Analysis

  • max time kernel
    143s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 20:33

General

  • Target

    6888cff11422eb10d3987742fd137361_JaffaCakes118.html

  • Size

    98KB

  • MD5

    6888cff11422eb10d3987742fd137361

  • SHA1

    3b5e57298cb178f4ad80909db4ec619be454c1e1

  • SHA256

    f7d121ce1b0041b2646fe2942a25dd65930578de51d6f3a34f9ef56a5f79bbb1

  • SHA512

    1940d7725ebc06e3312645450182740b13216aae0e6c5d621ba20f0e5280494fba814848fa478f5bbe30e4fa29d2235fb38e31f3b1effcb8e376de75a48325ff

  • SSDEEP

    1536:bV1+B4yz6GWuRAaHaG1WgGaeASrEQm7xpDG9lE/LIMUmNL4ceAPxx:p1A1b1WgJeASr8DDG9lE/sMUmBeAPxx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6888cff11422eb10d3987742fd137361_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1656 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    64c143e9f2a438ddf74501d3b3cc54bf

    SHA1

    66b41aabcaa5c364d405c858b85fa7a995f53c72

    SHA256

    02802fa86c2539668fb375ddf8b3ffa5a6c7ad8ae0050c3471dc9fca1275c0ca

    SHA512

    9decfe443630833dfc6c4e2b728c0395d0cbd59a5d868639f300244c4c61df6540b21d33497a8dd4e1947aaef02e4cbc815f53acc21d70ba1653d9492f438e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    4691c92b9ef583b0c83e161f9d759d69

    SHA1

    2631036c20e04574d3ed52070527ba56288d042c

    SHA256

    b951dadf8a5e15ba94199206797fbc4be7a7b276f9ec748bbd7b49bf76bf65d7

    SHA512

    917a714280a823adca83e3bbf2c5073cd6bb6e5b1d9ee994156e5ffc47e5831fa8d9e40e066e2e09aa48a306077ada59b1eeaf281880c2bc002eba123abd124d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11ca3f8d370eeded3383c3e0e05ee65b

    SHA1

    4b6271832e9ede171a11f14a9dd30e96db87ca4f

    SHA256

    6af37a2d1d9fa56eaf5bd4024972c2bb2e364e382b729ab7bad0f6e9441a9930

    SHA512

    825af21fe9bc2ffc6e88b096bb3b7c84507243a87fe681357c00fa130c8b399ae7f8f0c3502caf1b98111abe40de5f5749239ffb0c867aec69b06481f6a5e10c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ac0bf49619cadbedae85142b8ce2f8a

    SHA1

    7ffee621e2cacceb0a5abe4433f1f3604897cbe7

    SHA256

    fcc09ceeba6ced07287fa2941bc54fad6702c49c100990c638744da0cb5c7d96

    SHA512

    1f470f192ba7467883dae6ab03b9e51c0b70a3fb9732089c7f7b47143fdebd219702914de776c38b69da0bc1c6e0f3af3b90fc60cafef73fec5bc463e6eaec62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6660a97ae0d3f8e915d53d5856083b3

    SHA1

    154321f237ff5b6f40ed7d09dca2491a4718e75b

    SHA256

    a16829b85b8a166e87495a895180845b54fe6010884271a381aec739316f6989

    SHA512

    54a812da69cbef4b81078d7eeb01ce168633e94ba31aff4eeb916b935f947994b4a8a7a37bd60bea52cbbc2ba05801d90457ff438203b0af35c7b190b65e2db4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a431a15718db93698deebbaad075a88d

    SHA1

    2f13b662d3444be626bdc86b8fa8785c49d07102

    SHA256

    7c68c25a8ac5fcdef025fd65c2af9ffa0071100ded313242e238e2fb0d062418

    SHA512

    b7731781e2a780e46615f0147bd4d99ca77b3dfc698691423f531cdb1477c9f9fce71833a7c093fe9fe35ea25fb9079fe315a7fa7a92deaa2c714b8a4ea049e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22d69f84346e5cc03e51b4f3c1688247

    SHA1

    9812a956b985f31521ef2487d7ab8de4e8cc3db1

    SHA256

    f6cacc87c4a11338a15e2be714c40b2de74dbaf2197c5a67e7ab72a5573e75ec

    SHA512

    7d6483b081498732cd7e56043c550427c8dc185a5e2f8e92c12af6ce9b31feb2aa881fccfae4d10625fbb15d086aa5e07ba49a6d57037b746236c96ae2a73d5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    314a7646d9d45e7e51d3e1d9144a846e

    SHA1

    aabd9903bd06eb2f32c1f158657e62726b5dbbca

    SHA256

    c3a63b9f5144d1e6af0a306e8de4e871e812fe91e443f09e4002ad6e09a3d356

    SHA512

    2d490294d00e576429bfd26f079f183472d32add629fe2854cd9a2ddf3b302b9161e0a4be298072de7b83442357bda380ddc1fd9ccfc2dcb1eb5a4a55e4c7265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fef491ba60017aed73981662ae9872cd

    SHA1

    16d94f374cba5fe25435136d8d64f4333d9c5d20

    SHA256

    be644705f6343fcdba0a9369bd604be2ecc589ab72ac8081085affdda4017058

    SHA512

    eee6d8e587468915b62507e24ab8e5622c8100d3568fcc37589c662f8b2641e6ae2c3fac22c406af637a57c243b33b891cc4c090879d8c576f4c8165e9bfa84e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41c73949b1d6527649ba63a69c5222cc

    SHA1

    a348538d06fa5064ca2727c2de1b41120830277d

    SHA256

    d471648dedbb0ee30d0d1e55f3e1845c9d4e5bc2373a64650024c6fa375456bf

    SHA512

    1bfda57c797173d9aadac7a2cad6f4ed70e7db65c06e7c1c6829969e870e121d2d1b4d02492373e7f6485c1da9a8a822bc929642302aae4a05be3abc48f6c6c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1888cec16e52632f6ede8d54a616c1f3

    SHA1

    6eb0404121804c2cd64fd197cc25b61794ead194

    SHA256

    d045940eff69780d05311981c0321bae144bcce0d90c2e9dfde8313f349495df

    SHA512

    ca4d3914154aca4e51cdf5e2c44ac8a57622f315f4b3addc197ca613d48412f1dc72bde9a87f3051572b7c8efde0ed455e78e72b0db9dbadd4d824dd79eaf300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2ddfc68d2acdc20b23a0957e81cd575

    SHA1

    924e0b5c13690f9b4d358d7abdad8a784ad532de

    SHA256

    86908720e848ce97498916e41a68c007181f590e86d0f527978d28f80fee9770

    SHA512

    9483ef398f4f89a9f1e0ab8898c6a25283b443e3ddb274a08e428fc59ba916f3f77f81888679ef45e3e66b59bc40f3c60dff8bc976314af03b492ae7acf21562

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9d7a799c814c27cc88faad2e82d840b

    SHA1

    0a35cffe25f4e71dee718aab6eb91816f5176930

    SHA256

    77bb996475097c8029ba5cdba12094164bf17906dbc450b9932398e1806164ad

    SHA512

    a7e1db289d296b8538fc1f79413135f51197762ca0ab32a3f05004687f557e6c55674a91e1d57cc80f4a5e4426e434078c74474b0e35c4e3613f1f6a9f71c7d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1698a072cd0299a04a23fa7cfb1f868c

    SHA1

    fdef685edfd7ea98ae067e87313f8f3bee4ac9be

    SHA256

    89910642ecf3c11c2cabc090c0c4b0e80a7c5b5fff997453d3f81d7aab3ab69a

    SHA512

    05a60a1e848662129e787ee7325ddbf42d0b74b2b1b67c43dc89c168c519884118a46da4cb673ddcbf89a53dec21808ada6c1ac65778131ae5724df197956b95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    66de8ed4e4ad2dd5b04e7db6ca19ec21

    SHA1

    7bb6585b406d20ce0df12ceb9ea4642e8f401c06

    SHA256

    e313c7fc4de862dad371ae4b08025766125f25c4c9a64a59c77cca06e81b292b

    SHA512

    5b2d4aa5db3ddf4fe6bde7361f7313dfcb5b7bc06b8289c1c97df71ee69a4e1926257a948242f9b826dd5c87672f63c5d3487607211a146167513ca10e1d8e20

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\cb=gapi[3].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\Cab4AF7.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4B19.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a