Analysis

  • max time kernel
    142s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 20:17

General

  • Target

    60fe5e04efd5acfa3b074cc5a9c71b39_JaffaCakes118.html

  • Size

    218KB

  • MD5

    60fe5e04efd5acfa3b074cc5a9c71b39

  • SHA1

    92c8fcc60469dfb798409b2e8651a54b49842760

  • SHA256

    fd9828e8f15675dab8b88fd2e13c010d872665b10daba9b291bde92144c84e26

  • SHA512

    b508e040d75ad6b3d708acb52ab64571fe32ee879372da2e68ad3a5182ca2b9e8c7822eb39e5034a9df8a8edec6452e7db6229abc2347546991ccb2d0aef9ec0

  • SSDEEP

    3072:SADlBW7qKSeyfkMY+BES09JXAnyrZalI+YQ:SADXWg7sMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\60fe5e04efd5acfa3b074cc5a9c71b39_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f41a964313ad75994adca70ef6c563e

    SHA1

    38bb429bd33301399d323482081b6a1bcfa4a12b

    SHA256

    b167efa54d4b96d83c7db646b43ad5c804ca5d05cbe4bc80000fe0b4811d2eac

    SHA512

    af63590e0b3e2a59d5e3eff5c02dce05acc35ab3d8eae101951d0804efcfb5b0905ea2ec255655c5d237a011ac54430d5c88a87a5d593dfa449e74d8f02aaa01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7af5b40d2918059029e2f11debc22a13

    SHA1

    ab3df071de93cda4583e2befe740b8f3d706426b

    SHA256

    6c95b3ca017f7fae593ed266983d5100a3c520b2bf28487664816b31aad0d30b

    SHA512

    1c2fe4c9157c368c7f1bb5c8693e01436cc3ee929f4f8ab5c1cf6593b87c84c386c097c9e97969b122103c83d487b00c9b6b0424387586aeab26b43294f9c5bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ec2c645be46caf194ed7002af012622

    SHA1

    aec64927ac87d2d1e195a4c9ce1df6656f6d50ef

    SHA256

    32b0a7813718cf5013af0e363a147e3057cf9c9ab94654e377d5ba70bd769290

    SHA512

    781d7c52ccf17ab9fdd3a21c15194c148ba2250e0df33e42b9675aee2ec08185adf9d0bd03f159193f0b86331d6196f3d39ae6ae84c79a03beae0a7ac5f41263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc08525b5fc5895065a380810b8a8cf8

    SHA1

    998f369265900ba71dccfa96a169d4790eba8560

    SHA256

    f7afdcf4ea379161955ec67cee18671b6efd6ac4cef00f96aa271d718951dde3

    SHA512

    c8603a1963209a1b8a21ba84c2c935b15a490cb5874249b8aff969ec949e51b4f9fe39bf1aefafef4104d02cf5ef3e7c6a91121ddb86479146143473a6ca1583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09d515d4fcc1c34ea45cdec18b73e844

    SHA1

    ac2fcc3398f456c387f44e88b5b6fd02bbb7fd52

    SHA256

    7b2c01880671fd5d75d9610bb14b2f1d66cd9ca8e40659e0ab2b66a0a9c7b941

    SHA512

    8846b21ed03bf52fb825a6aa95e13ae4494a1b18acbf9fc342060124391feb8de75f258286ebf7d2e344891d2256d69e2ecbb13ef11ea1fa8f12c27a3e170d38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3442d033f41ac1149ec8fa303868cf6

    SHA1

    cc6ecce5b0fc9738ed24ad938177ef9a145dc1d5

    SHA256

    d15ade777ceff5cbba8d016eeaa66eeb63c6bded57150df4f2a86925c28e9c25

    SHA512

    14c0e09520942fccf3b85b99f85a38a0a90f33a52ad519fa0ae340c64befa0faddc57196be4d81e2516c7e474091107434ad37756310bfff401cce797850fa2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9734c5168d3f62f6a7a747eeb19be7c5

    SHA1

    26714a257bcb6d728bb955e57268d9b7fff843a4

    SHA256

    524db2e7c694795ecaef22435572c03ab260562aa7f718723819648dac0513f6

    SHA512

    f31667b280b682df807279a3eed7478b4660740b7d31f93c54f942fdd94cf70cff0c99c3ad59d28a64acdc4abd2a4d4525e50b283496042aeecd3d3258a2fe9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be99336efbe56f5c9e1d0cd27287f02f

    SHA1

    426c636ebd763c6f4f6bbbc9bc6c5d48c554a438

    SHA256

    1e6fbb89bad9989c76dbca6b0f63dd2f5c982717a3f75ef13f19975abf484ea9

    SHA512

    e0db178ae691c78653e9fd97f24e7212baf94de2ea5218967f291688bfaacec1fa182d5f1c97510d1d6fcae1161262f891dcc8e4072491dbf21edc223aacf231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e927d983b03b6a39f9dbb28c6a7e329

    SHA1

    80cfb6a0584dcedeb6da21614f372405b11c57b3

    SHA256

    2e8512a7a068f7f87032f2bc5b1b11f17836bd8dcc534366e5edf21cef7edadf

    SHA512

    87e23747f98a1f621f3b38f2e8376a05ff6041dc3f83be1c3425e9e305bdf7b10beecb9228199bd987547a246d669d35ab658f845dfe788c64579a10a5fcdf76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9492bae47467e42ac86d3f7e87c1c1ae

    SHA1

    9dbbccb5533dadd75c9279607d901a04529164ad

    SHA256

    0ec5307857b0cdb24dcff46705488e595016f7041ca25b3c266907f15b2f7e3f

    SHA512

    f7896361abf437309d7d07a6877276f1e1b748b51c84cb8f5212cdb3b6bd653553c8fd8b692cf072f3f0637caccc63bc0520fe9308bb6749f987e5b1a120c605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ee58eb92f3482b89eae00ddf251c97e

    SHA1

    7c323cd0988a78d660b044066f30d64f0f1b3f02

    SHA256

    44632e1880f871115f55e1390563e961e85d0abcd0182140ca42c57815df6504

    SHA512

    64796ab27f7d83a25c6edf6e0399357b9787b8f68696cb89a3c14f324ca7db22889675f9686d44280ae9cc05d9f4f5ee3940d97390d89aaaac45fd8e1ef1c1b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcb043fb0c2ed9c1a2b0eb1dd56e8f37

    SHA1

    b4174f92c250abf06fec3f6d09ee63c30035174e

    SHA256

    546b55126ad64f559537a58ae908a5398c342c47ef29e6f9b76310a30d0d80e7

    SHA512

    8abcd514c3dc4519c0fc696830e7a6dde3bab2acd7343be9644cd7e61dcdb10a892d56d5cc418cba19ac76aeebd6a0f52dcee28fe7f71a4c44e9a42ccde3a521

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    807512a3d8dca1aca244cd6b8b60ab58

    SHA1

    b2bef3af7e94e9f94271cf93436cd8af9254f175

    SHA256

    4c2244a53579bdf15ba8a306c7ec660e4eb20cd04c45fad9967c36648daa9577

    SHA512

    59e31a5792cc148b044212a79555e9ca5c1f22ea9d898e5b699738dbe687c9795bfd55380caee6d09e28a522a7216765c50e9e3d2bb58d9e7db5e9673c40e702

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    306e30252598aa2d84858de2f6268b30

    SHA1

    19bdeb9569b5190289ffff76d8249da1d7fc672a

    SHA256

    5f45e446e31f6a56da3409e2cd1e90493a39003c25f94b6d82ec79436dabcd11

    SHA512

    35d44339bf03fddf60047499b26f8c70eac601980f3598ed2dd43326466e78f760b61c04934ca3c2d3036938cd9bb82c47f128349d38911ebaab7800f206fd1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c12424797f9829fba7ec94b9515eeb0

    SHA1

    834570ed90f8d1d15bb170217141c4c9bffbd8d4

    SHA256

    982c92b911fdb4f6edc1ae5e1c8682ca8cd5561784a732072ca528033707b7ad

    SHA512

    e66acdee60976ec56428478e5f37207bb6b52b16c354525180db5a8352069cee3d6a92c82340c125072b2a2946efbde459efb47f2c5ff48706d7aa0c8621413a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    084314b189e4b592ac71b6ac5dcc350e

    SHA1

    b21d788e25893dc770848106b3b6dbf05fba1187

    SHA256

    ded2a26fde5e61d830d28d16caa35710767004f19ecf7f6e3848ba670a8c8994

    SHA512

    cdcd15242fdc278bcb3ebaa7f7cad68607a59e78f3db87bfecb8b72b69360c2be3f7482b13ccddf29b7c642030c27436b63cb8245939311124ae1b686ab26696

  • C:\Users\Admin\AppData\Local\Temp\Cab1400.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1510.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a