Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 01:08

General

  • Target

    776a3f6fcbdc9726116612d35b9c9a42_JaffaCakes118.html

  • Size

    117KB

  • MD5

    776a3f6fcbdc9726116612d35b9c9a42

  • SHA1

    7a77512e4860dcfccaa5334425738184517d885b

  • SHA256

    59cc4c0ed35d680e1b253216d01a9ac72f8d89c3acfe0858ed90e17e9ec0be87

  • SHA512

    6ef89ae6cad93eeaa5d4a383bf46ac97b60a33320def3556a7878e953e217eba8f56385493df841c80df3a6a06c4e9f7494fa715831d840f0593c4e3101f3cf2

  • SSDEEP

    1536:SvBdrbAzyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:STcyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\776a3f6fcbdc9726116612d35b9c9a42_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2076
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e2be2d722ae3af37015c69630763c1f

    SHA1

    c8209d492abcc96b989de9fb9ca91c380cf8d78a

    SHA256

    a998e2cef9fea7627f5834cb617cadb152b10d275a58a4591a49eeae7b040f72

    SHA512

    2af4b492f188ea9fa0e12f9409e2f8611249e13849b4705f4a0f536a2124565aaf8fced08a9dc34ca6c7e532e76475f31b25698d1b1d02b629549058e1b38c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c8f5082787ba3f8ab9347a5167cbb73

    SHA1

    9fd82fdc87ed22d89b831313541293eaee8d4ee5

    SHA256

    3d9775bf77683898cb06db7d5eba1513a165e66ef2e521f67be8fe08d54bcfae

    SHA512

    6ef09c9ddc6270f53210cd4d985b1a687c53047dd0512b7e727ed300649914f20eea10919ac4cb95893709ca3aee28a962cc574f28f8405da7b15841be0a8e82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c20fcb69d73898f5e51ea2b0152114d

    SHA1

    d97309d15f848cd207bf8457b360a7c96c79175c

    SHA256

    6529a853916a54208f653c1aa812e27fbd71906072f450a14f9970979c3bcdba

    SHA512

    b21e7de816cfc7fc778cfcfb73405ba83e112508789dea504fb10fbf15ce54f8e7f110aa795728e5b5f075ea028618eb00f4db04fe1b295533f4663178e8402b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    417867dbe82f45c4fd407d9071a664a9

    SHA1

    e0dd4cd3c87e5998fe8f43d4b2baebe2e2205959

    SHA256

    181c8fd951363c21f7b4797fb5301badc0a46838aec67ea1cf0ea378b8eae386

    SHA512

    c9bd0a55aaf450befb8d5400082c430591b18e9c379372052b8dc7de5eeb9057ed31107295502b09173448fb73c919a3a1dd47a2d8f65cee1dea68784547411c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d493092b4dead6026a4039e7e69b429b

    SHA1

    08f8dc169fbd2c587e2c399f90a92450d7ad678a

    SHA256

    645d09c8d72bdc59b26a72c95c5297371eb6504ac03ff3adcc0541d473ec2018

    SHA512

    b7cfeef94f9e4f9d2f11279b16feb6e3f8447af56444afa14989edc56ff59d8a843fe1d82e88db71902b7175ddb837cfb031c9fd25f9b3c9ba4f1f37cf5c4f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    447648f165fdad4c50a8746e9122dfef

    SHA1

    0ddffae17d18c7bb6f58eab733f29727b3a8d63f

    SHA256

    ec831e46cfbc5169d081e0f3e4b331e61d7c6e6e6c84a758006d6ccb1f1e295d

    SHA512

    f8d406ec517d8e312ae32da460660b76bd20b8c8bda14a51d966801909f93eb941e60dd4f7d6ef864bdcf29f2c7d97d004a8c07b7fcbb8109adc9e2b7a0c268a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a953d396f7576a20d1103dcc318d3745

    SHA1

    5ec3e92655807ebe48431b0d2abc415da04d05eb

    SHA256

    a5b2bf4a9418c919a83ace7f701ebeb6d9b6aacaac48d58b95592d27ae62cc05

    SHA512

    ffc8f5f013db880bdf6a49a9df8fb4995b22b84f5d2e3237ca52c2d2c968034c08a19d73507a0afcf493cdd83d61de9127e8c9404456de70e9762a2908b72357

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23c9954009c15bb7f9740b9f543c7aa4

    SHA1

    bf54eb325265e0ad421a1fe0824f478a61601d2b

    SHA256

    4e3a3a23c96d6dcf7ea6a05841d11efd6322ddecafa3bcacbcf663be83867c54

    SHA512

    4446e466a02cca68ed914fe512a78124c4158b9837b59a719a38b08f23053a9345c9ba477acbaea00e6ea21976c4908e6cb3da0935f95e70065c727e45f77051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b5a18aedce247cc6d2a7eaad6fbad7f

    SHA1

    703f6aefcdf4dd1ff5b07cd7d92c81294e8334b3

    SHA256

    ee06cef1edaf5f2966c7ab6473da108074ed6f715cf3c2b6fc17235d8a9eb20b

    SHA512

    f8db6448d3dd70aa11ce38bcb84d210e55e97577d6474ca41769ca3567d394371d383e026b8986f7891e65c9e76105fd49d5bf7c622c9b81cda725c0698e5979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec4d81bd89815f653445fd094ec0fe6e

    SHA1

    0296d067619e317d0330d561f57330d1f34a4e14

    SHA256

    ce893d94d6366c115cd94586ef2d58a3e710657f1de6e67f48bec937c440a6fe

    SHA512

    6dfcd81d82da3f32621594eb3373636a9589b933f52b39e60d5fc5e8e06b0d7803afb86c4445d3e86fc1eefa4c65f22b82292d3b8d3479e71e8bf1eae72c229e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56dcb1378c780d3daf129a240607f14f

    SHA1

    8b51ea369e672dd41c74c3b8ef86df9691e70a54

    SHA256

    61c19d4741d9546aeb80d461cba301091986afb4fd338be782ee4d399cc3ae7b

    SHA512

    e543610aa743aadab121013296f2f2fcc06ae185a90a099a130f2321217d29ab9feeea69b41c21e8f63507f0443a4b4c431bd470028b4c8f762578cc5adf1468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2ce48df5412f9374eb4a6e8ef1e55e9

    SHA1

    26212ebd199808945842da88398c87ee5f2670f2

    SHA256

    e08754f3eddcb7634c5ac810374e7d4a599670ffd19b361595a62a705341b63f

    SHA512

    58b34a501cc0944e8601d5ef41dfc6728edc224d3619f68df33ad345bca5e3b7aed0ba9b4e54e7e8a527a9798debcd041f9dcef0f4323c16ddebf89c355efc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa64cf0c6bc42957e2b0fe29727a7a10

    SHA1

    af8857512e7a2fef7624261e1ed9a3efd4abee59

    SHA256

    d144378043d1ceba48fe432044c12420bd53f57cfcec4a4c78f010f15643e1cb

    SHA512

    b08fd76a0d4bdb959e00680c447ca88e1ad26f3f4f33bbb1e227e9b843c3e7b612255aeb58d5d6cd9d1bcb11ca7ce699bde7e60fafa285f381bb63e3e486090c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ce503e184b225bfa8af8a64bd3c3987

    SHA1

    435570f351999c3cb5d14d039d99729f6a30c5aa

    SHA256

    cf33489d449d5ab48ee4d1fbf4820b0ddb6533638205b6636f655395e21470a8

    SHA512

    3ea49ec41164bc52dfadfc72c9a4b71871a070f338c49ee3639077ae7bd6e6e62aafb61cae57f108b57e3fa94b9f4562b93475fd180f05c8fd2ffd471d1e4046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5218bc427dbaaa778c2727977427969

    SHA1

    29b215a3edf81766519e53d0e02a3daab63e5052

    SHA256

    d919c1830af375adaca52e3d187aa6081dadd19eaf8e979aeb26cf1ec1264478

    SHA512

    d5ae08fc0e01722b76bf94275d7c17968a59b2262a69ade8da7d5859ca3282c4f9c55ace57161db1ecb4639d2da36a378e939a9d8c5ebe50e6b5db0a3c3114f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa2d5913db97cf9a2a3b99b2bf9ac4f5

    SHA1

    478cb4dade02155ccdda6b6ba179d6136f62ea61

    SHA256

    5d59e5aeac759597a110d11a79a2697c1c072352379f9ec4c4fb9e9bfcdf3558

    SHA512

    ba4d311c4397a48cb1b67be6164017c78bc98125ca19ed41d4977836a7cb80876341ff0e42a095b387e7b497554b8fe0ae44ed47ff95ceff6b88dbd8f62d82c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4633f4c595f581a9f6aefa3ab5eed279

    SHA1

    e51fa4008e6031049c8647652fa64cd6f664ffb5

    SHA256

    a5e22fa0dbf5565afad8a7467d1a1039d273055019866ab3870b71a4f82f10e7

    SHA512

    469a7a3a2f216ad91c3b3e7031c216c8e6e164522fa2c52d2c62ddb82d48bc48c0fbe1eaaeda939fbebcf8256989ba9086b99aa1a89474cb03ab6632e2b8dd6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98438c3a99bf8d89768dbd13868e1289

    SHA1

    e7516a5d631c5d56440ac7793e695b1766e55e4d

    SHA256

    48f3deba5c842256e4a69bfa0beecd0c297f0d5f84f6f8f217e12c353e674429

    SHA512

    7124d0bbe0a966494717e99129a3dcd44183c637be489b3cfce95b4b121d0ca236dcb6ba906c7f1ec0e9fe95e9e012d895d6d1bf855b50fdfe6786aa26adb373

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b22487363c89bc44e0708da6684cddf

    SHA1

    04fe7ab46434ccfdbe3fb3347cf4d88ffc3157b1

    SHA256

    17dd1b1012ca83366235b4cd89fe6e3e3142646e182762db5cec6a838dd3d5ce

    SHA512

    88537a4e120b2c527f9e40e41cfaf53a8e806eb54c46f19afe7ccb9d750efafbfbb16b1216b94d2996c13fc790b5be920ee40cd4e6e65b6c5035fde703ea0b84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f12498ec2445edb11339db1949b031c8

    SHA1

    0aa011792eeeb23ddecd6b74741b7627e0231673

    SHA256

    c8b719e5a9ace221f2338ed5555fdee1a39fd027c4019cf71c98e93bdf9339a1

    SHA512

    b784981017d10c327cd779c08794a75bfdc903dee07a471a44781563ae0297afe80fef03d6c2cfd8eb633e97368daa059509a0cbf320ba1edb0e95241aa68b21

  • C:\Users\Admin\AppData\Local\Temp\Cab3630.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3721.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a