Analysis

  • max time kernel
    143s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 01:27

General

  • Target

    658557e28e5cc7bde0cec22461951de4_JaffaCakes118.html

  • Size

    23KB

  • MD5

    658557e28e5cc7bde0cec22461951de4

  • SHA1

    929c9df04e242f239b6809acbf39cf50437b1bb1

  • SHA256

    fd2006d6e6f4df0b305547005f55ca646bf51dc38fd75ac39d86c75a2eddbb59

  • SHA512

    a2cdf3fa9a3233be3e3b7111eb368b382e96701d11a48f94986ecade4b418be9e3acc772190d5db038d9fbc22a9b3f5849b3ba58ee80e3163fb19a189e3bf8b0

  • SSDEEP

    192:N68g9Vo4GGgb5n1DMTZArong3I4NnQjLntQ/VanQieilnUptnQOkrntfqjxnQTbi:63ocXQ/ZmA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\658557e28e5cc7bde0cec22461951de4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    711ec5084a779e4a45f5acf1faccd0bc

    SHA1

    0231a643f625c2747b19eb663265191f881018b4

    SHA256

    f5639bb8fa626b01d79e5310bc9dfe287fe7e2cbb0d4d3896aad8ccd43737dbd

    SHA512

    69d06d2decac998b544a15a18de4520d742134ab4965857c7b44f858c780aaa7739bb108d5ede5a5bd188227633544aa94d8a1b96893b22b83dbff34cbc96512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f76e39adba1e3c35e253738e09aec25

    SHA1

    8f9df42f3163207628ffe7d8e8ab94d7fece5ab9

    SHA256

    27a54a5210de93f4f89bf0cf24267434626cb0be5156499b24b47e63f9fc5e8c

    SHA512

    a7de016705b36d764d80600ccb8125ace20a9f51a67e4dd45292c415eb4d10c76a64427bf849ced72e1c814f7ca9802dbebcc505d4c353f106b6ed58217968ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cccc3d7419cf7e206e4d6ccd13e17e0e

    SHA1

    a1d17fd8b5829db4ab1eb59123e66a8f416ac6ec

    SHA256

    7a82c2ade89a456bd1a0ba3719120fdbf3e885ab71b3946bfa4d85cfd3ec6755

    SHA512

    72b22f91607c1ae15e2bf0ed654c0b0ed7e0265174401dbdcf765a7fade8e14630a508d0da7d8aa13fa28008e3a2051a93b521cafb8f6f7f075f9d5b8f4cfbd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67a0fbe62fa9896186eced7c38677dcb

    SHA1

    2195a50fceb9b4781abbcff46813075ff03af0d5

    SHA256

    b40b937226627762b067b4ae843135e84d01276c1f40728bf83509639ecd6e4f

    SHA512

    53687c252e1deb2dcb796904b9e358e28c2e63895c116c1ee450834c3e5df31f2b602954b218149c8cbb9c94297d4bd306f598670683b2e2719087ebd34fe44d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f17f3421c97214b960771f1357582b9

    SHA1

    6c7ed60941af3fb9322d6fb83b0c93f1ad25e32c

    SHA256

    b86d3c86acbf2a640d8d8de2147effc1062c292624bf9c0541135ef0e6cc3e44

    SHA512

    780bd3cee59eae49637d2bff2b0732322152fbc44a6e77ec49594d4e559a87466d53e375d527982148687e3fdbbf4a8183efeec02f181e4a2d4af8f47bba00dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c263b7aeac1041bed71e3f65c17e3afa

    SHA1

    f2bcd1529aec5131e355c67106e8f9bd885ab736

    SHA256

    df9c4e7653b6c00aa36767a7db9a968113c94c5a84b220384fa43161a4b812b3

    SHA512

    feb26677faacf2e3495231d3999654a782f107bcfe3a63a61805fcba67d7e9348681c888c29ef3b85e67d18735c9cd173ba5ed226877364cddd94e08c0a1ee42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8397c0d2d9e4fb2b0289f9399918542e

    SHA1

    5820119b49f4ab98fa2a3415921dbad739bb49eb

    SHA256

    05514567071153e999b8c7046840d7b65454111040cbeb079465ee2040b1d46e

    SHA512

    dd436721c7bc808424edec412b8e722316c92c6ad4e3dc8f46204ba8967215dc273be39ba1f8d636c940d4c599c08138de9500094e11ea818e64363e89948a8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fac2cff786ea76d41ba0282e92b4bd42

    SHA1

    43fbab00102b04068258ee6a3923448702e7cd46

    SHA256

    72df2b34e952a45693734d428c5cca2b9f520f095c5a2deb0a28bf6420f1dab6

    SHA512

    3be12bef76e39acc806c5edf9f9cd4807df1864e9ad0737ef2c070d05e5f1960b7e67f42d1deffcc0f31d89fdddb5ff21537163a5867f2f24a0c668d2aaa72cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f815270d95f39b4f40fba55e760c8738

    SHA1

    b3e6be066df739777e600d32d0e20dc6b02f506d

    SHA256

    83f37369e50e9b8aabcc7a8a8671d0277d2a4dd2830ef72557f04a3acdd273c9

    SHA512

    355f7c30fc13ef02d8a3248dfde04550347362a70b2caa7081243a851b0e5ac48eb258ec37f2eda8ac63bdc85e8c4ba0d7e7b95e01ede213aa53773c03403b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50384e5c54dea615d8e21152fb16afa5

    SHA1

    6d225986821fa401b97192f779216276a6c74f72

    SHA256

    40feef77c6481e153ab1ebd12654c57b1ed1d19bf7e0b335b0a66159df60d5c2

    SHA512

    68b301535ee1c1ab89fb4e8e62d0d76cdb1fab5172a3f12ad34770f231e246deaed1f1ec6fc86d379e3a79b2c92ad9991cb7a789fb9aad8e65313af63d98a9e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee83bb694bae8b2bacd90417f4bfd450

    SHA1

    63fb664e605322a0ae8f617b9eb0d7ed85fd9c2d

    SHA256

    a3805718665b6a58e0df1c8774b9987c103f4dc5188afe3774e840f4a043edbd

    SHA512

    1632df9aeb6d93857685506383a0f474e8083800742423f94c0c2237710f0c720179a8fc4a2072681e5c2d219ec0b6f61628207a92b3ca6fa7cb94de4708e162

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18698750aff2c98779e8d3acfd6324b4

    SHA1

    c100790a350246d3d229d603bfa8a5cabc355e6f

    SHA256

    cad50a36f47bc7ab33693d5a25a4867bf25f820011adf9f98154d38fc8d7fe95

    SHA512

    216cc336bf00fcddbd8e3137e094471da40828f8e2e2b7ba183adae3eb4ee82fb85d7a21c72075b52f46f07878be79f07a5252df61ba6ee8777b0371312b37ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05e23644502878f488dc78823dcccd8a

    SHA1

    84d9e8ab99b8737ab2bb0763f73f5c8dc499e034

    SHA256

    dc47d493a4de959b51f8467faa5fe6e644559f92f1cae6f82452993fa0209827

    SHA512

    d90bc451ca80b963e5d6f6b950b494fd092c99c9218eff046abd460f8ebb12b3a4cde66f8da35295c4d58e8d9dc13fcc2b8f79a8b97a8fd094c6f2881b9f0f18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6c78b659f47bee08e803ead52b5a8b4

    SHA1

    c8b17c00b168b6a29bdc036d6d466590b4d2197b

    SHA256

    e540383500eacca5cdd3a394410e2cf367d83102baca2473522e827762e31736

    SHA512

    358a53e3fbef031732d3913424eb6aa698da27a8cd0e60678f1ef998c4df5ce25486e3b83751e26468fc3f1424fec15fa4fb55f8df8e92c37171082f3039d927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43169caa4089ddefe1841b287fa757f3

    SHA1

    c21a1d0fe9c2c27a7322f82063b9eed88f74dae9

    SHA256

    3d5841e77c2074469a5f50096d5345ed02877f8afcaaf425816768aac6461f91

    SHA512

    8b1f7c6c49d2427cb645f410e71e6abf2c5d28f80689b23304f9395a0a157f8b7dbb8a1aba2d332dfe0211644f98ec0150b56e2a88f2f34db1f5f6c7c6563e67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcdf23a3cb2da815d6fb1738e55a7e63

    SHA1

    b1fcf15c9bdd56d587e0412002cefde49cc80737

    SHA256

    c3c95b51b2e5aff51e3ce9f23a0f6da214a0a7aabf6f029fb00b7319f3f5dcfd

    SHA512

    66ccfc862599c67ab31750fb22c34028c78d64e4888df6c48305f677cdb21a8e6387246fcc84cddeb3525e953fdaf892a72a2085840fa16cd60daa8d82688182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e64b653fd32f71da39cbf29b9ed1b4ba

    SHA1

    ec142b494f6b2426d4eadb040b5567d78e5a56c8

    SHA256

    3695e9d33a27edb02075b89ae23f351eeb4ebc97237682a8cc6a2b2fb706f96a

    SHA512

    26fd716a1f1e1f832194943b3db5245dbebd0a555b149231c262c3e2acf23a2e23ad90f15cd8c51cd126ec174bf7efcefc768d1d239369784bfeab3c9f1ab107

  • C:\Users\Admin\AppData\Local\Temp\Cab2F5D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar304E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a