Analysis

  • max time kernel
    118s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 22:20

General

  • Target

    68d4f9642455c7440a1a2e51c319196c_JaffaCakes118.html

  • Size

    15KB

  • MD5

    68d4f9642455c7440a1a2e51c319196c

  • SHA1

    28c8d70ce02a7b5158a611e9a20570e1e7fc1810

  • SHA256

    915b2a1a471b0951341e798446a43c782f7cfc52285ebf4862a7e7f5edda6a83

  • SHA512

    410b310fb0bad403868d0047af54171a105b802bd5238d6b85e06390d3fbc156e5d938ee0f3b43ff51df54bd226800351bc55d93b308875c1c61a28e97f3cf0d

  • SSDEEP

    192:N2dEBVFpjfUSDJK2Hw4eoqTqJBeqWy+p50PBCZJjXYgDbwqgANav+4:N2qnj8c7HHeoe0eqW7piJAJbxbwBGp4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68d4f9642455c7440a1a2e51c319196c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26f82c5f2dac30e824166bca65208fba

    SHA1

    f53817fdbd69e8426ac088a41dfdbbf83a949154

    SHA256

    86a2af7e3b7314d6b074a3b1fed0ef09c4576fde31aaca2a17d9649ea31143b8

    SHA512

    d81e091f899e684803ffbf5f8e1bf733b6f5ddbc052ff57cab632535b796856030bf7e8d72a137ee558050d1ffed45c6dd63b6c0cdcb54f95c92035762f9c885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0831c894d4f076d1d0b511e0bf41553

    SHA1

    af7824d76c4dbdf0e464b898720eb649b59136f5

    SHA256

    e60fbe25039cf5940de4adc85cc4193dd4e989fbf2555887af73607ad53e4018

    SHA512

    4f4766e49bcd15102014138b2e50d6034ff1d67a955f683519b1e8e39882d83d4c96d081d02c482b3c51911dba5a4c27980ef31aafa9d933fb1cea3d5a6ba8cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51dd1a2ab6110ebdbfb60ab67bef4cfb

    SHA1

    7b2a2e4ee3529d0f7f77e2e5789a00fe4f6bd914

    SHA256

    a3662082f0a3bd674da0e6db1054542d8d10c332347c8d85fe11e62961d2a02f

    SHA512

    7c0b56ac16e9f444f970fc0b243a274f758bbf90c1f832bc43a9c51e426691073d8fa595bc05ef1422077ebcd6b03bd564350b05a3681515f42ac8469b744bf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92f18b313a01766368ddaac8eade7704

    SHA1

    20c94d6917824932e959429134568c306ad4293c

    SHA256

    5172716e93a093cc53c3a015114fbe629643f97bdaaf20f46eb30e6c0add215d

    SHA512

    b76a093513ee3698a2b8eacc041e0b7aa2e95ac6ce023786770fb9cec7a9b0eedc029d3741d7ef9cb2c0e2e28a6789dd22ffdc5ba424c716926ebcecc3fa18a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd7e7ba68eec386931868946ab2083b

    SHA1

    a5f268910f59c3750a0442a7c701b0f566aba983

    SHA256

    5309afc2689fcde070a2a08e8c446b2d54bfcf19b1a69763a7d9ffc5dec1e34e

    SHA512

    39e4bbdaaabcfb0ba43c22049c6b0e1740fccf620939e6697abda9cde4270d2e7f0ffe11c6252e1fb6f8b25865dd0dc8c07a8f8af73be71530745af0f72aa349

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00709dd9f208a0d282b74ecf7e182e2c

    SHA1

    45453d8c30e65cffa1cd49e61bb704bef363460d

    SHA256

    a8082096d949f4159b5e2620db73014631cd1b6e54647916e8f78127e2bff54b

    SHA512

    b28a67e65b1d97dbccc7517937fe3190e7bf1418df25f9b49327a91bbb3b71c6f4bdabc8eccc5457086ed707a6c00e087a8a5dc0202fbafd9857c3abe636541d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6531b99f843152f6e18958e498dd1682

    SHA1

    3b4fb56644704b30db4ca5d802f87602d72a7b5e

    SHA256

    6b450f1068b8c64df5e5e9451d7587c66c4c3cea8b6c5a07ba28b20bf5b700fa

    SHA512

    c4dfa125b044ce40fd6c4f02077b43a1cc95636966d9654bb0066ab081eec463761bbcb7f5e1404a193e2c39a64608eb57eb353dc04dc09fb27ed5fb44df29a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6b53d05ae9f0e85317ba5d7a05a2da0

    SHA1

    d94da4684110a11c0533bc7a0227316a2c524386

    SHA256

    4febda47ecdbe17ea69a6c08885faae49c1bb61742461d6c3179a54b8ad436e1

    SHA512

    a6da9a1240b6fcbbc4e57df30c9a0a8363b2d1cf3f765a534ec318d1facc361befa5102478f4698ffda8d7b4ea2d6559d47066b75edc78c4452385603e60ac6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86bc74b9d1bf6a66499dbdb5680b689c

    SHA1

    aedaa455320a0a0070c661484808c8928a66a1f2

    SHA256

    34d356e8454fa934b81c981e4e37ae4c9df494ed7504ab59bc0e266d039e9117

    SHA512

    55aeabff8f7f1a4484004751a29a0136e18a22e468392a78d8f4167bb4008646b9c6251eae0bbc19101b161aedf55479f0fe2a2107dd1ab943f993ddbda25846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    374bf15741cc6be0a8363158bcfc4ae3

    SHA1

    576ea82513de79e7d59998033c911d94583e23be

    SHA256

    f071fb169ad267aa92075e588b3e8da0080c062231c398965b3f5d75ecbb1ce2

    SHA512

    f9d41fda6ae885b2a8c2289fb2c4e95f79331ceb901f2d80a92b9643c78fe0fa83b968400aeb3227f7fdcfeadcbcbb5bf41f1be06440406bded5b17ea865490c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68b3c3d7826bd29b6686446a5f0f291a

    SHA1

    9eac04faca8fa266a6217738da0e0dee04553cc2

    SHA256

    96dcbf25d3ea39ff59488828869cdf6bf816dd5ceccc43e2453f2b51b8ecba5e

    SHA512

    8da1fda051c161e7d4d9d86644d6493dd0c57c84e2caf65b2381528dc2d4e0fe2a6e40bc4140913b72f26f7e92cd1c138973d5d581ceed3b043a6207e6471f8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51d999dbf41c42013bda4773fe963502

    SHA1

    5383eaa36268d3c97972d8a42b9c7c4799768342

    SHA256

    b0b6dc71dd38babcd8c953bd5cb62d1a0ff1cb9947480cf5380348e3db5d708b

    SHA512

    2b2feb8fe522e0f786ca6039080580ea6fc94d1200726d74eb783c59cf74493a077aa007a2712fadc9a0200b810ebe901b664aefa274c43cfd66bd1c463dbcce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97da8057fe0dbacc476e99835b3a2ad4

    SHA1

    3a35fc5c38be9e9b346114e425b2f70718bc2bd7

    SHA256

    33718e06bab01357a09515eb3fa4844ee226f6fc696ec6cfcc74abd87437a50e

    SHA512

    7569a33d46fdb1a129c046a3097aee5bb4ac38224e33b2b31c8bf1383427826173da071d846396ba2af91836ac6692461d46aa68251df09eca38d3d8fdf33bf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e54394cf333b348d838c31f98395cb7c

    SHA1

    02bef9780f3eb1f075742650feed481f81210973

    SHA256

    103b58c12ca25c4ae6cefc730c877ef44101f1d16b4d0049ce29c94c65ddf80b

    SHA512

    4f6b650d66b99c85dd411182eba55c11927268f7ac27eef17b4f86fbd2badadab3c8764df294b45226e814e7dc3aaff4fdbf216d6f340c511b4c38a2ea52a6fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66974a9ff456ec279ff7cf4e2e683b62

    SHA1

    06e71193c35818186fab485af2e7c447720ecbd2

    SHA256

    2770f1956fcc295936dbf31ef13b6891d59907e5db80b22808ce2de0661f1915

    SHA512

    ea9adf93247629d7fdd05c41be9c3df88c0f58109733f416ee205b97f6df02c586772ad3d5e49a42891856421fac0f01ca2a5204cb4a67f308ab9a04a75c0243

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49c0020e7b69a68c04a41b9309fd97e9

    SHA1

    5551253f2d833f0ab4b709f4d965b30249f3ed11

    SHA256

    b5524e197ec456b17b506922cebb766383dab7cadb15a89bd882dd2e931871f0

    SHA512

    53cf60da679daa2d8ec6a9548664bd9a13aa9d7bc87934d10667ed12fdc1a35713ae2c3f5900bece34a0a7daa5f090f9903b4b4a2022bcd9f87b9d538495cc09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0e228483ce16c2f2231e10cf4cb1a72

    SHA1

    713f15d4b496fba1ae8ff618f53958d569bb0ff0

    SHA256

    5153340645c5681d8880fbb0c841860cfca43aa9f1774087599f95e380ddd37e

    SHA512

    b6f4ade95ce0c6400822cd4b2e76dc61a7558198dae0a174629bad792b35d02c63810658325a56101c030c7367ab1623fb27cd2a38cfde8d8aed4175787af35f

  • C:\Users\Admin\AppData\Local\Temp\Cab10C5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar11C6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a