Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 02:35

General

  • Target

    65b5eb46bbc40b1ec06bfe7682fbc651_JaffaCakes118.html

  • Size

    73KB

  • MD5

    65b5eb46bbc40b1ec06bfe7682fbc651

  • SHA1

    a34f587d84fc8540911adb2065f7fb9ae0f5a391

  • SHA256

    3d021e8281e5216ebd3c6f5ffc39d0e5657b9b0cba7648d41c4055b16e7192a1

  • SHA512

    45aa2ac3505239ddb669aa8157ec08bf835755cdd53bba724feabff499868d29c9ea2af428e784cf4f8cb683e36f0753969edc705142622b31c521ab914cdbc9

  • SSDEEP

    768:JiagcMWR3sI2PDDnd0g6uD6ZMDLcDLuete0oTyZ1wCZkoTyMdtbBnfBgN8/lboiW:JcRTSNen0tbrga90hcJNnspv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65b5eb46bbc40b1ec06bfe7682fbc651_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    919a2a771bbf93af821297033a981bdb

    SHA1

    b5ed37a6ef7839ba3e72a729eeec30c4d3be2eed

    SHA256

    fe7bbc3e912250451d501edc89a0f8426c90e22b12b996ee081b858fa1d96d80

    SHA512

    265fc90078c4309fbd41c61677ed38c14c9e970c0d806c46bd9d7b32a8dac56f44aa0c912060627015415f17cb49c6092e8b3e25a7f23bcf7101a242d5c9c1f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac91e51b1b9e4cf5b1391393ff9de533

    SHA1

    458da9d3cc8757a8ce0cb0a415ed843072cd0f9e

    SHA256

    cd4bd40ae681b346beb68e26f9cf82ed4e72505368e039d01450c6bd7807275d

    SHA512

    bc0edb5c2199d0b8d47f1e3637eb3856a075601efa0f9190ffc29ae5b6f2006c4920c729f76e09155b78b5d16a1477e3ba9377861e01f36cd4a3374d6365a70e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2308c4a32baa5b932076bc2a5bba9c82

    SHA1

    c5dab39b45fdaee2102a109155cb99f7af4e0849

    SHA256

    0d23e2b567f9d959cfa57176bb750f9c6762d60652b38a2e754779c730c69981

    SHA512

    896c0857e3742e8d2e038a864576e368fcdeb5aeaab7335cced35648b307be93318c7bc76b1b3c92ff493aadcf861120b14b3ec43ba53f04ca6c222379378447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6d8cac595202aae23503f72d8e11d48

    SHA1

    6bd3ce8dd03688afc701800765dabf0ac5614d87

    SHA256

    de7f7e49932e0e2de10fce711f1cbe762402ff627c48a61c99f6018f4f8f7ff9

    SHA512

    99f1db4fe68adf495a97cab15a7937ccd9ad2487efebf8c9d2cb1ac5a381c0c58656d107adcf12579b4556662f20accc44b83b2356decba1554fc2b967a36c8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f47858ea3b021656bc001cc920e29b2

    SHA1

    8cde915774e772db10783a5fcc8b5088e28f49d2

    SHA256

    566198e359c8c0130bb57d3f67dcb507cbd2e1732df7b40facd1db891f48843e

    SHA512

    17a8b3143b1dc967d01bd13bf4b166efbe01a0ea1875901432bcb95296fb2273b96588f909d755a2cc8968e7a23f05682fa530cd2593d8c8eb5ab85caa20705b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84e5c4694d141db8b80172d0d06ea3ad

    SHA1

    0437d11a280c18f26d9c22c47f4cf5e3e62e2797

    SHA256

    37df6c4045c50844f8f48518e5c4a9da8727bf71acc0e48400041fb6377129e1

    SHA512

    67ecfb60f5948d0742e3ee0bd128d507064167a04cd3bd4096e5f1d75d90059d5a55a42cd83d003d73cb680a9aded5cb0029c7f5d6e734800949b6f8717556e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80f9896d1dde3d39b1d4d6971139805a

    SHA1

    388706c7f12525b39864297989030c897e340d11

    SHA256

    2608500a5ad9e620f5b76ece464947e9a04d71dc860fa1d94b885c4adc4042a6

    SHA512

    5c3041ab7b2524adc6c38f3f584b402ddba2eea9b4527d64e510bb87ed4125b01a739d34df43333042157c8f650569b8f40010bc00376e8dc6fc90702755cefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a1d5b6275108c6a2b429198e258b531

    SHA1

    8d1b92671be8656ec5fc843799e38c208f371b90

    SHA256

    931cb759ee507b2c849ec2465d531309f4853fd1fc679ff6df0eafae2895fd30

    SHA512

    d786a2bc7161c7cfc68714e47599285e5925a7c3c87a2f09d79818c5f92f6eaec2331d41653a613288ddd4d03fe3873512dde486aa315aa476642c93ec0635a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64a8d397047ce8d5c0388e6695e2a528

    SHA1

    afcd2dd0a8f64c6a345cee03f98bc7070933d5d2

    SHA256

    37e0c131de659c7d233d5bde57f0d40573b054ca18979ec277cc88264b499c18

    SHA512

    2c617a26a0d68e710948dc8c8840b1dce94b8c2c2efa78665ccac9189dfb1a492845ffbced3c6ca3c46381fd375d4ab405d0e4dcbd07cdbdacd0081d80287b77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eac616e1bff5a48675ed28ab27adcc44

    SHA1

    daafb5c64fffff1f1070a69c968a65e349fed9dc

    SHA256

    a89ebdefea08b432a4138c3689bae9cca74b9173488d206c1ad8227f33f3a386

    SHA512

    03a379a86ebf82b85027a6185c0f656c2dbbd34719a3bcd9bddd626e3c123a04ddfa3cc33bb01ab5aae5b7a421980c31b170d50abfdf685a724be8c317c1411f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae032587c6f5adb9b649be3c8a4e7db8

    SHA1

    9b79bf285c5c8fb24748828e49d7cb7ab36b9ded

    SHA256

    42ed75631684b9b1938302182db482f5a7b6b45735811dc52f69082ce418969b

    SHA512

    a252194ee3c3d48e97b692d19bb708336a597c9bff2b08b4c4a6a9248b0e96bacee9dc06078b0861e598208f7f3278ad22b882cf804e9b94f6c3581493809012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9879d08efd964370eff04ac77f9782eb

    SHA1

    b222593e0c30331ed3ae263f3e6342cae137a9b9

    SHA256

    245f40edad1841c2bb7f342ab3a61a961fb3e293cb417cd722adc8cfb64d4894

    SHA512

    ef3e3d23a0d582a4cd660b49130229a16884c972d77f453aa22fb50149a041487f4003dd263175bd27b81b90e880bc981fe64cd8a601ebee0a5146a7391e2e84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8db67d67e308cfca2fa03e3eddaf54c

    SHA1

    27cd624b4d770a06aac4c3e7960396d709bcbe21

    SHA256

    8a2f6be1779221ce5fcd59746945c00669088325672a45d631b139232a30d3a4

    SHA512

    e279322034b8276c81998a37b78069a862a76aa542cfe20766c2d4881ac040ef3ce7f0ffdf0b9d388fca6cfa68821587a6d094308f34870fcf17b7fa51f996f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fc72920650e35975249eef047792831

    SHA1

    ce932c9d7519f874a2a2528b6ef34b31a73a9613

    SHA256

    01df6cde1ccc1256283129665a31db964ad9159d05727c7d50aacdfcb617f160

    SHA512

    6631beb47607ad22acc6efa4d1297035978280568ea1aa2b7c4769faed38c520f726ca1db4c105049dad38e50d2eb13e72666385a55cb94cda2a59eca9690a95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16d5d4b9cb91e4027aee2f16669eff17

    SHA1

    e9fb5788758bd3eb6593a62a688eff8a6905f5f7

    SHA256

    eab7c9933be91d976ee46e8571e3053a59d070acc5cf41230e9caf0aa1b80bad

    SHA512

    7b43aa8b121d5384f4f6931ec58b8f145b32fc3f6e0c40bd55c171120f5a1d4511283a620b169f797f7b40a5fadfd85db5a826cb53b72e43124eaa198fb24eda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1090f178fef1e2f070d93901a1dc4049

    SHA1

    d401b78ef4b62f9d9c002c78a164e2180d7c1391

    SHA256

    8a2002ebedad74c9ef9407969e5ed0743d41412943e5cf3756aa06840d564fbf

    SHA512

    156ab2b02305222bc837ed0315318bf9ca44e41323790f85764878c4c48fcbd828878708e7adcd05ba40a767c51831239fe5847fc8c1e2df0cbd9f601c597450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28f581d056ded2abc74c439e70dc50b9

    SHA1

    7e97800c836afd666120c9ec2737f2ab21dfba96

    SHA256

    4a95ff238e64105277fabdd5bc28bd11adcf51db4b51036f2ae138789469359d

    SHA512

    88c5481cc618b8f0b31933b2c6a84fd3b6667a69b16acca06a9f527e8b15c9e2b5ce7d5bfb4a8302e4687718d6466ddaf43030d8c59573c3e958d9918f4bd135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d1f5501114500689915a783fa9dc55f

    SHA1

    685748ff779a1260c804365baa7c47da01b7e26e

    SHA256

    03fb25cb9efa870b974a064262f2839510564f1623457a02ceb89c423a31a30c

    SHA512

    8be3a9ab19695c6726af28622950852983177c09e95307d640cf7ae75c02bd7bd15afb0a6d949f89bc0592a4c675f1aa6b73d144f99f4a89e039097d258c7d9b

  • C:\Users\Admin\AppData\Local\Temp\Cab2203.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2305.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a