Analysis

  • max time kernel
    136s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 20:57

General

  • Target

    64be74c2aa67c02014e808dbc1390c1b_JaffaCakes118.html

  • Size

    461KB

  • MD5

    64be74c2aa67c02014e808dbc1390c1b

  • SHA1

    4a7242d5dace2abc2e8f9680d0aa393f4ba2f884

  • SHA256

    3ded1efb9938960a2d4e7f91a763d1e1b222f995b8491889ae6fc953287216e7

  • SHA512

    7f2d4f2ac53d62e26d1327e08a5608aa7284cd4bc685987c71027858783b36843d72c2316731cca7e92701a5047d28939e75ba2d191ae806e31908439aebd65e

  • SSDEEP

    6144:S5sMYod+X3oI+YiwBTsMYod+X3oI+YUsMYod+X3oI+YLsMYod+X3oI+YQ:c5d+X38a5d+X3I5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64be74c2aa67c02014e808dbc1390c1b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1064

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    98495a617b039c740c71c9507b75647d

    SHA1

    6b97002267bb93f1b84a8f0fecc6457836740eac

    SHA256

    a85d5e105fc74c0ce0c62bdc9b2d8d78b9cfe03f0eb4634eadc297863f5cde5a

    SHA512

    f01213a235a58306deb550e34238a5b59218e231c7d3bd6eab5e308edc4b4564a0c393d5e8390eb38462bf7a97b3b019cf958446e5711562877e41e49eb6962d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    f91d6107950a83fcb3728ff439efb66c

    SHA1

    cf18c826d5885203a6de780415c44f223dbd4702

    SHA256

    5dc97cc6f47eed3d3961d056d3b476970c939b4fc3eb311b5531e8f467722066

    SHA512

    0e9dc4c849b66fa78ff7869a44171d63d62445519a76939c84abf3cab401cf06bbf6d70dc2ddc2db01a62aa0cffddcd5d714f5f790f2812b3fcc2f4dd2e1bf35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    0ff9bfdb3261fff84df612bec5bf2738

    SHA1

    21cc56583ab87eafe77bc77f2f7de7b716b260a4

    SHA256

    ec07f2521a845290dc4e08e05a03be1a3e7bd00c9cdb05d05e932ec0a6627c22

    SHA512

    9c914b4383912bb19c975d2b14ffde643fba0b6594a76185145aa1fb315613f92b134be2d1cdb839f64bb3556e7767c2354bf4bb7d648afda23272ff98700304

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    c6605cc0ec6a887d38ce87d6d721fc1f

    SHA1

    aaf3c1a682e7c5a9e2ee1e52a7a5bce717d57cc4

    SHA256

    b82062e335a721bb9605a776331e834fc1b0e69d3d81108f5ff641ad9daa3902

    SHA512

    35c307e79ad4330636ad5c6e8b481122d06dbf57bdbe7c7eacaaf9f92aa14251589203e0c0006c25ff9bafcaef2e66dbee4ba46ba8085057423a4c7c3025a71a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    fbf10d1825beff910448b6b2e857be61

    SHA1

    1075c6a335f66497a158307da07164b14b3ecad2

    SHA256

    30b8f6b2a11939eed7d4a6f317c2a65aecd6e9033a76b81cc41551dee6b3e777

    SHA512

    fba37064cee5416ecb7af60a038f713a5fcb31de8f1cfbb7fb40031884ec0a6ae8e7ec4572388790665f68c9fa083df7c70bb21ffc0dd2df53bc96fc48a4f93d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    9a8e0d77e67611c6a0557531dba6a944

    SHA1

    c7bfa7675debfd6cd50d154e65208fede152cbb7

    SHA256

    20abccdb9ec4def19cb98ab1a1ab8223ebea398ae53280f26710ff623592cd48

    SHA512

    31eae0098435ee9b8188a9e5d0001c1c1964616dbcab76db4808c6c46458cc6c3395410199d4c4036014bf54b26aa816cc1e81e119b82cd60668d07c58918264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    9e9798ce6665e21c907d07c0af2a973d

    SHA1

    149db16332967fb8c87a7f09f3785c2f0424b77a

    SHA256

    ffb8ccefdfc02915ec9c9afbcf68ce74b93e4bc1ffcf6160a8748efb875b02b1

    SHA512

    54057d3507800c93f1ca8d33873ec19c7085658ba3719ce921f6356a09f35c2b3744a222f80548a27b8087e6064c473d2ce8c858a8a4b5bdf3888fe6c92ab0a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    7d2724d7fb076bd5b92799f71316e650

    SHA1

    4ad2f9af1da13ebf3f4d2f251a7326f9cd5365bb

    SHA256

    02c6cb573b948fb8f712fe23580e069b02f711caf2fbec1387efa9e64c88bf84

    SHA512

    6810814f23e466d2ad54cd1d3faed5661316a9b77ac902c454473d59a46023d8b79908b44813e6c9d56ee6cdc2ca9fc87ab3c294a0a790ed390dd3875caff5fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    07e686112dafbf0ecc582239333cefd9

    SHA1

    f0aadf5405c10743b51ccfd614ecc89bbd1b87f7

    SHA256

    366724c063590bb863e39183617f67fda6e4a8c68f369a45ced2e6bc17d32f3b

    SHA512

    be7d605b4286a8d38f877dd44d373978aad0f0ed4d0576763d580dca368f48dfaacf075ce878054b3c0a8c72ae47328c956e3869f20c36c9a9057e981b5465ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    0e62a41277e0fa7936ed7709f241f248

    SHA1

    6d909e7e80cfc71e43fcdf32c0e877c8498b601f

    SHA256

    71502dee835d3b345907e07a9a2839a9b6585b9b67dd7f892110a806eed99e36

    SHA512

    bb13257bf2906f1e7405b3ab64decee3571e84c35380a83d5d60edd4b332bf9107fe32ef4716e4ad9b8fde94ff5ba95e78b1ae3dea14eb9df77313ca236653b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    5e85e1ec957608a3d40c32cecb2ae8cd

    SHA1

    92641fa96e9c78d32c149f12d4c1b57876ca8c0f

    SHA256

    4879ef9104c03bcbeabece8d9ae7d1f95bae0d062c01faac22c1e813ade77792

    SHA512

    a57200fb9b2ced0209d7c2e5ce720bd93e15274418ef16dc07b86bcef2dc21833a339149052622484df0e7f0492886e97e066f7307ba59caa33efc233bf3c5b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    af5d2be4de106e1a6c7f120ea20375e6

    SHA1

    44a51af32dc80e22a1d50b936a6e3f37795e285e

    SHA256

    33e1cfb888fd41848a4f0a253b2af4af2687f9b1bd802e73d05043aa5f38ac72

    SHA512

    fa69110b098edd425b52b01e339d84345eac33ce506669c8fa8c5f3e2779af24126ec6776adb7542d475203047d4c07941b8d646da3b66da9b335c4f24c69e60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    7d36c65b1bf9c6e32a1039e243c419cf

    SHA1

    5417550818724741410b08f624c5772c9623d5d4

    SHA256

    74dd01eec159cc7a0a6f9302bccc3ed4e630f8482a7048c229c3a7a45db8f261

    SHA512

    7987e8fd5bdd1074bc756984fa03fc35f64f0f6f3e92efe6ab5fc3849172fbfd0d760045708f477b8358ffe41a0d5c91c069a3c7f9f0866e75b4a9d46e784ee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    1a468c8756b388ec670cfb51bf132b75

    SHA1

    14769eb97d289c306842c724946098165b9358a0

    SHA256

    d593ece4119ecd9f27cf4a8cb2ae94d5afa31456c8c70255a96e29de2cf9794c

    SHA512

    122bd3f54bbca1dad5a55000d09bdc1a32599a27f5339cc8d815e6e904dc81f0ae5a37893187438315c7a1cb011dcc870b3ed1fefdb7c5756035375f80376891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    3fce68af2dc76baafc80fc84599f95a8

    SHA1

    f56156bf500705819b0031d04b4ad2b285c2ad7c

    SHA256

    f572e18ff4c321407d34ba335232b5f75446791f176b133b3a2ff8be0a57aa69

    SHA512

    0a529e593d96136bdced19dc884cf1b9da15905e3ea8d008bef116b87b39cc1eec5d8b245434725691106d2eb7789db16ec4d896e54c981e9faab7919135d8ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    90962f575da23c6757129f7f284873b0

    SHA1

    0f138740f1a6486d03c6f9875b45dee31c952725

    SHA256

    ade7c5946e5e593697434eea0c831a0da71970c4ef40ff3bfcdaa1e0a0067fb2

    SHA512

    d5cc85ca4d7e2f25b1534fd92d676166724dd1deb8192f049f249cfb8a0ebccfb44df2f835c85c698daaecc545dd7615cc6f53149e9384ef70c0936f6e6c9248

  • C:\Users\Admin\AppData\Local\Temp\Cab4231.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4313.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a