Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:27

General

  • Target

    6923d22682567b9c2bfe1847d909ab29_JaffaCakes118.html

  • Size

    920KB

  • MD5

    6923d22682567b9c2bfe1847d909ab29

  • SHA1

    cf1d0a148cdd07fe054e9e87433dab8492ef43a5

  • SHA256

    34e4ff0ef83df002b95b1df8c9a44075bff52de1d26e52b1e63e0a1c8c1a510b

  • SHA512

    ce0f6f4aeae7b9b835f96021ad92bd2800d9a2f20c7e01b9bab18ba2afacffcceb785c9582b4ed4d53c39c5b65ac7027d056c68482f77341ee424647877740bd

  • SSDEEP

    12288:A7q2Ocq5d+X3N9nLYWAVZQ7cFNGTf55d+X3rIRxD9nLYWAVZQ7cFNGTB:yA+t9LYWAgN9+0T9LYWAgNB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6923d22682567b9c2bfe1847d909ab29_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2548

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b0a4891e5cbc8334f7cad1a7e2231d7f

    SHA1

    bf077ccdfb7d313248af0fed541373e52b80e368

    SHA256

    a6cf39132ae19124d53db62e0a906f6d91113492afc1612f1396a2b1cecaf435

    SHA512

    c9151ab2e947fa7dbf49b0d40f1d3f7e5ed6ad7a63653098e9d2ec121b05fe10f2bc37ac59869a6134c4d7218b11448353b5825078986634f909eee369a5a2c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    c5118571562168a89a1fe1da7260c4bd

    SHA1

    a54fc812f3527c1a368a19754296844aa6baa208

    SHA256

    2973d988f27ea9a4e21d339690dab52788a4ff6e2abb238f35de58ac754a4ff2

    SHA512

    aab994263d9b438b7f0be97903130c809c8091944732306484362b4b2808e2fffa0ec0b0dca187e55cc9ca76d445b99104479c9a280c808edafb8050c8925e51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    60a98e70ea2fbecc82e66c342b196cb4

    SHA1

    d9f18dcd515a5c92d608adf98759a702f5afba22

    SHA256

    92b67956dd95107b6c7cbeef7c6473129a581bb6338493f4d07e2107afdcaf87

    SHA512

    6d858726f0bdf6f9e1cfb9b3a1f4db951fed7786b05fe3a19911d4c6304e706715d4000f51bf2396f65b3072dd1b04edc82be31b99a4158a5ddbb5bdd47ea8b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    73c202c84b286d8b75dd2ad64c6ae57a

    SHA1

    5ec53ae0c04d9caf9bea54bbea3aeea61f4f9881

    SHA256

    7329940c19e3ba56807b92b3b1de6a694d8d275be334147781b96bb8c063c667

    SHA512

    b2001edae519bc15c42cc5858e12ae630d91ab02416a9b2477ba5925b8196d116660c6eb9994e64544ee9ce0200b76a169bf2ff127cc24429abfc4058a98f3e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    2ad5fcf19528ca1d01afb7b6a956e0ad

    SHA1

    ac2c3208a938c3e284be716233515010e58725c3

    SHA256

    c28122e83fce7859069d705b89657ca40d7ba8217272922856e880fb86b45a47

    SHA512

    0e50c0e67960d552a5befba5489a14fbc39b7017c8dc711a121640627fd830a67a32dd47d2106202a2367753be2edd9bc13ffa8a933d3aea20f6eed719f78b26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b551f8f80370f5871f927744a6235728

    SHA1

    c7e18bf90dd4343c18b1a1d1f355e6872624b5af

    SHA256

    02be10979707d99350dd35fa0c4e84be2a4aa0e98cb632d61b634ebd3baf8c9d

    SHA512

    d1602df6e077a3bf9f49344abdff4417906ec75943475bf6d94c61c4bc46dac5504040ff51c8704ef55a1c6400071116ca5141f7888d61b61e356a31f0d3569d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    9eb297d6ace7d3165dab26812b3f3827

    SHA1

    d754309bc81f4298523bc29a26076afc29f44159

    SHA256

    edbd43941c4aa5878022fea2d99a60ce7e89e64d1e77ce5bf3288636e7bb5475

    SHA512

    dbaf4594cd0e12893b59a7c0e68ede187968f4b0d8800a6638d76fd6df345db332c5d18e093140c82255b26d4d4ff682f4a9675ded7e1af87595cc3276c51ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    ece878cf28a4c8a690501649d27893b6

    SHA1

    864cdf36a9e53938ea762d9cd0d87a240aa51054

    SHA256

    defea0a941bca944e87625efcb38c31786a7a63bd84c192a596b5647877ba600

    SHA512

    765f68b88e3b2d9899f6e8d0c38871e1c6b2c470d681ed95eb5d34ab222bd95fba92dc839ee7dc69fa7ef95144ad121c9a98d34a50729db562f9cf331a7669df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    12997b8e25fe7edaa6414f9207566224

    SHA1

    aeca659b0359956f18fab5c5dccc20bdbdfa4086

    SHA256

    0893b609f97dafa1078a3b3c1fddf8bb33b9419a13d8c414ed5da029af4245b0

    SHA512

    a521a22edafde07f00424d9fe2877ca7220c8af6cae568cd53090a8189965bdb112eedc3ec6794fafc06dd59958967cf0c20e15f7273be99c2f164e81222ebbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    45ba77e0b4e178616792a173d54e1c9c

    SHA1

    7ba493bccfd4e1d71721f41b23f90ed9d6b1df7d

    SHA256

    9e23dca8f7643ada187c88e8c23a90a0c0169b760392fbea3cfc52d62fe8be24

    SHA512

    fc224b77d46eb7931bf6e43d2fe97786506f7da30f06f35129b284c169c4d513ec3c30d1101da0f3d2ab1a4bf321a553b3dc7c54975fe612eb5eb63bc8b119a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    39b4f785804926d627478d4865f715f4

    SHA1

    ee4f44f172055d7169b7d12ac48d6e4fa8d0ace0

    SHA256

    ccfff91d97f96ee7cc57e9d97d0b6945c0dc03e83b7a9a1f777297dbb3c404e5

    SHA512

    1855151806fe6530e2497fd60e4cc78bcab2a0117fdc94498a3d6058d5d0579f8366022ce536a84adde8b7fd2e2d42fbd68d4fe6acf14a8ed3c0c8e2fb582979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    6ff704cb12e88f3692899d81f0b8eca5

    SHA1

    9c5909845031fba9f4effea440dd3eff6df64b7a

    SHA256

    2185beb0d7f09a29073e19352bacf20cd77a3952a31b6a65b95cab5de55ca98f

    SHA512

    69e8bcb722e4d17b3623783a98633e68803a2b75f97a26256e0f19788231f71246c214026da40e813ecb66ad5050ea21ee69ab9b34db9502481b12b7c55ea5ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    89fe9266b2003b269c44ae047b50b52d

    SHA1

    c99c4cc70a5a19d6fcc50524430388bca6503447

    SHA256

    a0ce1f60ef579037f39da5da9f8cda9c0067138a6929def007e46bb00a92342a

    SHA512

    e5ceb86ee58a6c5892c2e382e6d77a7c93b4ee618e106a54669238d9425888e68ea1736ebaf8fe49fc0774ac4d8860d279271d2b58404daef87393e7a2618123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d85624e006bb3a92d8a16dccba339af7

    SHA1

    5edddf67487c2529c610b99b8659a49bed6689f8

    SHA256

    8c0075ec627abff56c2adc74ad63740bdcda2e6190e598480caf4372bd2f6b6d

    SHA512

    9956bf91c33af2bbad77fe722577567f7cabe5540c26eb114eb27047c11a481fa4d8332abda1947ffb7b52af0ee5a7e717ae623396280ab712190887ae86ffce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    bf8a85fff2e2d5eb0f2b5bf9fd8f30ac

    SHA1

    e6311ff52871b1d4c41889fabe75e93e3a3afaf1

    SHA256

    8e7da15d30b3c0a8831e8271d187432361ef73b9bf9cf9242a68e90673da1a94

    SHA512

    ab29a729882e825a87b62bdb49b12235d72e9a3966bd5c559b053cebff934d5d3f885d76416a95017956eb87116a0a26b8d75f26a4d24561d78ce69efbe80691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    89a0a55c0c26640ecb46bb91046efe5b

    SHA1

    33d1d0c1abb3e48723ca1d0bd5266ffdfae85077

    SHA256

    a9e819b453f61aab7274ed1f045fd454ba23a64ba9aa4be2d77d18538529a613

    SHA512

    2b73eca8af0a0b45cab50255e58b2c25c60e1b08655fa6059f5182119559839dda62703fed5abce4b7b386cf4da644466cd114116d2150471bf4a18b16590707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    2f14e09225507129ca0c44adb2cf9263

    SHA1

    3389d39ac6401d3b439f2d2083779c81484cd39f

    SHA256

    0a3a9c187fd251fc6a3fbca1bee65177aec81f2e4ac375d3b6da61d13c1dc2c7

    SHA512

    545502f5b1f11e6998af9a19a025997abf520d59f66bc803e0b88da060676134ccd22d6efe201f42427f49d74ff396c9750237380258f4c97f7b38014f3b7e2e

  • C:\Users\Admin\AppData\Local\Temp\Cab83F1.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar84F2.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a