Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 19:34

General

  • Target

    60d18466731640f5c3298a48c1c375f5_JaffaCakes118.html

  • Size

    31KB

  • MD5

    60d18466731640f5c3298a48c1c375f5

  • SHA1

    1fc9322f4048efa9ad9161555df5200fdfd7fd64

  • SHA256

    f0991fbb34127874a087221869ae6e4e2b4cc16bdb38ce44b9a506863a975ea3

  • SHA512

    31092ac0f9ed495b33355fadfaecb43588efa43bef79e937de63f586cb47c69f7bf1a93c743063f036bbe471ffbf02a0f373d735e141866d0ac81a3095331435

  • SSDEEP

    192:uwPhb5nT+nQjxn5Q/LnQieKNnJnQOkEntJZnQTbnRnQmSBxbvEsVa3UtcBPcazmj:fQ/Ymx3KUsVaZ8tQd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\60d18466731640f5c3298a48c1c375f5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2412

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c084ed5930899c8bb6a4d23d00dd1dd6

    SHA1

    39f060877e492aab9d23afd1cdba45f3eb493788

    SHA256

    0ce9655f4fc36c2c8c7bfa5605bf77176fc1a1a5c187515fe865d77ec0a34421

    SHA512

    41e77eb46f6318777a1beb8b69f9207a60fca5ab53ac6d7e1c3d42560ecc16f53414a6d37ea46afb45597922383b3d96008a3a06a5402358cc36acc0a2e23ba5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff35580ee75444a1ded9dba8c0cd3005

    SHA1

    93f4780e8c82e2f191fce47c0d5d67a73f736646

    SHA256

    85edaf3826c4c95d6660a85c97ccaa0fabb06b4ad47aeaad1e8e7213460950e4

    SHA512

    60c3a3fdff3e3f88fa5ba5410aa0ee268d66f0c84660667ca0a5b23c0b137a2de84681432deca04bfbe23b7d76230c161995549f79e3ede7b90e2bfbed0dae90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad08edb97a93f765a41d5e36507bdca1

    SHA1

    0423d37f643383920c5b969f2d49d8c4299235ac

    SHA256

    41ff2411ab646a03005cd0b952562fdf3972ff7a522b265c9102f3cdeb518e83

    SHA512

    743ac80f24fd139071549fa65363ba215e8c36504d540e5957950221c4a980d3f1a5948b52bba2c94e11b070d7f2734b013bd2270329ea176f76b78887f40ade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    127f3f36c2502a66456ad47ed25b588f

    SHA1

    3a6d11823ea885fb9c037588f09fc59dbfe346d7

    SHA256

    09d5a27a39c756f7aab0597fe6e2b5acbf79611dd7d4ddf3e39b057e914b98d5

    SHA512

    f6616505de334a5a1ad4a9ea7cd21c698fb9216f06a9407bcf32e26d9eb01df5898632b1c51698d695a26f5f6c8a5914ee8252671d3ac846d8101654526893a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b342f471c9dd6652e374f87814fd1afb

    SHA1

    e449d293d1c4a8ce25e36ecb59a86a869648e6cf

    SHA256

    b4e371339486bcb6e596a444429acbcef3cf1d9f3e9060d1ddd5df70bc0f0ee6

    SHA512

    32d92a820bc63aced39244965228a6b91229f57989f5619884c134c19996c9410abb00790490106da404181c60ad08cefad8479e2ff880fea65695508d498598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c040bb1a384185e7b6db0d9cc7577822

    SHA1

    b75059ad68f288a5d542e9be233cfd379fe5d8ad

    SHA256

    b96b9b4d4e08b64ab3147845befde95e6940b377225fb06512d954482bad23ea

    SHA512

    d9312352847c243462aafa82e1c3760fc3c9acb219161501fbb355035cf34f0783f5f750e6ad59de2d7c6a36cd4595efb6f5542183152b347efc6eb89089d02f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ace0a3c38407391e2dd564f7f91275a

    SHA1

    238ec95cf4cc8843e5bb2693e6e19772a4eeaab3

    SHA256

    1cb79e7bec5a1a1001b1714cbc336ce02c0df39818f422886a78dcb656672b0a

    SHA512

    9c4d30d8f56a1fd3db3458f51b7065061bdde00e418064ae6f2b6a24363c525ea5a86b76c7a9f3ec7874c45cd6f6fdc4be17130378fb61274526a26fef1a6d8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85005f77d4985bb37f07deb06b8fba21

    SHA1

    8676ee44e460b02b0c8429e18a1e91a971178401

    SHA256

    644958163119e5270e2a727a78d6ce652aa554f4d3398ec18e01fb5e4351da75

    SHA512

    20cf49ccdc1835d965484ca2a4a39537da7d8b466e3eae4331f1558d0fc05708071c48e29a78bf978d5cdf300d918d630372d2fc12f3ea2773698015683a9c4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ee714da34ff6e4c9738c3c1d1858579

    SHA1

    435f9e1c2fc41f93c8a508f0090ed3a77f568f81

    SHA256

    8d0ccf346e2dbac16ff227dbb6a37a1182683ccc02f137e9f54fffed0614a4d6

    SHA512

    2fe84824e66b99baaf9b8773e2bb1836594f66391cc720170397bb1c9207bc82f1ed60ff362de89840ccd182fb9ae9813c6f1c38220e670f76c8e93df42621f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f43a98fcc3967570908f68a3f7bbd94

    SHA1

    c97bdddffd0302eaa418bb22b93cca80319b316b

    SHA256

    b898920002152145866a7ed0022bdfd4c3f8d577c9881111cbf83500c7c4597d

    SHA512

    661b700eff8d3920e6959f5ade4d4166575f8a0a2a0915c559a4cbc0c3d444785e2853f6a1d7c12958d0338a62c37cc3e5752fdc60624491d6e1d239548fa22e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bbe5d38860d7384caac863ee14bf77a

    SHA1

    62b25adb09b1ee59d49be6194b363615cf3510dd

    SHA256

    aa306f7e3ae6a655d504e1403ee105259e69eba4897ef8e0df335829dd78f89b

    SHA512

    d66860180fe5d33cf377fd710cfb1049ffb7db44e233875cc2f613f4765dc510ecf78c9e72047815ddcf50bd34714a8814ed155333d382fc143311959aca14fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5b52df24d28d95222db4d726c83b669

    SHA1

    6c87e7f54635e31938cd8e52ac6375084e17ef93

    SHA256

    8671cb4fc678ed31f1ed47dc2ebef61e87bc4a98f74e22eb0b05522506a4615b

    SHA512

    4b5922eea2afc54bad5d74a02a35b883d3cafd05033d92831af8b8806b9d3747376f99559752f0a2ee3fa6ea541a8b02656da03218151eebe2a80919c03a4848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c879654c2cc64a6e3b056d702d69a2fb

    SHA1

    37e5ae0229c1857e04d95f498f4d23a43f0163b1

    SHA256

    97660eec4b192127be9338222fa996a89f84c2a824df77de17a3f279015b65a6

    SHA512

    58e81ba25df5d319ac755ad56ac5bfbda1785eb11996b92aa07e96fe1d9c8eb1a28cae5b4581c1c3562609386d1f5253bd801808eaf6d18dbb6618017a2bf039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce6cf700169ef0420d9d46c6301d8688

    SHA1

    9a10d051805faf441fda2cef4aaad0dfafe48306

    SHA256

    dde421c7df329858dd930c19595fa1794d2f189799fca4e95515a3d484f1e05c

    SHA512

    a804382b72a2684b0523a450dd331f05fdf7d5d1cab3d0dcb13e4ec882ab5387949d8115e0f38aa5bc2e24d9b6a738a76e5d16c0cbe67b36513b4368e08c9286

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f46aef754e062a86446b30ef551a5090

    SHA1

    bd6c3c79727dfda15485e35f1a35e2ef73ea7cc1

    SHA256

    3ca7ef2377eedeb4d8db04548c54c170731f9bf26d4758fa4ef6064999c66022

    SHA512

    a88d023c8f93d81ed82a772184bfe91a6c29f1bb92162a8345a06871c7ced7d2cd86b9a09bfd2eb5ee349d31dd8b6a2ee482bf672a2dbdc663e1f7f0241c42b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2465e8ee6d8edc7f5967ab79aba08e6e

    SHA1

    fd42811627c8fca6b7548153e183393e5d16fc88

    SHA256

    015c73d9176ac37c320e7dd7e2e888b170ed165d97fe15dd85778b1f89166065

    SHA512

    e981c431690a2f9943443449bdc3acc2c1cf00ee57f0f5831f488bf9bc5b129934c930c80b728c63ff34617dc22f00e5e516c48841fba074180be228464cefd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2caa05da0dab8edfc9571836a08081cc

    SHA1

    d883806ae5a55d5cdc3e8fa8ffb509662c7759a0

    SHA256

    f60e7bbccee0c9b8a773e02682e846563c66561796fb76881c3d4eb44b585909

    SHA512

    3cc1a30e22ab2d4024adc912a09ab8d49a9de5414cfa3da294ae1d5cbd1bb93fe5d65393db1e983a69f69e7d837646af4a4a8c9a2d5ccbc7c6153a27997c9738

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a9cb7b14e04d9676d11ff22bef300a1

    SHA1

    0f54bded56cc3722811b2307d2d1b3c5e3601e45

    SHA256

    2d68152872d298a014f14d6864218d9b60812f0e18e4d4085222114cf5f375f6

    SHA512

    61a673264420878f763812edceac8fe29ae138957275ff0f96068b4d69aed562790431f8881c145cfe589d21d4c4ec924202c75465b3d0a4e8b16012a642ab20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    918d2e360f361bd64b42bd8079a9f0cb

    SHA1

    258b50dadf89d3be70e7010cc9e550590e16920f

    SHA256

    3525e4611ad0b494a2dad5ffd1ef33ed810396e50b0c13ec8e3796f11cf3a5e5

    SHA512

    0ce761c2cce0fc8186e25baea15689ba300398135d6297baff2046fe328a12ec24fde90f6343483563039328513fccbb1d354d43cedf54484553cc655c85b68c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d231721e43d1442cd0ebc0f6ad0351db

    SHA1

    c5d2bd594a058e136ace0dd72fc07a72a083f38a

    SHA256

    28ed44ec45d38f6848e4ed638e727194c9d6aeed0923fe0d4170677176cee3d0

    SHA512

    93f4282de6961cec5af16b1db38e4681cead88a7b8e2687c89a7555976196ee451faca471cc1643ca0d6b81dcaec7dd8e64d3cb7a4fbb91d999c2c80450a9a29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be2366ca50a2bb2538eafa831bb5d369

    SHA1

    352e2ca2207061d562e4dcf760241a48dde73944

    SHA256

    662599be89ab7e785d9b483634d6893a3a6333bf72c2445ccfd39b3947508a68

    SHA512

    7f2cf4b0a9442489e253f78e7efff68682e85f7285c877b4d44bc4e0c16898bfa62cef29b98c6a912a76311e579bd45ad995120b86c9bab30c673d1ca9762afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    100440a9fef0bd6ee107520317102543

    SHA1

    fc104aea4c44bfacff57a5d00d2bbc05477addb7

    SHA256

    f4de21e115db4f091224fabe44ad4608c498969f954a286a679dba893fcbc742

    SHA512

    a8781fd432dd8ef98274fae6bd23f3de95aa7dc2e85634cd501a65f27902c7059062d4ea9489e4bb527ad151d99958bd3250749df782546b842580cc89f40b09

  • C:\Users\Admin\AppData\Local\Temp\Cab2D2B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2D8C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a