Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 14:00

General

  • Target

    5f7367d2ed1eee83f6f73c333317be03_JaffaCakes118.html

  • Size

    60KB

  • MD5

    5f7367d2ed1eee83f6f73c333317be03

  • SHA1

    8a363f7560b5f55f249bde0302772a2053a8e294

  • SHA256

    00d75fec94abb41f0a037f5b6b9580bf65c36fbcdef6fe1bf4f238f83be26a38

  • SHA512

    029f7bc53eba8d12ca1a7a596df1749254814a8aa745ba0bb12fc926dfe058b1f50b3d1c8b072ab2e7ea573d3082eca9fa109ae3537f4394dbfc803b6810f141

  • SSDEEP

    1536:Ip34k/MHV7UW5KL84k0jEMtHSUNrOYQA8oMoyJq3jI:u34xVVwRSUNSYQA8oLys0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f7367d2ed1eee83f6f73c333317be03_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2232

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39660b42acdc5307c2a8acaf99a1f6d5

    SHA1

    6f3897d71e7ae9ff4425882c36ada0a94b673117

    SHA256

    c90c2b56f7aedee4d014ca7a463f1849f651cc3d6a22b4151f8221969c343a91

    SHA512

    f3228058e33052a632813cb5881627b1bccca327a0270265359b77baa8111f22571368c19d47fd5c9aed0755ea8f7c701e40e35c1085d3a18fbe5374e9e132a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e849162619cc53fdb52a1b56247d107

    SHA1

    858649586e60ca0e4956d5d978c5a0e320b8a860

    SHA256

    b2fcf2b48f286cc2d5f12289dd4a0804abbb510dfc4e63fbefd8308da77495ba

    SHA512

    73646166e7f6e12a6bdacff6f703d5a3b5a9c5cc79d528720d0ec767a60a56a1fa3e7ed86e8f4fc1c2db4f0eec11a558fbbb4fbfe12ba4a203f2bab6427c08a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c4a30df634c3b43fc06c164492e4c0f

    SHA1

    c0620d03cbf6295643a004a91660d4b4c5e7a565

    SHA256

    84701eb56fee223aa99cbf112494820c5f11400e45940dddeab56a651565de3b

    SHA512

    3889350e7a76722b9bfb388a56c5290a483b866e624499be93357f4220a369e823ab08485350c9bf97df24c9412690441c3f1f68a7b4dbff5fea526f291f788e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fac55c2365e65ed8e38637e7bb41f6fd

    SHA1

    9d0325308a94b2ca3acec2c81f461d5fa5febad0

    SHA256

    8f68a29cd21b59a78c94aac206614488254a319242404e6e72bd5dd6fbbac931

    SHA512

    3f29697ab20d772b2b724d1364be3a1f4defb3aad3a6da714d6e4ef83bd247a5e31f663f55e1c825731937963505734c83dc35146184ed01027d4b82678c86db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e70306491bf21eb550bad45f3f69ade5

    SHA1

    0d72c670ec2b6525027402191cad7d972d65077c

    SHA256

    4cf5752160eb9758b46af96441ba1523d8db1104855448640c85dd2de104c6a3

    SHA512

    e5805b56762b3cb5bd492a06a66c3a3a233561710d9e6c787616caf7f87dc7e4a7db83eac628468ffc1e9135509645a71e6bab1233dbf2eb6fe62bbb677cd3e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d738d3c262048cada805f789b1f5130

    SHA1

    998dd4712f49d7a8766e5dae45fc28e4a2a9c90f

    SHA256

    0eeb5dd07f3a0294ee122e8599dbeb87fc0fabafd797778d9cf7b81c70ce2eec

    SHA512

    be4f7c97f65226e32d951d27f5a6c009a8f8d855bf9e3f4be34f3b8592d76e4edf61f84a744d2bd6ee337312948943b615fdf820bf7d22b45a2b2a785c022710

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97912939e4accc07bcd23fe4f9ac7a65

    SHA1

    96d8d100d27b34b4c7d459cba29b5b73e21dd37e

    SHA256

    5d51fe2e1564c2d492ca92d6de838bcc0c5b99315fdc5ed33be9b2b00a46da56

    SHA512

    157de9069a972434da5eb3e22992fab80b9c80a2d59e4c59feb8d65aa426db9887ca315494cb986c52df3446c95f3e1fa90ddeb9d6c43b0d26423e0372d8314e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7c1adf7f3615da08257cbeba3cf5e35

    SHA1

    efcff26e0edc37d3f146135f6f743e1efde00497

    SHA256

    71a230a88f88a78988f9cfe1627faf49c4366ac2fb17da66104dbeff7fb4cee4

    SHA512

    1c0757163e4347b58f6f9090fade540c539680f1901b952a49ee7f9e3b1fa28dc0d59bbc5c7386a946bdd300b07c0d1ee49eb4526265afc5c554877c3bc55143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f01c4c1ffc1aa4b0584f3fae88f2d280

    SHA1

    de5396876c970e1bc8b9a25768c3c9b3a12dbca8

    SHA256

    ec4a2197607bab07b8bc3037c2f88c0212d055b5d2b59e955c157a6430203491

    SHA512

    d2f7bea8fd8e5ae3a044dc0067a820272c5f3312a9d421176ff3118395f1f8f924c59cc19506c8d493af6c6012a49a555e4b847f4594095ff6b265ee17dd01ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abd5b5c93198f80714fa8c1241a5c919

    SHA1

    af91b36ea3a8b6752ec023f22cafe1f181f8fd6c

    SHA256

    d584266c490ee3f47d1ec036f9804cb1dea93cf230735dac1e207cfa7b439c6f

    SHA512

    fb894bf4ffb92c67ea17d5a4850be93818cf511fb61c513f6c2175ec6f7c4c588168a5ec5ccce48a7feaeb7b09011d208e5cad28c4d6af5cf5ceea2a644f86dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2f0d62c383768f633af863c913e8f2e

    SHA1

    fe81da1a748bcab02351d844bd2ca6614f0e6a06

    SHA256

    0d82e09681734ddf8bfb5d736590dcb313a63a7478fbc649b36658ee1afd7b8c

    SHA512

    680dbf1941cda71fcbed265f72ff2da39f33d175ea7f932f52ce7ca3ce8f330c75cddbbe9d03e2a9492d478b4ee0f03dc949fc3e90661a20edc9c9b76865920d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bb8235ac429ee1f5d47440bf868f40d

    SHA1

    18728ac33fa8e7b240051026721af509bd33a5e7

    SHA256

    941756164e36246eb6a41f1712ad73062d366c80d35bc85c672be0fbcadd4816

    SHA512

    a429cc3deaf8c0079d1f0077ac25941d7f17d19ed02ce0eac3e10656b79c4991ca96a2250d370b647534b9dc750f935ebb8ed8cbff5c008ffc8f660ffd8d3e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b745930a742249463c7815eb5fe37c0b

    SHA1

    8ee2f010fc35d0a1041705e49021ea8c3c37557d

    SHA256

    aff2cb928e444f049ceab2e43704899c2b02ae1c5a964b6095b2f977388dd29e

    SHA512

    e12f405565e0da9c67000392654eab903efc3da62372e7d74007c7c72c6eabb12fbcb8010f21cb98366360710d797138eb08f7007faeba79112904e155556d83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    368877bc23878997aca70ac882ca1416

    SHA1

    2d6c27a804bb642e6eae446afa63be1191ceb513

    SHA256

    57373c502ee15e2fd92890519adcbe3f077abb7902b2d515db5d2225603629b1

    SHA512

    dfa4c00026bbc942b6cda8b0b430f032a41b14c2a5019b5fde694a793bdc923128e79f7dcd17a20f6693bca077aeb7e90a6e5a0ccba999542cf780124fcd3069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a210622a86b8ec644797bda1c282557

    SHA1

    9b929854604c47dab5cb6f6482ba0aa19cd8a318

    SHA256

    8ea09045ad404ea67f57ee5a30d3dfb0052eba58faa9f1a04ddaae36f7acc1be

    SHA512

    f74a4457628eae7a3461e80bbd3e751d48c0c5a18964a59341e32432d4e9df07bd2fc142aa902177ae26e65f737c87c2aac5242a606f4ee5bb2d3f9916f267ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7aa6b165f132e814315e9f566d225c68

    SHA1

    28eae186d66aee0dbb084aae9feeb887145fbfe7

    SHA256

    f73046d51b1f03533b089aa8a42376b705f8201130fe25dacae88ac9116c12b0

    SHA512

    f892d9b5e905f96633743a63270564e832ceffe2577f7a3a93d75a9c8225113245afe0922fa69c514cf75787fc2edb7f171fd6d70ea3136782f8746027518174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    241625b097132dc824586eeaec19ced8

    SHA1

    6071cdec8a0406f641de8ce5697733dc1efd028f

    SHA256

    90b256f1ba66fb5bc31fc4743694cc23218e235c8c9c17c70fa9206c7a42eee5

    SHA512

    7e5c8ff1d7a3d2be67e03457bfa6849204b3d383b160c1c3b36cdb4acd4b36ba40ef11edb836352d6712ac2e2631c27b12bdf8b1c3903af942948bec38e01502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    685dd3d50124881e4e64c4c5ed5d58c7

    SHA1

    09daf38fb32293370af033da0a08328c3bc6cbf9

    SHA256

    a6057cd224ff45b39d4466c97e8e28924db4a3830c116ed2329ccf469a27f7d2

    SHA512

    9f3c81eae54555fb56c77b1cdb5d72f9cf8206cb5a564de5c1ca64eec33d8c2863558c86e83dba98d0a06dcbdc5eb3c5160a6026ad8d28c2f9455177800f28ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12ecbb1884041a5fe2b9be4ed299de44

    SHA1

    e077f13af0754b84e2f00224871ed972c742a8bf

    SHA256

    deaa0e48266b21551cf54223b7692f6f2a565120f096aa159e78dddf6a2e04c0

    SHA512

    4849290d9cca5fcd79c1ff2e5daf08487815cfd44f3e9b495e03cc1f7a0e41193db6a5a91528c1c15a17a528a9c6f7d387114fdfc7e3be45db92bdc116636a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea35c810d83fd347a1d2449d68823fbf

    SHA1

    41fea7c1523688f325e109e9876d92848c2bcd9a

    SHA256

    928932e24b4a4a421c24874eed91d62191898bdff031924260e7b7e277d87fef

    SHA512

    299304880d1f802c49652dcf39e40b0c84ab3a64aac381eceed8cc807f39585e2964b7154937a978c4244b850dd39f0888632c7a31028c65d5bf0422c1ac0fe5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G17BROQF\jquery-migrate.min[1].htm

    Filesize

    795B

    MD5

    5d8d79c3cb9af023240b1be6f5057aaa

    SHA1

    df22980677b134e83d878893f7c7984e0d78a240

    SHA256

    e8b101a7c7f64aad528cc734513cbeb02243c0af37930dc0f3239749cff184b6

    SHA512

    66f432b622cee0bcc06cbc0f833de1471ea36c295b4cd93eb848d97e69c2252acd2fc8972db51ea35475a424f4d6cb5001325525fb04f71b8704eb24de1c4008

  • C:\Users\Admin\AppData\Local\Temp\Cab58CC.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar58CD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a