Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 00:58

General

  • Target

    73d59e96ab4e8250858a70e94daff717_JaffaCakes118.html

  • Size

    249KB

  • MD5

    73d59e96ab4e8250858a70e94daff717

  • SHA1

    d99e8dceb6bfad3ef2ec9faccde98eb779b438b3

  • SHA256

    652a5131badfa63edf91ff1b9417503d6edf79b1c1092d1aed0506fb6e3f4e95

  • SHA512

    be5193592ba3c1589c0c055dcf6f4dc302b94d9889ac2a1205c803537b930cfe21fd112c18857ddd589b7caae9e38ed6424d43ea0649e24c976463a94175a909

  • SSDEEP

    3072:SVyfkMY+BES09JXAnyrZalI+YhyfkMY+BES09JXAnyrZalI+YwsW:SAsMYod+X3oI+YksMYod+X3oI+YwsW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\73d59e96ab4e8250858a70e94daff717_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3217AAECE20956500C22BDB70A7D005F

    Filesize

    471B

    MD5

    64169d6d5eb5867d1385f492acba126c

    SHA1

    c4d1db07d3314d7c6ae1904e664d25d7e97df8f9

    SHA256

    c74ffde595b881b3c36070e2eb64dad28ed37ed50138c745a4182bf8c3bbef39

    SHA512

    f7855f1974de1cb8afdc49cdab8aff4bc5f118cf3c11867fc69e402dcd193cd20c69af6c1067495b59f00718c907183ad1d75f17cb169e9a4a126447f7440ff0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    471B

    MD5

    4292056c31672d33c863f7eaa2fef954

    SHA1

    bdea0911cf58d5f5206367c8838d01e592091df7

    SHA256

    5d6f4429102c56ab54da77fd12a32741f5f3368b3b6e0ba2f77a1f499b4a743b

    SHA512

    716df3f8b035bea0a22539bc4bfb541aa52c1cc996911561f4fff1975ef875d0ca2b7fa1f09bc10ab6c398ea4308138d00fb9c17cc62728e6b333b43a1440904

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    497af9e9bf4f54421753a95f84be2baa

    SHA1

    7d8ac0d084e05155a8d3de5d12d2c8805236da79

    SHA256

    ffe4e7bc9f939f3e454150952d97b27a7938b42de29b66490781641d5b2d0320

    SHA512

    9d6e63b6448087fad9fcb323249044ce8801e94de7272619a24c1e8781c12f4ce59ecb54540990531ba052aebb0e1c822036a18c99f3b1936719946a3ff732ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c969e7ce128f31930f167aa2eae4614

    SHA1

    61327f1cd094934b55484287bc9906b200f0dc69

    SHA256

    42890977af127c5c2f8719666ccc29fd250db3919da4c1a2394d32f6dc27a972

    SHA512

    8533a3e30f4a5ac1bb5413ecb8fc721691b644de1fab49904cbd28ccc34be39717cdd382a702ac36716cba55560677aafbf54b3918c0cc802cceae75fa1c19d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32c39ca8e3dca1c34604ae9a1c4727eb

    SHA1

    ccf552a3711cdab00cc5aaa6066e4260a39610ee

    SHA256

    2f4c18d8a1e1371486281adec343114aae2931116cde52af9dfcc8f5a14999cd

    SHA512

    184970971151a3f801286f9c71e4066b4533e78601cd0b95c3e3d19b80d4df08798482a0b6c268bfe45058f335ecc20c70335aeff313ee8cfb7e057b4ac1e7de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a41c3eae3cdf1cb1f72eaff154f88743

    SHA1

    c8107fac1e573fb2e35ce17a0d0785d99791aa68

    SHA256

    3dec9e8678b12242da24ea02cb558aa3356caecf68445b58f121c6e4a7221347

    SHA512

    b97d2582d801852a4110b3520d4cd8e9312497461e6611e01b4093a85d761da567c0fa73d828935ed5bf94df7c1cedd727f806d13f312976a55735f07fb2c2d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95093bffe5a43ad22b996579f26cd1f9

    SHA1

    7b8d67bdf3c10382ce21ad1d90780fbb1db9d1ed

    SHA256

    22d9741d605e4a3ebbf062af776dfbaeedc1f0b365d675b657aab801d79d6820

    SHA512

    99d598a1dc16e2497fadf08ea2246952297ed9b6ac190cdc6acdeb43d2c32566e6742f615cbec763eb0e38991c580207fb42d4661c0e187ad3a33885ef609d9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eed5743fbcf8b95d00b39fe17bb36c10

    SHA1

    f9873b73a5bce0cbfddf773747b34dd7c8c04af5

    SHA256

    430cdd7a40b950a07fe5629022aa732a5740978558b647da98c3a12249d1e7a1

    SHA512

    c602293375d79f8e0d9a63c27b8750913d5fcb9d72ce6896a281dbe3817204c867ae2c37c20065808509d8c707c007d4630d6c4192b4800b8380fb1d364853f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7f95a78988b59aacb17809f3639324b

    SHA1

    e10bed0b8e986dfa1f9b7cf52230a998183332a1

    SHA256

    920c00d90c58dde2a56c05419643102b410a5fcc4deb18b7dbe3036ccd578bf5

    SHA512

    f5c90fe7cc9e722fdeebe4f85b163bd4b481d03189a6d9fed0734ebb104aa9609abbf3fc490da7a69188e9c42f477880b7d6736e6e14ef41b93fbff1574c6e86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03398a8d971004771426d96f3bbed919

    SHA1

    51fd23c35487930a6dfe4c860d354f49ca982576

    SHA256

    bf6bd402734d6694007f92fdd089e43b709e06513dd414cf4beebb1f39091475

    SHA512

    1295f90017e4cbe44ec391d3f6156daf98c122a119912e3a429fc64ce7a45982b365daa38664715de35af47269105a96fb1ee1e4d475ec3f8414626156623ad3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3420137ebbaa3f610ffe059ab768ee3a

    SHA1

    51e989f7684aee7407e23c0227aa2ac0854cf652

    SHA256

    d6b8a196af55a15605fd970cb1fdb4bbc9565cb142f42233f7a2db1721d818b0

    SHA512

    e92c8ce03611523041180b862281bc777e5d9b13895dc860c4f288f7d765a2ffa2963850dc2e01052607c92f3fec81d75ef11ea3d62bd6cf799840a0d41a2c22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    128d417e142cdf5dd1b84c433c2f0c75

    SHA1

    1e03c87b5b6ac66d432611149b86c1cd930a57c0

    SHA256

    5a7e6dcf5213b44e713cc781c06290fb04220f08b546f229d918c3212fc3c570

    SHA512

    77fed68ca37e492ce4895b6806428cf3849fed9c69301d98fe841450ca551c333181657ab2aa9596b3da63aff1923204089881a551f02bdc1255f1f01f1421a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    524fb59b34596dfee2db19737437e344

    SHA1

    f31d6907d5e81766346d78fb43a5c452b502619a

    SHA256

    bbbb93a424cc6a473b153785967f41a64a8515165c486e5b48da8390efc05e7e

    SHA512

    78f44c340b2c52b959ab62c9aaacade8c7f2c9c0fc6e791d12313d5519a30dbc1f6fe8be8a1332b63474c523a1e2df2d7d550ecd3cde0892500f10acfc2940f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22e686f4113b0083d165e24361fa71cd

    SHA1

    6a2178b781d917896a321dd63c203a8f8e2f64c1

    SHA256

    4a6099412007128b3c40566f4be6a372f2cf0571fd305d8d0652a8099ad129f3

    SHA512

    0f058a690422ebd09a69c13110c8fbb3e7c1ceeafb230e19b32e6b39d95497d39d2678d086c3844f915c67178d79b797960b87083a67605429a43b89b219aaf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0391d0def1181696a7c6848f638a953a

    SHA1

    e8908272716d682094c925ca0fcf85bb1957914c

    SHA256

    4f9d80712bb0833fcd7569465c3e8663502e081ffb7675493bd730053de86a82

    SHA512

    09ac44945a2184ac41a7c464523976f10aca42adf1369511ba24a16f0be3523b3dae65d26d6757a13d65886a6f2cdf8e775bb00462c7da6fb0771aca7c540fd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16c25a05774997fe4675185c10b77133

    SHA1

    6225396f2d5e95078f10857e8e7130520d74d8bf

    SHA256

    4975bf9b7d5151ae11a5243fabb40e8826b16f973dd7daa2ce19463138830365

    SHA512

    37baf0558c36f6318837fe6eb13a0ee1fe0ec0713cf26f62e95c5b1001bd848a5de8e53b30a47e02754aa20fdf212b30801d24b2d2bb4a73685ef31b35c1377a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    325d2c49bd74fc4b63babe2d2faf5c25

    SHA1

    629ebe09c00a93bcb2033b14f50a649fb5bfb77d

    SHA256

    b015770a56e963c93fefba412706b12fe4f0a2727238e89ed99bf1a18edfc92b

    SHA512

    fb227db9cf28c39811a2b779c7eae41872a51f304bb52cffe55eec4bccdd842821efc3fd80e7745cb1df7fb6b1c4d81f5689cc6b10bc89595e9a176271ea4bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    404B

    MD5

    d1116fcbc8c2d7e5fd291e083c2a814c

    SHA1

    e95b7b83099558aac1a5ee6d1408c42d5c9e6134

    SHA256

    8235cbc1f46eb70f1139c611b5064702653e27d53e188daf52a4a592a1cac6e5

    SHA512

    053809b64a67beba50024efb46d018fddec025af635a911fd0171f1a305b977d943255a2427c3b9091e19bf7f76afb9838210f43a367f726c572c62ecfc6fee6

  • C:\Users\Admin\AppData\Local\Temp\Cab36CB.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar36CC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a