Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 22:31

General

  • Target

    68db8ad51845cbf59a8f36acb6612f83_JaffaCakes118.html

  • Size

    112KB

  • MD5

    68db8ad51845cbf59a8f36acb6612f83

  • SHA1

    9537288cf5ba1885c7e72b504d60f85c7c600f88

  • SHA256

    3a8e1b1d994631f038f0f78b9acc84313d4e569f4a3f7734434e375df7101cd3

  • SHA512

    f1a96708a27729ff46d15533d047daab3d145c018463ee0bf07315a74f320e743120595e502ea5625041258e3cfb5271101a700a8f8cc7ccbfe248bd5f2308f9

  • SSDEEP

    1536:HoyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:HoyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68db8ad51845cbf59a8f36acb6612f83_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1284
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1284 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1996

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc41650adf608478ebeae1243b58901d

    SHA1

    af1360981416d1b388e980fb426464701934da71

    SHA256

    060ed407adf4b57eddd28786789c09a415af3af29cc3ec1271f14b0ce094893d

    SHA512

    88d32e9e02cf4488cf652c646259923b0956c1b185eaafb3086ffa02d96c9bd20ed450530eb6412ee873f6fcae456d1db935f38d071c0d6b469a41adadc184a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc25ea6f132dc112e6c0f4f19e0fefc8

    SHA1

    e127e2d9e5f7f9dbaa71e713a3f790a76ffd04be

    SHA256

    3ecac6e1b166286839d4e7ce43b1c90a72f9cb8c9484a40aa0b6bf4a58e08cbc

    SHA512

    e91bc2c948a430f34e6ef1070eb6686b24a57b62aa6a2c550be23e8888a4eca6689f020368c1ada4de91db1efe2f84ecb6a1678a9eefc9879a9e9fad3287ec12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae48f3b748ff38ffd7575a17fc9d590f

    SHA1

    4321aa58cb485da15190f4bc6155cd2322180da6

    SHA256

    485c8a6ccdc8a77ea2ebf3018fec31444a2d1e6e7388e1740dd01cdb16338f10

    SHA512

    30594067d0c7fb1007b48b701db14d774744b93e5f33cb0d4a45ed9cf913f739a4330eae790cf21ad2fbc24bd1b6c862260db9615b3b765bb07031547878a0f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8cc0eac5aed6be2ba39ed711de08bde

    SHA1

    40aa771768de0f06d1ec5f7f10d32bdce23053ce

    SHA256

    e872b6bacbfc385f0f83b13213231d7d0aa4dfd65f9ad00717f9e5a1dee7e2a7

    SHA512

    073d7b3724fad9fc2f6e89f7728e9fb5de0c2f217d36a54ccef060e6ed716c4e3f4fc59b238a076c4a3d438f07d7833e99831eddd1198f377115183504b20e94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    658ee31034a986bb1c00ac1b2f2138dd

    SHA1

    1ce1e4f1aab6ed53295e6fc1d805bb852e2c3afa

    SHA256

    77cde0d77f845aec978b206b98c124c2dc394af862c40eee72b0e84a212d7998

    SHA512

    e1df668d95a1ee42409f81701f0c4cebc6252d7e3b9bb49a966caa5cc303c59b166269e2582f0dbdf7eaf40beb5d392c9dd0d85c5d614693a968c2e767c49555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    447862b19d5c7e82925d2159a54e5d31

    SHA1

    085dddc253686c9ea50e5b18326949db43d73d86

    SHA256

    93285c9e020cec73f59298a0a18fa9c076f63f258e66e233ac57041422afe3f7

    SHA512

    18ba75fc7cd775cb5e00cbde005d782bab2467cb9fa78b6047ea655732f5c47f51112d2a18b08d6752a3b4ddf6c052eac02334fec81f7ef2e1064ea038b6d6b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e20a45437c23adfd1f55dcfca73f9f1

    SHA1

    ef851b061c2568c98e4568efd16efd5a83267793

    SHA256

    0bfd574b6e45447680abca4d3f48ee731b529b849936b5aeecdecac5a7747aed

    SHA512

    43022ccb0a3073358a8b7356e0ce95e065ba3650c6362cf3f62a5d37ca7960db583db26ef9ccf2dce8e9fcff5c41f04701253146231e33b21c6a740ecf3c6d57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96b95bba765fa7161d2a5729b212ec9a

    SHA1

    bfd82c492704eefcafd99d85b5c955461224df6b

    SHA256

    325b6b904cae5e4c07fbab1aeabeaa4a34d07a1a0a6b33ffaa8a914c178df527

    SHA512

    14dbcded3a2dd58cdc74f16eab0e52405a214b405edf4f5486952aa819af107b6eaacfd708677300b1dfce4e672ef55c35f4f5de0b77fd8be769abc6d8063bbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f8c3fed0e659f57aff8e67c8b05d987

    SHA1

    3d0788a9685a9e78dd87c4bee3c21d981a39d448

    SHA256

    7a4ebfaec636bec8547968eb61e4f47b27c1243f717dda33a04054bd4419333a

    SHA512

    f78fe1cf3a58d854fc9c76a3051110800e76daed9b8b7503d25da4212003cf057b3541234fc48a6818cc65013a987668212c4f6ada94ad1f17d3ad50c26361ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bfed78b7e2faaf8dfb5587eed412e62

    SHA1

    52154fd4900dd272ca4dccf61cc13c3437cd8abd

    SHA256

    db234e49ba575d86065aea0954aac10f92f39ba13333acad11b4119c2ac57b87

    SHA512

    ddb8a597f0f8ff73c5a8dc391e2d56aa8389edcccd28e28826e6743b370a49f2762790f26526b31e7739e323a4801b06cbf394a09a36ccc58b4a07070b680b3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d375626fec1d00449725cee32a9cc0f7

    SHA1

    f3e9e36eb7bd3e3b67f896b69331efe3cb7f5333

    SHA256

    b7b6e66b36ebf1018499b692abd490bd269745335f14aa5c7e08333e069cd5d5

    SHA512

    cf0318e7b1970eb33a5681250c746605dd9a3cff449ce687e6950b9cb17bce62aed1d9d84c3c8621860cf92f828ae911a61136d1048e0e9f5f71bd1ab70ac803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5eaa783dd8be9ef8769da0c452753644

    SHA1

    624dbdb00c19728d527754a933d16f752e9583c0

    SHA256

    3cbaa1e0a56c3ed652a5bd5002b04ecda66ba3c3c040bb2102acc33b7717ad07

    SHA512

    4bcd5b45412a4530d150e93d7319224074825cc5db742d3226bef0b213cc89c46139cbc16a817b44db78a874c55c237503bcfe0033b565021e0382874df5cc79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5db5a9b660067bb4a8ad93d61839dff0

    SHA1

    4f75b83f345c1aec637d85ba086d46ee62c9ec51

    SHA256

    e2790c137c63dc5995c5caef58cfce3bd2066a3c39fbacf0db25d4976b0f1b48

    SHA512

    c2557753d214e82302edad5006233a232916f16203899b0ea3c23b6b9d578960ea101aa2e0dec5da096c1bb24e06620e9fc8b49c21abec4db6a43e3d030c69a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36b3bc01c9a20fc3611cfb48323a656b

    SHA1

    788079c88809c128f0166203a5a18a8c0fa10937

    SHA256

    c4ee80f93c55915d6d6a736462093bf067e2ca11aedcf62c45532178e72992d2

    SHA512

    1f28ee7a222ee9eb78b014fbc9cd298e9f3c74a522890cc17ad7758f09edca45a62809c69ee14d27c76b20a72bdd7e9c8f9c9c0f7e996fe27386e806aab6ded7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a011dfb0b191d2f9ead2a3dc3c9673d8

    SHA1

    1cee50f246c103a89d8bf7368c3a7955ed2556de

    SHA256

    6be248c0ab1154e329aed4b31ffe9ca28f8b69dab3330cee33b72cf54aeb76ad

    SHA512

    45e5b0c058b15359606a5bbd0b7b15c073a71a5ff8cccefe4cf34cbb160b75478e80aacdeddcac336fd127c8fc4785d7da695d979ed25c5ca498c37410008fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db84bf810b181f0dd8fd15b96ee26a2d

    SHA1

    2838ff996834090c1700e68b6d1c503a23a77f75

    SHA256

    b01b1b015600c497e47cf1825fca1deb2423339e5defbf42154d485e3aaf0cc5

    SHA512

    bafc6827f7d770e1fbc4fc8b68127c620066a496ce477dac91ae2152216a898ac7c47c38ef6450d0c93e5ed78b537f1acef3d0b2c87964792d76982829d3e9d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6bc4d78d1a66ffce5158024ce25f4e08

    SHA1

    8363458eaea2ef41d2a640fabf5d12d636431bc7

    SHA256

    0a734b2f42471f236e4a26352c11e4dfad700a981e08202c3635a1f21684851c

    SHA512

    288778379084ca1225e4f2057bc4f9ece54e1b7e6393682fe730e07c80d0a69318c5c91fd3add63a8d79cefcf5088fa3d20420832292fb61817d8a76da9c5485

  • C:\Users\Admin\AppData\Local\Temp\Cab4606.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4659.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a