4667b30299e3375ff10816a8306db5287cd3060fec57fbe2eb0fbe88804dd67b48ebcb66750a3a23582cd8544e1fadbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6979375e1b94632f785100494bb9ba73

    SHA1

    948d6d48810159abd6e863aa475e2c6009e87fb1

    SHA256

    537df6007d0fd7efe503579ec32bce6287807da4151c1ee167777176c3e72afc

    SHA512

    e97fab63dbad97d15e80b5677579d35ea73e31f9147ea3c53d47a74e55e78b7fc22c960110df3589e5fac0722c6f5564d9ecc767312fdbb20dfd8ff6eae2e772

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26b6268bad44abc74f4fa6ab373ba62c

    SHA1

    01e77a4ae47f4b5111a7f08f4678fbb1e60d1336

    SHA256

    bcdf630174d3807cb4b751cb6a10d0546035c57af3258f70dec62242f72f1ac3

    SHA512

    a39f3eed7223f1d8e56868cc2a814dc6bc4d31bb7a81101eccc5ebba2f807990115832c1ac3999ed0e9f74499e70a709020b555c29ed5a3deee0875e7301cb2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    988b7df2fb745f9a91d8144b24301ec2

    SHA1

    d253bde9ef540aeb129a794bc60e0d0f21890922

    SHA256

    5c0e183be2cca2be53076a867d9c0872c9264379378ff2461e7894a8dfaaab76

    SHA512

    2c4a94eb31edebc0f39c3f03e40110c2fc6e8c0487aafb6b2cf4166b472f19f441a2ae6214ba9968a4ce7724d72a62be70c9f85386a027cdc8292ac80fd55386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f5be08767f43d0903034d0af504f533

    SHA1

    64116e21f988fbe97079a6f5cb670716e49d74e8

    SHA256

    574b6a0dbc70c5b02c863582192f50c668434bc76079cabfa14194850d11419d

    SHA512

    806fa1bb606c29d1f21d5c2603cc073cb363c0fc12494503d6168aa90e961ca8fdfff5853fb509b120bc27aa749ee4aef686a9957a60458ba3c9e58e14b3aaae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9857a4ed01705e18673d23639544320

    SHA1

    4752c476cc6e686993e449a17eb7a195f3d369bf

    SHA256

    edba3e4d8d45e42ec3caf0105bd1ffaae08d7c90c9d0824362cb7a6b305bd5ca

    SHA512

    95396a85ba0d0868ceb1fecdcf9fea9eeac2452dc577d9e52722978c5ed583d7c1ca303c3aab59db8d66eeb13533fba55ae3e4b0c805bbd6213577bc37813f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36f648c1052f7231d6b398192ebd4319

    SHA1

    d7de5decb6c31dc5b5c260dc620d56e98c3105c5

    SHA256

    8c107b8329dab9e8f5c980d9052df33d5cea6e3805bfe14679866835d198bc02

    SHA512

    48270dcf73edb233abbbf70631621e58d897e60ac2f7c5cadd6505b90915009210dc300bea05da4b40efcb68172ce4ac33435b6baf83d8bde4b557be346d86c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4aa5f7cca7fb45cb6c5757af6092dbb5

    SHA1

    bc5222f6ba7098339b57074c55cc2d0627db982b

    SHA256

    1b983926065b33eedb7c0f6c255c47594e15c0ee22aa0330b11a05aa73f8a4d5

    SHA512

    f2342674aa3c85bc42881676c16b3fcd73b940c0f62bee287d62784bd2f01d52f18d756bccddd4e7b9ec402b5612a910ebe9fc559ab71bd5e94dc29bc11e3749

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91d86912f5559ac1b6dfe6d2161644a8

    SHA1

    2f4798930aa3b9b74cd87c7c51e7cd46c9858e04

    SHA256

    ccb139b8dd9d7d10c6527999adf565d78264bb9e5f324e1040e4a423e7d260c6

    SHA512

    b34100f961231dd1303f12084943d10edcd1d37ec53d619d59c256648f31598d635e536ed42157572098d4bb8a1c6a803b95634f72966f3111d10098015313ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce8ccd1d88269ef79db896c073d7e82d

    SHA1

    0942d9298cd10434d07d33786c873547cae652bb

    SHA256

    89c30f72620df80e0bad0d0c3cabb654c957ecae6cd949744c72db36199581c4

    SHA512

    b11ced5fdbbd3d84ea37194efaa3c196c1a473858ec3065a34a9ae7b31967265c0f8279c86e4a0ee17a5835c2acbda669b9927794c55311193f3d0173997e007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b1b4f656442dd57d61b8c17e87e6c3e

    SHA1

    ec29e37d68f15d553e1d48ca89433108dcd1dc17

    SHA256

    a7c575253b085d2ad2b2d4325271905e77f057340284dc3f2c863159992f1bf4

    SHA512

    d5af8f0c98f2ce431b49e423371838eacf36d0605ced824e71e5a7a0ee34ad8648eeb8dc458395811f2b2b3ac324fcb81d2c26ee1df1459f72c99bad17773000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a8a5b51b3f0a6b2625bdcd4a423d398

    SHA1

    bca366af4e351171c632cc4b574196be1ee07335

    SHA256

    43dd99cc9c429be2249ea4b457a9bb7d2940efaf2e18fe17aa446ae6ade5d713

    SHA512

    6b7557d9e21823db0a98fcb4ce4612e8d81673f9c916eb7b223f4889bb1308a1aa4a6692ddeb6ba5c1646aa33c118a17a80ddcfc374a711d281baf4172aba891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64cd962e0a4cc3452ca2b00dccdf2f35

    SHA1

    63091079a47da8f4945005e5b33a490ec6fe09b3

    SHA256

    c8235052660686d2d32c1eafc2c9a40bb47553b028522d4b600e1f6b92813cb3

    SHA512

    4ba95f99a3c3782b750f1842704d651646882718bb06af936a2693756b44152ca362b24c8519853aa16bf8766e0f18e019a6bad1435038d5f58fca01779958f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0beacf49d266b7a441114b1e63e7365

    SHA1

    709e25c67ca40cc1d9d14798c7670ff706d01e40

    SHA256

    dba6cce7f073844d2215ecf20ed398cd44f7f753c1611f1070746bfd10d4890a

    SHA512

    68ce78848bb7d5db26329e0e4e2228dbf938b5028864b2f308959c798bf4170148e0ca03379aadf804443868f38128250aa657ae989dfa566c56b8ab52bff2eb

  • C:\Users\Admin\AppData\Local\Temp\Cab387F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar38E2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a