Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 10:54

General

  • Target

    78e974475c692c41a643593dac7404e9_JaffaCakes118.html

  • Size

    213KB

  • MD5

    78e974475c692c41a643593dac7404e9

  • SHA1

    700facd154c7a3a1f35baa64197e3e6c417a9fee

  • SHA256

    301af8c5adea477e11398990f9df883cc907e6660251539bd5b15a9ede41f326

  • SHA512

    53ee6efdc17f4522ee334641dcd024e82bd3c4e598f9668635fa53f0fa54b4ff00b31844b7ec84ae5f8fb06f2586c8b7b3791aef7a7649e9ce34537c8d8b793d

  • SSDEEP

    3072:ZrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJ3:dz9VxLY7iAVLTBQJl3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\78e974475c692c41a643593dac7404e9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a53f122c07ccdeb26d4fb3751bb8c460

          SHA1

          03df2b99b98430d4bfda7b82fb7ce69680186e47

          SHA256

          1bc7867bf95179c83331d3ce22a527477608fccf4a0f26713848943738d02e4a

          SHA512

          0e64f35e8ab9bb8e1740ca49d81547033a02f48934170d9997434ec6b3bcbae76f17662a8d9bf3dafeea50c5d3496482f9d773a7c1d9d2194623b47ad83d4103

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6fb3e25d4ac6cba0c72f55f7d1cf7180

          SHA1

          82e59eeefe6616e35d6cc9e772c5ea9d2ab01239

          SHA256

          d3e750f318a09bd02a253f145393e57b22dd81ffa5964e2b08fe39f84865df4f

          SHA512

          65ed28e96a86228d2ced34cd4a4fd88ef0fc85002874ed06b4f0808f1659cdd7414f91bb5f86073904bb8e0eb1363bf3de8eaad1aa68c8e1420ac15d8e52d9d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          328f5d6b5bf0051955e984354f054e46

          SHA1

          f2cac055759fc9ed6501b8902d02af0acd4bf77d

          SHA256

          23d206cade706e7f5044570f2c6a090c5fc3a9680e7052969fa4af1407c38caf

          SHA512

          546593b7b490ccec1fcee77fb2bcebdc5d21fe46206c8df5378e40c0a6a79cb7b3c6c41d4ad36fd9f68c9933ee5d6f045f4162a1f907486234e80fadd33dc63a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4d70aad78a2f302a44be879bdabe959b

          SHA1

          ef4f5cd0829ba4b25c2eb594d4b18731a070ffb9

          SHA256

          2e4326e6d7dc032ff1dcec77b1606b68979b2c37c6e6232c6f9c72308e4ca1f9

          SHA512

          50ee9cb2441ee98e9c0caa635a8cb6e12fca7d7f45738dd9f131fba3bbe69029757d3bab5105f3eb17254dcc3c2ee677f8ea3568299a49dae1f17d298c2dcd44

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0dafc0ef81bd947a2aacf327d22b2961

          SHA1

          f6d7662e67a0b7a7a97096245c33431ff27d18cc

          SHA256

          a509c0623126d58e34e18298c9d14ce6ea1c04efc3779e6919137f20db35fbd7

          SHA512

          55fe5681874dfdbf4aaa71ca15a996a8ee42fdf4567df5548c7bb0a31e1b1ebfae1318a696be9feadbbf87704e87f510a12d710ccc2d0bc368d0ce7d929e4879

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0c309daf5e169ef74445fa327e2a0c88

          SHA1

          6208379fd52b880b5a00cf75a8185400f4ef4143

          SHA256

          6ca93c0cd096b13a5931f67a0957bb34704672dd46922e3fdd75f89075e97200

          SHA512

          4a62783aa7f5a50653431b4df25e3fd56c03f899bd9d80256b664439037df52cd8025c09618801a83ede8c23e5ca7522d5fe3c56a581dac85de9cc8ecd424dca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9187a33f74aac77ca86bb2a66a44783f

          SHA1

          14e6bbd91c413d47a0d4f80c0721db7fbe462e5e

          SHA256

          47fb1ad12a0ccac6b124c8efa6ec1c4213ef2b259319b8f3eae0ab37fa3fd2bb

          SHA512

          93a8e010f868a5b280419b38b236a0680ea640e06d3f37c15ca2d29e1bba63b0ca9664d1879cef62149076fe83d0d2eab4455258d04e3e18f6d417e73abd5487

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ce22eb0979c38db0f5725cb8fb214852

          SHA1

          822260ccf196a5172e61782a3ade14f57362c8fa

          SHA256

          9e1c86b7c1d879532d6bc9f16de980cbaa6f07fba573612529bc83bc3142bc04

          SHA512

          b6bdca829408fd28082d7d5c674fd5624220f06ef0f581345c65aba77d621af15e5edfbf1612a00134a2877ce893747c0a63981539a8b585515a50a90a50e908

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c33b0ef47525b8b13b4d7a8c6e8b946d

          SHA1

          fa404e4d30c53334c0a46576340e04a7faac43fb

          SHA256

          f390fd8d9f0c0066eccf8a89397e322bc18375e16d503a51f16a072a0da3c0e4

          SHA512

          95d534c6b7a4728453ef33af26fc1f03d67019a6b51bcf2252769d8fbc44b493cd3cc69416ee16547c668e9d9152436f18efa4c15280cf14969c36e052278afe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          62606641a19ed05fc068d253026cccb1

          SHA1

          b01038e52dbbc896dfdd8f2be5cc784eb7d778fc

          SHA256

          29adac4924520e182d595c0adfb168d1efd8f04a3135a59d6fbc36564c208927

          SHA512

          656507cd5dc4845e4e83e2d93d9f757e7760a2e504deb7a1ada97bc862fbbe18f6e59c008c365ebac6c9ec78d7ee579a8aac690a25e124c25b5b9f5a95810af5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1cb996c6c56c1e1eec2847f6f50800cf

          SHA1

          a9de2c47137ecccfb1aa1d114eb7dd757113d536

          SHA256

          77eacb943d87db80af2c92fdbe0a778822caba82eb56397b0662eacb82becf4c

          SHA512

          ceb8e9d7220e81e660983c9be78133a0531bb74fdd0d0451bdc519247829168b22b4e169312cbc3876dbc0de80d25eb04821e39e86096db5725b930c3835ef2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          52350a5e995dbac2f1f6a016ed8e5586

          SHA1

          c77b75a6493dac46a4b3fb78ebddc0d9086eb237

          SHA256

          b1398efdf22ca8a95418b4d7ba6bd311d15d909060eb87590f787694411342e9

          SHA512

          3b9fadd7553df0c5b2c68a8cf45a58c671a9d6a24b4616eee657a79d14e30574110f8e2e8493ba6284833437a81305741fd9318260d00c0b08d59fa8355926d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66551518267a3aab85b011d2fdeece91

          SHA1

          5cf2bc0ee2564c89edf57e0bbc69729c611e5131

          SHA256

          267d07c49db2315b5db09b099ef8f1111d0c603f045ce915475b38f6ff17eff3

          SHA512

          99d281b7b1ada3e963b5ef75160e2b3ae2f54110474a43ba62391c7d2456f9852793980db56f2cbd7c4bbc64d661b35e7278fe5f0dd2c2f5465cf4a404259ac3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          28cdd51fa021faaf065c4ba0b617ce20

          SHA1

          d14832bb01f0eef288e289d73e3165466346c850

          SHA256

          91ef634269aa971a56d5af45c452b9f8a920385a03760d122e163ff777eeab33

          SHA512

          3742dc14a97765e407722f239c911822f4704a60cb65f41843d5db6bec359e98daaeae24ea4e177a5dcf4464a9e4dd5d40ccb4c6aed076233e60a23f85100ca6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f4fb79c87d31b65af7862319fe017070

          SHA1

          18da532081086addfca23d784a9de7aae8401b25

          SHA256

          197b12f500ddd409b3c2a9936232ab2d7e35f5c5f7e35d5d3d699ad612115bd3

          SHA512

          d8dfdb958debcbf29489d01194c975ef7dbc9e45366515636691fcab6a95d3871b5f2a206f5df4c65d21d6ab72a3bad63f1ffe05cbb88fbe1b5eeafb079a09f0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          42ea80c348b8abedc777ae7f293a052e

          SHA1

          541b0fbe6e1bcedd4ad41bfb2491e7525f76e54e

          SHA256

          03664d7cab70058a46302b852fba4743815bc255eaaa7ed848a068ebb5eb8f91

          SHA512

          9f028be1fb03fcbb6328a807485c54361aff7b4a16aa5998fd66280259da41b722650fabcc2707589db5add98c15ec0d2d08fa8d6d5fc1c08f513a07e37e6110

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0f2e7a216eb855ec0dca2d718e280d54

          SHA1

          e8f43349b421df0816556346ac2eb63d2dd46881

          SHA256

          f5149f73ac8f2f4ef185c9b5dc258f7d9b52b723449cf2f809d99df404101bba

          SHA512

          b099e2d3947db8a16490572442b85cfdbb508f9c5d48b60d86aebe7112ed3d71371f79b617ad2ae400accc7c9990e8be1684478af0ad296f0b7fc18259501d30

        • C:\Users\Admin\AppData\Local\Temp\CabB75F.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarB880.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a