Analysis

  • max time kernel
    135s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:21

General

  • Target

    691fabb89d1471ff5ee3c109b099b253_JaffaCakes118.html

  • Size

    4KB

  • MD5

    691fabb89d1471ff5ee3c109b099b253

  • SHA1

    1beb7eb0619f3c57c3638bd7fb0aad060d9129d0

  • SHA256

    a301b5b5570dc5690540dd895bef38ec40873fcc48d6978ca7cd492cfcbb7cba

  • SHA512

    5ccc25b4139f80fea98205f5c35f46d92eb1839a2e8490ca7daca8c9a571e3dc6ba6f7bf380d3da67ff0f572ecbcf63710959a99e774443bab55c74f7cbb8257

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8o3vQuLTe:Pk7yY1aEFHVKtF37sNjtXATIQFM93pD/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\691fabb89d1471ff5ee3c109b099b253_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1448

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b75dca319e25544f82cb5e0d055d1b1

    SHA1

    831ecf5b60e51583b2d6396cbb75c90f35ef73e0

    SHA256

    680a13cb4330873cca66668ab2a265c538971efd208b9c02641fc4bc9a5f61b7

    SHA512

    5e820125cca68565a6bb98babd34d044696ea9940ad967f26f16d66b5234ef2cc393836bb6f324599e31796f4100c0a8949b9545de1ed78b4af102596ada9dd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69cad081147bf78b6d3a39f8cf871f60

    SHA1

    e19c8085403e65b7825e1a5a5c2c59db83002546

    SHA256

    8b9f3ec9c631d0bc737e37be1642cb7513535ca6e94976689f2b6297351ebe78

    SHA512

    3a331eca2721fae0872fd777895c9cdb9c8a7a47eaf7e481c4adaa821176ed7f4fe376c34e6c474d29391cfd4af28c9759d6eb861df63a51ffb339c596ef517a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57a23341e7f6957e9396846f8b4c4c21

    SHA1

    a55ad5d94fde35b68991b2bfe178b73b275eed3a

    SHA256

    0489cdc359fb3e0792f8d5edc50dca572f16c670e1f055d682290822d07aad50

    SHA512

    6003f0a1a9a9721f69967285e046385957dfb4d3221a63f7ed711a390d193263f712d3f9146033f785e5bd6de34a0e51b4cda508ba80f5269eb8f1c2697d21c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    328524947c82bc2c1d36a0ca89248cbe

    SHA1

    fa37f5d4206c0c7ae850e39e6bf0497d833651ab

    SHA256

    f7e8a7ea1b43ab2584076d3034f3c528eb24ae7b652d2513de9913e4119f047e

    SHA512

    660372b24743d610f855ab37aab966c24fc9d1ad2cdfe71cb77a05564f05aa40fecf31feba7be7eec8a17e9711eecea8857feefaaed2589a1c1f1ef1bf29f9a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a77446cc1edee589d68de6739b3841eb

    SHA1

    15aed5766e134916612afa462318b05ea56d84ba

    SHA256

    695bce52a36ae885259fb0909e9be6ea8e6afcae62010e013c7af39bc9392436

    SHA512

    41198f8302b106b9a6c78d370b742383eacc5b4165ef38ac6333f02d3d51a4af0b626da1dd58f4a96094901df7e37b1b24cffa4217931ae878e4b4f6a419784d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e15073bd312e260665ad85717da39f25

    SHA1

    9042d34e515901c46368fddb9a8455912b74ee6b

    SHA256

    a12e997cf0ec842c738e8313c9b41ad5c7bc3aacb941ffe0676022ab3f790182

    SHA512

    edaaaf3f36fc76e72e74bc5d1fd2356dbc9476c444f37891aa20d6e204f0ceaf48d6c94c06dd781489b926640ffc32a8bc232c04203d05c8adb0443aa89a3efb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    179f7b7d1f5eef3f8aad1facd3973a93

    SHA1

    d23cac364c73fc6f9d17a357376f00c9f4b8432e

    SHA256

    5614cc643cfb8432ab82b2adf6a1db771a2f47dc7c2df00e77d9a59650365c21

    SHA512

    a30589384846fa09a2620e47aa275f902c38781b0daf41b32abed2165fb7b65af639c7943b2b80a919a4c15e6be95330b455f8b1f0d6871649cc4013c466c2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcdeddc821847524674232acdb8604ec

    SHA1

    7f044a9c6a8fdcc30960f21ccd627552bb6bd394

    SHA256

    aadc1f20fc8a8e655a0645b52213b19d2d78e44b1a8815ecd22942dcd3cb912a

    SHA512

    947fa5b3a2dee860ed6a7edb6c581169b3bf446c2a80d8fee4889c995e58295289b2e1fe0debba9aba12a58c3d9de22beb6fc3d28ab6ac3020221ef0af4da146

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74bdceb2fc0ae083e4c513a367cfb0ba

    SHA1

    da572cf9aa5deb42415ebe09d6ef4277badd65e3

    SHA256

    0a83007948ad41481d009d551f3a14441a8a7a27d62d862cec8146a1ef2fe664

    SHA512

    01f7df9ff1467fb167a15b953d096fbd0df8c7208894e5011aca22cd1636dac29ae9a5f994530f30bd7d630861c5aab0cd3cfe396afe573ea2d3b26ee912c1e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    798463d77be9527dee9b4d1195194d76

    SHA1

    714b690ea386d61bb2459c6630f39ab891631408

    SHA256

    47e56d0db0b572ca6c348753c31a0fcd6b4acaed5676fe5849534cae5d3cdd48

    SHA512

    e49ccaaae5690642fe599e2c3a43160d3d33e1b447444670e43a4fbd05797e14d6c906c451f7ee1a47a63d4440ab475afb664d5e1ba5ac6eab64c817481752cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    843c429eaef4b5f5efeea1cf214ea3c5

    SHA1

    bfe5702183b6291782fa5944fac105f07f5d0814

    SHA256

    655756341020b5abd9ff10be26bfdeffe278a06e2c362e4308326f4ca5fc8534

    SHA512

    957ba79eca2b1681ee2d6000c19f9116cedd209dc87143d4fc016f965c424e42d35d122e1095a8e11981796ed6bd16250067f6fea3b0c29902cfbbd18e04b3a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08e5af13ff8dc10875dccd6a4db6b07f

    SHA1

    cd293ea4b8a6f084671afe450395a48f5d16c825

    SHA256

    c224c2b1cbab67e890984399daf9d0f9812e35835fe301b555f838dba78d5829

    SHA512

    725502b185956dd52a4a09634611f4098d5e292e7d487d91c7634d21076efa97f2d635e67e2e9d99a0dd97b196a975f57aaff250b9b16272f4c6020ccfcece8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9540e1720ab7a2756e5ab099c46f6e1

    SHA1

    6ec843d7b8738b0cebe593814fabfd8814056976

    SHA256

    1b20d178b5f7ef60251f81891c0cdac2fc92870dcb411d641c16539938482374

    SHA512

    91cf8b136466f3d716f4955fb3d31cdeadd4c02774ce3efcdbdfc6780b7f46aa98105aca2e031e4397b9685c0bc7785352aea124db50668cd3fe14707d551a42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea2fe9398ee3bad1bd87d091092dd674

    SHA1

    5d91bebb4093910acecfa58f54f2b8380d8e8a4f

    SHA256

    0092e10d9ec1a2d63f4721b58bd41a3f6667a49d35fb76b272362613a5f00806

    SHA512

    d8c648a7e57d4262af5e1bc637dd332c2b6e880f949dbc30a31ed662f776c0d0814270a494e03696d5e0ca040a85a1d6071abf2372eb85661af509ce9032774d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34ca89b32cfc12877cdf45cdf525b188

    SHA1

    da6f9c311791ab4238849e9a635ff406745eb9a3

    SHA256

    88ee462a238739cd536101ef90646429ef998d062b110e90f0bbd0ebd0673f6d

    SHA512

    63c9246c2175ad8a61995efb7871a72a81eac836ebf8da71b96ac9e0d4204a81ffc0051de91aac312465ff40fece4169775ff4fdffb202d3c75d02e72371b3a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90f8880f104f583f5ec37c1c2973885f

    SHA1

    3f27dfdcff5b8ebe3b6194a860034b7e5a7a9509

    SHA256

    7927083810cca805bd7614d467935d2ab0eb81dd613a10ca572c241f25dc8207

    SHA512

    fd6603ebc45dc47fbab86452c2a2d37ec2245eb359cd8b5c876ebed41f1a88f9b5d688140cbe5d7469f0041e6d40cce5c52be85840f6b01a2a647d8501a15511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e508b033d4c2403640eeb43f61c6d2c9

    SHA1

    80adff0a7f9508333ec45d768dcf61f0f5836e7d

    SHA256

    727aaa4a30b2917c5184db113aeb8b6748dc28947c730be82c4624d4dfc9b52d

    SHA512

    a9b948a586699515682949c45260825fd977c886fe8605b7c21cec91f25ce07dfd620adc07924814683c54fe6dfc4fd687bb9a718f70f9833e4ae37f9f738eb2

  • C:\Users\Admin\AppData\Local\Temp\Cab39E8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3AE8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a