Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:10

General

  • Target

    69190ead5c57d15e6b60cf6628fd077d_JaffaCakes118.html

  • Size

    59KB

  • MD5

    69190ead5c57d15e6b60cf6628fd077d

  • SHA1

    319ad8ab25d3157cab1694602e9f9fd411d5cf46

  • SHA256

    07d9a72ecc003a4f1d3c1e80f2bbd2516504461a6a034efc498bf27ded49de9f

  • SHA512

    6ec7a9f341256f6c44c1687be2e5ebcce4fe259ed7dde738d0110356d0f43df8cfb01ebd83898f7c25b3c6e4b4f657aa17e387b156daea9922902091e1b23716

  • SSDEEP

    768:WBKQIff7KCZAwTD9HqLJpVRlHb2L4hCc2i:mKQIff7KCOwTD9HqLJpVRlHb2Lc2i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\69190ead5c57d15e6b60cf6628fd077d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2736

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    22300b5237dfaa7522f204b29cd917a4

    SHA1

    45e678c39adbfa6d73c94962ca14299fee8a83f4

    SHA256

    06a5d849bf2fc3a47a1c1c144276a8b7f2b25a901dd7191642ec145373360e7f

    SHA512

    4cdf7bd1be18d6487d56daf411df9aae7627979a40999f0fa0e575dca566ec00c9dbbe7a2433908c867e324dfe615117e35d286c285f42e13b09d3dd78039c65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    43d6328f1a3e1c6d976fee9711489a90

    SHA1

    7c9ef437972f202c4ec0e4463bb77fc5a9a53280

    SHA256

    34226ca9b3d35e6bff0a22af0fcdb45a125f10d3611cd1fc0efc68c4c34fa884

    SHA512

    05164ec9122412fbd0d22bb553148069ac1e55f2017a76df19176a89dbe8c7c48c0db3940b7558b2e9bcc10859cf40631eef171ab7140b9883b6870058822b5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    55d2209060d5ba5c4e1e394f3a76c95b

    SHA1

    c0278e5961031ef03adbf1fdba7f27a15a5ea7f4

    SHA256

    fdae64a4a9d279a97c1e31f05ba619679da250d9dc8e58dc20ccbcabe9231654

    SHA512

    a8e2539319fafdd4d57fabf06b6bcd2656d361235004d83852e1f0f238e64ebc567caa439781da4015b9fe985b838bfb490a2b6be5196ac9493cfd0825fa00e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    e9d9004bfa563e718045d41f1034f849

    SHA1

    aa62337bcd2c407b283ddd512fe2c5fa76dfb500

    SHA256

    50be1b65ad8cb4eabf2da700e12a8e7b9cec3108d047667f38efbe7a5280d198

    SHA512

    91382c033fb06f4cf613a9968bbc529c59bf1bfe5f649991aa25b049149beb81c40662cf8b9f4ef712b469d104677c092c3ded206f3edfa49ff4ffec700e9fbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    dd1a362117d90612f370dc3abdee2f21

    SHA1

    834700d6b50e8becd101a10d387c5b1970d068d7

    SHA256

    74e73f1b249e956375d3ac4ffe9ce2a398827ed475ab888fd3110e8c3011b516

    SHA512

    4547c9d481ed91b49059b862a34273974c68aebee928910416b97b4b663696cb98e0ea93a82c242f40324751df8076f15400b698d45219f22c7bf0377ba422ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    6894571aa167fe40df873eba2e4a366a

    SHA1

    0e36e45d0dedcae57de9f45e33f6d27e9db7af5f

    SHA256

    28542facc881a1821c832a2065e736293ed57d3db60929ab7e3076830f3d222b

    SHA512

    7b8dd546431721990d50b357081eea70d133fa23c8a7916d4b2cb9304115c2e70a7377e85efbca7143b2a5a780349ba48cc1ba188567d9b892d0420778189f06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    38e58598bdab696af584e5ba6508138a

    SHA1

    daa34e5d1c80e2d40c7711a328b43c2f2c807716

    SHA256

    fae84b3c984920fd5292c409eca617af9d53df502936f1a8be6da676102bffa4

    SHA512

    a36eed3406a1f1dda83fb9d5ef25898303d6d9035c9d307d733d5699753dc864165970cda1eda57a4d70077dc4865bc0ea4ef1f42f14752e83e4169280354816

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    68ee96b3d4bedfd3023aa9d81fff4475

    SHA1

    096ddf9935279e2c31982373f2cf0eb8fc313ada

    SHA256

    1d7d24b3b71c7b4f29148a847b733a283bcf7154b11ee4d30f2bd8bfe4110bd0

    SHA512

    231f921898649c261ef7267ac05cd07380205d0ee78e373ee0b69dcf0112d2a04d45f185136a7ab831fbd94869d06e2ab6701ad48865521a7a012b04d7fed556

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    8dea888edceb6f2f0614f4298bb3a161

    SHA1

    033f16e4e113b125251e9483654274c497be29e9

    SHA256

    1e9e9eb2687bb174db532498724837bd0a5d5acb16a7df32dfbc7ebcaf0b5722

    SHA512

    808e0143c448782a02687d46cfb482fd9d828833a91adb18b58a3b7a0307a4b21a421863fa33423362efacd5baa7c6b5b629b449fc7b43037bb798de975e5cc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    580b20f81818a6fc83d88267010a1909

    SHA1

    4c628c6107948912ce9b6548fb3d245ab1191f92

    SHA256

    9ed96e6e009644babd534131fc3bae46f99a2915b196473479f81de853fdb403

    SHA512

    1f1232e3bb4c51b243ee3d23085d5674e13f407b1fe036b7a51e944237151a64e7816c57007ac21959649d9a19985f6a693a4e77b9707d18d652a97e421ebf47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    e958805455b27e8022cbf09accd2fecf

    SHA1

    56cd670fe009b7cd6fc8b7d3a96bea21b698e67f

    SHA256

    884ecfae784a34ea7e6cd2de3ebe09ba909783a37e530b52a2eefed567528257

    SHA512

    96d9a31314c32628331d44755dd3ee9854329f3b82b8c55ba431037d372817291af87804c7bd17773b286cc67ec312b246090e22041af2dfcb8996f9fba03bfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b730cd14e5d2e89b8c0a1d7f311b4d13

    SHA1

    730a57d11bf06b3985918e2ff13148e32e42b6cf

    SHA256

    8d0b0c70957e1c2bb3adecbdfcad482a168521fd6d68dff6a90617e65486bbb9

    SHA512

    d65e7a944f809c5022b659f5a5e3aee9734779acf207174dd3d462108075ddcf4bee839c969837c3827f5aefd50a3f8f2d4c9a4992ce6d9230c5bccede9e42c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    e8c54461101beeb2ae3881eeac1ed4c5

    SHA1

    ec42a2a6aa34dc9dac9f46f06ddee6d037b1d46c

    SHA256

    2fece142e52890649be683d817cb48679cc1fe575c8b78b4b1f20299a1bcf82c

    SHA512

    cbce20a340c90c15089e4cd94b70ebf0a1ead3f87b86d48787dc0e8668791a108012fad962e9899f30c1c1d94dcdceafad9dbc26ba5cdd45de285320e2f5378f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a93aa471a24f31ece44301e0927a4bf7

    SHA1

    24a4eecfcc32fb025b61740b059a6d1a1f6f9819

    SHA256

    b43590195063cd84ca00357e1cf570f34a2b795192794734d4a3385729feeffd

    SHA512

    1571941efb8cf72a94eb16de4aaff3a878d8d388fc8d93c21404724b17ef730783195daa14d22c76dc6a2b8282626282d6ab4fdb253b6b1494fac630348bc426

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    78345d442a18222ad167670e322765e7

    SHA1

    359bd5f59802a325e992cf38176b9cd983e27401

    SHA256

    faf941c31025e57eba6db73d19c690ed1a39efb764d1106e3cfc20b15735d3b8

    SHA512

    66918865f3b3fdc6b48d8a8e9f03b89410066ab148fafb76caee1c4ec9ff96522a16dd88bb356c29e7c8e5b2e6501287537ce2da71a160d0450cbca1b265a1c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    4348a297b7784c05ee97a1c9302faebe

    SHA1

    9972c6bf32c1890946e7486971e772533c8ddeea

    SHA256

    c223b7bbd1b7642dbd3a461797a3671c400540daf7be0027c1d6b904fe5dd8d9

    SHA512

    e7e68e4cf5f799f5f994c457e6a8862956df23a109f0cbdc65c6aa1d4aa20a5de321b2e822f74522ccb2ce210a39f6a613ec689df5210bce18df5f7038d0f8b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    8263d3c0d2a4b963311e441129156e71

    SHA1

    c699edf0af032b7ee3320bbfc081e6297f27daa4

    SHA256

    8eebfc6f6e4d39e62b02939181951feca11dda58dc6c4fbdc70e6b0f058c6a1e

    SHA512

    66f85b039c50e8ffd08c1ce0d2c62ea4ba4008aea4d26f4622a2dfa6d686889746f542ee4541ea1b4eaa13732ba3d203212a02faba5aea37e6afc1132eba397b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    481a0066324d37e14c8aa8660398a64a

    SHA1

    8069944ed1cbb8c80e6bb11f2570849257b03a8c

    SHA256

    a52ee185e474796f245bd419cbb60b38b2cbcfc7c34f509df77b1cc9de88a161

    SHA512

    f23565ddfcc628024b11478446e646f61dc7e19e86d804937bacfea0abd1fd5e6c2e9350972b60598dc18a808ce95b4320c029090fc958c04386d960f7f6fba0

  • C:\Users\Admin\AppData\Local\Temp\Cab2F3E.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar302F.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a