Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 12:32

General

  • Target

    5f16a458daf26396a4fc28cdc37d859a_JaffaCakes118.html

  • Size

    460KB

  • MD5

    5f16a458daf26396a4fc28cdc37d859a

  • SHA1

    e42743e44dc40efb48cdb761e195586a69c16ade

  • SHA256

    58957c2f4f874321f25a64eb1b848485479a31f774bc9b50ec295222d30b5d12

  • SHA512

    fc6a9706b063b500336663c2d2c7540cc6fa374befa93a259215cdb9e296bc9f9a8e6339da9a2f766fa8a5ba061f89525bc0257ee8b5b517bc9116b201f2c2ac

  • SSDEEP

    6144:S2sMYod+X3oI+Y7eQksMYod+X3oI+YBsMYod+X3oI+YLsMYod+X3oI+YQ:55d+X3dw5d+X3r5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f16a458daf26396a4fc28cdc37d859a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd0ac3a9d5b0efdf2abcc04ce3864d16

    SHA1

    6b3e02ee60514ff354504f4f5962e62b3efea446

    SHA256

    3d03759d395cc236b141ed737f842e255d72350ea36880500b0046f5878c75f4

    SHA512

    2f370cbde61b00bad96b2eb8ae0a0693ddb1c098624d702a0e1299d87fc0b5a0c6a4d7e79b5517d646215a1d338094cb000d20d59dbd3b8170849110ef83b4af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ce2866830fed2da885e2e1456bfdb25

    SHA1

    b44735cab12a5c6664454c9dd74dfa1f20d61c7b

    SHA256

    64dfaa8ad79f012f3f02dd9a377f1f8dac9e1214609d6797587a7b622d90efbd

    SHA512

    b4c98515cbe72b05b63ce1f9ea2be1087dfd8c33583466da2824e5a6ad1f2ecd4592c33ddb6c58ee67f93b30fe3eaf9272b87a743fa5bfa9ca548aa3bffd1d63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6360e066d925a2904b2d7d31deceadb5

    SHA1

    e0243eea34880024b03aca13c935834a195d7e4e

    SHA256

    15dbe9eae28de1f322597a687d06cc1e7b969d56c898653e4ec78d4b2d46575f

    SHA512

    cc83ebaed1209d28c6279b0f274469c9777073d09174bc28505a175db99109759ef392ab6b13a533810a506ef62a7dc7b4a87926d9ebdda00df9884917706d50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec2b4b3e57a15719a8a0a28fc240b0bd

    SHA1

    b5cba411e50d4f4c2973e027993b311c292816ad

    SHA256

    8f25c0898ed9fef0e92b3b8aa216328610a08f23f5f9855c2eae5ea2f9dd521a

    SHA512

    8da17ada98250c6f835b0cdaee4ebc4f598eb665e60f9ccec2cc15f532a3d1b7de5c6eb85555c54f760eae0025f8f68390f0ced2f2e2f1db7d7fd341ebafd3dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4795b21cd71eed5d0c692f64c93485e8

    SHA1

    b198a4b630d1361103d87736aefba677892e051c

    SHA256

    bf6acd5ca21eccd572b777bf0be96ad9f82b2eaa181c2fe91768a7e7ee10c9fc

    SHA512

    5394f5fcc324956f8a3d1cb10784a7723e9006cd465f48af931a134771e23a3ae403f40edd181bb60f891b12c92bea9d2a368d3fdc76460a418288fbaea9c1cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    830415d821fc0a02c601b9014c98513a

    SHA1

    8a439bb2219d87fbf22a00ea29e7f41d69e36e40

    SHA256

    0e2645380ffb15bbbcd598c150baa8af1aad89ba446d02d01b8624844d0d9750

    SHA512

    21a9e0d1649e9499379827e40665820189df2a8d5cce7d504afbb75a9637b3807fc04f199bb1bd8b3c449ba32892eaa11ad4daaf9de7e13ec37cf7190bac3064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd67ff0fcfb9cbfbb4014e2f1ac5bc7a

    SHA1

    f705ba2ae01546cf7ee26f027771c812cb76ff8b

    SHA256

    e81b12dc68cefe2c6bee76c4eb60365c5b635df2b6bb690dfb7a134c70abf85a

    SHA512

    6845c2b92f1a9a5c3195d3052a56bade3cf7caf37d8b6ead1fac992877150956ec5b34535c8c7f486a4e7ee8d11c6a2fdfcde024c5f3526f28437cdc64e4a312

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50088060bfc3546acd83b867c283eb87

    SHA1

    1013a6dab322eba212cb2072a9b130216bdac90d

    SHA256

    bc808e58eb2cf4b10fa687e0b23280d39c085c2b3d9d0cd9dce2a3f2ee341762

    SHA512

    17f04d53e0656dab1e95627ef30578627d022d9c347168d44fa2e63331c9a39c5eb2543ce57c3b0fab935d70bc9f8b66f31821701e9a7f30f60beae18d4b5f99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05f85d432086cba0b6d1e276b1c69ff2

    SHA1

    bfdf273d61b79af3f1a368bae4096b5da08c3ec9

    SHA256

    456b2c6d96fc3bb6d122cbbe7c34cfbb92858f1f48eeced802c07b38f4823cd7

    SHA512

    953303968bf11ada63811f9d2fb759fb79a571ae5750b2bbc196ca340e1ea4e16a0012a863e0b15a8d577ec60915afc01f1fba4a72634dc47bdd3824948f180e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fff218bea586e60a5b3c018c3624a4de

    SHA1

    76fa8c550522506dc7ae4cb927fb2090f089fc4c

    SHA256

    016effebb08b787929dcc126ad637a54c9821532698c5457278ee165ed633887

    SHA512

    0e62b6053c599fe7ea84984e84915241191c850fc15b7001ca8276bf9e7e56fac5b55a1d3c79f4cdfe5a143b8198d78799eeadfc60a13fcce4bab0d499582675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45b176fd2b3331a9e1464cca1ecc9337

    SHA1

    31163a7802c2276bc1ae923746fd404bc6db993d

    SHA256

    6c10ebbb1c89c5187af1797eb39adec6967fc8163f1ec2261fe245f604678d1b

    SHA512

    db7debef7583e4c1c73810aa54b1caa019d6789ffb4d50fcebdef01122c15567f8fe5d40d23be01e9deef6fd37b6a238dcae1c3252655d8a64476f9a0014eef3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    292aab621888be6eee86f1e4ba9bde7b

    SHA1

    9d04c5e890e2206e646f4fd460d13a4875a83503

    SHA256

    eac99275c42af9e2ad427418192e2300f16eccbc3b886d678f8b9cde61c7cfbc

    SHA512

    b1b3c91890f5175e446b58831be342e336b762ad2846df9fe8a3b79428930e6a3b1e3718220060e01af544e5ac641c3c071f86221fd3fca4908d3cf3bc4c695c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    982abdfef100fadf205c4504d32b0ec7

    SHA1

    5ff4ae4d60c5fd7fac34905b064a24b27faca49b

    SHA256

    3e7cb6703eb6111171f195080888d81f0c0b8dbfed327925f644a95a1adcc4a4

    SHA512

    208b8d93478ae71c4674341c1315ff75e9f222f6e8827b1f79e3d32540038504a988a061ecfae5b198508887406109cbc01975f70ccf5d8b1864f1e876511c63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6644eea80381a31fca0989c3a6a4937a

    SHA1

    d61008bfc4229b8c3c6afa3fd840c674385dae22

    SHA256

    71c154eade29c943fdc811bf3101858698b865beaf4fa99e84cce1ef04f2ceae

    SHA512

    c753a0f90d956915b8f602b520cdbdaf964ee0debd6577804f9478100db973ceac1520d77203cc288132ee220b1daa4792fdec2073d9d8e982e05baae58ab19e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63c07dc839cfe0230528467842471392

    SHA1

    6827d72b3b71b4191e0d4cc1a38d9c9cb46ad1f6

    SHA256

    739c70faea1f1572f589358c0b567c22aa46c4e6c18e4960752adf075b1dc98e

    SHA512

    9dbf981cb481a40dde844ac2a6998657fb154c2b38a1f3dd8cf73a21aecd69e55811286210b3fa35d325717b59d0dc5603d79e51e90413e98c171c22fd4929c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69ef866c02fd4d17b769220526bddc5f

    SHA1

    1cafaa88582e4816945e0298ccb5b7d36750ec1c

    SHA256

    8bbf7adfd385f6b2b02c697c906ecfc53fda7e72a28bc237fb8d633f5d6f74ea

    SHA512

    7bfb70e3eead21e3baf79040d480642308556402d80d3b3f09720959a8692aff63b504626936a8450128f7db84637afad04a954ad7a1db1fe29bf3c429eec85f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    607a00e5ed39596f76858270aa98ffca

    SHA1

    646f4d47fb6663b01984bc4dd08c241e03216173

    SHA256

    7773f5cc00826e5d4f7eae416a3ff0cc8ed39ba794217701b15bcbf3374323cc

    SHA512

    c787a0c22d640bc35772fe7e461a47d0673c7e2e43247e2b1962646895221308e83d07b82cb8bcbaba4b44a88a8a5741863f9df5dd2b36ad1ea355e04189dfd9

  • C:\Users\Admin\AppData\Local\Temp\CabBBC3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarBD22.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a