Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:48

General

  • Target

    6931ac317ea2c31f0f9317f62afa9dc7_JaffaCakes118.html

  • Size

    70KB

  • MD5

    6931ac317ea2c31f0f9317f62afa9dc7

  • SHA1

    96e4cf2236c03712e31a00b4990599f9669face8

  • SHA256

    9681175dbc4e3ade3c6311e9b4685dcd8249c9a95a7dc45a4de1b5dde8080f08

  • SHA512

    630cef0083025f26d8881de69716098ce26c62ffe3f9ff306b096b8edeb737d9d600b73dfb30866d8d8239718354be618e1ba11942dde7768e4adfe151a936fe

  • SSDEEP

    768:JiYgcMiR3sI2PDDnX0g6sC6lK39t3m79t3dvoTyS1wCZkoTyMdtbBnfBgN8/lboz:JaQm+TzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6931ac317ea2c31f0f9317f62afa9dc7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2024

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d631df26f040bfb17db892f3985fa504

    SHA1

    d02a2d4c97c7b328c0cb45abc8dc62fafc48983b

    SHA256

    ef0c25ef7a552e7140a1a5a9e39fedc0bba754b4b5de729b47b645a7d01b4107

    SHA512

    e92da35f92b98f58a8299f06f9178355c8627be4812a1ad96e2a712a7bcf4e7f499659b94f748c5803c1a9b3bae057198976e3e773c98f3eb9bb4b782ad65ae7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    4aa6955e5003fb92c1a600c96f01ef06

    SHA1

    d1fa1144673c7b445b708d5bdead8a30a30fbb85

    SHA256

    6301794cde76208d034e653a310e6222b9a4511321079de78da648ec0c43feb9

    SHA512

    9e1879e910b3523d601fbe0767baed70f3c2d48be0c13e7b9aaf0c4f3a2bc3d2d26e568c8967978f3d01d273416e9a7f557490abcf3fcb698e220034094b31a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    28a26d8ba480fbb430df44a8be5cc343

    SHA1

    304b5033a4637722741173ff728d244d6624b371

    SHA256

    dd7c141079d08757a7a5935564bd836ffb7e631fd2433d94e49aae6a972f5ca0

    SHA512

    9313ab7d7ae4129e2705e14b7e7dd03a0773ca526c6b90fcab35086160d421ab33da1ddd073fed153c8f0e67d53af792fb6de32a80a98c0e1a82df222498ebb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    4f383076a8e8e20a3a24107b3648de58

    SHA1

    8857324337fed32d36529c42926185fa9065004b

    SHA256

    b2cf3672b41ca5fcff557e692de52ea9899ec2cf21ea1832e55f334524738102

    SHA512

    da0294b896e40dc498b4bbf51ddbe64471ffd54a9adfc91ba60af7159be8ef7637be893619b6a1c85d7d79b0e2300fbf83644d98ca00749168d43b33f19282ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    bbb9c58d0c5dc2cd3beb867b4510c673

    SHA1

    0c8922a1f31dfc1b136c2fd4f48321590922fb47

    SHA256

    61626e5606ce64b7fdb7af4a4da81a569f8b19827fe65d2199cc19cad90cfb5d

    SHA512

    dd50f79e54e5f6ca3f498f3db60e947cb28021ec0b4b9872a1ea6ae5b526ed77be1676e0093634b0e0f5f1802b76032489b2c74f74ebfbcb0ca99a94ad533999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    ae7f690b99ee97a4b742adb857f962f1

    SHA1

    217ad4968380254c03c174f5bdc610e875ddced6

    SHA256

    c6ed91d2a4117751b664b2e81a0f306d07ba946f2b1e74b3f850c76b0e03d0e0

    SHA512

    c1df412380b1cb138376ca9a645b5aac8798a0897cc204185f7a175a6782f1dc3d3bbe0d19ca95a836edc3857079c09ffab3959af612dfbc76d4590f9215e6cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    6f98fe6a07039f7e1639a96bfecc71ca

    SHA1

    843d8e395c7287f7aaded03a11662ab7bf5e63f2

    SHA256

    86a234d89b6d6fb210901c44108ea521594d685d45176c82d4f58a57813676c3

    SHA512

    0cbe86ed103c9da3476971425c33ac13c6f0a31b14cd99d54fa07b3dff4e8f14b87032fc89ceb95e50701981f039b61f92fb1814051b49ec93b24a1f16f39fe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    6fee48db2b7dfb26995ee8cf7199d912

    SHA1

    4646ca47a642a8945c78b71dde9d1c5cc8457983

    SHA256

    f129a3ef648afe92184e98d3bbc6b15e12eba88e83308f045236893e9ec7b559

    SHA512

    8488f54aacce689faa2e60d19315cd2ce48b6b1a5eb1d835f08ec0769237821b2ae0ba418070bdedfe0c35e8075156ac4fb8f04a0de4f5531cdfbbe8ba34ac61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    c22eade4d53c1871a6412e1b4a4b968a

    SHA1

    6fc31bf29baa4996ff39c4e0fa267028ac1fdc7c

    SHA256

    556dee8effcdf3b046d5b591f45bb006bb51dee4793456b117bf8d050692f888

    SHA512

    a02b6bb3e2d04b284ee3f7976c295bf1aef8915d3da1347f64b0d1ab72b1f6a885f048b0a56845272f0f38cc379dbf135c6a4876cb0662bceed66443d1f12ce4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    0d6ad08b6fdc966913ee72ef67dc8fd9

    SHA1

    e3d9d26d8880c3277096b72b7621b62fd7968062

    SHA256

    303024e5a881f8904c0b7f4696260d38fdc82c606c4bfe2c2110ec1f2f553a9c

    SHA512

    51e73cff91a48b3d4ee75727bcecf465811bd066389bd68a28f99ed8a92071ea69429e19066c0327441627b87c44f788e94d0e54759b315f3c27f818d5700667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    dd54fdb0a75072d7c6b6292696509fe5

    SHA1

    e59e688ad3aed9f8affa5e4c89cbaf31e62dec8c

    SHA256

    af346d5ddceac18c85c7154d74c38c3147433b7884403e1b2e5ae152dc761686

    SHA512

    a00e792689953c328841225ef48894132231d7cd58b464dd16354ed04f3c5af2b50c0dc8708125abd334340c031a28a907db9777225a9f0832a094ce6446654e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b1619797656b05b664e7867a6662891f

    SHA1

    8912dbccef75a468b62e1e4444d00d9a3984fb7b

    SHA256

    1cddff9ea0b93ec7a9dbf32142a21f39c93ab4489804775644d8ae8cd89382a5

    SHA512

    293f0e9753c7e0cb7045b1d13921b03d89e56d3d5e00656092b79ad96eff25fecae2ddb5a070b23ed996f5828c3add63cb9df528e596d3c68b7cad2b213cccfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    ed94b148b0d4c8b549fe45f9dd91f15c

    SHA1

    98ea239ededfe42fa118bd81fccc237889baf1e3

    SHA256

    36b0e2f25bedb1204412cbad6bc4a9c777dc00feedec19a6b92c52d3045b5f90

    SHA512

    b129edbe078b927cfd1b6fe87b96bd20b3c50fb97cf939fd805270ce3c41a569354f31a6beaa8a26e4f40da2d857c9a6c8c119f350a80c6aeb74bd13f8db868f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    38ab94012c0bf52cbe0e4d3405e18467

    SHA1

    b9cb6cd06ba76e3ee154defce6b70e0a76dfcb16

    SHA256

    da2aad30f740faa3bf33e671ed45080be061d24107bf904f68a6bb5a83f9eb38

    SHA512

    5c52104ea4e9cabad2ce560470205d9a550ed60eef3636cabcea7cd12479dac92e77eb571e6b59f0233acb55c06ec468131575fd8e85559f58ac17da167e1509

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b0b4e32d21986deb74afe92d0d5666f2

    SHA1

    2487e64e7b661da16d56759a0709033abaed2b19

    SHA256

    503040b7c075f1dd85dbfb02a63cc4d926daec7efb394b1d505f4a5ef397f0fa

    SHA512

    bab4915db02e17490efcf03a552f9261016374d215fe94de8c1b8016faa9eba9fcac89801acda3ce94ca0ab43628973a87d9876f02c865561ac1d3f89b8ba2e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    1ce10478eefb13bbef85d603829db830

    SHA1

    942f1ba0ae0f0d4b1c675ee0ad7bd4af98a67258

    SHA256

    f881282cdd219bf1ce909b4b72d8b2dce67f8b37ab94661a8088042633a73c83

    SHA512

    36199fba71e00d41a93998795f2d7cae171a237114dd3a5a49607b3bef6fcb1a473e1aa1afa42034aed677fe47ff1fda1b45070706830f4f0daa2d9948ba791d

  • C:\Users\Admin\AppData\Local\Temp\Cab2DD7.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2F26.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a