Analysis

  • max time kernel
    136s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 15:04

General

  • Target

    63b83966bd88969e1252f367f9a3ebb5_JaffaCakes118.html

  • Size

    214KB

  • MD5

    63b83966bd88969e1252f367f9a3ebb5

  • SHA1

    b3f9cf2d98def4f092427fd0b9c5dbc28fb08788

  • SHA256

    5c8cd6ecb01c064ed5c7c055d58a36af6058e707a3f9ac1508de7e995c7fb80d

  • SHA512

    1050563f63e4d8cd463c8d62bdaa99f087297617d78c95150a74494e611633c69cf3ebf1334b49d0f0eea46efb4336b6afee02d6ae4daea410e2070667beff5f

  • SSDEEP

    3072:qrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJe:iz9VxLY7iAVLTBQJle

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63b83966bd88969e1252f367f9a3ebb5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e891d4fb9af080e6682359807767398

    SHA1

    3991e3761efd27bec8646a585cc88653eff5a3fb

    SHA256

    4cd748fe6cbbdb2a88bec711e74efe0d3e20ef0d3537359ab2677c6632b3452c

    SHA512

    becc680e93d34f026d0718eb80967c96ec822b349d1b125a38c250008370a4d2f281a078af160544855226431f3406f784f96c8b12c80c5d019f606791751f3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d63462dac6d873fca430aa409953158

    SHA1

    48cb130dc2ef3fc0f6517fd4580abec8060eb825

    SHA256

    7f4aef5368ba520a9528f505dcbc3a15085fc61d3755f23982316bf6431c0c8b

    SHA512

    99ccc0b90ce1d5b7564543daa889819381e803493722c251b4852c73f048bddc07629d53538414e22677a37d4a411c05d517f506d6ec0d0e285245c201b5666e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08c6b76b90acf7cc3f4ff9d466abd913

    SHA1

    d6a78480210c54b4e7aa4b06761feeeb9362803d

    SHA256

    6317d1a84e4615e2ca01dbdd43d29f18ab12dce743544bdd80d02dffbc6895b4

    SHA512

    5e59e20cae7e2cb25768a7b1c6c10ef7650c5ea7de298c46f10d1dbe6c8fdf27efc2db8e2a1f155d1ccc08d8b369afdcf5e3bcdc7cb106400772f1ecd1a40cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae71df340bb205ef0347887633fc5dbd

    SHA1

    03fd79c4576f3a90cca9772ebbffa672be159d51

    SHA256

    bbe3d0ccc6fe45e607a0d732c88589266559adf794456df5763ae1e02aa2c6cf

    SHA512

    a426c28155dd24f6bc1d1ce5a0527edbd4ca414f53a551167371144a91a65edf5ef637b428e53cc43be5bcc712e068261ded5624216cdb01b55af8c10950e449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4669a56009e5d8961f96504cc5d6834e

    SHA1

    0b18d43645e639b2f565e3e0ba506ed8b788b8c3

    SHA256

    ddfed90d77356089c51f215693e7fb526e734b14f726dd30226824d85c19045f

    SHA512

    d144ba2bb4f85c4b892de2b4a36aac93eb85db549b5c03fcbd844a5f007d314b4256dbfb6ab8e16e1a797e264cc6fa6df56235d6a02cb1aea467dca11a7270c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c0373c928f448550431298962231849

    SHA1

    6e6217fb62cccac13ce92289c8b8af481b59de4b

    SHA256

    41f6c7f453c688b08c4639218cfd30bc891929ceed0541120c1374912b68d515

    SHA512

    22853cec2348f992fd5ed9aab136380309c21f2bd0e951dba548a0c0301e49c2fc89dd8a4c760621cc6bd0ab7ed46e5968192f21165dff0e0246f082d2755274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3e6bada22e3c0dd0ae7c864bc8d588e

    SHA1

    1c64d6d13e8c1d680f4092a7a5d00f36bdcaeb61

    SHA256

    9289359c343222bcf7159066323f9115b0780f5dae4fdb931c72618afa6ff312

    SHA512

    828f0c395ab95f349de712b75d439e959b68b96f102275f34a279558f0834b712020de1c018d72b248d44657b7e7793a407db00a9cb4e6f442460d36e8887197

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1a1def9f35d0487fc1bc9babd37f00a

    SHA1

    2b3afd32cf5c1f52f5c1940e193f49e75da41915

    SHA256

    e7e5ead45c222a2bbf73a01cf733486c1ea0efd434cc9e5463be785381d085fa

    SHA512

    03566597f06db6ccd83b67628a409d788183c1c6a36b06a2c3254cc9b52175d923a835959ebf06231e9f7b76091aed2b884e9288e3d663db89a4bf253e56779e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29864b8cdd39dd149d0ebe41c8fa8c90

    SHA1

    a4361d52d67114fa9088d41a11f9e9cc2797ba83

    SHA256

    872ee35c871f7b483cf267b3313f981dcf3b91f5df055c677f83a05760caa90d

    SHA512

    60898ffde1a04771fbf2cc2f4ff194fee759557f3a73fb676fee84be54069610a57ba3d6f4dd1d69c762f1a2dab6711090d35bceb99ac71a421e902c23ce7fb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15da29af5db8df259412a128da4b11d5

    SHA1

    b6f1e5ea812d62e4f90967d15d5e649973e98f15

    SHA256

    82b16ef9f571aa53b1541fe7606a942f41a1e2ac98d2990c57fb47fe2500c51e

    SHA512

    5a50f8a239b8863cf4493c6c9969e272a5104e81b073b69027749dde2a0047325a78772fcfb40dbdd39e98455268101c26e19bcc00c04ea98da309ca2c81cbcd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae3f7232ab738790d6a9e28d6139b2a4

    SHA1

    75c5aca49d4fdb55898daabd9db69571623445fc

    SHA256

    ccb85c968511d0b03b44b993a4d8fc76d0c71a5b8408e2cdb7f19d682df680bb

    SHA512

    6dda214ce81e693152c26ba8f9b189d6a4ef0755fc44b6d7aeeafde72187215d84d998a1d23f3f85153388f6e124c3aa6ea1163edcd1fa715557ddc86527902a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbdb2cc95f4138d38a9375c79b85a5cf

    SHA1

    7811ac413990dd7b85414c9e0f5efe460ceb83dc

    SHA256

    34422ce6b5feea5b129c2a2c5c3e8ef028806c4d5501691eda76e8422d1fbf14

    SHA512

    d2c36169994a0589e2ab4a7b2c00ca38502ca87510d3ebee9ad6f074191040ed6d0a750135b9ebc5c868ba6aa9e3fc0e800e4efe2a3a85bb0114831cab762236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ded67c800a0e5d6c4cfeb937c61cc09b

    SHA1

    fadf97c97807bee9c00c5c57f3ab17097142b088

    SHA256

    65225eb168df692bd1209a4610131d682aa44f9ea28b522d55bf3e6448f100c1

    SHA512

    de89c8650ab7f89b34036ba9da97b2028c7aba92f3d1ee29714a2e9fe5a8f9eb860a6572a6cbc2b22ae1ee66368335627260ba02cdb8289a6018efb77f910e62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50802835815c0cc214162fd92e1b83cc

    SHA1

    aa87fa9d28c4cf6ef562d39e9c98edb940c3c618

    SHA256

    fc42ae2a6ba19ac7f71069ee854455eac240c279ffa4bab25fe1861a8f600dbb

    SHA512

    eeb85c3190ac83d5818434001901a581b5715e134b27bde3791c71cd3853f20a3e54e4be14b806787a55a2cb2b6fbf59b80d87d3d7886a3bbbb99ffbc91cb06e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c3d59a27896ea040a78bcfc07bf8d9c

    SHA1

    3c622924ba999c4fb007a492015b783dfbe69763

    SHA256

    346e7d102165a92a3668136b73da77ce235c7d5091a10231e68804b0e953651b

    SHA512

    bf194f65b1d286ae8b066a7568a0cdc4c12c37f0dc71228a2a3521bd3a1cf793603d89656e622930b5c646fdfa3c93e9543c36cb7c97d95c8bbed299a66e41a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c773ea4e1d53f38bc7cdc2008fd08a2d

    SHA1

    9dcdbeb62141af0162b485b90c900084d06a52a6

    SHA256

    db58f5a4be7c8ca0918919649a4f4537704f56cbc2fbbe3911f7abf88859d06c

    SHA512

    d0d061ec55a677810f2ec9e50e0cfbbd3633250e808796c2cb2f510024e6b34b1b424f1eab7137ee4d4d24adcc2e817ce87724c13fda954b4bf19cc6bc459fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f3604497c9f2141c660154d98090958

    SHA1

    9cfd0ca03d868c42f88a4186130a7a58a3bfba62

    SHA256

    df832e4c25b1ecc375ee867e951b7e92c8b06597d618d2e825561f22027f05ad

    SHA512

    a1f2c792d5cd27517fa8e88cceb82773c79bafa2e5e591556eae9d049187d7df25021c446393a54e6b8c6568ceb3b7b047536d4c9c693340e40fc3ffc34bee51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6fa07272b59d135a6fc19a5d8ab0213

    SHA1

    7823a59360da61b3a4a83a26c8b993d948711ae9

    SHA256

    c8ed3bead9059ec76c5576bde5d5e0c8703bf08bed24d052e6330ed2f5382f99

    SHA512

    10cf0396047139445bfd43203f20b7ce2179839d07d907b78d43704666df86d11262449363ef5db2a91f29962389734793b529d88bf5fd0ac61c4d78d382c317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51663c27875cfe52b5e9515115676656

    SHA1

    db9a11d34807b3099fa19435a0dced44e367dcba

    SHA256

    2f141541b89c7d7b825e06423195c7cdff4ea0011a86041b232f6fd8653680ae

    SHA512

    4e66d9e91e43b0cdadec970f247cc65cf90c0dae5895e79ffa60d21b0cecb0d78b2c481a5f766080dcee08cc9a985df8997ce594f0b425149d0dc5af54120872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12b93de4c327424f3662444c40c3335f

    SHA1

    a42f531f491d886c2ee11c485030d1ce214746f0

    SHA256

    6217e1f830d33ba15777748aca9f57e8a1601729564f408836d1b2fdf38c62a8

    SHA512

    14f6d5c356d3180e34aa9df7709cfb78409daea5f0d7cd2d4190459639ea1a1f91d65e8b9af69dd527b0a6287dd3fa7755cd0e3999a65d08127bbb3cc264ef7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4054a1918465640e07cecdc550841af

    SHA1

    a4d7bc039f96ea4a3ed66cac9216a4d8f2755eef

    SHA256

    4f9aaf7d4e4c977137e3a65883df0a8a40e545abb42aa460cfdd15c8405003c4

    SHA512

    f994414211d7674cd2a2e210d63b7019d0c9d5b56c5382b7d0d275366431594e698f48c52e2f90df921c3d440fec69704eab43ad3b0937c8f0bf5f1697bd41e6

  • C:\Users\Admin\AppData\Local\Temp\Cab76D5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab7801.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar78A2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a