Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 14:43

General

  • Target

    5fa28140c6279518ed45b42d21e53dfb_JaffaCakes118.html

  • Size

    69KB

  • MD5

    5fa28140c6279518ed45b42d21e53dfb

  • SHA1

    b0189efd17142b70c53401202ea034827737b4c9

  • SHA256

    fe5da5507b0c1eca0fec3945c14ddd77d96b7a7698bbb1d1cdbba9f7f50d850e

  • SHA512

    966127c1ea4194d443df7afbafffcc88a6b7826285882f5969241b18f697e6a90dd7cb9d4c35c86a8df927908d73460bf11cb9a73956c70289a4917bff85578e

  • SSDEEP

    768:JiEgcMWR3sI2PDDnd0g6M39+xoTyZ1wCZkoTyMdtbBnfBgN8/lboiGhcRoQFVG8o:JGdTSNen0tbrga90hcJNnspv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5fa28140c6279518ed45b42d21e53dfb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1808
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1808 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6671cf7c23b3526f3c8e4c2233345960

    SHA1

    c20cfaf4933be23d7ab86a64c54276f2956cbc50

    SHA256

    b67dee4f0ea960d3f05149b16482097c3d77b86685ffd03138afb3f04557e8f2

    SHA512

    64657d56bb34fbe0e01046185f3e14da663fdb6d69de917bc9c60e18125dab84b63a212b3731587441474b2c4e8e7ed93d4c588ae02c5992527a8be2873309f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f335363d567e266697bc788959e58f5c

    SHA1

    a78b7858d10fde1556fc0a2c5a8244560b8057ee

    SHA256

    4f5eff233b7ab37bf98431bebdfd7a3ada3241d7f8c5caa94210154cf6913263

    SHA512

    43466916ba4af303c44fa0553dc63c077437f37730f6352d6a0595d22edf25248b429f7706d1ff03629721263b8bd206ad605539cbdbd1a56bdff1a7d93029c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51e0665672faa1bef03224be2ade2bef

    SHA1

    c76054b8c0f2f1efa604bf7e3c577da3482d949b

    SHA256

    e4a2bab95f2f14e3da4d6c78c49650eb2dcbf48db149c30c963ddda6b363fae2

    SHA512

    06d967117e93257e01ae190e025de107527178726e04114411991c7e403bef182a3b7a567f6558dabd932e675f5c57b36e65de1be7541a301eeaec7c427357ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    513c425e8c9c33a9470cc9231dd96a47

    SHA1

    452475f524f41712058abccde28f8bc1b9eaea51

    SHA256

    a2df80c8630358e07160348183ebcabc60087b00ac2de8a344c3f105a983ac5a

    SHA512

    60b018603a8384067f3ea99ab212c57b05c3e3cf7462e757caed986b09e38c20f43a806406ec1079c8036e688215b474be0bbd9e6e825f87d2ab4445fb61aed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f9f75120420aac58bdd6edd03bec9d7

    SHA1

    044eba9fab180154a24ee5a98f63516e199a2bd0

    SHA256

    54d986812613feabb45a5049d2329a2af64059d4da399dedfdbf94820db306f8

    SHA512

    8f5907e703f45ddf0a29bdb7f58dd7b691109dd3a88b7ea890b0b16c873f946d670c0b48e3f78b476dae3f0d48bcb98887178b69c0b0343b84f855fd91a34baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4b4326abff7fdf8b0891a59454e28c5

    SHA1

    64a2fa327819da77c103d43b38d6db53ffd806fc

    SHA256

    1ded037ea960261cddf9fc5aac00b243cf50bdfa53904350d5bda75ed4784b8a

    SHA512

    6504c1a49db774dd34a5c811022c9ee60c774e0e1fbf5be29f09f98e9c87abc0554e24270aad80b49b46941e5da45d1c6707e2abe67983e49d297a13a11bdb17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29fd4dfe6c9a37cecd5145219b5bb2d8

    SHA1

    c1ab2d43309121493fffeb3d1ec2c74fc2b5d259

    SHA256

    0d512a58ffc765c0ceafde38a7edec6cef338c8f3a4a97ae483b37f377f53466

    SHA512

    cc35760904c39f37afce620f1dc1e82b2e3d8766de795854c8d11e723b31ee66162933e813b9995ea17e77f9699c8e3d019128cca7b8f8ba148ea3bcb5c4d485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    567fbf44b50d217771d5899b47098d78

    SHA1

    a872909e4adbde4e7c1bf788277d9aae49cacb6c

    SHA256

    3b69b7ccc5885b6b056b901302d1680ef829fceb8b1cdf535c0585eb9443ef7d

    SHA512

    3b3ad970b3b15e091a1107f8ebf6a118bbd82b21a26eeb3206d7c915d2a69c0648b40088cce3503aed861b49d9a874374077c18db269e89c5a20a248267f22df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fe43ebfa81478a6e89c05e272ec3e94

    SHA1

    4d500271d5113eaf5d0b3572dcd888eabd7b894e

    SHA256

    780b7693860ca8473aebb8505e0808f2a5900d62dc3932ed474644318581163c

    SHA512

    3257c1f28da51ad694059fb789710a3ff5254956da54b3b17251c74ef8205129a4d5ba7fae1bef4a3a8df0b2591890702788960367819617329159cbb9676433

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    535c2f9faef0a596c04885f53a1b273a

    SHA1

    05529f3d5d681cd8734404c17b2130af94c1a0e3

    SHA256

    df61b9d41651dff946e2ab18df79a67bc770b01ee11ad1ace87bc2a0d0bdfa5a

    SHA512

    761bf4d3e931f796a5aa8cb78e3cf6ff4d1a75a07cbe7bdcfcaae8db232e5dd5ec953e0ce046abe5542351cc74dca5cfa2c65a68820fec097b57d832f130cc27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1641719734bde3dde3da66de06f04a7

    SHA1

    eb3df8c34c45bdbcdad3050e38e89de2f28c95a3

    SHA256

    9c075b0fdb87635a5841244af0f875f8abfd4f63b7520633a64254868b65199b

    SHA512

    daca7332a79c9a46431538d8b3cc3d6c11f5f690156c6402888b04dbe04afac5e694e26c3bc1e0a46eb3ec92390d32cf3d54ea356a2965ab51950a0cf671405d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12e23862cbcb1107840d628f3cbcb75a

    SHA1

    f1467151a5d8169c1225367642bce87507082b2b

    SHA256

    1844cc104dfc9770020ccf5aefafaf5022c4b469ef78567ff866a7ae162d190a

    SHA512

    cee8e4d222d78af755ebbaa9d4ce1a39470e8194625a5e17eca2fd832098d5efd464194def44ca8a431f79934ababfaac1cf88fa72597ddc7a060e9b48ba5ec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5698f0631c92cccca29492b83c9f5cb7

    SHA1

    ac52b084b97a625ee5e25db63da13cdb9298b417

    SHA256

    c4b723193fe8e049948004b3d224e5a704dda2a85f68e28157bded10bb4a78ff

    SHA512

    4ff2ac4ba0b313fd9f78055f5dbd246bc58dc4d5ea9ee43db5dfeeff1d300d241cca3f464b1ccb1f33f0d0389a4bff2eab18622a5e9d049c6aa0995156993815

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00c59b12dae234cd5fc598f7d2c6e086

    SHA1

    4ce514313555a494a72bf5fb0e354c1873e853ca

    SHA256

    732aba33b1e652c6298a7f0da3794e1866306a19ec5b1177f02f80621b645d47

    SHA512

    4c11bf0aff7d584fa6a5f0916a422b0d8e6367967cae75b34755097aff8b7603f16aadfe9c750ff1a7d2711d087b561bfcaeca78c7162d21f9cb7fbbf532264d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    060f202ff1a8aec7339cd6e86503acf1

    SHA1

    53ca48f40698dcc0ee8c7c91f2b2638d9a88826a

    SHA256

    cbde1f43743377d35799e954309c45f19df14da78fe61fe40c24007d864c41ad

    SHA512

    c9dbc8b87da1d514004476ad2845e39ae3437c54e474363cf21384d9bedb921c74819f49eaed7a1920693e56ba3ea64454476233299666bed57a6e59249c7d97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44e2b4349240c0bc87c83d06f44dff91

    SHA1

    757e6a1e73c60254486ae6a72ea23383c53597e4

    SHA256

    ab88896aa11fcbdd11bcfccae53d626c70a0f64ad6479d155368709ed35f0242

    SHA512

    29d315dc2ade18db8a0a22b5e787d86da0f5a405348891d8d5217362bb873ccc2ca86abbf097880b9ffa3c1cd05a084391327d92fdd8949380f62d6e83080d9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    394172b6671e3293e12d7442b7cc4434

    SHA1

    6bc324098971faeea805647e78f8897d5996e2b3

    SHA256

    367a799fb4fa14db3101ff81bc7cc61c99b34e03622740305fedb25c522c1bbc

    SHA512

    da50a8e302ea0e21e939ad32516cac14eb5b0d1c2f8cdd65e6d9108b8440e25f3acd6c77070084a2003081394f1e2a6673399bcce9dcfff59e98e55a62413825

  • C:\Users\Admin\AppData\Local\Temp\Cab402F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar412F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a