Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 02:07

General

  • Target

    6965a18e6be97df528b5e790007cbb4c_JaffaCakes118.html

  • Size

    53KB

  • MD5

    6965a18e6be97df528b5e790007cbb4c

  • SHA1

    f0f52984f2d1e9dfebaca76c0d0e32ed2c7164da

  • SHA256

    09031a7be29d221376ecc91203661f3c3a466d2d2e482e7e864414d1b3f61ad4

  • SHA512

    1d73ae686598b0fa29a00fc2d21e05c57964edfd5a890e5be930eeaac24c305d47e25abd3ab27e5251b978dc15811663f3cf31e1c9b980781132366bee0015b3

  • SSDEEP

    768:z9RRkUpVPDTZ+9Sz8qjlewFH1RBGZERNeqze0S4eNT+eaI+Pjfsk:zR9DF+9SzTle+1LZXzeT4eNTTaI+Lfsk

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6965a18e6be97df528b5e790007cbb4c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    356d7a1bd32991cb0a17ed0ebab09c70

    SHA1

    a3b6f02cf414e094301f1b58934f20eda3d3f3fc

    SHA256

    c24842f88d326b27ef0c8a33b874ace48db36a5c917db8477a8abb475cc294ae

    SHA512

    e78c6ef8c0f329ef567bff4a4107f5724768649363ded32b0ef286bcafc2d8935207342179d876c847ed9ef243406e411b13f39ed45f4781d414832ec3344818

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    803cca1cd8d4c9cddeb702431813fe83

    SHA1

    fbab636518ba5c15df7d2979d22211a47d544e43

    SHA256

    b829d775f136685397aae6d04862d31e0d52888ab1b8c642dd3155f3531b0eee

    SHA512

    f4eec057cfcb0ce89ba404fe141cf5a76116d0ff046c30bfd632b85c5ec8c14701bcbc4c6a05d0b22cc23ff9e8c2140c20e031bbf216bae2386b9b1d3f8c12ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6848d15073e152da3a1240f466b1675

    SHA1

    86e5f44d38b2dec33add0289af0a4f6946ee0c93

    SHA256

    bb72622b025532938f0da0d88cd6a97d4a3be0d0ad40f1232626c64f76ec6da5

    SHA512

    103f7620530f36cfdcdb2e61b6b414d3f53200f8c2bdd94a704048d57d3fb159bc8bd68712bdca4e036cf1f00a360df77fbe9bdf3465aa28610a7e3c49ba8b8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    174f335d9b650cb3a923738e437d4a7b

    SHA1

    85308304b84da4ed98666c1dcf9182aebcb35480

    SHA256

    0b04e3eda33d0e9c5b6c4b6376f16160927e3c5944e8a45c922a89391ded0309

    SHA512

    2d64c9619781471c893b223dfd6a60b624fb58117334df188d1eae3d01c06c31cf0628ae95b825d3c45ef350f86c2488695a306b4e6bcb6b069f76630861035c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    574298f1c1610f69c81627b9a288d093

    SHA1

    0bc58968a09da5f62534b3fc2cf2e9c31e0977fc

    SHA256

    fbda755dfabe3c69fe7dd4b268810166b265b0f640bde19a6b7d27db126d0f7e

    SHA512

    ced6b416ece8ea2455a00f327a3e75a51fbe0821e8a0a43eb2ea3386be8823bfa40ffe3f9f13473d98335f11cb3d411e7b423b5d1654430f2e79d167865b23fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d75f9b38abeb4458aa6be0254dc9e2b

    SHA1

    a41669ea9821d882ea5311ae6f4a453895e49cdf

    SHA256

    c121f6c77b8e72ac2f1d98dc5563a8c7acb6c2521981b35a81e54c2ca2c0175d

    SHA512

    0ab3d1fa0186de66a3478a75aa93f99937be7d589e221bea294d587f47b17500935051a7aa914a135c7ffe55ee90d009814f81274e77285075bd154ad62bdcc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea52d76aa53c5b8fd6a5a45295a7a4d6

    SHA1

    eea437537b3e775db38acdec1791b0a20b654a86

    SHA256

    ffc326ea09867c326d69d71e8b6741c6ea313e4706d27ce83ae6b503480ac08a

    SHA512

    ad498e265a78f25f33d0b75a10a8a6caa7bc84b17db764ffffd6a3d6dd4be80618b86672cce6d986a6609629397d25bc74fa9898fc19f9b782cace591cd5850a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ce9c097d397dab63e757f042e97efd4

    SHA1

    60fef994251d5a71529395d09172b17cdf02c0e9

    SHA256

    1f5c322854f91ede59fa4a165b004328a95dae3b653a1576a830f0d27de6ae32

    SHA512

    dca455a08412be8d0c5ecaeaaa14a455f8fa23bf777087fd4f34ff7ddecfbf6003d3d1f945d4118109e465d25a7b4ffe45a854c1fbbd88cf863ddc5bca309a35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    859201f64c631a1705b0d99159b42c18

    SHA1

    1abd0437772c881ce8da70875766523f846ec957

    SHA256

    cb75260b802721b4e990add9cb64467a7d54599b2b2f5d3a924fb34d8d1a1fa0

    SHA512

    75d0c26f4d0a9c3d8fb00a964defcfdd15a991bbcd87a553dc14375015a5626b24b8a58b29519ce2c3aa13404ad3bef5a8d91b981bbeaf7b64a6c2639c544d85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b0c9b37c302816a0b27974896602eb2

    SHA1

    e1e75ad1f0c3406f88d0d7ab9b76821db60c9486

    SHA256

    f4e832d0eee803f311ebe9ecb740e51fbd3bdbaf56ff89ba63404b1f992738f0

    SHA512

    b5ec9a030bb66a11eeb131bdacd86ba40ad5f95aed43e5d205743367c95c4207a7d06e9bd630d91237f0ffa5100947e8ea0c1590f713be152f1e8bc51329bef9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31a2aa984eb70fd1b5ffbc876acb211c

    SHA1

    d75696b3659fabcf481c54d4c01e214c8a78a095

    SHA256

    8375528d6390f9c252ecc9ab181b76af0e030d8aa5ceb23d1c3f85f5b63d492d

    SHA512

    5b0d83ccaa938433c34b2d66bd8d68b2ec584dffe80cf59b85cab6a2fd8a82b3ab26fd7c08d5a96c67b19e0f9b61ee94cce5558151bc0ae0020da0f6c1bd1242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7065cfe490ffe0aa9f0bf3f09baaf149

    SHA1

    b025c38a47604c7ebddb226aba7e92fe15ea24f6

    SHA256

    663d8fe693eff29180c95162222c407aa096124598bae250346c77412f312f5f

    SHA512

    d878cfa68c2e50f357ca70fb566a336668e7434c47cf0e2b27d496910e39ed04a75e6967db9d7a7fa5ec1d1142b6f27e0abdfe70977ed089871f734698bcf9a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc19fd83c4e96c3d8b4d3f197c483c43

    SHA1

    a91d6042316ba2ea48afba1aaf1298753b57892b

    SHA256

    8183724ff00436c66519c44d73ea83faf3c7982094e282d3a73bfecc50317abd

    SHA512

    92e612c09a4204f146782776d6b74cca88191e4830df6ff55707555cda4fa815988cd96444c6b32400953735992be53ff31b8249bb61d9a21558a803c8df1a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd720aa9408efbc18124a86fa76f3953

    SHA1

    e5293638b7f0ec1ad9c2fb75b2c70f40f177c71c

    SHA256

    e4000c7aab014745da3634b7f1972302a6d9a15acadbd70ebde204f25532adb4

    SHA512

    11baa4e6fc8f713ba9c87f4ed248ee796a3a331c642b8e23d5e79c6d3914201ff8f894089f8a46755f2a4ea4c585e14b7eb716c7f729d389cc300a1550c8a682

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    289b89250a736e4dc65f06fd26377b40

    SHA1

    5e7d73d306d8df8198c0c5d783c585cd7a494259

    SHA256

    edf1a5bee8c49099aad086d1126bb688b43680d1b4b49db60ab98ef950e3003a

    SHA512

    1dfc11647a134266bc9b50bd5e774cb973d90dd46222f1a09e1d546ca56ed2a1de1179444af03c9b5300aa7ef00ef99117a0da149d01e213b830c1297079975e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b3114a522dce17745cf1c4caf7fe808

    SHA1

    6c4bedbfe8cb312443a987675022ef2bc63fbb5d

    SHA256

    a3f723d8eab37ed3e7a162b6302e9c53f5b3199fc7c45812488013fb7a0da3e5

    SHA512

    19f66f46aea9aff702aa6b6abd39683bf21668a8432f270c296bd3ba50951bdf361a6aa99fef79edc9983394c23c2f7486616f69906aadc5586fb356dc3b585c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18ad31dd864b51369b41b00c3a667468

    SHA1

    174d016d1335664403661963f3f216ec42207203

    SHA256

    b105f7873eece63e44fb404515aafab262cb16bd3f2e44b1f10cec9c60398731

    SHA512

    dd7490da533707b6ed1b05fef4253e588a876a9aa830977cca080d8701448d0b5fc9742e56e644aa1eb98a55806494fd6895e5ffbea48136943751134a3b081e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8d16a43069be4574cf6875ad58fd828

    SHA1

    8a901812cb3c9f6a92834f16fccdbd3d7607bdb8

    SHA256

    e83cdb140a2538b692397ff9ec3596f3a840507f4d42bbcd1f4498ae7a85ddec

    SHA512

    f925267604837aa00e2338306545b60956c409f2868c7a0488ef9a9f6d31ec3375951fdf809f2852fd3bce884b6d2d7b807e3c2bdbfb2c28547a4167d2b287b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    310e953d0543f1a188208134712b36ae

    SHA1

    3aa751efcbdabfe1b0f701d87fd729de8a12fd02

    SHA256

    4e439ea495df93a0b236c6f559feff219d5c353ea325d91286ad8665dda61c2e

    SHA512

    0d7fa65e6e5de08f9d85488279e599b029eb9a189551e66ae3d082875d819171e528d26f5ae1737545b570fae1d46eb63d5e2970893290693898a25b378ce521

  • C:\Users\Admin\AppData\Local\Temp\Cab2CCD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2DBF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a