Analysis

  • max time kernel
    134s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 14:34

General

  • Target

    63a263351e3152a9d6090992baab6c66_JaffaCakes118.html

  • Size

    213KB

  • MD5

    63a263351e3152a9d6090992baab6c66

  • SHA1

    7982f49b92e92f9a900be9eb2eaa8c7b7f5b25b2

  • SHA256

    eb629d5ea408f0401ec04b1ae90e774ec5968cb8d3fba8bc428afa3b97696a52

  • SHA512

    d4439d7b1506574fa5932a9181587da8de7e14d585d4fed4a4515a4349c1ddea596c59e64efa1b361a735e040243c4d88f4b6a76c614159b74cde1ca04a62f0a

  • SSDEEP

    3072:SiDodURlCJNyfkMY+BES09JXAnyrZalI+YQ:SidmYsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63a263351e3152a9d6090992baab6c66_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0162c7cb8134d6a855285d5a7ef5ecf7

    SHA1

    b4c9c88807615131c88491be879b58bd75cdb4d6

    SHA256

    f1c487be843fa1f885ccf1802081fdf8cda04ad0cfae5c47ed25af74a68a309a

    SHA512

    e8be126cfcd2b1562cce036e1c7ca11c893eb92804235286e1da9691daefca7de256437d99b42394c2a52921dd0e4a0184688017e1e9079c0635c3b2d399f17e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26963453d6ba3f81acf49cc6ba31d50a

    SHA1

    77b570691e430d322e34b3e79f25b7d6558ed016

    SHA256

    9ab369550e1fe60375c7d79bfa45d20da12a12bcb8e786379a6d632fef0a9795

    SHA512

    10c1a14663f161affea36d616daef3a8ec38482828df45c23e0f0b48a0bf8f24a26d12dea78152272b7c8ad8f4fde2c7289b506fd5157d4b2e36bf1f58dc218a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b4d4a5ce1a495ff897df15e1bf90a64

    SHA1

    30741c706d00dbb210a06a510b0d5d82bffbe432

    SHA256

    608c0e95ae61dcf65f8408e4a1b6d3d1f5148f73bc9402b07b7c58820fad55c6

    SHA512

    19a87cf51a8d96810143cadd1d1caaa9ab486a6a597f7d5ed576b6d73a0fa131020450569c274529bc618979a42bacccf1ea033ea385d98f30b2ce5a5fd79ae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    871a0f63369afe5e2364c42b1a368d2e

    SHA1

    1ad3bd79e441a9a1f065eef7657d4c007189ff54

    SHA256

    fe4c00d58777f9a1d423d85f7ffb7fe3e2b1ea5ca7902eb998f57726fc4e8167

    SHA512

    bdc1512ec2ba2fe7cf2e1c10676f74506161944b6de66cc3ebd28e8e6c3498bfc08fff8521beac41b3c062e3e7a4bcebc9cfc49c89a630d3130a1e66bc527115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96b4972bc34f90556385a3044a271a0c

    SHA1

    1fda4d4354135438275fe2e33673179add37d1a9

    SHA256

    5e795511ae9080061592b28bbe10d4e67cd4a7cf913b3aa1bcc3ebe4d6adadbb

    SHA512

    779173d71ffd0bdd894e3a00e7bff9662924306cf55d49f0cd3601758208dbbbbbdbc6542ec679dc19508f00b791654d2f02755019681f1eb8547452715013e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31014e3e8e32eca2cf82a20fd0a5c1d7

    SHA1

    e7535d5cbe826a20d17b984ff71ff5af5cbf3a96

    SHA256

    d281a37341ef31b2eb9f2cebe9d7eddebc96f2a0d56fbbdefbe889fa3c21c14b

    SHA512

    66a8ea65333256d6f2818e376b0f4efadb0e9979b68ac86aa1f2c20a3a0230f6d4207dd3a5b2647ed46b34a1399b7f6373296176df15c6879218514904654115

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    906ce251109629d9fd2cd54756bc456c

    SHA1

    0a5c542249fbaaf73fda719a02387c3946526c87

    SHA256

    d97b9cd5c2d13863d9599cfa73b3c4554d8ca1fc1e4709e6cf2ee756cd24af6a

    SHA512

    143f6e7b62fdca7aca93dfeaa0e24fc9e612c64a32272cad8676a2f553d107f12dd5023e63f809f9557edaa20d6a88126502497f4ed941ece5c363406062bddb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3b99c9ffb8e11ea71f68b642739102f

    SHA1

    4547529ef7b8b27a3d23bacddd717dfd375f78aa

    SHA256

    2468a51609041ab408cbd20b778e9dff64c78c319fc935c66dcd729fedb1d2eb

    SHA512

    a730abcbbcd755c06e93835f7e3f20b3281970201f9c08bde9fb3b280b0cee8dca026b5a8390690a12c271d6d533bb6a8ac1a780bd3acd6aa5a205256e6df65c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb5ec5259c89bd9c3338a944a6dd6433

    SHA1

    c1a2cee2fdc47f7647e2b790df59c469f9e18b4b

    SHA256

    228f5fd9116980e86991427d4865d4fb00d42b281db96702f483e3795b350bad

    SHA512

    69e841b28bf10f42bdf4b0f8e0cccc37e72d2a1d72e6d9040a2bea1f1220cd05269fb79d63c12abef25eb65078118d1ff946c0478a326016e4826a1fc8076aec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7b7bbbf16b25e49814ab00d92d734f9

    SHA1

    3001a870244cedc3c8b0c25c16b42fbcc6410ae8

    SHA256

    5fc21b0aedadf684bdc4c4ed3464e6fb1e8c3d03acf7a692184be0db552b7177

    SHA512

    d954ddd5f5d242c4cef8493250b3b66fe3354c6fbb51392ee26ee7c2e106b901f5b2fbfa11ebe130da1b2364fcebd4c8837599fa7a4b85d33f8db95fd6ea79eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb7fb40666e7b9a349cdac63b1aee548

    SHA1

    b2e429cb63f98c57dd9a990de7ac5f63cf9eeafd

    SHA256

    7719b8c5fe4826507f56fb6e70c523f1db69ad378f4e82336f9e548799b346e3

    SHA512

    fd6e6ca3a4ee209b5f8d6690d7729e640c894a2c8fe9de506a4621fa6df30d0db3d3429d27bae560399b25f41926c0a37f3fc00f1cafaf05b5e1e782ad16d283

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4a956fc7b68252676d2a004950cb5b7

    SHA1

    1aaaa6ba38731f9db03f2ae8118167b0d8a995be

    SHA256

    400d34be18ae8d3bc599faad7086b323260cd6068e0a395c5684ff5232c6e36d

    SHA512

    5d6c7c5c0813086e6c97ce9766f91055598000a30a84b70f3e72df0b14f35981a1dd20cdc0998a7814fc9f1c0e35b4e3f91c2548328a023d04eb009428fc454b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0748c2ea2ddd29c06e584069a6c287e4

    SHA1

    2217293b29f2e2b70c1932713755ed38a1a0c3bf

    SHA256

    61ec0cb90267e59eba64c9ecc25e867774aa2bbeb9f26b43ea982ecc67a8e2a3

    SHA512

    89f825e413481143c101cdc14c37a751cadc0d531b089c547d9a19d1dc8ff49a75a43e272b45aaacab7697a2f16bdcddec52d98da25c0cca43b54f1263dd8151

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ce93512a3be57c8def2559b83602bee

    SHA1

    423f2821f8f2fb00f9f78deb756a8791ec525a1d

    SHA256

    5444413b56c56e2d166b4fbbfed3921acb7cc3df504050b014fc556cfd5a78de

    SHA512

    1569fc7bcfda0489fb28e4886a99b444a038ec27718fb39551d387b163d46187b3e4705abc4a0c77edfb8ec9cb28e656748b07aee03a11dea68484e56060a817

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97d5207df26083be23594c95743bc6ea

    SHA1

    dd817d51cb099c3e04c28e31ad48bafed230f6ab

    SHA256

    6fc047a9f512a24ecf6cab55da8d30fc267b5bbed9e4effbc3d2cbe790461801

    SHA512

    5d94c6a24d1bf3673ef300df6c656a2528d67701b7b5eda4c1f7ae61ba79a3bc94dfd4f1803c23fa52119a6facf46c8e62465833a5a0eb3eb8fd427de3dc1a60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e25bb6c216a604b10b500ca664eab600

    SHA1

    fa46e6c6fb6ee267badadc428d55a5285328883c

    SHA256

    49495d0bda2b2173241d57b2ae3a279ef27130ff1e5b569ea76b5f44377ad46b

    SHA512

    e60625a05bb0b93fad62ac0253f84d1259e690f2066b0ee351b43a6c456d656d4c198ccf3fae018bea8cb23f69184ae6f05f0168dee77ecb9e106ca404e7aebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1c5c01cbea07710f8dc5083876e4909

    SHA1

    916c0e143fc50c5c77880c21292a5864125f7a50

    SHA256

    72f0e71521d5857409bded3b2afd19c32342a7541cc3c65c8664b722d400c6ca

    SHA512

    3575fb1f9236ffa69c031fa8ffecb34c367309ed2ce9b05de75efcc00bead00d69c761300d65e1e6cf3e42f817cc5291f18883ca5bb295aacb62033475c2d8e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    143d270c638007f3939a8b7df3db1675

    SHA1

    2e493c6d16cfd7ea83968021992f33b674a7095c

    SHA256

    e3350de8c448ac096e3175115d4090b58d68a25f6b74ce06b089bae6cd3ac029

    SHA512

    8ce3949306538c0628121c6aeb853a0dafaa12eec94f970d548565f981bb07c9d8458a419c70cf9d3c6ede788c4c4118f5ce0bc062066e0c6fb40692e5481c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d402ebca1dc8bf427b7ed0a201613228

    SHA1

    1fd82656f4ae8fc8ef0753f5222f32de397f65f9

    SHA256

    3cffa31ecf53a957a105edafdd65a35705e81e235b0a002e07b9150fc0b6154a

    SHA512

    3343bf7408dd96c92b9bff9d5352ddace3f128fdc2b60cca05e4510b98cdfa06978c74e28d4ffb78652af2f8e87ba0e9185200acc199a821efa854ea40cb67f1

  • C:\Users\Admin\AppData\Local\Temp\Cab211A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar21FB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a