Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 03:21

General

  • Target

    65d5d34ba3d2a404aa684ac673549358_JaffaCakes118.html

  • Size

    4KB

  • MD5

    65d5d34ba3d2a404aa684ac673549358

  • SHA1

    64d4d62ffe7db59dfa199de51cf736dac25dec39

  • SHA256

    0e8456f2c2b6832d8684133a175d9dc58b4d1298c20c7c434ae7f596ed4f775d

  • SHA512

    0fea69faf39a4de1fc1c17b0693d804c192560f812597908bf146af1473b9b56c246564d89e4b1af2948634a25a6079c665687b804cb27ea13c54ebc20b0b162

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oVOAxd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pD6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65d5d34ba3d2a404aa684ac673549358_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2284
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2284 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc95dc53be0bc0064a6e85d7d30624c2

    SHA1

    47322a2f13cf54beaf265f1ccd912768f6dd8aca

    SHA256

    c35c0eb45a0d444c946220baf276068e0db1a141df134e7aa021d80fefb276f2

    SHA512

    ce0de5693d578898121d06cebccb71be0303578696ea854107a744f29c4e65cf501e48f052d50fd407a0bcc4e3735766681feb5e852a75f8a662226fb23d08d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    598884462687c0798bbb8294cf37b15b

    SHA1

    8d52ed5dc5eb9a9616b92fe7f3e56de9715fb72a

    SHA256

    d76d2ff707dc35cef3e555bf48a2d1b81d0ff2a58f69f5390a3ae7f5001fbb51

    SHA512

    e4e6112ff5036149e47e295fa1d318fc6645871a322c78faaabef9c53eb6f7b28ec81de940ffd85721530f2350b35eb0308664ec123c58f2790c2a13e82e13d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96d7683d4bd2bac029769ded816e060e

    SHA1

    3d56ea0feb74b5f5bd41bb55cf41f660c75a39b9

    SHA256

    9b4762bdb13494bb9cbde9a0f23236b0c63f4ff4f3a1a710c29b91a3ac0fab6d

    SHA512

    21aa39cdd67d4c645c762609894480c4c3847e7467ec9550d1f4a1a65bce6b43834907499b7b2cefe14bd88f390def099edf8acdffecada781b9d7cfde5d32c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05a0602add8cf98bffda05baccff1aad

    SHA1

    badb4162f9141423d9971beda3125d228d8d66f4

    SHA256

    cdf0cfbbe85eb99bc348e0c1325e37e67a6cf1d160e7a3e6f1e1bbb4d489ce7b

    SHA512

    0184c681f3f78a55554cc9f7b48e237a96298db5010a30b2f613337615856c19459ecd475b64198149712b8d24fe78f31ccf17ee7b8925b6c4df0f3b1dc276af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95d6072d031ec24873bb3a034a9f925b

    SHA1

    36eb8ecb3a4ec7284752c35423b133bdfead7cad

    SHA256

    1d939634b67bb8c4c86e143664bf22770f3129d0ad8ba7091d3ce36c25f8db29

    SHA512

    1d1db155fa59f7cfe6a37436a72a02c021f9c0c368434389ea9341266f0b7e4f51d4f7fa79b5402abe7faa90549af633f5225324f8c74f3d58687e9568e1f634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6393b619ceabfa187955ed2563ca4a4

    SHA1

    2c4d9b8abff4135dae0ac562a1f5c537c1f1b90d

    SHA256

    0ea08831db55dd9a50d68acbb99e380d10adc5f466eb91d73063f3781a6784d0

    SHA512

    ff1492f43aa4ed73d57042c852702941383f3a0a70b93db99e5396e3270033f8e9646b38c3a841f486513387449cda02da778342768d1adb7ccd67da14b53978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87a0dde9af967ab87945fecc1d4ef6e3

    SHA1

    47e8f24dc6f50a912fabd3fc35688493f22c23f5

    SHA256

    1978e49bdd99aadf8360c571e7149302af51bc91783b7a07944b2c2eada89cac

    SHA512

    bb9662d6db3cdb812dc5d6374af34b23c2c670c3df9daa911c9be988a6188977c1456a87ed740837f09555cc454e69d36ea8ecb1001c16b6011c8a42a9b1336d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7afc639f861cb9f4f58fedf785c48571

    SHA1

    261c63301fa0aab88fad4b9548b7411ba5e5b665

    SHA256

    ac2a94763a2887668cd4314c9b1d530a68246f1a20f74981e07bad5880860b85

    SHA512

    808c4ddfdc35576fb8758f11c6d2a773133c806db3eb737c3d877b3c351be2cd6cbdd7d35e831848db891aeedb97513f08a2011c553fbf55da53bb38febd9db0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9c9f7f03d7d91b6605bcda4fd8aa2ba

    SHA1

    67ee413de61a7189dfcb3c5cc4606a24e7faf470

    SHA256

    c6f3425a5c9c25fe04a43a896123d2752e95696637442c4f6502a63dc21a0d86

    SHA512

    b58a52939200b048d217ec9f56563d91a2f824e5bbeba9955e894bad875cc62d2eda673ef247527261bda4fc4d86ad2cbf1f51faefa55239bf6f069908079d0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d83561c763386bfbeb10efac96d2bd97

    SHA1

    a40f24104dcd5537aa43434805ba3927e87b4b2b

    SHA256

    fe465499fef504386d03de6c79c6571211075968deb0286289c0772273d7835e

    SHA512

    cfd97ed76de2c65b1be6c0306cb84caa812892e72f775f4cd811955cf56dc2fd0ae57474aa0c73ba276e8396ac4af9328571b1118afabe7d013ea8fa2806a317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edf138f87dd6da10b6d0863994eb8f1c

    SHA1

    5e0548eb93011c3da084eafda0fdc1274051a276

    SHA256

    c58209dbc8911069095becc647563677fd73145492e466b3a13897cb4e1d7723

    SHA512

    c03cae8258d62271c611b9b2c86a789d70885baded98e0a978c5a42b311b90309ec0108e0d9e8c3f9c5e7170597110bc3dcee7ab555715b8d2b9d25ccebb6b39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6642698c8c497037663b7976c435ab65

    SHA1

    8a2736f3e28346bc2b695ec1b616acd73a3d915f

    SHA256

    f13b82d291b53e7535942b1e25d3a9526b663c8dff2fcaef7867fca2e244a3fe

    SHA512

    b286b2d5e48a5617d25de6c8c7eeff3a7d2e433c908d8512c755b92cd161639d3b0ef1876d465e6529553d9e4727c35fc4a9aa585778660259e8006dc08f4a3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4f38884b9008c67c570e28950eb858d

    SHA1

    0bff62d5733490ac41660dc3df386395c1581c2d

    SHA256

    e2fef9f0391b459315339c281d0e73e457763d6dda5a6742bc9fe54bb6888b0d

    SHA512

    46e731e15ea9e1aa22c75f810df675d2123220a70b60eb11612b99b8f6da4ecf6da54922eff20eaeed8df9b0c21c9ecf481153f60663323de9f05bb3471e57b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da8729cc5afba48347740b44d6ecfe84

    SHA1

    55860be18d5ec8ea6d863b74092d99a7443d16f4

    SHA256

    2158bf46ab6b07801634f54f98ac3f9ac067eded0fccf53e5721e13c7bd04578

    SHA512

    4c5ad1edb40f995ab9fe5d4a9af72dc92317b5a8a0a32f6e8316a3e3a2fd182d69e1f19c4d75a371e6431de88a0e8551ea1808e25e737562360b29c6eb53cef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58c6cc44bde4fd0cc6148d29cf4413c3

    SHA1

    68755f8cd72d35596042ee74f49ca71a8c7f6c02

    SHA256

    349301d7c4469bb90f900fb5d097a386185b0373fb25ba4219bf58ebca9d2567

    SHA512

    4c402210c1c16ff3e4f971ac1c28b77354313aa1688ac65f2b3556297a75052bd24163689daf49665ba5d01911a129f6c252a28ccef6e7d787a960e039f6e5f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8b4bb1085826a288c214709c550599f

    SHA1

    9af430f68c8420b66ff16980227445e9549b480f

    SHA256

    12ae29b97d5296772ac3d70bb97069c1af5e2ba448a6257ff3987a878ce86f99

    SHA512

    9df3699d5720ab1cebd07b26431b500b7d943565f6e558ad3c437f936030b8b07084c502c646abf5f68521fd956259a7b0a8113e4433afa5ef0ab920578a0b4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d62434ebea0060354f34fe70ecf26e76

    SHA1

    2fb24a4c9be5a68e65d04fdf5390b0de6c3cb81f

    SHA256

    0658d024e014538b642811f8b387ece13aee851cefbbab5e9956c19a405e3183

    SHA512

    635dcd65655001f362f871dd7b9a6aa81184b9b29e327c5a2911d3f7e6ece70602e70712fbd5f60632395d505543df0934801f530a2b01e91e1b6c1713ba7d24

  • C:\Users\Admin\AppData\Local\Temp\Cab22C0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar23FF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a