Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 07:08

General

  • Target

    6db317da1b3e1194adbd930234836a94_JaffaCakes118.html

  • Size

    21KB

  • MD5

    6db317da1b3e1194adbd930234836a94

  • SHA1

    64b1c5ab058200638a3379e535318b793f3436e7

  • SHA256

    625b9dfe097dc4911bcec3da17154a33c02545f26bbdcd4706efe7ec146a71aa

  • SHA512

    b3f4a63e2fe908dded789885780df22442cb207e68450fa822a3837bd7dbceb7ca1af2b20e2e2773a81b0ffb9f8c56fb49e10a168ce2962aad76e9810087128b

  • SSDEEP

    384:ziKKhgefPVBD8c23R5wQ/CImEfP4ycbp59zVc16DJZTO6u4JI:ziNfPgc233wQKImGP4yWnJZTO6bJI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6db317da1b3e1194adbd930234836a94_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ec8330d5e07c41fcf16d037c8069849

    SHA1

    14c5181900c535cf6c5c2b3555e4bd748d9ac486

    SHA256

    20d2acf2eb88ee1a682d00761cab397a89990b43a0089771c179fc7571abd1d4

    SHA512

    49c1e93b77a4eb29efb68fb3e7e7b88ac8d79266b02010d35127e0a8c82a2c46153bb2f9489ac90398919dfd6ac6094157a7c0e596f79c35f35bb0c80cdaa0aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29f0e2788e7068d58ac60aab204f45b5

    SHA1

    41715d91119046e225e6222b47a8b8cc9253b00f

    SHA256

    07ab84c45cfe61f55c7aa9d3ca71931eb1eeacc9674988ebd55287e1df9cda7a

    SHA512

    00605fdd2d30cb6ab0b6becfcd23e6d75c3e4e322b7b70451ed43d72b5567a372326b9a1482db63c27ab6330220ec7d0b300b336978afd31922fffb35f36afd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b8b77a9a5908a120586b974a1fff37e

    SHA1

    90071c75cdef385b8b92bb6f607b5550ea57be06

    SHA256

    507b00a548747928d7da605797eb0a59d3456da84ac685d3d5b1e699ab46deaf

    SHA512

    96835ee04e5c40ef2db2bd8719b8859527ce1856bf7f59bdd1eb5c4040ff37eeaded2c74b5aba96c430f2755871fe70b879af1b0e0521d04c1ee6e624aade1ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d07d7dac01d934f53813e9ce4cd2e337

    SHA1

    2724a7cc9713363870275cc9efe55fd3f60f43af

    SHA256

    d8fe6482a2c97950efda7ec1f2a113de4aa0515525a708fbd7c0d8295bd1a5c4

    SHA512

    6b25429ea83e51d2d21ba7cb1317d9bfd88ccf052caedce9de9542c8cb837761f004e304a035664bc7218471da97b154230e1d1f3f3a7747ae0faf37f78784fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc6fe84782c3d1b473c20c6ed93d0af0

    SHA1

    b0f6be446a0e1a96be7ad1c9f5abb23d14d721ad

    SHA256

    608f78dcfd52d04ca2e214a040327e52f87d46ab5a0e20e4ed293bbce454f921

    SHA512

    7ae468e5e5e1b989c4efabea5ed4d6130392b7cca9a8b67c932f75b0ed870226fd314cb7f676eb2abe87947a28e80f524b774e4a4cdec51630fcf4c630a40ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    359f9f1943efc1f446f4c21fea21faf4

    SHA1

    136ecee7847a299c02d011f3357ad89fa41b2904

    SHA256

    f61e18f09afe1e4631ac94bed539fd2c01e247496586fa428862754211ed77b3

    SHA512

    334f1a1932ddf72c58ecba15fe475781a4ece968f866dadb7389acb1fe5152f30b1482abee89e336cd2a34bfb50c3ca7f15944d417b73a81d757bca6ca1951ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f75022b2b509d1bbf41473d20d568761

    SHA1

    09a9d57fd985e6004b11b49fcc5a29caed15be32

    SHA256

    656e7ecc33e2dd0472d576e54cc99e08e03ecc70f4cb9beec57f1410adc8ca02

    SHA512

    95b5c368739a21280b7fb6168fd73cbfabf9cad16f95127b1a40daf4ee7bd9e6b9b530af5ee91d7afcf7e0329edd4a07b035e83df37fa4193b780fd7f36eab54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32c4914db4e43adae6332dfbd49f2e7c

    SHA1

    4ed8dbfe29fa308fac7e58e66e31088b8a6d1104

    SHA256

    af1d0a328ff840a12c4aabce372469e28be2186bceb6aed6582521e7b4f87666

    SHA512

    1c06b8d4cefac1ae27cd4f505d5e3aaac12894b2eee57ae9c17ec2a38a4674ab6ecf84b61cdcd3c67ab5ea0ba0f18690047cacaa48d73137c6699f68bd13e0b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04c7a790259d90ac89144ccfe1e25558

    SHA1

    b8ed31f5335f97fa592d94a62080bbd6934abf43

    SHA256

    27abce8441d75b2fbac9db24770520ff0d163d1a6a591744a9205f6d2515695d

    SHA512

    03bf2e7397cc08b95ff3b1157752de6edd883bd52728dab0a06cb9f9375664984454ad4f478d45a1108e0891c5ec69f673a969d12409001d7b1c1b562bbac140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a9a4a1f38ecae5418e446d47ccd3f0b

    SHA1

    b92f4fcee121dddcac6355f98fe7d7038da14dc8

    SHA256

    b63a3c03a8cd6292782d49cb734785c437d37ea1add9a41732e62dadb914071b

    SHA512

    b21dcd5c54701e16a3bd034668642e1ca9e9fe184d664421555c58c3ce4faf0c62e0ee236860c7808ed961c207d277f1170c24391861319961ae4780ab4fa9c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f60a62a52f893f4dcffa5d79b9fa6be

    SHA1

    89957d8a3caa0a52dc736d8bc55fb15cc52ade0c

    SHA256

    7d8cb67ce94b67cf2b64b489a252b447d125d80922aa3c4f0a9e8d03e184a8f6

    SHA512

    b8b409ebdea841d67bce631520988526fda68d1aba136b9ecc7c8eadf606a32e9474ca9ae6667079e5beb6a4b02e11841602b7640e22a20a05bca725b96d9236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f607bac3f4a4a2f693c8bc76bd8bc720

    SHA1

    a7b25502b7750d20b81b8c0e50654295445a3f03

    SHA256

    c497014faa43d207b707953f640c378efa20fe9542e3bcee4bf5851053cc441a

    SHA512

    8c7acac6a15a6e1264ff69924f75b9bd4f65f43fb1093ae0d549d70d306de266b8b7bb9b8370531d794b99c21b1b517eb816422e15ad1a86efc255a0cfa85200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27ac98a345b08c99f127aad2aec00565

    SHA1

    cf87025c8fe22e900b939489c28a17a78ed6172b

    SHA256

    6a90faba237fce0ad15bacb21547388e818e01cf1b2d9627b318ed9e58a6404c

    SHA512

    a0dd8c8e28dc94b6dd4319014e4837f4168d6ac3cdbe6ec2c0a44e714276039ba793164017f2ec824e182362efe5365a477f230ea99b6f9ddfa012586bf75af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf0e311f49d460101acca6238bc4494c

    SHA1

    d6723d169ddeb61c21c888134c43b73010d738ed

    SHA256

    b7f408929f8dcaed628fdb3a8dafaae987d8ba3df1f6aaae03c11d7fd5787118

    SHA512

    dbca5b50435012ab9a593383272a2872f8d778ce637822fe40fc66b32b3f677e5cca9a80edbbd3deb4e8165624873b9b9f02e193aac1231f4c5062f43777b203

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efc3440032234acafdf9ef2493048e4f

    SHA1

    dc9868972b4cea0dcb180a1de72736442e003cb7

    SHA256

    0a9c861860b89d09f97cba4966fe38fbefceb43d97b7aaa227e36fd22fb71200

    SHA512

    9008b415f32141b600f0075e5446b5d4c179479ef621a6543f603df798eb5e4984bed14621874263ea2b078d2450d8d2900629a74fb8b7cecbed1f4f0f6dcbb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88e391d93b1588803f41af6d39a625b8

    SHA1

    72a8bf1e5f3959ff843059bc355808149bbc6345

    SHA256

    d878533923ddeea5e900cc3dbfbd670336c4d54c80cbeb06843de89e14cb2c64

    SHA512

    dc107d6f0aa83d63e6b29188fcfb60fc364fb5fc3e4c263c06495b8f3009a9a861de70657c1364dc7790338fe67688332c7a7495e0fa06ca2ee517e851653506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09f170d3d02fbf165012baf28c5144b9

    SHA1

    779b5e72156c09765d8e26bc9de4e878638410c3

    SHA256

    9081a8bad06089b728a7d1ca69a520a455a2887037d08a7c8cd81c5b5e863a66

    SHA512

    528fbe16998da1819832ee02c00ec1900d7e1e58e3c3ef11641e389c7ef58f8cbb4f9986daefc9ee7fb04cdded61da1a05fc06ce365ce1c23d1c564359377ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb83ddad8bf8a5612eec47f67d7be1f5

    SHA1

    770e1fa8c7a0064afd0bd4af289f039da85b8ff6

    SHA256

    8bb7d1615bc68b994a0e40885ce03ca3c5173338bf44e2124135f2e671de45e2

    SHA512

    e4eac5716c70ce2b6521d9f2a9028e9b6c638ed4af8885b3b1eb971c77a0b322d6c4842130d70ff58548d33d1966c2806bd0846ce1dfb4ec741cf7d6d740f984

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    864c993f51121db61427c158f9df019c

    SHA1

    752b04a96917fc9d48e61bec7f1cbd04e6b0e09c

    SHA256

    99b7153dec185e388ebe64e8941a25e7295a6aa7afd079b5e624e9135317d160

    SHA512

    454227c28c023f849ef4b9d65724bf934c347d8d99abb9f81fb0ff297354175777c27da4228fbf948614848bde0804774de33191bdc48ce260fc3950cdf0ee8b

  • C:\Users\Admin\AppData\Local\Temp\Cab3D9D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3E90.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a