Analysis

  • max time kernel
    133s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 04:53

General

  • Target

    66102fc6c80e2017b514e988d7b1192f_JaffaCakes118.html

  • Size

    23KB

  • MD5

    66102fc6c80e2017b514e988d7b1192f

  • SHA1

    5100e565ebe7fed6e3a002fd785725d1761bb8e4

  • SHA256

    d8c09bb0f90d3a694a1ad5294b58f303a784126f38de0b0aaca3d6bd7e6d30a5

  • SHA512

    8d9c59fc96662a1931b7bef11d99188328270f5f0a986ab7423918dffd7aaab8e28247a3cec91e1bbf82c7d1a5f26c5f5273314cc5324da532cfdef216bda94b

  • SSDEEP

    384:jiEK9XpVBD8cnQ3R9C4Lvudu7dMH3b6D4QAmccfPkycbp57k9xhebuzVc9bp:ji3gcQ3/C4CASuOOPky2k9ebAqbp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66102fc6c80e2017b514e988d7b1192f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bfab1d45dcf2d0e1d5db6d74e293e01

    SHA1

    6de2c0852669a586e191b279f5204c98fe39cd14

    SHA256

    fae77a41b164ea7142897384dfcb25da907abb05b36deb451fbc5f0ff6225ae0

    SHA512

    d21d9f361ec6f97dbe75c698bcb5b4888c08a1331231517bda9c4fa028e8082c52fb4a0c64445e40bcb77344bb7d7994f04497e274069dd66266cf4dac45e8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ae51ef7a2e85fe666144f2473406d67

    SHA1

    99e8ceea505ae0d1e58cf1326d4d889aa0484f80

    SHA256

    33a4d308dce605491a8eef0ceec446d9a0af4137c08b7cd843ed1fd44c79b376

    SHA512

    46c092a7970877f02ae0cb4ebf724678fb9a9126f11ecd422aea0c316f7d3852a71cd3cef75eb6b7969050e8b5e32c4675e27e47eaa985c632fed475389a8a87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d77f0c67ba0e736d7a9313a2bb598024

    SHA1

    6cf43cc223fcf8533ee968afcb5037e60bc16e17

    SHA256

    f94b53ad990887e405e7256b94e6bc572bcedbcf71443b1224a5bf1630d3aa79

    SHA512

    b58d63d47059f637bd412ed35676de653459b49f35cf8212114caccdbe1eaea27607c9e55f5931740b7fd918237366c479971fe5e681e500080971cf2677d486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b8d58a137507873cd8e7ded0ff8da11

    SHA1

    efaca680c443cc2c70ae5946ffc6dec5a44cdc83

    SHA256

    b52d127a14fde856f796b09a13fa40e3089d67623b3ff8698709106baecd8b7b

    SHA512

    e70472e7a0109cc872c614fb33da852e3f7f788b05e6896e0a93080cf0bfecab578e2a1d16829d77e2cff4b81be2be20d5cd26ffb6cc144b87577e40a55a8cab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dcf9b97137d2822c872ad3a6c7c8ba2

    SHA1

    53f22e7c786e8044127b6bdc3b731818376b04cc

    SHA256

    464009513a15e7d4384d2a0a483f87182c1757ce108492db0c67978efbb1542e

    SHA512

    a509007e7c069d2ad93acfc7681d5dd989ad3a4860e5ea70eb9a858226181a6ebe91ade790fdadf0ac04f8c796eb9293d43658fa6eee804792bfdcdb8abe993b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    844050244abdf5764191386939cfc6eb

    SHA1

    7cbeb7f13a90bc29cf2bd454f693f01d8bd2f89e

    SHA256

    8e7c41e1e21617c5fc007eef8c16b8c4a96c9ad4cc425542e5074a80d8fe0ce9

    SHA512

    b6c5ec82f424aacd76dbbba70de1a515e13540a71f837d502b3e453abef01f5b31fd84a03b29934b12447997c4c7c480e8ae5b38c93eb3499185dd67a5567755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c26590ca7f6ded087784689f0e09af20

    SHA1

    4934a268a018707836fc948af614823b929d86cc

    SHA256

    c17ea04e2209909f22830bb1614b3ec848a837e694cf0b8c37fcc83a01877f51

    SHA512

    8eb736fddca2d50816f6b76a4b6367e1be3fa6bc87747972255c8351a0b28a565d86b6f5506731d8c9e4e7fe6e666882c5b47e3f1939a63a1e8cf7d13018dbf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ad71a157101a13c56eeb52b6187aab0

    SHA1

    c0e1beef36e343eeeab475b552d8b96246bfd6af

    SHA256

    e5c0d1c0960ece3071a3b308404f9ff9de100f4d889b3310535665ce56e7d692

    SHA512

    de6d381618a8bc37b381601fecc1096e2965100a356f3cbfc86bb480a155f7da8e20301d841ffd88b7c111072953dd9a133178dd5b0538cc86c83d3c303e44b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1c62a8fb6bf200a1e506a31f0701cfa

    SHA1

    b947ea4d69bff076c73b95941558604fc00b66e6

    SHA256

    8832e11a45cda039f66c1d4dec3de9e2ac91b89e145417c0bfa21bccc6b4199d

    SHA512

    442373b8145ee5f333124e9f149ae38fdc4ab7264a418124694c41f989d9b56601354ba2db6be8cad7a15d689ae743f1a2d0d7497db426739391ac8e3a5ae50a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ab08a35ee5ed7c59f226463a954dfb4

    SHA1

    a9ffa9ba35709ff00f2fc7330746e9216fdbb4d5

    SHA256

    b342790d871363ee094509eb42f1c2bbbad2d073731f2fd0a840128141a6d646

    SHA512

    60597307d2ed6241bb2a8c1a04121442052494a809074e518a3734ff97c1ae202a0f5c4c081286e1f9bae5f365bd054f9bc04cfc654a7683339fa058f9e500ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3864ffbb269dc673aa42bc078afc6f7b

    SHA1

    cd74dd2fc8080d62aeacf8d93a854cc941523e5e

    SHA256

    6b474c1ab022c1a33ca5bbfc76dc2750cb9782aa35ee4fdf07a3d26607b93161

    SHA512

    6f22de2ed783ff2374aa5160742d1fde6aae74139b6d8beedabb1816e7799c3e143c0eaf01089503c5bce7de6a30d793a29d25510125bcc95dfbf319306c485d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea35ea82b6a6e4fb90264880019369b8

    SHA1

    b9e81c51ec74fc3383d1cde4c1a84e806dcef8d6

    SHA256

    a6587a3e9b9564bdbb36b6b57d12b60b6ff0acc5b10cef9e47ee14364d776145

    SHA512

    82a200f7d2a731069cc83b780206c538435b85b910478162a39823d3ccbfe509d86392e93703bb85ac74b6a98902e936411a4bb1ed9232dfbb5f0a66d4138666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4321de0076642b9440d94a5b5e2ed00e

    SHA1

    0f5a15e418602f3020cb0afa3cff8cda1bac9cf5

    SHA256

    f1b37e7cf205093ef71025981b71cc64159b745ee35a0075bfd575f7c594899f

    SHA512

    149be31cbdb4e3d830658e5fd96c4a31e64649a6ee754258bf61bffea566028351066dca4d585eee47f763b1a551a5b9e5151548bb24d32704b26dbe73285719

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba6efaf39c5d203bb4bbb70c130f7619

    SHA1

    e619b810696efd9dae881c8ae599adc0ff187e56

    SHA256

    b81482d0b111e74c85ec0b17ddbd1a9a63fd35d13c56c3f644fa622f3deb1c20

    SHA512

    86370807e96a1ebb1e7e028bd50f5064d67af612da712a4875c34350004c2ae1a30abd6ad11ad42a6411eef3ed31118c1598872688cdb646b29f73d6b077196e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2341205b346cb4529f4a4985656b83a

    SHA1

    f04945dc0710a1ee821226e9235f33ba0eaadbe7

    SHA256

    e0ac96b591151440662b4f5edbce1887e4770e6a6ebf746d187ba8be720a33da

    SHA512

    f7c526b4c62af809aa1f3bd39765299d036e210a3c8bf90a68da0cd46ae16f8b2e93a9cb5b8403c3675e4b560aadbcd606a8b2a5578c215021aaf40b36499eac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    262ebfb67783673b592da41480d6f7ac

    SHA1

    c0ab006b45d613d55588777ef6f84c50941c547e

    SHA256

    2f7c0a491888280dbbb0e931007715e09a5d309cdc8bfa55b02869ea7ba1f7da

    SHA512

    2090013a9b9c39628eb5dfcdd20592f1dc6e395f36740c6d5e76bbf02103559a9d54166456b447a47f5724dbb2ef1ae16e0bca0ab65e3a60c8da4e67f075f082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab5b1d1e8be37f8a187cc9145feac9bf

    SHA1

    94d5cee463d2b5ee4acebfdca9cb3da7abd658f1

    SHA256

    66911e571f8bcbd7287fd9757be5142a4576f09c5a8bebb8eba1683000619a59

    SHA512

    5f3ca5d90290c92e96778d8acf7ad584913e4cd270cefcef4d3b6ffb49f1872e19d2e1486bdfcd7a206e45cec9d496fd480d2793b86cdcc3ebab068f1011d644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f667b08dce1a4dd9d5ce511f68933d76

    SHA1

    31af2a51875ede297e937cda73cd306b9da628da

    SHA256

    af85d5b155dc57a8a97739a03c5e54b337a5f4b2b4c87521bdc385fddbd95fc5

    SHA512

    90d61dc79fb273d7086da259cfae60249b14307625599feea6657b11fbe658ace235da5ba9e2e086e2d9d9594ab9952ba6a980ce4f296a72e1f57c0efc528eb0

  • C:\Users\Admin\AppData\Local\Temp\Cab3037.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3098.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a