Analysis

  • max time kernel
    139s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 21:28

General

  • Target

    76d5b9736bc6438e5a40d890a297bcb7_JaffaCakes118.html

  • Size

    11KB

  • MD5

    76d5b9736bc6438e5a40d890a297bcb7

  • SHA1

    044315553c2987cc2dc9083781b523e9ba968d44

  • SHA256

    1611aa26896ef8bf597a1f7363e08ebd1efef74e2b28e9a40f79a76313aef482

  • SHA512

    35722265b0e2eae9955f47bdddf44106fe9298644c2900183ec8bd31f55a428c4760a36c7e72300809756532d03899025bd2d717c3fc71b6c89673a7d653fed3

  • SSDEEP

    192:un2RyE6a6bd+JL/jxuYphGWGKZaPBGKxIZmaBG9bmpB+aBGl+nenHGbDGkMoPDQP:/z8miLtP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76d5b9736bc6438e5a40d890a297bcb7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3987175726558e826f24e4e27237c4bf

    SHA1

    7653456c582cdd5389d2ac945fd9d4081f1260c1

    SHA256

    73359fc5332c39607e438c081520a1c1c32047eaa326d39e9ea22abd2b0f54db

    SHA512

    aa058064488d56b06d21c0c7df6f3ce5e918ffa7722a3b679beaf03944b525304306888215a0e91cee16d5455610d40d0cfd0da77b6a3cf8c0b93ec1ecbd9cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb5e15d66c38ef42feaedbe4edcd9e67

    SHA1

    735e9a6d2a6e889f944dc19cd43d3eaf4253884f

    SHA256

    69e68fa75f301eccb624d7d123b2797e1fbc0aa87af7e51d2f88814f24cd941d

    SHA512

    cfeefbbef4306f71199e5adbe55a6d6e4b42cae6139c2faf2753cddbc1697a0799098279e4db7fddc53f308d93114e152d2ee6a6c29a61668518acbed92a6e77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b3641841221281e19cbea039bb62725

    SHA1

    abc67b554c78f4929fca8e0229b7b79d7e340e04

    SHA256

    3b8afb6000aabe9d11db2490e9a36e00fee9539972473b2407293219c890c8ce

    SHA512

    20fa96c55785ea843aff400e2a15bf13d1445a7c42039d46435079a601569e7370012a3e56cb691cc351b4c19d7840fd7e261ffd9bf2329a6758e012032287b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e964587dc606b69341d97be576fdd78f

    SHA1

    fe206b70afc317bd7dc284bafff44b0ed4905ca7

    SHA256

    029959cc7981d605aad8325ce60ad1fcfed8c437802f9b301c0aa50424b71b62

    SHA512

    f4de4eb5ee7ad1775ce65e85cfbe0d426f13b47d15d9caaf7f606befd5b955bfb2353ac7e7e24343ae77a7a8d61cbd89808bb7a5014041900bb7e82f0a98851b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52699b806116cd873ad1222423be8f5a

    SHA1

    d32975dac33cf1f7d5e64bf00ef2b3b3e24f7f69

    SHA256

    44a85355e669d028102aa1cf42f68baea044f2abf2f11e66e545a1bb9d982e7c

    SHA512

    b38e944c86833f4fba47d4226231d4f0aabb76c29120f954bcc0f4f4143a3871449ca7ce5daca31a872ae798f0013ce359924487a6af9c573e5849b4a48cb2da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    754b5ab742092eedea55c7f86a67ade5

    SHA1

    44e7f38080c6172ba474c959c3eecc7e281fa65b

    SHA256

    420363b0fbbedfc889a9e7405cf7f9ff89628ed8df9e6d19a53239472ff7d09f

    SHA512

    dace61a56f117ab9dec0840fe5c785d482824a21431ca12048984c9dee2e652ab064ff2286b12721ca40e1fb6a55d9e45ef85bf08c0e48220e1b270ef720e1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    112907116aee5c3fcfc0f7a8f7b2de65

    SHA1

    b330905df519855834c56f8aba02a69d3493ddea

    SHA256

    07f7aed064f0343d403a2cd79e7d600d961ad17d25f07909de9fecb55c4fc7a5

    SHA512

    7abb7c90cf3dc6dd109c6afdd229f2dc31e049a010890cf821b5d0c454c259b1683c80a3b51d1c98ca1f02d941175745b1615bc19d31137cbcc6e499a599997e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    783e184bf1454d86d9278ac0d125e7b8

    SHA1

    da7631e9def0da4522c993666d2a2db39bd11aff

    SHA256

    1b8eefcb89b6f705c40e2127ef7939cae2e8cf338979ab6b4e1dcc987b6fbbbc

    SHA512

    87cc1a9f7264e8911005c4101d2fc323c1984e1311efea217401ada1fc830a9f7446022fae94dc04578f3cd46665bf56b11ae089523a1a4301816eff211186ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67e2d02b580818c9c6b343dcd5e8c9e6

    SHA1

    50659d3085b85b47a633ebc796c7c949925e67ce

    SHA256

    d419814dc76dcae986a27042070c4ae53a61a58cb946160027c16329eab0f2a4

    SHA512

    658e1cfa2e9718808c8afb5b53513a8b50e9045a0f6cab86dfef4aaaaa7ed9e7b17fd00cc8ad54f1ae9723f535955c1a29b119bc0b2e1eae3d537a1e841e48ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd058015c879d413bc7dd0d0604c7818

    SHA1

    b852eacdfc7a54e869b0ff4909ed2f818639b439

    SHA256

    d067a9b1582d7ee3b19361ed96bbadcee0b259d5cb7fbe2d0e52a898d3ae0b9d

    SHA512

    f404c04f1c25c6add3a209f588c4ea99b48f1915853fdb66e0b8560cacf619d06a49ade9bbec579ffa59499245017d8d8a00d5c4181626a58c86e9251b28ba91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a821d5dc7438774da86b0d28d271335

    SHA1

    74eb80b99055da97ff62d142fcf3f0a8bb3742ef

    SHA256

    51fcac16502826d9cdbdc246d5564cd475b898415333df9886deb953c3891bae

    SHA512

    e666f64098fa6696efdbf4cc5c34bafc1c7272404a626a059ad75f8a04bb5ec0b2f0776bf258198b953df54893ddd5b9f9b7a63ed64ec88d09cb225a4572661e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9667182ae748c9de2710ef350367d81

    SHA1

    6cca006d098e81b2806dad9ed427714a1887ea31

    SHA256

    71faa825c2af05f2a01dc929134c0b6a2dde15ad7f5b105ed6e7c17c55fe8ae7

    SHA512

    4a5d7f538573c510e5e83ed0f35ba8e6428c46d33f8edc6e9e051d8942635e4514fad3ba8d89162eb82ef30c4ee8ce0b26c77460e32411e1d7bf7e93eb767a31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e0382dde020cab1e545fd4f7ed417ab

    SHA1

    8739dfb01b6c79e1bcaaac99d4d460a56de42e97

    SHA256

    964e995a996d530d47d3e03f1352660c26521b004b2e30ec38089f0abc0a300c

    SHA512

    cded912e5029b0a360c0db55cd5e4742a34fd013e44ec5370a3c89b9e3be46032a9d2debe718ca26ce309a560c1c871a23f361cba9fcd9cc27cd6fa89ab3a17b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d1a25b0af257a2c0b4437c4bcb1d363

    SHA1

    70edbb301f5d67cf6511ac9d761c69d15785060e

    SHA256

    a61ea61a21ea41f8626e528eadc90af91b38a99d08dc0c19a392f3b0763737b7

    SHA512

    e85bdc1ab83661db3bf98622ca619797d7a8499bd8e6d949a9204475353bfcd19b60c413cee8cbe82c91e30b1588cf0b04a7738c38b5704e03e0b7a63c5ba6d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02240a5c360c322e6529c0d9d20119a2

    SHA1

    2afd9738a897d6dee5e24f3de643ad77916d954f

    SHA256

    29ad3bc1f540ada7edebd4d850a277b22695af4cf7690a605e3d817d3d433977

    SHA512

    63330b93e8e90f9b5b91fe46bf2acdc5969238b2286ddb820ced9724e35b44dee1e6ae8731012caf76cc8a96a09092b3e5b3dea64b1d3d0ec8b32b2b5794e1e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65ac664668605cd2006fd636e932a0db

    SHA1

    123466632afdd87d7fa8a71f013c12842403ea71

    SHA256

    8f721c8a757da9a4a8a1e718f91b8a37da5627e74b54fa4820d4b8ce98ab19e0

    SHA512

    f0d2a57e1db1cdada39902fd57efafbc41315afc574d5414693d3124428c76dad4dc7c5aef10f70d26f8f592f10e8f35877e80946ac4f4c52b78dfcd7c4ffa10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73a70e2c26bc8dc74c6ee9f394dd08e5

    SHA1

    4e7b8783e03b08a9a874545aef8b79e13a9e4497

    SHA256

    a25d12287e79a0ebc7a0bd8809af19ab8fe26a104bccbef79dee8397315a0ae3

    SHA512

    77ed3ab29a880e938c9d85c2b5e892b1899e05cede1a51796172c84ae617fd1e971ae4480eb26a79d295b970a97977a84cdf0d6fc056111f6bd20848a92c6fbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d59f9385235b557a24333177d911d53

    SHA1

    bc36826cadd521e8d95226c553b1ed53e110435e

    SHA256

    b5cca5df4adb72e96035ee06ab884d2f09d8235e7a8f3f4a1518de90f67432b7

    SHA512

    48f795bda21e474826c251446b5631105ab1919d3e7c25d7a1247f20b91521e5b37638ff749bc0afecf00b88dd5efb07f11d53ba9e05568183793a5a7b9cc8be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73e17f0f2aa7262db1b7aed27defcee8

    SHA1

    b2c5ad6a84671462a65baac7e6d3820046fc05e3

    SHA256

    3fb0760a9d99f66e66732625dd082b13c04714fd37620d9399699bdfca70fd9b

    SHA512

    b2c5f82162fa7da22e631596ea513831d452839ac170a1caf1719d9027a89e1e595a518320c88d37104c59bcd318f92a3373f4760698a303bd83c285f2fcdad4

  • C:\Users\Admin\AppData\Local\Temp\Cab9B48.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9C69.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a