Analysis

  • max time kernel
    132s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 20:36

General

  • Target

    688ae6cbfb2da825cdcd4ebee846082b_JaffaCakes118.html

  • Size

    213KB

  • MD5

    688ae6cbfb2da825cdcd4ebee846082b

  • SHA1

    9ec40be104233fa1a111cea7c9f52eff1005450c

  • SHA256

    566cc52f7f0362f8535ecd96fca66486972bc08e4b1ff2ef74d6bb35468b700f

  • SHA512

    44cbc91a8a66f2bac58c9c442a94bcef474ec865a7e02dfd2a83c4448d1cebb269630f303d217d1047b3480a5ecc087166504dfe0216203b7bddacb84cf216d9

  • SSDEEP

    3072:4rhB9CyHxX7Be7iAvtLPbAwuBNKifXTJL:gz9VxLY7iAVLTBQJlL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\688ae6cbfb2da825cdcd4ebee846082b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a1d18579a5a8fe90dcbc9b8f50d986d9

    SHA1

    93f6405db3fe5497d75660bdb4c8bb01ada3015d

    SHA256

    43c1e1285d53308b8009f81ec1d41cea4834cd6235f2b0020657cc003b88ef47

    SHA512

    e0851cf16056b87ed8912140362743b71be66855b496c38256d2621a9d0df3638f9de0a167139c6221b6ad4bd129137d32e1567a4c15c0ea58f097923cae8f69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    36ebccc08d2116ce3036886d47ce196e

    SHA1

    5eacae0daf7264a39d6f6b0235f90c74fbf20f31

    SHA256

    9c501f3b33dcbc8c636f4d583fa5fb633fba73f70fcf024068df74d2617be1cf

    SHA512

    a5c5cdb673181f008fbee80f50cebfa8c607252e8d0012942cd9461daae6b26e2af074d15bc69257261eb987c48f857cd45ecd4e748c82aac6c9e3ab3f43eed9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    560367530d321f4ddd56c321b73dae85

    SHA1

    72192a238ac56ab014566e0421067a53e95f8f72

    SHA256

    9432be4e1dd4e5a48f0f25778e784233cdf96d880148e053558dd5b5e2afb46f

    SHA512

    5621a38aaf193b18968cd8edf6eeacc0da083ffa727714056baf45fd4d0e6d20f933f360d61d157f4273ba37f082201d8fe8e292982c5e4840690126545b54ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    fe2328a80178c0fb17d504c2b6b20925

    SHA1

    42842768640757e3681206e6b51749fd2edb0b62

    SHA256

    e0c9290f561d8335f0771bd5630822c7640e6248eeeb3b92c5ac41fb5196b5fe

    SHA512

    3f24916fc23106908cc099f89ebf12a5f253856317df63c9b3e150c4329c4ee950b7fbc8d71b43197f857a4c4f7924611f8de0c5904c1a47dc6dc92a1ea8c02f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    1afb403abf9a8d49c87ec52996b27693

    SHA1

    1baad5c204bdf5e58e692703e3a183ac69d7f451

    SHA256

    244a26bbb4d44c725919073f40bd2142dbc41a122942d184b0ed69555c983b20

    SHA512

    8292279af8e86804935d38ac38ea2f28009323273defb1c5b17d37c04ed25d728aeb954265900e9930d3a331bbeb3b054fef18d56d2269ff5c76b9aee1146079

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    9b59cf114b04a08840db4c0061aa0e36

    SHA1

    84c844e01a211ac543abb163c9889c5b2e281e2e

    SHA256

    a795bbb6c113a8d59cb6a80f5220cead5be9ca85994cdcee2e213d35a20a3550

    SHA512

    a50a7920bb1b50c2941ccfef3f3aff7a9f13586b265cefb3da54722956a163ae25ad5b42bc0bb6351cc0117ffe5a009864743c4d66cacf5f91e0a98f4814b3ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    3d0310865e2945f9345eb2ada413d941

    SHA1

    ed4272a1f04de6b4530beb1b4e993322e03bc567

    SHA256

    aa710d29c5ec6f964337dc19612ae021f8bf02646a2f3e3ae7ee1ddd8ab35fea

    SHA512

    58cde3faae2ca419fccd7012c3d1a5db18541d72928668caff3bb7a69ed9040e8e3b154e81e1d284a2a3ef8c6f35f72f53de37856e4fd5abcab67369547406cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    8d9127fd3654816d914e4440e1eb547a

    SHA1

    acab6b5af5a9c51a6ce88db57a32b310e2e6982b

    SHA256

    2fc93b32c2b52a9122cc5efe15c896caa05e3d6264d8818c596f4b0443072254

    SHA512

    31a017128233702eb1ce54cb891a09a51da433b0cb6be8190a93aedf345090716966bbf1d23ef1ee095fa97b49c189ad2fb39a4903f9f18c6e73a7a42eb0fec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    5d9c7d4fdcdacb75f530a71cb4700f68

    SHA1

    bb91a0fbdb55c3186edd3609e13efa289c2cd1a3

    SHA256

    b56a6ede2bd179ffd321258586b923239f80913f26103579e2b3d0fb885f2a47

    SHA512

    8f38e3475dda30c7439df816453c9d9bf637a5bd1a13016c5a43afa4c975d6d8ac66d01bc11f54b982d46fc170c106a6da3ad5d718e923cb0680580b37e985fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    6bfc09a08f32610dcfc7739b3a01d0b5

    SHA1

    db7c519a9af312d03054ab2bea969cc936b840db

    SHA256

    96d857c0e7c6561c2184763c9c67aabdecdb899e038d6b6aca02e6a1d93d4cfa

    SHA512

    04f261bd17ff77cca5cea2f588591fbd0a068e260947e56519e0271b9f04c68aad2a5f5922c454d6657ad6d60e97855b0290cc31f3160be7aae59053966d0e53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    54b6958d6f08443498bbf7d01ca59345

    SHA1

    6662c4430ccfc8e61c0a3e92afb84ebd35780db2

    SHA256

    31c410fe5e90db36b47cc2bb297f9b9e69a29552ef62ea7f6c4ca3bb0937d30a

    SHA512

    ed467c5504d5aa3f6725dbf7f18f4084efe2e20c818a696bb72f3f4d80ee45ae2bd528a1d89acbf8f8e10042bbbe83a4d3859c05c071610125a4569854b9d3d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    f607dd7d176ac6c6377646f47a9c2ee7

    SHA1

    3a0669953729bbe38ef269dcd34ba039c7818896

    SHA256

    6876c8576efb2a3f119d40db8ca03ca6825a500984536e808dbad8690e364907

    SHA512

    2e137539317a8852512f2c1c5a94ecb7de00bd2f088a0b00b8bb93ed6f46899f8bd8d6b844a6608cfe80880722529eab787ef25c9d6b51f674ae916d7c37a39c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    550265c56817a7c4c7fe430e2fbaa9c4

    SHA1

    17eacd5236024108fe145d4d66a2cf50af32e085

    SHA256

    31b165247e8e4b91a31d09ed7e0e79dd48688ace0402c014a2d03d0ea2bfb828

    SHA512

    4c98e4e655a532bc487873f4111642b584c23447eb3e2fd7818d0786b007e801b46b7bab2e0e5c77eba9b215bc57654ba9b45e57dcd9d0780c85b4274feffb9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    793e768e6c1f251ff1706e017e2316ff

    SHA1

    77be11f1102d91fd29b687f98fb0154470b7f000

    SHA256

    9c0748a8c5796c2586b04a40117203c60a5907bcae8174508c6656a8d78a15fe

    SHA512

    217d0f0df8d9eee145b4810951f2bf2a02b00a66b0f084d60879ca79dcc06448c7f4818feda38b7d80fc24421eb318ea6e7f2a5589e9e70aefc124e651147ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d0b1eb90c60674e013075b60109eb5ef

    SHA1

    e76f8ca0fd4c031f55f84abca4dab4783348cd72

    SHA256

    50552d8b6a3bcc0f865bafad5f20f9133bba89cc0a0143577ce50f4167a5bc53

    SHA512

    3498ef0a3b89d10aee5ef752ed37d422c90d2428568ccc3966386bb8d0e6ba9f473259e337eda56277158595d4c48002813796ab546c2a9310a89f89c4543f81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b485a64115c0bf40857a209fcba2dad3

    SHA1

    471d95c3297d8a2e365f4075df92b3ce50ac17e9

    SHA256

    2ca04b6172b44ddc0fed18c618b331d88eda99efdd99beca6e4a7fe0671b296c

    SHA512

    f8e7f8d27f8a89b3c318374d0f432f566bebb1dcba871da4fea406e45daf4b6cdcce4dd0a948dc4a38644e74ac6840beef116ce78d0507781c29ba356d0c2682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    c4112149023dbbfd367ca7f78a574050

    SHA1

    1b99b072796fa849f0d0253b6b107da711e6eaa9

    SHA256

    782d723cde144a646a58c35b6c8623f7d8cbf5a0751691a94d3b8dcc97027bce

    SHA512

    c3968d5f136f3a7325cdbe3a2ab8fcfc12a6f10dbaf63a675338a2017b1bd27fb217c44789f5184c23340275ce1d9d31c4c4b146d390ed98f7b2a068fa903a95

  • C:\Users\Admin\AppData\Local\Temp\Cab3AE1.tmp
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3B52.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a