Analysis

  • max time kernel
    137s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 19:01

General

  • Target

    68497f43a28215c12ebcf7d6f6342db8_JaffaCakes118.html

  • Size

    34KB

  • MD5

    68497f43a28215c12ebcf7d6f6342db8

  • SHA1

    c4b53e778b1af0b4012a6affead1f12c227746ac

  • SHA256

    b5556721270f7ad043e577c442accdb17cba33319ce50b71951011162418cea5

  • SHA512

    0bbc912dd5a8aa51a02fa8d22cf0fb23cd2f9184070a83fa643606605a817786939dbfbf18d69d7796f522186a9bd7d58f4fe32e50c0d5c03f2ae3119f4680ac

  • SSDEEP

    384:S7xCfXD7yKsFXvujqiB0vNnFZ7btQNRQ5jAXdkQTuTNdt3:S7k/zsFXv1iBSFXQ2jAXtwl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68497f43a28215c12ebcf7d6f6342db8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1504
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1504 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12e616fa6c6191424a436e9265c87540

    SHA1

    1fe0f34a00e9669a592300a2a74b554f77812865

    SHA256

    33ff01a3a8787e675634b3c2842a9608c8b4d0ed4a7437541c1298cec805e507

    SHA512

    8d55461422011ee265d8c349cedee1356174ccd6d5790616849de2ca6288efd820a55bc801e910a6c9da145b1d6869ac1c712f6d97f547e36196ed6bda1f3834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b003f3ae6f229a8f2a7b2f4db098ea15

    SHA1

    91bea90eff0f137c32a35dfc600af787bc8fcb72

    SHA256

    4d2d57e02aa6454c31a9e2a757fb849dfa3caef13b74d6a4ea5644ed26e24ed8

    SHA512

    90f2717e5130edfd0bdc1183e85f5323d5022d16d64a8cd67bcb79b9a8f86ed33ad0e6daf5f0c23ab86c8ccc55438338ea0a747ed1a032df266eec5d4c5dac62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26ff8dd41d37792d83072e05cd864d34

    SHA1

    b7b73cef603c6b0ef2bc0432f3de408b72feadd6

    SHA256

    ccbb395254531aeea2bbbfa9b8eebebdc15a958d28f45bdd3a140206fbef60d1

    SHA512

    e60a540aeda527571c16f00d92fbc37bf91a90fd865ec30d88b7ee4cbaf33db436d7b8a352bbaf09b3124db733b9aab7e4cebee456a05e2ca757e8377c409f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d927e3d8116203d3500a9f29f11bed2

    SHA1

    78180e40d9caf1ecc0dc78d22ce1c2879b462ef7

    SHA256

    3da32e4c2044172af176885dc26ee4d5f885dd76ccee8a5b2d898ac37308a545

    SHA512

    a5f196bc5042bf00356c76978c25b3e20c6c027e0dd5225463a88cd1fc9ad35395406467cafca4aff5130dd45694eaf3b5ed66f23d7ef4da63f8afa858115186

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e953d2b27398ead41707b14f1d1e2d2

    SHA1

    fee39d68a0bd9f3aee6a2fb3eb8feb2260c0ba9b

    SHA256

    59f7c6427dceca3a19a163187733ce6166dea11c19650cc94f4e51e88eb9a6cd

    SHA512

    3a2fe276d4a310d14ae81f255b40a04dc47550757e9fdf8c6235fae6fcf55412cf3cc0bd39e589041bdb00ea11b5d417d2b2d3f1ca478175a8e8c64232b27b2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e21b22bfe28325ef8746858bb5b3197

    SHA1

    b75c417f3ff2f3f73a9baf6f5b2b46fac3019e0f

    SHA256

    fec7f0e5cf1b68aaec54c7e7abe53e5e51804aa20a6082a22197e140b9468c7f

    SHA512

    f7d5d0fe88fe6245cb229cf618c744c7537d2e1836ed2fdc3aace125ea1064328e9ed03080e5847641df409e9ccf627dea96a7d39e976e5266947de1cade12d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e44cc08503f821dcc7ece47501004a4d

    SHA1

    8c822c57bc62a22a4ceb28c7992a4420a2443b04

    SHA256

    cd2afec6183fbc587e183145483f6c088dc8aa7b96bc839b7e433e9c9b499f8c

    SHA512

    e4742468f1d147274480defd6dea13ecef840a00cd4ca6405a4afc412a2cb2058d7dedf1cfd70ed4ae5fcdfe86828571e93e7e180548157650f259adc4dc68d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb345b8bf40972d9afa6495e133e0c73

    SHA1

    22c342cee97aa6a685329ec4c83c5fced13146bd

    SHA256

    2110fd027b014e0a977999ed96a1c237c06802bef671beef49e586a30ce47a11

    SHA512

    a52d7c8051b2975119160759ed1abeddc0f157c302e6be4f562b80c943e78663ab1682f792858062e1daf3a8460278c9d87c302c72735d8cfbd46321c790388f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3df78812e90e3800870d29b80d898a0

    SHA1

    b0ed42db6226b44daf4c232e1ccb41cbb69be503

    SHA256

    b4d66a2edb556d1a951a119c9e2e18286cff7d0f2e73489b7e86df1e5ad24a7a

    SHA512

    6842aa17766bf39f99475b0eccae69935b0c49df04fdff20c2894f7d79e145ebf2503da9283cced4303d706dd9e0916f7a8be647c4549a0ca871cd0eafa858b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    909dfbddab9d70f3d3803a8c9b204d68

    SHA1

    1e659b47b063b1add3c344037099793feac9b27c

    SHA256

    7a92d27e1ca8f5320998503df9db20a4fa02d8e19e8c2e38e55c02a6e910e27f

    SHA512

    9cbf9c008d8407e07c04ae64fd6e5942a9a1a169994ffd38313fedeba25e19156363e5b1160fc68673eb75a042192817b73757931c34c6898414151706e0dcac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0594521873f276ccd9099a075c42943

    SHA1

    048fca15b9bd5ac2cda307d6f87f20a5cb2c815f

    SHA256

    599ed8918f425e4007e518f5511a233db641fcabe71c07c0c48e0e46632cb55b

    SHA512

    0d9273a9a4e6502475a678052f001486db0f49af03cfa200cf5fc223f2794e1891e866cc1bdcae3b6675492fd8632c8fc4d1afb19de4b00ae58be1d36cd431fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6a192929c99cdb806d124622fce536a

    SHA1

    1162f9391c3547385ddf5c641b0c949e40fe195e

    SHA256

    3ab5d234af451f87b43428e2260be3dcc53f267a69ef3d6f4cbdbd68bbe49a0d

    SHA512

    c1dbd74f92eb155f408a1efb74d2690d83df969411cf76e78c2019cfb49bf72ba2360604346c1b9eb7f888e0763304528c2ed2f1e605bbbbba6f8d7556efc532

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    762b06fa011ddf498a15063c93e8a73a

    SHA1

    5593266614d5651d593127a07909388bdb27cbb4

    SHA256

    42424be09b09cc93ef880e1794a66f4236ffd2d512f3b17baf97575ccebe1743

    SHA512

    e10f7d3b765b324815a0226d00c1aa34d17617ebe9e948fe9eb1239a80c45359debe2626451e7e36d6cf55ae083e25b8bbaceff38709d067845fda3fafc1230b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00be9c5c3c22b7b53aec0f8645c5290

    SHA1

    5f5440309d88a9e43dc343a0fd6170b760e34273

    SHA256

    d7b6c6e63b2d5b42f21aa8ea45513c4cb0997e10cf8cd16addc235cd717d67c0

    SHA512

    626ac721d40ddcc52c999eb98e8e8ed9c72a9345202813e6b6024b68f765fe7685bea9d126940eb85ca64c1f5353f938f9a57b92e8431fe2f0b450e4142546c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    586596d4138d996fd282776e60d77db0

    SHA1

    ed15d96a9783b461206a368fb7836d5bb74aaefa

    SHA256

    ac4f643f54c5909348badc8134b336b31a41defbd1427bd1b049f04420de1cd9

    SHA512

    e080e411934726cf9806a54daa6c93407b16ef69858cf0fb28bf782da09f64ba1b16de2260b20a7529f6299bb9643dc70c5ab610a85caae55339c56f4a957808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d86228040cbbb915f607f8e69f47e34a

    SHA1

    d5840155e5def848d9d232abfbf2b8c81b3253b2

    SHA256

    be97b5885a2cac56b1e2a8363b41d2e604e4e8b6b61c120b95131e69b77250a7

    SHA512

    2f684689710208d0b7bc9fcc17610a58733b04891cc3e3a30ffeaafbe2e860a3bacaee7bbadb15406a5ad3b4ebcbce89a1b1a69ebc0b69fcd6849ae6879a993c

  • C:\Users\Admin\AppData\Local\Temp\Cab1C18.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1DA7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a