Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 01:54

General

  • Target

    65994c351f6aaf1b5539f0ce60f5aacd_JaffaCakes118.html

  • Size

    26KB

  • MD5

    65994c351f6aaf1b5539f0ce60f5aacd

  • SHA1

    ca085ad5849e481ba21fd3751110d7fc427329c2

  • SHA256

    bf36429a4b784e88383b88a48afc35daebc5d40816f2eef8dc3cc5df8102c550

  • SHA512

    c0f628715f51659979010358465b16b377577c0c78537984503db1083f4b46fe43902b56312419ee32a5a6a191313b27f280adc3c7496a45ce72fec322bef057

  • SSDEEP

    192:uqvn3Xb5n1enQjxn5Q/snQiePNnYnQOkEntcinQTbnxnQbCJVevo7Nt+Fo+NzQ4d:nLQ/Eygc5R57O

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65994c351f6aaf1b5539f0ce60f5aacd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5919721f7a30bd4bc98be8f8eb73af5e

    SHA1

    ae293900e6240c47ca6e0a55b0b9cfcb068755eb

    SHA256

    bb815e71f7de871ce2b1140d77ac2682835ea4b384de1ed3d263cc15ce7a19d1

    SHA512

    1735d0148635121d065edb465e047b100dfec803851878e2f17bcbe5e21fcce56b30b81abe7fc7cb8b950933b4ae1c6c4c16b75054de5d9a944dfc118637cb10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4154db600471fe08417958e04a7d4973

    SHA1

    fff177d0a5c3e9e279fe0c2c6aa1637a7831dda3

    SHA256

    604d6f1f3c551335ee2cda76e2dff06da0bc15100af98848f6825dc2621bc1f4

    SHA512

    3fd3b22bbfa81a9c9a826fdcc760751f9a45c07eb5de9ffdf79840d605c0ec9d6f32394df0b39147677c3ca9200490b05ba8bce52163a1770378640955a0cb7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15cd156b26c2e2f7eb16a6def17503fa

    SHA1

    50697ba309934b2b9e64e60654cf043ff4c32f0b

    SHA256

    9c559cb88b8356b52a96b5cf1d63790c5f74ac3b02a4f8b8014399f04baa3e47

    SHA512

    6790bd25b7c3ccff3f3f20a2ceb914abcfdffa45a8420f79be714de35e5c6306855179b5e49e7d7a4a3a5c905ddad12413baca14d00b1e35343ba52b12770a3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cfe67bd09c205e2f358b009fec54fd4

    SHA1

    37d3463394c898f2066315168108ba0000de0520

    SHA256

    f4c2b7a535eee0c3fc5b1a7aba99e24dd022618b11018a813dfa41b1e8b1d47c

    SHA512

    1657a653052948598d2bf065abe62040852c5cc8bad4b07cb8879c806e07555d9686811f2e35df56b113baa5f60507ade64fff3c756e1fe1e97de3134938fb04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ba2ca2b6ea60d4bb98d763fc2140b21

    SHA1

    84334ecc92187c07ae7edcb9ef9c6e48f571d090

    SHA256

    ec6f629ad5c74bba2ec7a4c8fbe7aba70aadc6f08f8427cadd6b7acf88a8e5e6

    SHA512

    c18583d34cef02d6d57b020475966315be4836fdf4ad975192508e233763f9141456d29372b8cc0052556e9af1c2b4248b570244eb812d14094cca0f0d21bfcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b889be737cf38b75da5fd923c4f3e32e

    SHA1

    36fedfe2bcb76be4198c5047a90637a76f63f891

    SHA256

    1c39018d763faffac9450876aa457e918c8c21f9848a2ebfba89967a1de88a54

    SHA512

    e6ea4870f02ec61a35e345aaffea30e6286413109e7d696592408fadc666acb8fb766250a0d082bd47af132599fa48f62d188fc1436882bd4939cbd3579194b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96e48a65e0777a38377f36ca84000fcf

    SHA1

    87647d08e882bca4bf438daa4b7d79a798d25db3

    SHA256

    7d9d5994cf2c609f9913a84380298421c4348dda59f4be19eb736e57421198d8

    SHA512

    f144195b8902a717b4cb2460013f05fffeff62bcd2bd5e222b8eb03f9bf6f86acb703c5b148be54fca65205bf68ce9c2f61e6c24c01e8cb0151959c767c9b039

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24b4a99919b34f91812ee7f6d525e2c7

    SHA1

    a68c8f7c616efb3245cc76c7c9ea7aa1215b10a2

    SHA256

    a14e96fc5eecf4e78544b2ef0e0f3cc4702c8e1b2696ec15080c731724ded043

    SHA512

    3c76efc8d0af689abd89d3b8acc0665d0d99aee6f003accdefb22d18b75e46366c20189fd8d7df999664b4c72375bf89b80bc3c6b2e1330bffef98f03d7a98c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d19e22ba3061c1722d09073f7d64f007

    SHA1

    0a340e7a3554a56b5194f680b15492955b0c6b6e

    SHA256

    52fea01ac652d669d0a4eea83ec16238c927324b3ed75869d43e40a998136ebf

    SHA512

    a306306b435f47f5b94eff2f28fc59e1323348f81f212250bcfb08ae04c2c967301295418d38ee5595dc3f80f929dd5553ee705a1496590fb8d10773454fb2ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cec9bdc744aa1131938c45e88e8a8c71

    SHA1

    dee53e4ed4d8ed2a962cac615e0abf613861ad1e

    SHA256

    8e784264aab8b7f5e891ede351009eca5c686f2a6e665701ff774a84fbac26d6

    SHA512

    de932e629004b154145905d6963892647e23efd80efb08c0904015cba8ecd8cafa018cd5ba5060d829e03f748e638cb9520431532c45320f34005f7a16d39e22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46611d3874cacd26e15837a8019760b7

    SHA1

    c6524130eee903b276f19fa5c2e1b3635c93b520

    SHA256

    edc370f7279c07302e2aeb235e7dfe703c929e33ce50893da04d49f4439eb3f5

    SHA512

    0e59bc97ac7afc676822ddb7644780ea8c43d1d7edd01b31c78691eb0ce56cfce839e0c0d0ebe1c4d110ef7dd5fd93cc2763f15e851bef435696669646e372ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b56c82e88a76da457451bf94d64f01d

    SHA1

    7aa9c474919f474969ffe16e1cf945694e899861

    SHA256

    bfbae3d6c905915b457deebda444319fc1b111cdf0767f3ce76f2de1d6b13e93

    SHA512

    eb6d4620ee752b8cf3fc82d072d33bc21706e315e1572c7f301abdd26ab8f39bdefc716fdafb734e333213c010facbb8b7c8d7641ada44aca95b8f4d36484d34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bb5b44615412b230ba8711f9665ed52

    SHA1

    65c67f7733ecb8b530f2352da78b7ff5c91819b4

    SHA256

    88f33ef709080674e2900758f8b1945e3b1c82acfc4c8b3c1133a3c44df4efaa

    SHA512

    a08ae797425910f198ca7556c1b79a4de6423471cf123d1ca5b8ad03fec886b6caea191c2cb926f307b4b99940d0e014aa0cb8bddc6a53321a36fda37ad24a2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a4734bfcdd0e069709515ffcf50c236

    SHA1

    a43b85e7193ba5ab678a7e6666e9e3199c9367ec

    SHA256

    850de7ebb4032bc2f7d841441c9399df26815f80ddbbacb6b533805410375212

    SHA512

    208cbee39adc49c0ed436ff46238ef544936ccbeabd15915ccd12ab134d122a7aaa1b9629d7572e709c1d1f0fa7a5cc35f4183943f57cbe14d75f1cdd25f23ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e93cdd457edadcaf7a545bcb3d6c8da6

    SHA1

    cdd62b4236101ea793dd54892d1991a4b513d549

    SHA256

    f532d78db162343a56b6bab2f36842b79d42e18b2d1aebb23db7262cea149571

    SHA512

    774b45d3941313a13223dd035ee3b193c8371b6bda18b206aecdc49852131b5fafe7b5b7fcd3357e4255fdbced010684d8d3210c432354200f35d30661f898e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27d9d274c66ebfb889d8f293f7d2666e

    SHA1

    4cd3a54ecbb3892e874bd569853bb8c800095f52

    SHA256

    4b85919be019ae789c851b37cf3bf20497d8e2eb5b7de6c3bb58d3226e5dc357

    SHA512

    066d57561268ef46159b0117734e73fc4ec398b6fd494f0166f617c1a6d193971b9525768f42c48c3d31f64d0b5ec3f800449bec3f5bd9e28e71ea7b5d1b46c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21748779ec8505d3ce50acdc953f2c68

    SHA1

    c0118b94ca1461d47e7b6bf855d32ca29e7fd45e

    SHA256

    6d5866ea35228468db6a07e7c2906b835daf6cf8e521a8b3247191868dfaa9b0

    SHA512

    c6b1998ebca6af98b46eb2865e0bcbabbf67c17fdb74ce6cb84be36de6d46f1c555e44e2ca2e5331b5ae88cfa149455fbddc509b56329c361c5da7567703256b

  • C:\Users\Admin\AppData\Local\Temp\Cab4270.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4361.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a