Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 02:07

General

  • Target

    69661958d87502a53d66aefd73abcd33_JaffaCakes118.html

  • Size

    19KB

  • MD5

    69661958d87502a53d66aefd73abcd33

  • SHA1

    d62c07fb7dc69766b717ad3c2e88a6a282e97c8b

  • SHA256

    cd0620497e81c6bd1b754df4e2baffde6be61501d9b98b7a76f7332b3fee4801

  • SHA512

    84d973aa90f6145522fd18bb53db8f1f300345222906032c263fc038968af0fb0c5638ee1e9e29f44b6570f70532d7f29104f38c6aa04a1605ad8e4c391d9c63

  • SSDEEP

    192:uwbFb5nrotFnQjxn5Q/S4nQieuNn8nQOkEnt4iZnQTbnhnQmSgHMBOqnYnQ5TNnv:LQ/Bqlqo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\69661958d87502a53d66aefd73abcd33_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2004

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    518b047b57bfe6e4b0819c92408199b3

    SHA1

    bdf514d2431d1582a0df8f4874d2eef3feb4f530

    SHA256

    d4b098b72e64187276c8d48a8ae7baa79b4922acbed9e1c3662ce630297ef799

    SHA512

    fa503bb32328bacc09e1cc25f5535a9089df07510488c56a05be7ed3de39881368ec2d355f0f22cd9ad51b688dd9d729b8c4461daeb4d3c01b6cf4601a83f795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    19541307d2439728a4d05a802d2b9186

    SHA1

    fb08109281615692a4ef1d9318949a37f1603814

    SHA256

    e937c8c1cdbd7e0220d6faf47000e56474caa30144f268d7472e2f0fad933eb6

    SHA512

    0f132431b56b200486c079254897ec516d3a3507fe634fad795186ba7dd08d80db0bb6c1de6ec0aa733bc010bc0c40006c2cbbdc03a6c89d31c20df1570f34a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    2ef1a25ee20c1914a51d93e067352358

    SHA1

    6223eab6c79b36a2808f6dd7cbbe7932961ee660

    SHA256

    8618f576526fba6d9b36c76488184b5bedfe6e6b9780a06ad8372ba394faecb6

    SHA512

    793af877c58e01fa2b8e4cca02bf4d0b4f756a68ff231519d29a900b7fc8e851db5f84783c8c7086815475d7ed25cbee9114389041ac57dbb0611004b5997596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    207b49c27146a74c6befc14e7ebfe015

    SHA1

    183cd1f2e67f4ed996ae6bcca369ee068c3f2511

    SHA256

    b7ce3616146ebcdc5703e0897de145fa15ac0c56afc7622ab2c3cfd6b94bab19

    SHA512

    f4763c45587a8e9b99d54daad0bce9470ff8e1995195de5ccf93e2ae0f590b1f2ff3cf58669b5ddd1c19cb1a03a235dfe0442c83ffbb736905e71f53d965f9a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    04451d0efcb952e21a569f7ac390513a

    SHA1

    a05ae19c1341ee53a255b6c5784b8ef4ee5d29ab

    SHA256

    61cd905ed4ecb8571009abd789568d6de0d95061201a78835b2bbdee6912438a

    SHA512

    9a0afae3d11276ea0c06615620b0aa791119da2400a3835aca8171739de5f41b12d07f0747f165066bcb0fb5c5328f7a43b918beacd69444e42b7cc5567e5737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    774c60a9e19a270fd81c8b0659477751

    SHA1

    e8ab5fad994374de2866b956a1ac0ec42393a096

    SHA256

    a9e8565dba63d60eb9d7febedda188875ae33f3d9b4dafd692fa412b0514e4ad

    SHA512

    3d9c720203543d7b4e2e12bc3d3816f147aa1280d36bd6e86ce6147c72f1e8b297e5dabbadc9e88dd9825e05d10102ac5ae7e3ba5a0482408e673d0f6d0cbf74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    1075cfbb0319a0a166b1e020787aa947

    SHA1

    00fa6a43c8405b38bb90c648f06d8ba3ec3c468a

    SHA256

    e03610f4d8e20c1fb885141f04cfb05912c5ffff410992ce7bafb865974b492f

    SHA512

    8254ecb9d4c8cd6bb40c35836f86df6deba5ae293983af5c15825699f3d0e9636292a387ce56b5e66a2e88a16744228db06152295d5d1eb688749ec9fc148b0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    4761c078cb5eb0bb409452287e68323a

    SHA1

    5fe66bcd47ea5fc62288802c2cdd26d43d253e4a

    SHA256

    43e747fa30f94c9c71ef7866c2a82cadf57f423e1744d1eac356f025b90b7351

    SHA512

    86e4bb9f9f72bf887fac905c3623b114820e246f0d04347eba29589999fbec151d65e259178b890c7372e832f46be881b218c13cefee4568167e11e8eaf4f5a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    e67aed30eee0a7f43f04f8d979a30931

    SHA1

    a9cf4027ddb9150dd8962851eb690e251ada5fd9

    SHA256

    7fa151a9f67fd67f2d4786f630f72899c0f96df5cd77136bbed68a160874aa67

    SHA512

    2d3e3eab403a42efa371ea0efce6000fc1e68930e642bf02dd295e890e78b0aca97940de1ccac003b6382b9fb05b41cb0e375f8d87c6eea7b0d58e3e591662e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    7acfb5f02f660f20f9d66f61c444927b

    SHA1

    5c4fe200d142aaba9770eea8ec60e974e61c7194

    SHA256

    72ec0d098245bbdd70876abb1d50b32a1024ca613ce32162b552055b69c41807

    SHA512

    78dc2b7886c2169a42a430da9f627af2e535543acfdadbbfd276508533ca9f2b74bba0127571b841f762daf5f09c6d0b935f59d27e8e2381bc400e7bfe0ed07e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b0f80c38f149e1bd065995157a70611b

    SHA1

    a6fbcd64ae7d2d4ced65f4d8f4c707afc847a94f

    SHA256

    0926c9df3e16c0e876c54985a33453f805cfb684480168f9bd701edcba87c50f

    SHA512

    6ce9a9c3d6fb5adb459f6eda0bff213ceb4f773ec8697cfe9a8133fad3b0d35a3b6da32ea25daf42bd22fca10e6fd02e8e1cb7e2e2dd1f485e89782f5c8f1cd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    4c307ee6438d5a29a73ab45b2297d24d

    SHA1

    9ba6351bca8b47c1e2ca24b56b6cef0acf12e764

    SHA256

    b4a4031af2a986ce55522895559e22e430301e0ea40cf65dd96692b64999b863

    SHA512

    202f1efd08dfa6e44967e3738caf12d1b2932a208379d7cdb5330369b3a224ca2e34cd25d2238074c9387d9b2a23e149a783dab9af99ee16dd720e7393bb86b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    293dcf44bde036b970411f3d8092d59b

    SHA1

    281c66746a98a013f4624fe272917e41eb57d638

    SHA256

    70ea2c319a42649394499a342a04f0edf4823679f949e85673160e0f7f651387

    SHA512

    598aa0951fba70298ba1f3661a14bff971e8cb518764f94a80200e947df2314dc4580647c02ada7dd3f56141cbbd20afd213cb7d719dfc751d802a9d60c864d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d0345131ebe45daeca2f44fb0cc9213d

    SHA1

    f5b183d9bf00d209e0fdac0dfc9dba0fedfe6761

    SHA256

    611cf458b40a31c688e4de84314073d44a97a9fdaab7c6f66d73ce65a7616f9b

    SHA512

    a94ee6c3d45290fbb3f4ff4e7e3b2a065e1820ad9ce9035b3ac19df5c80e1e1aceef80b11bc8537b36af66d3f5cb7a658b41d26f02e9bf303dcbe0a1b6a6ce78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    7c70badee4f62b3f798057ccb0278bb8

    SHA1

    1b1e4102627909144747e69ce741c848289aeedd

    SHA256

    a897418fe5c522eff25ef942684b21f05290fa8f779e928b0f0465575e33bfc6

    SHA512

    9f4bc8abdb39b0e89ae28c7e9345d992126e25f28e7851ffa7c89b284e7efb85b51d80597593d0adad3d12b10c44ff1d96b190eda3defd1980089a98a81415de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    7cf6c75d9a70045b5ddc9a48acbdb7c2

    SHA1

    a60d42880fd5d8f949579670a6a827ad85239f3c

    SHA256

    10e5f4a31f0bbbdae02f0e8906aa47e029c55cddf6ed2f1cb9cb9f16de932895

    SHA512

    d23153e9426d9ab69be464e09a9572e7c0a1d1e867c442bfeeb3a73d25765fcb464ce5bba44d62e3d4344f2e6763a170da1787dc15619891f56ec1f364616c29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    18004656ca149f548e511aaffcb66218

    SHA1

    346c54eb82f93d9ca984cb9e44a76508655ba3a0

    SHA256

    a921cbfc0946635e6d691711a95de6fa922b27475b5ff6e8b0f8dddba056ea8b

    SHA512

    3d70dee4de67352c797f31762642bfcb75b19cab09a647fe834ec2e89033da55a46f17a61f4f7070122c0e391dbae5e4aa415aa1f5441b94cc27dfa9bb7fbc7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    7cbd45542455eb2f2952bb25ef4e6c64

    SHA1

    52f387d26f819d2835250e9ee3303cf37f5037ab

    SHA256

    6b8aab27fb75b2a71dc0509d909b468d481f7718be0e44d2123d16de302cdfba

    SHA512

    105fcaf7946c9325cca94321f7920681620d34822eadf60c228f50242d93ee79b8da352a925bd254948ae8723804bff8ab04d5ce0b241a9a81b3e66adada96e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    e05abbe71a7385d21b3056429d47a76a

    SHA1

    770dc515347088e40c6f170746ee85be2cc36e85

    SHA256

    64cbff10ef004e6b60d6983d04a846e1794c0ff626aa08fd8ab0d926322592a3

    SHA512

    bb27bb347be661aaaf44db48c96c01d03d03cda16e2d9d496d1f661684892624128544cb23d5d5db666175f97289ea0e330c926612a1ab52151b996df0c74fb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    b5fc295e3d1c9eaec948df6715b70786

    SHA1

    baa078dcb1086852146ae2da982c577634f8a0fa

    SHA256

    5c2a053419d18cdac1f160246ab31baf17c63da2e774bd13b38538a63597f3de

    SHA512

    b111668358e34f9688cc2586996f13dac0094ff25dadfd22244a3dd75ac2a777a84587adc2b1736721dbc68b1b603aa499f2d3b65017a29dc9ae6a1783bc03c5

  • C:\Users\Admin\AppData\Local\Temp\Cab2D1C.tmp
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2D7C.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a