Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 06:34

General

  • Target

    5da8e19b8530dd3dfd9fbb24ba592a12_JaffaCakes118.html

  • Size

    463KB

  • MD5

    5da8e19b8530dd3dfd9fbb24ba592a12

  • SHA1

    af238ac6343869b0b4cb047025899f41847df9c1

  • SHA256

    25c3eeec716bb193debefc4a8d6f123776b297d694689c1ca69a79c045a81e1b

  • SHA512

    9fcb2076bab563c2141518fa7efe30e496cb8aa92fcab70422131a97d9005353a3e20219f934c6377911aea5c7989a6295b71f3fde1f6ed6ff267c9b9b2f9050

  • SSDEEP

    6144:SWsMYod+X3oI+YCzQNQUsMYod+X3oI+YWsMYod+X3oI+YLsMYod+X3oI+YQ:b5d+X3D5d+X3+5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5da8e19b8530dd3dfd9fbb24ba592a12_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9176d1b2e486427caa7db22c43e6370

    SHA1

    aff680c5fd48a0801dc2bc86f17f619fe62d2dbe

    SHA256

    48f7dbc898a8f863b3db05a7cd9b8e47e8ffaa75692a2a34d581c78bb84b76b3

    SHA512

    9a85911c36729a46e768570c479cdd6d60738059663f3df0ffcb9125cff32784a2769f76bb6f1f55ea81c45a0dd1112a1568b887277c766a5f35ac5e27b91c74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cc75338111824b882da42cc0251ad55

    SHA1

    52bd225c1ae082a52ae9f1f3634060a2cd5fc5c9

    SHA256

    3f123a0809abbf30cafe036acb40180c0f1c7035131d84873f03f82143fa8073

    SHA512

    ce217dfadb72674d5da7d969c74e02e2bbddb8ded5965b25fbb3871a2df9d2a9f59f5cc7c32e03b73ecc18de52df061cb7ea6a2b68603d92998ef682f83007c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a003eebe24ae2a9498b540a723edf35

    SHA1

    fa09c5e53bec0716d1571370bca6b177e971fe82

    SHA256

    edf86619be1fcf478b0361ff0a5abd950a85910a4826423ebcccdce20c36c30f

    SHA512

    43ad596ded0993e74fb1a12a5017ee615923d2e734c485c104b79e42fa2ab84d47c0b9fe32ad7b744219d88c8d780790a0dabf9cd321b6b906a4a304e3ff02e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    809c54073f20a45af92014430ee1a2f2

    SHA1

    0799d213c9b43fc3d8cdbfc0ed89235ad7057e65

    SHA256

    dcbf84b5870c3049dcfa290ec9a7d76d636f82f5387146b1c34b40a81e00fd53

    SHA512

    32750db6c2d94bdb21b70ff552cff0f659c3b55823a16c087844950301045d90d823e576d3eadbcaaa0fb6e9845ed033272506dc5de35c5f1d85aa9c87c0e825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d53ad011ed727a9e12612b48d69fff74

    SHA1

    cbe5a8222acb27b5ae5547faecf37b9f0550c260

    SHA256

    bf16c60f89183cd70d9f745316ea8fb2571eaf8c37a6ffd6732e96d5eac86b74

    SHA512

    477f78dc6ec5ac47b6a1b8b2b784020c54ba400244dddaeb8545d53c84274e99a8826a18edab5c82c4386c71f7d7594879e9717875f360d2ae421dc36786f72e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51dc7b3d77de134582a3a6fc04e42812

    SHA1

    7684aace59fd3ae5acedc4f605d42ac026e57784

    SHA256

    bc40996f2fb1cffc9b36afc857636580bfe75c11a567ddbb7ddb4875a3b4cd1a

    SHA512

    e774f1dc8185326ae828e93ccf28ac1ec623ab942200aca48c91406e4872b59ecaf23d2f9a7fa575d48a2f4528bd439931ef4ae8dc3141f4a3dc8325fb993b35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f985c8c698cb9fdd3ca468d73c2bef6e

    SHA1

    1a43c31aa9c716c5da8de1123541ebf473543181

    SHA256

    ef6fc6e0bdc6881bd18c5853b7cdb289d34701d1c7a4d18dff7486286ec7a0dc

    SHA512

    dfd9933a8cce2a8102ff598a4eb583da44b6c6ec39e0c4f5a49b78759fd393bfb532d256cbc89b22844429bfcf1f2c25b992ee155caf4142709d21a67110b3d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd44323e8a6c124d78d38f0da9ad597c

    SHA1

    ed819223aa973b472b88a0d44f9a1e931cda7a5f

    SHA256

    c360b792c3989543a48096005a436af32a1c140e9a7ed294a50bc2a126a1d45f

    SHA512

    03f0f6690325c2d69faa640b4b4c062a9d49ae3dcd821571c6292f31b81207ad491e1387824602552b044b50aafb7d761a08b49d9af9da14e37a843991e63c4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f6904ede16972df881d4a9218cab09c

    SHA1

    6db903970a27f7287bf64dadf53e1776ac7eefd6

    SHA256

    0fbb54b78a8f64c63cb3860a21ee71dd21006adfbf8538447439ac14f2c78d74

    SHA512

    9546d675154fa1d0d6d354b8293c3bd6cd0ebd2303d3bd359df276acc0018c2820e6938bb5bd5bdf14ad33bb744c77fe77f29e4eea057dce9f97db2e6885e5ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64e72f97c9142d6a4e27ff99b9983e9d

    SHA1

    635ad8e351a1d2bd24e2250ccf9c2fb07668ce1a

    SHA256

    9fa35baa9316ac19385c2dc251127975293bb76d5a6d2aec0c29457e2612c72d

    SHA512

    f4cc3a3840039800b1a4fefe3098bf366441d43dc2f022df1100ebff608c117e766d99670aaaffcb60337e832961fd99c492624cb033dd5d3c38b2f65236da85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d3506cabb602da4d304f0372c063974

    SHA1

    a9d2f063ca94347f0de32125b76f601506577494

    SHA256

    1abae7db0e629c6dff5c25de2f1e4a22decac8d3866e909269982d054b8bc54b

    SHA512

    16de6ef5a96f126d6e6a7466c0ac0db99cb1b6d1657328fa4dc12acd9f275ccf7ef7c36fc1058971db38959cda49b445693aef16078c2b92e2ea2b52b59c7db1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd1ba1280139b7eae38f5e6341ff4473

    SHA1

    7452781199485eadb68dd2ed483b6386de4b9a19

    SHA256

    e355385087e152dd6986d2d2dd1bc8355abb9f10cb5cd12bb5ddde61bfd393b0

    SHA512

    6016a6088aa07de6d278bb09b3564ba1b2a51abd0f42b57faaaf22ec56d27ff8feb4ec9dbc841a53990180a719103f819bd4fc974c33aeeccaf8b790b0cd56c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e82525e8fe77e44dfb9bb6494d1081c7

    SHA1

    e976ef41eccae91d8c8bb275313defbee580e788

    SHA256

    675ca808df8e847fb2d78b77956ee5e62b9a15223ee02159ddefa93ae9765db9

    SHA512

    cda3298051f34fd942fa031a8976644f69c858f65dbf6d6e7edb0743b659e35927a52a2c015786b253371345b5c15fbe970fcd65e696af2e73944cfd9a756064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    323f68c108a6e2a3fb2d7c897aecdf38

    SHA1

    a37027e93a86decaf34ae7f280cb2d18c786f07f

    SHA256

    6a99e382ef79fbc9daa819b8b1abdfa46389decc8735008c421df5052a5d1779

    SHA512

    fe9249067129fb9876718ff7744dc7ebac60213fbc0eb071454020e177f74ce47a9c0c3881cd255083940a76a9dca6261cd03700eba336d5d8e49193d219c918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    411a28cba0591e6d899813ec5f8432d8

    SHA1

    8fbc9d33c56bc472b9e85d5d146b0c1ef874a6d1

    SHA256

    00fb439f43462596903a38d06921d655f2855f0f8919eb51323dcce566c282ed

    SHA512

    2609c51d6afd849f9f90eaa8cbe0129de96f0ce028e7b41e552deb3e13acc6b5455d1211eca434dca6f1ce47e1a76bea16ca2c7c5bc43910aae2d90285caf2ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b2e8797475fff3e06afb4feba35f58d

    SHA1

    dc7c5a6dde5ea3e94bc3644929cdfc524c46e49a

    SHA256

    35736bbff3712026d67178fa3105748c03832d2e887c8e896541357a073a0843

    SHA512

    7036e68a46f478e6569359a6b47fdbb3600e7ac2da3ee5b77cab1559b9bbde2762f8d364a13de1d5e2b1e6448f18b24791410112720f743b38dfd47aad4e0b19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29c7c5dde2d0054323fb5a40d5d5d21e

    SHA1

    95409e977c224f32af0b5bc0a9bd39a2867f0cbb

    SHA256

    41d56ead0f74c2c4d76613220f517f6183111e38b799633e21464017f286cf55

    SHA512

    aa5107f7abd98aea33167c3b39a44bcaee757d5646bd6e19f5c385ffbc9116ac921ec608aef80eda20d052e2cf0819a5eca5f12f1965d2dcad78c12f0d78c155

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c5f4d182c181aec5662c30ba92f8179

    SHA1

    cf18c669d6fb248e56719cb8f2bb27105d7b3a12

    SHA256

    5c3fc964b323f2f74b56124ec014d2fce5237d67e4c3b69224d7e8e6fc16e9bc

    SHA512

    695aabb1fc815399b5165c6aa4aa8978df366850528b9120f7033d50e5668cf4d70977322f0bb0a66242bc999ba241ae8f6d52275e754ee1f8d08ffbd7df0a53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6fbd712cdd021048a2ed30ed9d40537

    SHA1

    bc2dfaa709bd931f1cb9ac5a09962ae8aee97a57

    SHA256

    b26e38e0660c83b54931fe682631ca8fbc52c46ead458194ca9a14959412ef7a

    SHA512

    ad106ef14a7b6220d099fba9ae3ee08828140fb6773ef2e82506d88d79f08b1ae7f292ae0edcfd57ebc51f9d8831c71535b87c4d73550f8b2c3b0ebf928e4450

  • C:\Users\Admin\AppData\Local\Temp\Cab430A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar43DE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a