Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 14:59

General

  • Target

    63b573caaf9c4f9583ff468e594ef2b8_JaffaCakes118.html

  • Size

    32KB

  • MD5

    63b573caaf9c4f9583ff468e594ef2b8

  • SHA1

    79d3f819aacfc5924dc736229fa37abe7f0aef09

  • SHA256

    9c1ae377dc61c95a3423026407a2ac6acd5ee7e64147f95a1fb2a64f8166e303

  • SHA512

    246c41e832f6b0a0469459e472fe34c13defa523340248b13fad2073915e302f5d3197176e7f98ddb88246970e31777fb0183b5ca007c36932aac82ea4f18f25

  • SSDEEP

    192:uWfBb5nxLnQjxn5Q/QnQieLNnynQOkEnt4OnQTbnpnQUMCwAGYLWPY6NJoky9t/q:+Q/X2m6P9NQt3jsOO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63b573caaf9c4f9583ff468e594ef2b8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2256 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e153988acf878b4b9ec1de1bd922c76e

    SHA1

    ec484d1b8dbeb89e5f0e028e82509f940b492437

    SHA256

    0eaa76f5d8fd49e63285756330163b844691d63c060ba5217a089ca6e7834fa1

    SHA512

    62662a5579c2c2f774fa5362850f41c7b030536697dce09436c2c8a703da05829fc0d81c475f30841873dd4754ef51de98e30b8b5fc0c6583bf68f738bfd479e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26f3e72470d3d4b7bb3c215e708d242a

    SHA1

    8d7974f5546b1d313197482c319212b21c97ba99

    SHA256

    76f5d5a11a093ab9a3ad762496cca78d4aa347d75e5527b59d21f2b6ecf0b757

    SHA512

    16dab7ee58874a646aebb6d79f8d3200b89da01a6e4564dacf683414d22a715da1628c4a304aa1faaa7b4945df2b3ecc5b1c3a7d9055fd6424cfba33c5cabfef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    792d404c3db50689bc240740b80aeb77

    SHA1

    53c4bd7eb8dc925a01c370e901a5cf066a14a83c

    SHA256

    434888aaa759cb17bcc7e463834088747517c91907a888fd9e1642b7e24cac0b

    SHA512

    0475226214de1c1b9fecc56617ed742b8693b6ae64f6d190bf605e3a3350d25fe7e288179027fa13092cd04648cad41f0e1b317d2d0965a1e807158fb424df97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35615bfdf2cc336f5326058fc8abb7eb

    SHA1

    9836972233c50e215a101175c64cb10d6cd05857

    SHA256

    87b03ba37274e412515b61e7fff79ab949363cbcb3a1d8fbcb5c54f11f4c6bd4

    SHA512

    453abab7aa66edf96aed1097b579266e111101f5052bc163e904293087d55f934d3451410b41b1c2a1dcb34e9fa6befd98c0bba1308b5f84ae9bb91cc8f2eaf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2c1c2c47cc6039e7a716b551427804d

    SHA1

    0404948a296712171d391a023b206fbff3ee42f7

    SHA256

    6a3c05efd7c1ea2ebe71e069d88d3991c1d6cd3b010fe22fd50f8352bb883eb1

    SHA512

    4b8c7d413e7a3077393e8a06dc2247503a5c542b709ac7f1bd9d6135e8b9d3d758f18cc6eb9465cfb67f74a2e01145cc53c53ad4c79c85984ca9282dd9c5c0ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0478644cdafc16018271c9ef08e986c

    SHA1

    1e60691280d2537af96d7b18d40fb111a2a63c38

    SHA256

    dff3ed8d9042cfab0df7a6612162033ebd008f71b42d661e0ecd8bc5f68383ff

    SHA512

    a88d113fc66b6ae56df39c3f2bb70b6f91e5f481466c29a6dd53ba7e672b8cbe942946f11dd77e82874bc161d2e5d9209e0fd59f4f28782778e14ba60ffe4bbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    150b84524019f8517769652c553ba4a6

    SHA1

    b13034f148cb11ff650959288fcf7c82f6face6a

    SHA256

    f1912bfd37d61d5cffd555a6a5e7a8c9d35248d81fee2d8480c2caca4de7af3a

    SHA512

    42c601a3e2a76cf6dac588bc72d3b3ca198fa3dddab14492912035f0e23f11cf8fad6066d93460565481001d093e6c9031e1348ec6f741733b1713ab75ccbab0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c29f89c1349b4da9aec6f3d3518a2ec

    SHA1

    9611d2b871d56f96c627d1c59f3cf89e19d90a62

    SHA256

    c9f39c4736e676b83968e127c74e76f4de267a34ddd7b0929006bfc7b36bd5b4

    SHA512

    37bac2c16bb3602cde7376bebe6cbeca69d82934108db021613ae22da48321509967fc19334f84079cf31382e3e0cfb61f934b71f42c49c30c650e4a444fabf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a070cd3d0be185cde9309c4d2761a20

    SHA1

    66e3ec3b01f944ba1887598b2fbaca2c8bb25b8c

    SHA256

    383ff717b2d32a5f73f93d7e95e3d3eaf5e21fbca992560db541f15247d46b85

    SHA512

    a80c08da220771ef80829f3437ad3b3271887125194b96c0c7fb6f875ad218ec82dbe3cb7a7ad7113b0ac84af836f74bfe34b1c16a38912f4be1e54b0efecd3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61134cda8ea436a7e33aeaeeb14c0f23

    SHA1

    32b7fe0a15182a441c6f4a01660aa495218645c1

    SHA256

    3190f5848722647b4dc31f0462410fa62c8e2ff129fa88fe94ec6478d5833add

    SHA512

    bb7bc100c5aa6755a29b941170f83882298dca73a107eb5bda0f031c5f4e57351f763bec402971a2871ae7abc48b2c25a1e80ea86c1177f350c0a38dcba55ced

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af9366b2584a11b8448f9430166c967a

    SHA1

    20bb6974987464dbd14d75e5bd65d517cd0cb997

    SHA256

    717c237d216e6e78692e5754f1ea52b93cb8724e24c8c940592e237d1b1317c2

    SHA512

    c53bf1027265234fb045c0b879dde8a21b0db382e5936cba1fb72515be4bac19bb49c0ad7f4b77bd5d58445f877fb98a748e3b0297ffe88fdf7c8f43ef7550b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6778d44a641aef2f352c64c7e2d06147

    SHA1

    f5c9f4384b773d112cc8aae4dd709403620645c7

    SHA256

    6ebec910f134e6ecca710f9e6e52e4e8312bec6bfe87492d289c20973e997b20

    SHA512

    80fba0e5d04de0f92a2f900430bd8ceadd01a114ae678b4ce0414bd34fcb6b539bc59304b5ad868e2eb0f4114bcf11351cecf3c90e01917fe0f31c9856685167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99db3d2dde8d8234d6ffe9899bdac46b

    SHA1

    0233202c6771841c879bba4efb5a4089398fe4f3

    SHA256

    18debfeef8f0c9b1c5c1220da45a1d312ebcfb89b489b1e9ab4156ee93ea8f2a

    SHA512

    6dfeba893bd2d4435305f8ad084f1dbb6b607dac2ec21296bc8b7772606ef22337a01db73dc461df37a11b050c05005ab3c3bf668fae777072fb85217c827c0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff39a77312246198c28037c6822330d1

    SHA1

    9d25d1aeeeb0efb162613d6bd1c28d0b11a37553

    SHA256

    a677e7683a86041d9d5ecf9313cef5cbdccdcf8592d5b7e7d2fd8d4a4529c901

    SHA512

    75705fba4ed398ca0d392ead5c210f22f43143a17ab3e3ffcc55e48e0ef7cc9263eba30ded6fd11237b8ffbb61c4d80f8df7e00e6398b934d97300b9d273172e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc39b7ce03e9d4a8a1de7a4c6aedc849

    SHA1

    8ccb80bdf690c28174cbcddee1bc6f0bdb0b71c4

    SHA256

    db1cf9f4d1a4cedf6903ef8aabca8964b7c74b0b20463739463e10fa27f2f62c

    SHA512

    f04e83776454960ee53572109a2dcfbac524c69001bb47404023a54ac45d2d62f46a4519d4e37bb4ab6d133dec277f08b72fb331fe3d74ccd29c02480cd35d8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa7fb03ae0c4bb14ea57496883387686

    SHA1

    083a8dc4873ade8a8b8d20bbe1e21285f90edfe5

    SHA256

    c4e7cb75bf80e1738f6274833403c0ad42498487f316c8a781f6fc3887897365

    SHA512

    b5be977fb0947950e799d1d7f03c173ffae2b704021f30d5774e4110d6601a7444ccebf915ee7792b84a1213e748f348baa93fc72af4e1b356326e5d3fca5822

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    555dded2a660e6f30910eac6a7833726

    SHA1

    98d7b79f8b4de90e4112ec97217dcd5120c2a2d7

    SHA256

    5d2753b0c4aaeb31507dccb2e0f60ff0d7ff1a0535a8b32ab1eb8140f014a1e5

    SHA512

    bbd59bb0bf1eb73502b90162b4c67b86614937892faf9dd611fa5f8e344911379b7e7d3ddff9f113c548b524f97552b8b7066eed2d29d68ded01296f273b0498

  • C:\Users\Admin\AppData\Local\Temp\Cab963A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9769.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a