Analysis

  • max time kernel
    141s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 09:42

General

  • Target

    6a8600f21854b395290b040cb533a342_JaffaCakes118.html

  • Size

    139KB

  • MD5

    6a8600f21854b395290b040cb533a342

  • SHA1

    1cbb740830269ea27085b9a271b4d74a52608a5f

  • SHA256

    60db14c5a59180d7a615e9789d1a8605ad54dcee59e4206137d4c9d322b36158

  • SHA512

    b7b22c0117310dbc763885590c14c4febf31f66667ab0ee34f029e767526bd4230474ab0db2699fff5aacb85a3c623d75ff54f647eb859b0266b6dee284c9b02

  • SSDEEP

    3072:SUg5KnaNRSqk+hyfkMY+BES09JXAnyrZalI+YQ:SXKbsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6a8600f21854b395290b040cb533a342_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2864
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e78b6d21123553fdd8217683bbb4a587

    SHA1

    17c8f8b0f5dc7995ea3e95325425f92717db7c1a

    SHA256

    47812c48520c611668d7caaf98ced4543eb23573a90578787808911a2e9ec97c

    SHA512

    b66cdf53bdffad54f80d0c2dbb28ac5796c3974021945597b9398022cb23fd42171fc73a73f2f497ec25a924452734dde92fd3156f39b479e2ab33be873a86be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87f3daafda7abc239f53fb116e403d81

    SHA1

    2302ce81bf04a282fc1c5ea693928832ef4f65a2

    SHA256

    ef9d032682fc6554da90498325d11f2e81bb166743027e40a509945330657003

    SHA512

    260c610e0a5e213e6a5936024ba36a6c1740fb0289761348ba8f21ee1d1bb4305c4eb5317ab1283b6874785759b465dc04e12d19597e383b29c9c61c9aa2a0ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9b0f490cf9c4e8b76fb551199d4eadd

    SHA1

    d7ba58a1e60ee442bdcbaee9ff18e849b116d63a

    SHA256

    e22c41ee313f19e2e7dd192fcd0c22886c796dfe427086c2ed561cf927e85d01

    SHA512

    c5de354c09bc2c26432465a7a4b317690003c16b790dbe9bab9bc25531672cb89bc0bac86135e0f64bda7e9e56b7e34f0fe13d2d88e5c27799fb488ce872e35c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c11d24830242e47fbb413512b1bb7de1

    SHA1

    5b6ad1142f9be8d239d0f1c94d6c3c479950ad3d

    SHA256

    c3bbf8ebb810bfb4cc492b9419c34611c86ff38850e2b5a93fcf884159e7f8ae

    SHA512

    044a6005b1b744f1b49a70588604bbbdddd87a060e358b883cb67c3de552af9c00cddd91aab47f87bffef758c4f57974d0e494b532af72637e0a811c2da0cb10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    156480f943efd23dc26a08d9044cecce

    SHA1

    aacd5c6483cb85c3b57eef9d3eaa8bec60f5148f

    SHA256

    4e90086bcac801b1297a5d126bcee264699f38c622d544bc898bb17bbe55f6e9

    SHA512

    03951166e7c87f4271369274640bb6602d63c64a079e1d3bb7c1f2cc5792ff26cbadbe7702bcdea5d7985da1cfeee25204dbca61d8b9a4a9702e2463aa006a22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b44ec99e0ae6200b4cf47be13c7464f2

    SHA1

    20742edaecc25be51c4fa7389cfc38f1b5dc576d

    SHA256

    f30f49c246c5dd84483e950c38278c1bd44b7dfba21dfe186b784696fd275d0b

    SHA512

    b9e5349829a3640e415d6dfffbf46f7f8d27004286f57a0be3f2821360124d43e038914d9105186f56117ea65e24619823d34f18e2db2f1945a0a9b8c4a75fca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c93b84415bcc6433526438561c20754

    SHA1

    8b99e888c4edabe17380b31c80349a71880d71c9

    SHA256

    3e849e32d587c4b3069f470cad48140d90779d5e1d85ab00fd8f151d074daae1

    SHA512

    8467a95486e3401f0234e9a3c18f66541858b286ed4017b77a0e00ada5b484f570cb1ca1e36d576bb072339e8a796ca9fb201b01d4e674f85bc881403a02193e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aaded5a46d0aba45f458b29065b144d7

    SHA1

    a0aae36b2d3ac0a61b3f269449c42daaf6a1e05a

    SHA256

    832b1418aea871dfd891321b3cc7cf76f7686a02a573aa31a5d22ffb44f9e448

    SHA512

    333420bbc8a1e21ba689271436d32bb0243cc78c39d4552d7a4a8063dfe670863f1479b19a7097f1f15941ba7c20ba9d5fb026ccfea419c6003d1f1b5ecfe176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8931f30ec9f02493bf85ff15d960768

    SHA1

    06d93110be29528ba5ff1e7cf123cdd1f0fa3113

    SHA256

    498af587c5e5ef369541d0e04bb68f91da41aa488bc51987c539a8d84484f5ef

    SHA512

    5b389c5bcdb7b42481f691dbf8f96cf2c09dcc42afb8b7501702bf8807ef28252b180b6c235ce9b8a2f5608da8e8f87b152d65d256c5f29c265c656f8215697b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96092fcae092a1da31e49ac78027e9d5

    SHA1

    63040aee31f8a0d72ac3e61607a3eab2f56d6056

    SHA256

    cbca9cb4b710a869c6983acccac639ecca1474e84aa66b1a7c1769c84ff2a079

    SHA512

    d6fb8ddf8910b9bd00f8ff40fdfb86264cb0a57e7ffc24f7887a88ce4dd87c54bfd9f5df3edb146f685c39482825670265d68aae5f153da913c2f9c80366bdce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    875c60a61814974396a5b235752c68ff

    SHA1

    19fad7c22645d9787e17fc791b10a7f443e41208

    SHA256

    a5465a4729631cdfa9da82ff3fd3e03548916670694610b9289a6a6e2838d42c

    SHA512

    d63d8fbc5ba531ce4135cf672c21fb143c3c567487b3219abc5dc9ce1a30327291859048751e6842a9638737a86133b41b5372dc3e184b716a98f7fd34bbc67e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f24a0095a11a5eef7e3e53621e93a28d

    SHA1

    e60918fdbe590be271c55d6b1ccd8d506dc9a0cd

    SHA256

    a9c08cb3ddece109680a85d8303ba26c6b00a35e6b1f67d5141496bbee828393

    SHA512

    6da42cf1ef75427c9881f7ce67b400bfcff01978942ca4f94e5212229828d4612f971816931af06a6f9513fc6bfefb5450d9eee1c7c9d0a3820fb6607596c22f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fc48e2f8ecd686f72e729601aa8a0a3

    SHA1

    bfceca88b06d7ecfe7fc3f03fa1d4da43b35a13e

    SHA256

    ee8c45b719dc92caaa07f9472f540b55116e4304b5082d67b02047a4069a6f06

    SHA512

    b6ec796d7f4356c2b630f05a44a7e942dc6330885cb9bf0323df93d058d93d5822ed622d7a963a4295bc19eb0e57e7320a745bd6cba0fdf4e9f0d3cfb1a54f84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dc5152ebdf9a31ce3ead2a5ea134b1e

    SHA1

    f0b566cbf161ccb43cb9ce5ab9331803dab7e628

    SHA256

    b1801f133a4703f448de84eba3e2a534f43399c334d10e03ff25a03c38c5222c

    SHA512

    e647ea889e61d4bff9b93328c49f49f8833a48dc9d3a1fabef9fa91a79ea92e090de1beafa3938170b740bc786cc641ea97745c2b12c90643162f5c74509568e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16ee0d0183e476ef245e540b984b5069

    SHA1

    215ec65b70eb1a343a0480c3bf16b764a9eac552

    SHA256

    3b2edfc89aab11b86dbe6b9d65a59df933896de11bcde5df52fc67cc56212f6d

    SHA512

    d64e1aeae2f8805f06b66df4892cfc84ccfa544ae4b6ddbd627758272523a965c1e0ba8614a2931b18fd7e1d8649235f1566f05af58cf10e79d23187b0949912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19a201cc444a768c109b1f4d04d9ca80

    SHA1

    67fde423c4ad86c9910496f5d7babb53030134ba

    SHA256

    c121e717a3d595518057b06715a3e9175ce6cdbc2911053b50965da228d126ff

    SHA512

    4e52ba2087aa0eb43dec05d936d9fbdb8d257b1587631acbfa3856c33cb30a2fd652b4390a88564d6afa408bc1ef6810ac657423ba8b4a3e68c3c8f048de8eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6a29d1a9b2c3f8b73201a0c1b2e6e69

    SHA1

    e13398cf1dff054af40ad2a5ba73486ec79b5076

    SHA256

    f97d2258db35ee904ea962c984ef2b75fc6110ea291f8cb287ac290e9af35029

    SHA512

    f5ac62f00f39026043a8a7331b8af83d6e77a37a303b9e5d938af4556eb160e1fa802e66f91bf7f7bae349c2aff66934654c8a3b6d4fb02a38e302d7e36cff72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0968aefb1ab02f0279d2e4aa1a5ac346

    SHA1

    2492343a7854a2ddaaaed3ede67221891e82a503

    SHA256

    2bf3b568d95b69121ff5dcd0a73d6c33c0f8e30d6c0586948d8b76a1fb0e9768

    SHA512

    dfb7eac897fec9b5c59ab06f1ae0aa67a07be8a7a6d414df664b4bc133215693521b8fccd68e1ad1fb75e88eeca3bf3837f6fc815ae2cf05637e37016ad3f84d

  • C:\Users\Admin\AppData\Local\Temp\Cab1B9E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1C60.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a