Analysis

  • max time kernel
    136s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 02:33

General

  • Target

    6975c375317878622455f06cd1223d89_JaffaCakes118.html

  • Size

    94KB

  • MD5

    6975c375317878622455f06cd1223d89

  • SHA1

    d7852e314e1286ea4ddbcf2515eae2992e67b775

  • SHA256

    db59a1843af4c51434e8581effdb04f2c54183af22e6cbc5303936f214e620ba

  • SHA512

    0a59277b8c6522e02bc605e7e09d29e6e36db6a43b33d211a2cb53c470048e8212becc03172640833982600b27eb7981821211c813488c01c25a2890eaac991c

  • SSDEEP

    1536:WMLiNfUdyek19FLbvfewFHrF7LJBnr87O3y4ZwNBdkrY8mgHC+qpEyW:WAiHE9BdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6975c375317878622455f06cd1223d89_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2804
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2804 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    af5b02c3ee9c582d6d545fc5eefa109e

    SHA1

    279e43de11e88c35464db57ee2236c047b87ebbd

    SHA256

    86ee5eecc5c401477f163697be946a3dd5949facbab3dcb5418ab203c162e9c3

    SHA512

    89f369201be0f509415856dd32c5118272a6d169d4568fcf23bfbdf4a4780b44b5025cf61597530f95d1938ca4881f9de5945c293924bbe51615a54cc9f0ab4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    453525f86a0f7f513b03bff88d1c8bdf

    SHA1

    bed83eef1ffead95b3f5abf6281072219b54401f

    SHA256

    b4daf1e2c1d77947975113d28f7bdfbe19aed0aba6dc261c3b97d7f116945ec9

    SHA512

    15fc757eb9c2cb8db7326db80b2460a6e31e36ad4ce60710a0acc22b8b07f899d5736b7914aea641903049b1fc61e0031c884e0845869089b70a22719e633c4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    6eebf797834381c379a7f64450eb38d4

    SHA1

    6689570443fd671aa8fee6fae271cb71e3ce71d3

    SHA256

    24230f23419e8acd67fb4cdd93f11f15c33a8b572449ee69f49d792cc93de314

    SHA512

    3e770cae3f8ac1e902b961af2c1e4513ca81d0bf002bb2e12eb22ed6e7af1542d1896b593b497e573c876459dec1472a5a8335c9bf000e29fc70d04de80f655f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    fdd121224d4f02fef86e25c590046758

    SHA1

    dc91f166c160a35edc6e6d841c3c45e03ccf6368

    SHA256

    cf6095661768b4a8100b8ad2bb0bf6badf08dad46e6656732beb38e12deb7db3

    SHA512

    88ff62dd38ece46146a04611643db8522b289e1fc3be46a8a2613e8dbc863dd16b137822217b29ff171e47239c0925a65df7f28b0be21f7d517e131782e9a078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    a1384bcfcb2f83c0daddb2e550a76401

    SHA1

    c779bd1686935d6fd51557a0bcbcda0ccb77a3b8

    SHA256

    1d3b335369cc981f981a84bd8c1bbf1b435acf0359419dd3d41705b1a179a541

    SHA512

    76a8a4c5337907c63d0b228629bbcc5250976184eb4b187f42f184bfeea5097ba2539c390bbba580a8b236298d5d18799691bf5199945b893e5f8b0e9806ef67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    fbf1279f73be4f9ace6e7c0290f0c865

    SHA1

    86a32eb842099206ce0c83ba9c008d4917ba8861

    SHA256

    9e5cc013e2e584c3910c3cdb24a62c1fb93212a8da343da8988faf53b97852cf

    SHA512

    d6fba6716d30708397adc86ab1b532bb0174e52aaad5f3b7903b2f160b6d586eb27f63e479e280e98576048d81f93d1be454711e40ecc02c2108bce6b76e4990

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d26384e43137ecdd555964afbfee7a3b

    SHA1

    7d0aaf5b2802b0641773286419fe4a5eb0d3ee7e

    SHA256

    2d9e52e11a90b369832df15a3e4357cdfbf2fa12d9c5777365f49e3531e519dc

    SHA512

    e761877cdf176af2e0a045a8713743710e33db5d336988f2536a757ee4846921e921fb0ce83fb195aa7f188ee281194701f68004ffcabfed190aea1cfea4a99c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    3b1e75486a2844bd86c163a629f547fd

    SHA1

    0e030a87db16b733134d8238eb36a10c2fcea354

    SHA256

    994daeb083a4f6852be7a87c1ffb81395f8bc6eab5a99de0fc23fa16cfdf4847

    SHA512

    ea5aab60b0299d9b2c3ed954da80201c1717f8877dbad9851c4fa8826ff1ea6bbdea6ed25b678b353530164f679ac9e00c9adc62f79359c26590449b740bce3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d4ff0beb1f5b895ea222175e9ed97f8e

    SHA1

    6e39311bdca7ce63f031d12caf8630d6fb7d6e80

    SHA256

    7dfa129d0d9e7679a98de00df63413ae4491b2c364fbea6c3cb00223a773a14e

    SHA512

    fd1bac338c108574599f30bae2bca0034db1b5b74a29c57e874dd8dfce1cfad1aed135b1bd14dbddd026258217d2cc38244dcb81b1d6fded0f877ec63a463209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    bd70b62408da693e7f3fdd2bdb36a662

    SHA1

    4c5aed31b30c35416904ef0413c2226146563ad6

    SHA256

    2ef93c42c30023ddd38d403520fae488169be9e70d7f06bb1ba585f638563eb8

    SHA512

    a00d464cb3f589c4f55025229ac368bc56689933b718119d0b600b2a6a566bef23a206e72865281c85a416a2c74645fd9da04051fbf7768e52dbb5928a718be5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    0088a8e395a900542a3496ec6070aa2d

    SHA1

    71669f2a926368abd7193620062fea32f2c84e69

    SHA256

    ee2c11106404147f909b36f6fce24f1ab0a44a5f4ea99ec78af404cd072e1fc5

    SHA512

    12dc3782090a8f40a08490fc28fbf8475a0bbae6f1e8839e19833ac9253fd7c0982fd3faa4eb71d72a44a9ba70d32946abb354a4be79e006862a9c51df2e509a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    859227edc8e971c29eb35f34b3e7a2df

    SHA1

    5bb5127ef8a9c3ff21797369cfe580c94bc10b44

    SHA256

    15c5c14fc6bb9a70d32654500f119162bca896d3dc6cceea05b0f07b566c5ff3

    SHA512

    448225a6474a2072eabac2f7233b4edd3041d933564c93c07d44b4eafc32ef9fa764b974933df4a58d2cfe6dc443efe71222948afb99d447db8922d58becefa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d30ed8e3fcf5dca6b7ca2d6c96e984bc

    SHA1

    f9a6e8867e4b909cf668bb9e3565832a724c5862

    SHA256

    0530adf1606881e574ce25b8715385f388356aaab338ff60a46511d12690504c

    SHA512

    d92022cd81c8f8c80e69aeaad3ecd2529b2b18c05e284ad2480728ebaad563808657a0de1e2af08815896b48fac50cd623de7e0c04aafbe74bec7452d718dcad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    8a06812d8a9bc2d9bb6df9ff41833a7e

    SHA1

    23daec104c913820ca542d86a431e81242b56c02

    SHA256

    6ba2ddda6fa1a0b5e042adcf57822ee66e93aeaa7246514c16c44703cf0ff55e

    SHA512

    52dc26bed1a405a19db3b590a78a7cbb92b0a77d07ce85a40f8373b26d629c58eea0cd9394b600fad89c539b8085330cdbda57bd7644ad3069646d5a3fdc72fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    967dc3c4f3aa88ca1a05a3c31483ac56

    SHA1

    b822006f59fc79f9d107b48e05c585ca0d24653d

    SHA256

    f3e3bcbc091e694bcbcb64c00464676b17bc593a2f287110097164f75a36746d

    SHA512

    e1469714a47fb757dc5822ce72441c741a040befe34eeb25f1c2e160a71c67aa76502130c64a3cb6c46ca5887f1e14c8bb65087cb002b51f42b959f2451cb102

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    5234e643d82147494aa97bd230bd5145

    SHA1

    852c40805ab6c5fa89f68aa48ae58588874d6d2f

    SHA256

    19368871657183406c04e385eb555a2ab5e84f5b3fb9d500a2accb4e2bfd64b7

    SHA512

    6a4d9eb2a80504764416c52529bd2a49e54156d7db6a4f196777a2590697bdda76a88ab47c9e32109144d5b9331cf6aea5f8950bee83f3b3d3293b65de861109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    bb30d6a94c7d3856faf606aa51df7d03

    SHA1

    0580227e4fb8d4e217a79fbba632088e9128b146

    SHA256

    b4a4d7b5a27471cacdb168bfa6550c210486dd1f95c59af0d1726b983698763c

    SHA512

    53cf05e591307d10794309ca1e54e3d8281848e25eac35aa8f9e6b9bc183f1ef6b5b065527083c9d37b970bf393f62f12f6aa7843f11e453507d756e9cd188db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    cdb267f701b6e58ceef1871ad9d1403a

    SHA1

    74405929dd0b4a768615d4638d1aa0cafd38ef11

    SHA256

    d95bfbb5c9a0ac6a2e5e34f9bedaec2c79e9871861a1782d656ce634aaaa1a6c

    SHA512

    70338cc312ee2c4aa13882d61c405091697d827a43bad605b1de645778153354017385d14f1cef5e0c251113fc752c0014b28fbc6b6cd6db18e9493c00cfd030

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    cb7ff88d11c8e78076032805fa7c02fd

    SHA1

    d6e4313b3ff7a70f7dbb255294405b4ebbf1920c

    SHA256

    6c386cbf5a429c39fe6a3a8d0830a64dc4858651badf0c0b64274440d50db377

    SHA512

    d59dd295f53b163cf3b592519dc3b41d1ee4852ff80b2e160b9ef97ba8cda94f5e9030ea8809189bd64b08e2fc8acfad129c81ecb65cf736df115bd77a3254e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    cf0b356872b5052e5b1587576b79a72b

    SHA1

    8e00d32185bc20c042d1265437ee072a3b9e1439

    SHA256

    1e816fb36b25f72bf016cc442dfe502f406854b090472a268925985bb42989ce

    SHA512

    e29ce8b67d50468219db960f788fc78a68ead59df2a2641fabd08fbbb781634bf06364d485a8b3a2176b0dcbcb99606d4f6da13a2cc04d66d0a11e123c444669

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\jquery-migrate.min[1].htm
    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabA0E4.tmp
    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabA20E.tmp
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarA37A.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a