Analysis

  • max time kernel
    134s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 22:46

General

  • Target

    68e39ee1f9abd779249ff38f96ebb0e8_JaffaCakes118.html

  • Size

    213KB

  • MD5

    68e39ee1f9abd779249ff38f96ebb0e8

  • SHA1

    1a305b54f7205250b8d3a3cc296d96bb70ad297e

  • SHA256

    50ddd6b63ef7a4c54fb694b9dcf2c12034843578dc6d9fd84e268a7abaac55f5

  • SHA512

    9b3421e325db2f186874f7ca9a93f20768e79ca1c67d886e50f54e7580f0ab31513cccec5f01033e9763311e35220a713213cd47ce10aada6a0cc8f9959edeb4

  • SSDEEP

    3072:Slr5Ap/Ynq0wVyfkMY+BES09JXAnyrZalI+YQ:Sl6JAsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68e39ee1f9abd779249ff38f96ebb0e8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2864
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2620

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d4e82ef4bbd075edbef71406b40aa5f

    SHA1

    d8378f6f1980305c3748300fa6554cd5f2bd9a05

    SHA256

    ee8572cf2ed722734fa8a7c28e3cb719a651d5fcb3023a721ec562f0b0191a14

    SHA512

    a65f3ef041a2f6064b530804e27bd32370e7d92cf6d7d20437fbe426a2a897b07cbd5bc07740da9b54ca11d86fa1598e951a36eeca5f38e19935dc47c394416a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd94e8bddd1224b6924e5db4cabd0565

    SHA1

    0b40dd9654c26e18d7b38300eb92f7f71b26a179

    SHA256

    84a66b2c8dd718ace01599011c3df5dd8c388fc824d9d1527b0b48622ba5dfda

    SHA512

    c5dcbbe107a4d336bf48144c8423d6ae5c21bf81a362de597a87d0aa5162135dbac5f1fdd2c773a89e9518941aaf1df7977d9adcbbcb744e6dd6974286f18717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd613f7eb69ab6a1fedd0aebf1f18b48

    SHA1

    0e1106a390774f98dd2a2813958eb375cc9b2d52

    SHA256

    0549912d07cf9dab7faafb631570deb090c85aee2e0ccef32318714407157ed6

    SHA512

    806a784bb6118b8907b3f722ecc40eba1ebfaf9034d2671260411dc759ace878f69276759f61e64762d11be98c7fbc24530c7e2026469dfb1fb2adbc4c8b186e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90392c413df43a3351dbc7f60565d19e

    SHA1

    01465565f90ce98c5482622ad1acc3f2f4c8fbef

    SHA256

    846b4abc0c2a1696408aff4b73b9eba4b84d6553737902bb91fda4bec53ba1cf

    SHA512

    5227afb6aefaa986ab8eaee8eb0dea442e8e2164f5d2f3bb8f45da9b5fcb0622075f2500db0db5802507467c61890fc28bed33a4dabe476415cce5d44785fb65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db39db3c038f05b68ed427e18e9dc1c3

    SHA1

    6e094998c9f36697c024c617064bac0c0aeb59c8

    SHA256

    6e63773814ebd5a9e6e60eb91b3ea40ffaf0da1def50ad87769dc120ce47726c

    SHA512

    befee20453027056be61390730f2b4b7d75c5c4d93930dbafc22367c1dd01bf7e36f0dc816a3ba413768fc3fad1efbeab37d9cd74e286273e0105c990effbc50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9342678a3c6171bf619c84ea5ec309ac

    SHA1

    9d443e6572125bf2ca699d9fd037a6def971f256

    SHA256

    31f3b3d63f18a711f4e590a3e903fbb81a2f8210c5301d4436de14b3e2de7b8d

    SHA512

    72546be531c50159c0f60e82db7e8c8e4c8bb84b5ec0e1e6bba14763d447e8c898924d42170cc9fb2e0e52ae73bdd0d9917be6eb82beaabb53921e9a09bf2387

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18aa7b37492d9728c36675c09dfa198d

    SHA1

    d4cca03c38db10b017e71c7c8f1191b1b21a1ca6

    SHA256

    859c0cb0ee86bec7b5f39275194f03179b7dd0078cdec5c4e7d966efae3d9fc6

    SHA512

    b44910062d7dc284d1b70191f8add1d1ad33105439113b5796342d859769e212396d12a10cd0ffaa1ae136e0e6a4052d101abef22e34f22d717d8a8ce11d5aa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    400b0602680bb73e53c7dd885debda0c

    SHA1

    8b9abfafdcf3f0c23b406d13da56a3caab8f33f7

    SHA256

    202706fbfa6bdae5d63f362bed6b73cf0460efc4f5ea4c89e19d77e7935d33d6

    SHA512

    9d4c7588c34b624e0e9ef592b994cb779436c3af5a460a07ac15bf11dbf5216110bf77fd79789ada4bd5c95dfef4555e1e6288145074947e418f49c0c277f0eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11d172e6d12ad9df66e6cb4a4c01e6ba

    SHA1

    5e1e3d5d99811b52f9f4e18f9dda83992f37e825

    SHA256

    108f7f1948b2ea70e095998e632f51fbc44a84428316c60eb8421a832e3de77b

    SHA512

    3111b665da3c6ff05f09287ce912d5af2eb52670b1917135c77bc95d2ccb63787ff8007c38ecb359a16e0f4f21be4ae0af38367b7ab53dc178ab553a16a31389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f418b48b539eebad8d00c77d1d27d5a

    SHA1

    ba30a2844fed51a9fcfffa1a78d19d6c566a3551

    SHA256

    8ec6368c6168dad45bbe55f6f633cb32e9efb9338412cbff3851f4194a385a3f

    SHA512

    dc5c2a89080fe0b41ed52d120ace8a8769f504bd005f93a34826eb6560ed4eb50740decc6310760d41caba24aa046f969d58e618cda4177f4f42960ce68ed42a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6287ab3381095300edaef2cd65245142

    SHA1

    740ac4cd2a54f59b9056c56cc76688c8636a22dd

    SHA256

    e67df09dcb37f313b6b40a78f2749c2d82182e74f0026da28141ba20b612dcaa

    SHA512

    bfc3839ed112c31c2a8b450542a00dbce4c3f6773a7f5d84ab9ca295639c28719540ce3f72bef0a40ba8efcd26669c1a3cafce5d92e3a9457daeff12595b1f91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41e7b03756620fdc3d593c164ceba6f7

    SHA1

    632d5bf9b6c2eec0fe2d65c8556f63a743a10ce0

    SHA256

    969be771cbedc640cda0b416f0cb1b8a3f3fd9c81fbc4c6320d0467345d7f185

    SHA512

    743faa841b1f53c9989dc7292e11f2d5e28fac689a9ae3fdc28dcec5f9ea6d02b7c69206a9aaee113ac8733df366b1204d7282599fa44f124a1fa27cb1a2c378

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ec906f7e010953cf9f0715bdf76225f

    SHA1

    1340f1fc51b239a723ee256bbceeeb1f55714ea7

    SHA256

    5a00879ca79a4e5fb29aef309fb604647c60e88652786cbb2cb845f677ffa722

    SHA512

    a284f24ff50f61a4e1b67aa4861a34949e375594967493421014922ef813befacda1a0f7f33c650720b7bb79293787f6f99d05ff0e94af09a96a2fdf079c4ef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d89ad5b9954413790cffe2d1e6b4e55

    SHA1

    ede9920fc581af841b5570da25d700c6910e7fce

    SHA256

    93f395ff137f72483b385977c84eca06f6c78c02c13820c3d997f162056506b4

    SHA512

    125eca4e2f9a85d8331cdaccf50243a208db309e7d033762621a89f68c0bca1ba254ed186112e39f1b268edbadca03902a6071f663da968a6ea26bec2f25fc7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20d3ae0d63661b344ed2df6f978e402b

    SHA1

    3803d6bb53a34a610e2ab27d61b40f878db27551

    SHA256

    a6b29387cec82318686a1b106b043c7ca67595a708e6154cf9a9e48f7df92217

    SHA512

    c6b20053ec844e0d4cc70b01943fd5bbc8d9e711f3e71ccce053f32976e207abbee74250064adad9e190bf028035f8864dfec47c3976291af924c5f877ee5ea4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c43c38ff98f9f821a15fe097902f5cbc

    SHA1

    04e02a6438e24c1b0332f0e730d501afb1599d0c

    SHA256

    ef54af12eaf86c2c1546f3422de276f35343313d8da38e2a66e17afeb12cb15e

    SHA512

    fe5f2ec2453913313a7e8e94c353929e232bee96943ca38732618bfce3483f50b44107950466e593cfb6f81b22f845b1fa22ae5c65dd55fe48b0f563bce46955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    957b0807dcd02a80f79a5f02f3a88a21

    SHA1

    80c31068004d38292ad4e547e6e066252d51b22d

    SHA256

    a65012d6fb1c8b91f857408ef3a0e01c2d40d5b98bbf04e4cfbcdc2da5319ff6

    SHA512

    0c0f6e1da9322c28aa5b9c7f419f1824a039b306792fa85f902b5772af9ddf0166f71a7fdfb162ee16629acff0c4af5426cb563af79e97db015bd9e83c2d4f98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed36011dc5afb8b7b646dd990f515c00

    SHA1

    8c94e4d36d971366712e78eb092f562709fe5745

    SHA256

    01b69b66d037091670148e637c1df4ef2869c59ad51e7e0fe5b831c3106fb6ee

    SHA512

    b80334e782818b68d0e568ed3b99b1df6fa2bc5f51b1003213b72451f909089371e6fcc1ff11cd0e0b4c02f03d24581e20f1340acc4e50f780a9ec30274eeb96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b875e261902e1339b50ea607843982cb

    SHA1

    7046db0982fd1cdf463ea67128d7322cc7c2bc4c

    SHA256

    3223bc45f99adc3b765bb3861844c75d3b4f09bc0cfc999d0ba0a160ba39c756

    SHA512

    a79d8641a8cac2691e56d1341978172f394c44f583e21d773d6108f95b44b6df7506c00160be9e0e3c87e0462d336c957d1087f0e1fc640862e23be3f65540dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    866a7eb462c012691b77d5c25130de9e

    SHA1

    7d91673d91dc97741f57911c7d1db55a5f8d09c5

    SHA256

    12ac1143adc8d64aa0bd5eae9719385154a9b6328e5a313b45ff49fdeb98eb1f

    SHA512

    7c9a8a45cda8bf888f33a1777e6e0905a0df39b138896662d0307da9594f7c3c6adda08f322349c07ea660f7cc8d64c979baef6cea479fc12a48d24e372d1e0d

  • C:\Users\Admin\AppData\Local\Temp\Cab1EF8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1FBC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a