Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 03:24

General

  • Target

    65d7c47e2444b6a64cf86f3d27022391_JaffaCakes118.html

  • Size

    461KB

  • MD5

    65d7c47e2444b6a64cf86f3d27022391

  • SHA1

    7cbfed33ddc6375f9c0aa242f2f71dbeee055d4d

  • SHA256

    28dfcc0b3dbadb7826186caf35a563c478a8fd483794a7d9ca8b45b1e6d7564c

  • SHA512

    6182da831fc0e2915681c154056c70ba97865307d5eb0d32b4682537ce3b226d3331f2160f6f52ba835e367a747c0b33c7ca3c54c36d2578cd1ed44b063ecf22

  • SSDEEP

    6144:SdsMYod+X3oI+YHsMYod+X3oI+YosMYod+X3oI+YLsMYod+X3oI+YQ:o5d+X3V5d+X3s5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65d7c47e2444b6a64cf86f3d27022391_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33fe26037d96b4b8d4360e9e6898edae

    SHA1

    66dc29f91a8f88a617eae2b3b83051f4e4ac9946

    SHA256

    eee7f2899fb82a74975ffb7ec1928a84eb82dfc26acd661e35969381767cbc95

    SHA512

    d41a4af42f781b465462d31ea7c0d9ef4e75c76f3c358940c6f2353be2902ec353ca088f288b189c1288b18754c73934783a2288324f9862968e56c53cf42c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06295979bd54ccf5ff462c6020357d80

    SHA1

    dfa968a407384bbaafcea16d2c6cad3d2947346d

    SHA256

    2e720e3f8da2f94c2c6d1f0f99c212344754da8d350c6b9c4d3ffaa542c4a528

    SHA512

    fe27b9d107177f924cd2c68d6c480ad643bb4694d54964ae01637f09675b92698b871de76d94d17635d6108512af4c4dc703807595ca8afb6594475afabf0fc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cd31874a1248524a2dc1345fe3b213b

    SHA1

    74e9e9e1dc15fb281f352b98bcd216e924bc908b

    SHA256

    c29ddedadfbea2a98ddaf6706d6687c070c80f83a422f4ccd89c3c0cf616b10c

    SHA512

    fdc8eab985467afa6b81bccf783cba0c1621bb4e74d5f6eef84f5d8e63d5aaf49d89d0d974ce6104607d908d539f14a60e4a3436442cd8cb6c0c2e910d592755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a166eb5bf64cc5d721e7f561361fdf2

    SHA1

    b5ac21a043e96465743c9d44b2ecb1286b088d99

    SHA256

    1f9d7c9804d4067a2a8504951c31a04ab3dc670d1ee49e9086cfeb72079497cf

    SHA512

    00d93415d8682a27ab2a6146f78da97eda97cb59a4780f665e225e3b032bbc8cbaf91ce4fba0c7ed3ccc14244b68f02d6e7f19fa9f1a45b498195a1aeb733156

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    167da674e62c56ec1e76a2c5ce9d87d4

    SHA1

    ee8650dfbd7860e6f23c32c94979865fe54ad4f0

    SHA256

    0178a6b6661c369b672b97f81971078d6d4724ecf7a63003e3535c861d5ecc14

    SHA512

    1a500c4cad91da8df4bfc73b841ef106ca1e21d1b0eb5275b9576d434a0c75f7ee1f6fa704460c9a747e0f3281752c31e0b774b9b652cb65b6af464377e57a20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8158044b76400c0085dde210841d2c9

    SHA1

    d2591c6f732117d895399dd77ad174499f7e95c3

    SHA256

    8861c41268660f93d8c76fe291cfcaaccda658d8ca0322cb8bff4dd8bf1c38bc

    SHA512

    78aa6878a132a15045064e10b8e6b66e437eb8e1776ab6d6d41ee7bb3c1a27028313cc5e7fc71ec08e9f10a8c86f2ed247acd5ddf002d0de0ad0d81f1b9f048e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be0c22cb44fa131da4c42d757cc43332

    SHA1

    1c019a3996bbc1ca752523f4ca38c90895385a19

    SHA256

    b1b90420131701e3c4347dbce79e5ea7bd2072b923c737e11695db614c6ca1cc

    SHA512

    ba48179ca41305d6d149816e059d9123e6b90d0b65654e84e3139cdf94f967e454f3a685dabef255d6d84521e174cf27e6bbc40e2a2c73dcc03d93ce65d82ed6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a53037fc81b44781e43d5b1bfb1605e

    SHA1

    8f1e73a90da17282a76c1c1c94399b5145bad40f

    SHA256

    e6398f717786e6f8a34f26f55dfda30befbb150b4d0dddf72ed9a582fae3945d

    SHA512

    347d681cfcf8e441777a57f9a52b5786644760c2079bf880475e342709ef8fe8398b62c5d873f4619904be1a035feed478962e417b54803d7e607a3bfb9dc0c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d208ec1d3e47250e80ef6192cc736b7

    SHA1

    6e9db8dc794ee8664e1979ab1cfbcff0cc4f1d87

    SHA256

    2324b1f63bf1058da0de81a8607e55ec4110b5942e86c1ad5e860dbd97f2b408

    SHA512

    57229399598eec9e5f122913e9da097c90638b4386d05fe13f3e3d73debac9608431913271ed0330cd0a6168cd7f90d17f25edabde5215b7439fb9f10d14fd54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3480cd23feee261df852aa08e6d3b63d

    SHA1

    fdc739aee56170f2cd70ba98bcd9862eb1f01743

    SHA256

    20b07ca8edabdff0c91fbccfc2e94dbfa8938d78292d6e0651afbb5832eee90b

    SHA512

    519ac7f507194181b6c4c99afce10b1bbd38455825837aad6934f898059c8986724f9567322b4bdbe39c015ca30e67cfce3a3779f879469a31a4688dd801ab46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0fd836bd2ac6c9504338540ff460757

    SHA1

    e719039099e75914396e1383f36313990730ea9f

    SHA256

    b2f350ee85a59ab5d70fbddeb3f822aeaab40be17743c1d6bee02804e0f02746

    SHA512

    8eef363043fa2f03e8dfd9703673ead9fdd929823d809da6e602b6b3d1214a900512b401e350be575f85e0a768b91ea304d15292785f89610a6beeb162228f4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32ceca853959f1d97413ae8b81e66d6d

    SHA1

    5724a3c3a7e82e26dc9c3f2bc6836fccf6398748

    SHA256

    084ecd765a18bb040cde99077232514eea6448ae5843dcfd4279c2d79e1639f8

    SHA512

    934f58702394e9fc76ca945bf71c115af2e10c1c77096aaa9c5a746c895a593cbaee748e54d0456d0c957e9357d36a68f01e5a63efee7d569c6781d88de5f37c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d805d19134b4bdd7ef780d2c16df3f33

    SHA1

    219c0470f858fc73b36c4806f86aad028b89c1f7

    SHA256

    2faddc38c2ae812b829ac41e1fd7879308b9cd90d55dcafb11df9abb40ce4651

    SHA512

    e580ecba482a09696678e03c832f508332edd66fdce545c91ccce4cd7669e151d94c84e7864d1474f6a5546e863d47fea0119ff64704ae48452c3aa2f6a7c8da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2140b165e3a1e97c6c8832c962372c6d

    SHA1

    4036e6121bd59fe204f52a7f288eeb46e537de39

    SHA256

    2d9de0d0027d0d244095e0c51f982d427f4d69e62dca414838c04725cdc6a798

    SHA512

    47576a12f67edb35d68275284fe99df9fd2503cd2d2f9b28acb3e08a06f94ca607b2dea6a89df7cf8a395bb56c9809334f4e24bf7c49957c5bc127cb90e491ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05f9422077bf2e28982ae23b594f4d59

    SHA1

    3b115ae03b96900cd0b0b54ab85d17ca057d7bf8

    SHA256

    bbb7e111abd16fcdcd173696aa938ef807e5a6e1daea9bf46e06f8910b2ef64e

    SHA512

    ad39093dabae57f0a5c135f850fd146feeca2947265a5141428d0208d43579615757a665a338ac22aa45a54e5a4c265a16eeba8fc9603ac9e42d4378e027ed7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3141651f7870416873640e6aa0dcf353

    SHA1

    3fff637f95eed8bded63747322b734be17fbc855

    SHA256

    293ce28cb5ff9c173c95830035d4522452d9ab913c57dadc0c019bc4dbf10ee0

    SHA512

    363aeedebcff01adb78de7d3aca265889cec7549435c5292d686a39bc123d7148a29fd2bf53b429668a14e028a210abf104386e05d78a43c4c436cbd922f122c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce69879054ca56c8c1a20bb4ab17102c

    SHA1

    c90adfc3195db026bb6e169ec2da9d83e3892e94

    SHA256

    c32d09e597061d461038a5513b16704315e8974c5796fed50186a94c58f45d61

    SHA512

    8e025c3470b07f9f017db2eca6cc988246aa9d7a8904e9612bae9d564a2a9045997fc3481c70206c553b07cbc7e90466be090c3d84b7207561b3e70a761fed63

  • C:\Users\Admin\AppData\Local\Temp\Cab38A0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3B36.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a