Analysis

  • max time kernel
    136s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 12:15

General

  • Target

    673b3718c01e3f90e49d341e582a858a_JaffaCakes118.html

  • Size

    214KB

  • MD5

    673b3718c01e3f90e49d341e582a858a

  • SHA1

    7ff63a1183fc989f6a4dd3bc902123ddd895ab36

  • SHA256

    adb7abae6e1b558e96855f29fd18769ec8a3761d144832f93c47398e45001ce7

  • SHA512

    be091ebd40c6731426e182cdbbfa29feae04136a96cdb917a0da61111d89b5d7440313baef008187e0578360cc471b1d693d8329c3b9e50863348aae61395337

  • SSDEEP

    3072:9rhB9CyHxX7Be7iAvtLPbAwuBNKifXTJP:Bz9VxLY7iAVLTBQJlP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\673b3718c01e3f90e49d341e582a858a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2164

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c58c97f741793407fad9936b1022195c

    SHA1

    671db1790992021a28a87d23fd93139d7cec3317

    SHA256

    27da2548a85e84c996ecc2e5f34c834525f0f5d960389199d286d9036776ada6

    SHA512

    e77f762c1c935f6bee950e0b27b778258434776d33b1cbb4521f73a38c212c4fc2a031000ab2c4a4065145898af00ec4e26192bc8ac03260e033adb4a494e855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63a8e14d320853350f736235f0f9c321

    SHA1

    8655579c80b40e4605b5f6a53442b1431a4896d9

    SHA256

    927d68eefc5ecb07e7c0e5e9d7a2758e42eea1f2f964267202843a80e6218653

    SHA512

    03b177d301ecbccadb9643e1f313ddfda5e635c6308d4472a85625219b7d2513e5786fecee9a07c081e375a600280e513ba6bb1efd8db30fc9bf9d8a0b270d27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d28c7b8a367228ae8a117b6c0e0b77af

    SHA1

    f121ef3abbf0f31f040780f74654b3dec86301a5

    SHA256

    8c66cfaebd7ccd79d8708af27c8781bd94eb25eb056f834eb55f6f75c197842d

    SHA512

    f489196b93ff26d107aa49307d8896e4850c87f70080f311a8b31b972244c00ee9895fb58247b3179723219ac80a78656481da47c8afec1bc62df4928b656bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6670a1176dc56f89126fe0226e1bedb9

    SHA1

    cb0789f34d06cc2dcc46ed150cc34cddebd90abb

    SHA256

    f41b3672d3f8d7c9bcf3848cdaccae2fe2e41d560520c778b8303b30f2ff765d

    SHA512

    a5f01e4f2f25a32236a2d0effdc3fc3462da25c9f18e02d81d7cad5d5ee01b7ac231b588423d46eb77233cbee04a01673c56817dcf39bd6941b8084e768f22fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c22f708f58c7c3683c4209f5bf4dbeef

    SHA1

    48cc894f2187d337acc94a737b95850419e43557

    SHA256

    9eba12c583b5aa6eac83802db089a9505a3e6e139e21da5c532bba84f18dc8b4

    SHA512

    4435ec6f74015a3c91d595a14981bf252c168bebb558c890abc5efc5299fe2595f31ba6d967597a29a17f6d56ea87d23814f1c530acf8dc4d83e3fae0e97e1b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bbfa3bfe6d7fccbc30eaf1e143da77d

    SHA1

    73d20430aa1d107722dad7d62101f3a2b963dd65

    SHA256

    3c54f9ce7f502fb6bb04161fb8c1f819389757202f86b2b8bd7aa5dd2363e454

    SHA512

    518fe349ab2af38bd5aac304083b3d3840080e4d38edb13b92d50f065e0c7d29401af32c6e8b7d72eb25d473b4599296140c279038d602cecfb42f20f562c5a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    995a6d8871cf76d622c97a02afbf9c4f

    SHA1

    77c2c920fd186c5ba950791d8d4d8671a105f5ce

    SHA256

    3e4d943da782b3e139da357ef66b4012da21f75bdcc21541d50a2b0fa85f4860

    SHA512

    525ad21ae85944f9e7d4bc3295c979c5c4c5db444b5c480358eab6c2818b32faab2651238335a2f5aeb9cf05fffb532c125e72894b8e09d2210f05b9731ab5cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    770f872fce1ff9d5302ad2190deea792

    SHA1

    1a59a9ea3b18bba44796016271df0b869680fd66

    SHA256

    5af47d84db0d17ba23918adb2cb5e95c1dbe68f46009f5d868e50a1c6afaa96c

    SHA512

    387ca8462fff5bcdfd865bb1bfed9cad424f94522946975c1a58afb411e3a6d35597ea48b3afaf77742f401749d83a97a4f865456954d1d32c95ed6643ff370c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5862fa46c41b9b334360d275cfe03d3

    SHA1

    65c58106679cfd5224602450231565b568a50bb4

    SHA256

    398643116dc912286059adbbedc69cb73199c867a8eadf2aba31851bbf015c74

    SHA512

    1f035d8f271af29a3af2db293edb8beccb6f674e1790bad2b4fff86cfe77923b2d0cab7df1f39c029f2219336701b0290a1b8c586898e68fc6165f9bf3f83bc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de7ce953d2147343bdc695b2d741bb21

    SHA1

    c37c50c988860d0c494c78c848d1c7943f83b79b

    SHA256

    d4e0925cf588ea41099ad1413529b196603e62e81fe435c15ed3c3c2dcc708fe

    SHA512

    fbf78a99a977e7d809a622f46a072932401f7fdee89dca92aa1520b594fe5fc70b8f856a7217c41694f6c970068f6fa79aadb0987a398ea181b979244d7cbecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b1dc899c1c0a187951671d6623d400d

    SHA1

    45ff33f7ce84fbbd201f4272a524ade42476b751

    SHA256

    40c6bd705c2328b1dd7036525052020c0bff01f7474e1d6bbcb143eae3e4b7ab

    SHA512

    cf69103e8494e2111e8c6d2c29f605cc42dd4d1bddb714215ff32db1a428542e3e600ae6b04434881f747150576888c9c8d3e23976f08b3cd808ecc2f56b0ffd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    282322d1a1e008e5921a5a797600250a

    SHA1

    f90cf5673c01a301616954166224639ec54c6d64

    SHA256

    2c36713f4e23003271265a5986aed5e649325ed38c46976bf4fbe289403fc935

    SHA512

    f8cc4330cc756705084d20796e11eb2a1612d1ddcb13d03febc4994f9b2c9d863437d0bf84d6080fa7639058b76bd8acda27a059bd57baa15124f36a9bf4beb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6cde14708c1f9b14ab6e88297d8b2c8

    SHA1

    caa668f1368dd9a2f7a574ebfb743eba5f1c4650

    SHA256

    3f4164fbbe0b2b0eb8623d2ac72c3b0d17fdf7cf8448eae8bd63a8564057c072

    SHA512

    c388523d938dc027c7dd58bee0fcccd0275527d94dfd538fec9cf243cd8a59859a680a1713286f8943a4bb177b169dba64ac8e34e16242be8a56ff9bd421fd24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66ce7f9a4c3c2805d1a1fc7048dedc64

    SHA1

    576d11a92336427e1e0be5a4b0eec684d14e7f11

    SHA256

    58dc0f06179ced701b3800a6b6d8be842f7de3fc4f75cc8109a434a2789973f3

    SHA512

    d1fe232ccb11e0c32d51aee03414fc3784d73ad286e8df74f0025405d8e9242e972216f4aef3b317c0e61fff5f24d97ceb0ffeac29bd88470f10d68cde85d954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1e0d7f9ae1b97c66343322afc42b38b

    SHA1

    81495697565480cbdf66a2e6b9bc8100965052fc

    SHA256

    a48aa4337fb6cb1702058076d0482aff2ef2d9ecc8b762b2e625871cb2108347

    SHA512

    083274b6b043ec5b2c75cf697323a1bdc2999023ad4d892d72599e722fc7530b64af9eed0fdf178ac6cad1f7cdecdaec80a34c4f48b7b1ddd14207cb67426edb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3606a0abd788eee25b2ee6441df1a753

    SHA1

    88b5cd3198da9e5f90fc925cfaa24ef0c5faedb1

    SHA256

    d7f98dd08b1a541c5b9cb8af71ab302430cd64e574f9aa88449221e9a855b41e

    SHA512

    04b5d1b2a033c7a44b822f0a501abd4e714d419f0cbb9641038245a460bc176c912276db53e63a2f4efa8ff99412c78b756a619ddaf4c4f01a047af3f427c597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9db1e41a6f0ae12ff548241f8628213a

    SHA1

    eaced24c32f172cf6ec7cdbbbfc01228658d411e

    SHA256

    b95fdd322064bc73ecbe029315ff4b0c03e1ea5fc0733a093b8db9bdd5ed1346

    SHA512

    586535eb95d8fcd03cae6d5f0c351ab20e17c6f9da421c74a2cde2df041401a59ae8559632b0f6ce04ebf776cd0f3ee4b0a26289d8836ca807754a4684569548

  • C:\Users\Admin\AppData\Local\Temp\Cab233C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar242D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a