Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 03:43

General

  • Target

    65e3a23ef6e85a8532042535f0916f58_JaffaCakes118.html

  • Size

    30KB

  • MD5

    65e3a23ef6e85a8532042535f0916f58

  • SHA1

    628e7a54900ca7bfbe24784571abc9c9c9b8da44

  • SHA256

    a48a6c520c364562827ecf03b3f2f624bfe1706418f8c7b9a88359662181ea73

  • SHA512

    a42bfadea2f0cf755afdbf55c4d683f733b1af7ac2dca437be3abf1fd61365d373aa1ab20738c398501ae17b83120169b0f56f127cac55042849e86fce3efb3a

  • SSDEEP

    384:Y0/eaJ5TcNM/u8dPbKBXemRum0BvPMwsy6I2aCHak5U3ETzZ5EncWSgCk0M:Y02azTcNUBb4m5jAHavCzZ5En/TCk0M

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65e3a23ef6e85a8532042535f0916f58_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f402baffd0c2013d8df1745feeeb50af

    SHA1

    3b912cb2a8bedc8c0e12ed80af2fb806aae0619c

    SHA256

    a6db258aca74e4138f3f5f97745b91ea110fba47ca60a399a59729de62a73fdb

    SHA512

    713741a00716985ef46c1a9781ba95bfde3622126933ec0f697483b1f26b6f090b102f2664bdfb69c0ce80c317653e80267b69e91f0d05b1c88ff4084ca417aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    843c7862e892d8e97a93cead02ade954

    SHA1

    4d966a5e916d4bb524bb4612261b08e4b06a15ef

    SHA256

    55fabdd0b92ecf82ca91a6f548b70acaca9fa8b8ae97df7119277071bc0fcb27

    SHA512

    99e614ccfeda138fbc90d5ec9dbb9d6eb53581643cb7a61d9a427e70e70d316dc05b837e28ba7062840b24770a27721fc3c33182bce30b8a64835ac018bb8606

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f4a7a7f2f45821d7f85a68b8ea5d94c

    SHA1

    837ac915e98c11d6ae1cbf8968313a97f30b3e4a

    SHA256

    eb671f01e6bb2537d72f80331353dbabfa026920391941fa723a7ae07944f83c

    SHA512

    d4c91b14151048874cf652fb0a41d096c3b70d27ab6bb5fd0cc362a33acb7b294b96f56cb1dae385fc410d5b9cc14c2ff14750c8cf14ddfdca97ee309e1dc8cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    429a636714628a08b695697d795d5ba6

    SHA1

    4542cf6f48ce6f20900ab014426b3e6748f77ecf

    SHA256

    3b7d35048b21e434d86059169493ba05390b24c3f5d2699042a988707e4d6889

    SHA512

    fa228c46de91a2c0ba0526949df573e648bce254a2d4768ef435b6eea2c258514dc5b2aaf18fbc7f59a535686e572f43ae86dadbb829c9fa804eeb1c482d2e95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfc114b758c7e0a3db2945fa2df8acd7

    SHA1

    07702f56e40f0107930f41809f35deabc02bd466

    SHA256

    b27cc17e44df6d374cd3ba603db9b573c03d54258cc50ec41d4bef474b223bc3

    SHA512

    1be33324f3bfc77806275e3dee9c0e14b84c31661ed05cdc4b43dbba1b64faa371757107344d4703232e6cc13a6fbb6a0829bcd9735fba0b2c0b966d0a48ee41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e36a6e9f342e86539c032b9e8c7066d2

    SHA1

    d3137c02ca0af63b2a4a2e9d1e79d411429f09d8

    SHA256

    604461ff7abd882ac44f47114e223462847cbe677abb78b7a6b5ffcceae4b359

    SHA512

    2318a73cfc379f913671fa26cb198e00c97bdc94adeb44d973d9f2f0e499fd502a59e7dfcbcdb7d080186f158d21db8cd8e7410e0f6c1a8f607d4bfa436ab40e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dcaffb0cc7ec942e4e85489b8721cf9

    SHA1

    8252704d695c98df6c9a490f2b7eb81b7e87a22c

    SHA256

    0003fc8980999c0b8eebfc47229ca9cceed65729a3a351632f961a3ff1907f83

    SHA512

    2c6ac7f474061e86af432f1c7ea800374ba10ccf8708c4d4f48a9f1ba0e1fea18de5c2f38b0698b613828aac7ea24e22e69eafa59f55068e64d0f327e9409e37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    367302c0eef0804b74d1672ffde5cf6f

    SHA1

    7bac579b673103256af1ef9ca70305ac66d7bfa3

    SHA256

    9ad319b6c52836e075d1b973f4ca846120b313380a1faa15920d70d00566aa4a

    SHA512

    beefe2403b00ec0d0f94e95475dc9b5d2862bbd73ce9996502d40bd3be9ab63286435544caeb9b430ebe7dbb8b106aa5388f2086a1aa6d14ec470d30773b23a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20eea7d26052cf4f482768e3e3a421e3

    SHA1

    53e987e5be9da367e48985939e7dc6823ad33702

    SHA256

    b49e85745d9c542cf926b6b1b10b256f51177f7c129a7b2b490d7152beff65e6

    SHA512

    e12a949fc768a235a655d9011a993ee8c85d5e2835303ce30bae8d380e3af2239e6049dd109000d95ee1b8ea7e10784f1bff29c18736a42535edc301a765f71e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    776558883ad4972ae0bb6333fc99d553

    SHA1

    dd397994dcc2e945c5a1bada041b4dbaa22b2400

    SHA256

    b4b97f469a5e3c71bc8d425f5d8e880b1986e0c211b5d505546d8a71e0f079f7

    SHA512

    1f591e7fba564beae5038125a966eab965f409c063c2c082e034f47a0d0a095fbd9d49072e901d0c37a7feaa76867591aaad195037eb211b02f04c88e86517cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48b59ba358a172245397926484c55d5a

    SHA1

    724bb562e7fd01f7a7dc94abaece9fdfdea1f6c4

    SHA256

    820c085127416cba42021295d091a911b86062a1aea730e3c156f8ba45525c2d

    SHA512

    70abce4d460cb423ac55725df9883013be0fb5a32151244fffa1fba3f8283b1301414b57cf9b4b46da8390521a2ad5e81bc03393b3c181a596c355a647823868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    460d880c95d0498fa41294597d0bb373

    SHA1

    370b0950da0eace7ded440ac985fe33fdc933ce9

    SHA256

    a11e305bd25849b5b4b5ba7b389f652fec674d63958f95952ef073b1c3b0c424

    SHA512

    6769befeb950fa6415dd0d738c55c7d7391ad966d650e95446e9676ca677e50977bd208b9fba225e8dacc770a9bbd7c6f2f9cdb729c61d02c642f9a4c842df3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76b77bb7c85c4c4472ccc1ac19c6d123

    SHA1

    9976806c0adb3c53f6be0d2c33bade0db7281892

    SHA256

    86acaf66aeaafb49276a60b640922179134af73b22c4ba7d4e7c950200ba6081

    SHA512

    3a30cd7a68df635afb197aa510d14b834935f380699dc9b486edbaf15a6e90248d6a397f1cd49a3aef9b5ba6d1b5cb9418a243472bf021adca73202016cce0cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f063d97b4cdaa9fd89d62a872df903b

    SHA1

    73c6b54f4d2942782fce5cb28090cc19207575c0

    SHA256

    de982b620a3db6ac20bb4ee92fe229362a69a06efb3825d206e9648790016b2b

    SHA512

    3ffbb0d57187f4e4637cc51c585a8d6dc1b73aa2df21ee8b6d1fa72d1a113c9685fa13dc040ed172c199cdcd3980f3230bc487b5e0232511194ca33f0bfefe60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55cbe73dbf25ac20a1f766b4d9519710

    SHA1

    24a8918fab7fc480bcc7fc581ab04a99120180ee

    SHA256

    d7ad7d283913ee675ff315470ea35e2d1a5721d012b5d4d2a34a02e57beb1f3a

    SHA512

    dcf32cc733ca7451112321ac3567f3e4f9a6e255919f5c408c782340fd7165a9dc7acbac671f37c671d0ab87c7c2f048fa1b217a13e3350afef250bea3239eb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb26a459d746d0ade5683f6caeaedda1

    SHA1

    056a59eed30709ee46817c649e37e7d841bd2337

    SHA256

    31af0e78420192ad606dbefa567b9f30a08deb6d674fd5c9ccf0b5d23587f00e

    SHA512

    e95946025bb0e176601e7ddff27223ca0991979c6663ce2f0a4732d6c11df23927a9dad8710ac2c8ea242a545779c7178f6931d9e98f7eb139622d6e695c630d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    773e3c9045833445f3d60f0773e4da1c

    SHA1

    6ba89bf28130d67ea5492fb1376af5a91513f894

    SHA256

    7d3652b5c724df3aef11909871571c13c26098f4dc2ce81b91a2d9d4dbb29f0b

    SHA512

    c47f5119ea5000ff6d372b0b2147b99961c9df49e1a7c958fa1fcd7e7919514e57961516bc67d6ab0dd5a507fc7e07b158cfc908a14c08117d5271cf2eccdedf

  • C:\Users\Admin\AppData\Local\Temp\Cab58AE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5D95.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a