Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 12:09

General

  • Target

    791b03f49183310b880a864ad76e4de4_JaffaCakes118.html

  • Size

    6KB

  • MD5

    791b03f49183310b880a864ad76e4de4

  • SHA1

    95e0ecafe6fcfb885354eab0a418868a5508fa22

  • SHA256

    908da8f675a6eed913a9b8ed0cd2806c2521db8592537386229c6ac8ea584752

  • SHA512

    5fe574f75eb571ee9fc02d2a7f6129b3b13a6108e60b1f2bda13f6197312c875e6000bb7c80abababbc8810c48499b6b2ff631acb9ba580101080b1411ab4df8

  • SSDEEP

    96:ehM3sHfRF9JB84umvH+ag4L/kqaGWWhWJWIU1xJfw5Fb:ehM32naSeGwFGWWoQn1xl+Fb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\791b03f49183310b880a864ad76e4de4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1512
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1512 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2228

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7960541fee114948f49ee35551124324

    SHA1

    26f0d222ef4b53e00402845db7c90b2c840b00ba

    SHA256

    99b2112ac8d0c2d97fdc7c39fb8ce0b26b1a83d5631e59b67fa2846fa325e586

    SHA512

    cf4d751f414a06a8cb5249823aafc3c3b972586c25aafcc8052c25605b7360a9b58d272f04f9ad3560a0f33a7fca320a6cfef7c3397f3c9df74061d05cf918d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35a78842ddd3a41027c41f7deee6b7a8

    SHA1

    cdc4b9d22002f4fbf73cda461e31e2580cc61fa3

    SHA256

    8c9a5e643720fd4cdc82ca7433ec00050882044d9118a143c1688bfb8b935dc2

    SHA512

    4cb0e19d8672344840e0a73c9bb80db3119e5f233b13104b194e8f7b8a8f7d25b7016d7b1a9b69d021155f3ef8ce691399a5462f61def09e4799daac20558d15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79976ca20bdaa8ee65d30efd590dbd3c

    SHA1

    dc6e17e90b39dec0da3642225b1ae0f03c90776d

    SHA256

    8a1f8c9d0499321145525543f3dcf04c693c9bed5cc668b3748b84e2004a50b5

    SHA512

    a0c43eea4828c1914c33178093645979fd21c36b2cf341a70fd7dcc4102cd04dd74c72cbf75fe4443786f1ec1efbce02f065629594b16dfc0c5063d556449da8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    049d2831f8e893b10fec26955e4bd1ce

    SHA1

    a699a0b95e3dd291bfbbd3c9ef4ff189664c446e

    SHA256

    8b653394e732def94f63dbd6004127ea7277d41ae6413768d17b3c53bc0b6222

    SHA512

    9153756a1cd799bb99a9b31c3caf1de3c11972ab544dacb6893793313e7f877c08584063fe469563fa682d0f2cbb6412cdd5a5ca6b3550ebb7638848945ea6ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0f4b4650589f1fabc864e6c78567437

    SHA1

    2001ba8696f031221524e0574eab64b59ef3607d

    SHA256

    f8976136e2beffa0fe5d014711da29ebe746aa00fefc627a6edc59af5278a81b

    SHA512

    de06a2d9f9c320c339e07265cd9fbf7c35137ce049b4afd20af2d3b82cf760a5b8b0314868f219e2854f68f53401dad16a0a0173c1ca4c35eb4d5d99fd608820

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea32193a97be3d2501116bb68e51d9e0

    SHA1

    966475742034aa33b4e2c47fa06329b4d24434e5

    SHA256

    46486031192d16ea11569e7660b9b0d61035d49f03dddd8c6b8c6b9075a10a2d

    SHA512

    265eb9676cacf96e9da8ab9a4ba599ef3659b92035ea908793927065bb0b0c451457cfe975b30234e7d23bce57e68fb9b3ebc0c768d2117ed4231468d1278035

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19f68001100bbe0ab3d34777a43f4b74

    SHA1

    ff998fa346744d386288bc830dd5d0572bb478b3

    SHA256

    1721892224b28d8f2ea3a4913a98c74b7e4326912eec4ebf4f184fa427009476

    SHA512

    f8d0506677c6cd3e0345a9c54ac67267849b794ea46447d24f78be5dde06d00ab188d827978086035c95bbf9f9dac2fea643eba31652edd7ec4b2293234f6514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30bb562f85447d8599e160319db3b393

    SHA1

    fdf1ad7b346e66437c4db2f704d615be1a909d18

    SHA256

    a4426c8a49ac51cff6ed66a351e36dc0d8182d3a863a8471d27c8619bf89712e

    SHA512

    8bf125fc9b1f2f9876170a23e972eacc27e0c409efeabe28cdc466fc8f78f0429e9d81d0c4ff4e857c72d4324b84fdef77ff1bcaa9ad630482dbfa0ce1705110

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0497c7e33ed8f3def4c871571a4edf0d

    SHA1

    fbb891b088ef75c260ca850b944a062e00021034

    SHA256

    b76b71d9e6f542667a9b6e20e276d630af848ae0a1eb37d0487084a691d22368

    SHA512

    6f05ca8669bb402b3a003bceeaac27d0f4b3b63fc3bc255bda277fdf747f8e16b0114598aae7dd391921ababff8c5a592e843203ffb455e1943229a912a44924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87a6099ad645772581e43e9788b80001

    SHA1

    74d06887d270b021b47cd87897610570eb2fb145

    SHA256

    fe6aa8a38846ec41366187fd4ff0529d43afab4e280f851f07a5a39c36cd90d6

    SHA512

    9390b4823aad7d3fcd28d512e1ae43ab904f1f0cbc3622f9c98e8bc367b2850a430500c2cfd47deaffd174a635071b9702b60169c92316874cf0fdda41e39fc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd0e5a0487dd9b96d6fa701cdd86e30d

    SHA1

    a58141d85a91901366d9154cd395e2bddb5b14d8

    SHA256

    45e90e2654ba71b74ac28b56c70bcf1635957b06fa081f12ab4a900885ef8f15

    SHA512

    0f5eb6da8ff5f524f1a1023261092acd79c768c6273b3f6cdd5a2940f5b3baac30448058bca22c65f032171689df42a48c2c9fe18c7bf3c08b9bf752e79adb70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0581c3b448a24e017062912b70c78145

    SHA1

    82fd40e9f258d0eab3e009f87fae159058097194

    SHA256

    03e537af38c0e87883a5bc738a53a79bafd23fc4332bfe98c84edb4bd5d4fe01

    SHA512

    61524703ee8e2c50b454c7235e6a9e634d8529b3e23a4dc62eb76784ae39ac8a3ac1452a21c9228652848c9631e1b57bebd21380ccb8aedd4e2353d89d7ad885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    724a5843839a8e2acb98d20d7324cd66

    SHA1

    d5abdd065cbd5d2ea8724b2209aee4b3dd910399

    SHA256

    97f6dee7539eab6238bdfa53961b49cd06b86486f5d39c1da30b172279f8e970

    SHA512

    000b0fc071fe21e8bdc9674488950fed9ed90bdf506c780d237267b0d2d4c98aa9c6078af27337b22f3b32b19bbdb1a6505bcf70f0e18cdb356aedfe18aa1e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f11bec84df174525c316b495a0d8f175

    SHA1

    0e4a3dfca004972e429dda8f7d23cec2d70a2436

    SHA256

    f48e6579f53648abcf747a874871914ee560cb5ca95f681eeb4b9532f211f970

    SHA512

    51ca417361f8d2a495e2c50ef8c3ce7c0bc17f1f26667889303a3258c1c018cccdd46c167c6841161b81a1b7f9ae730c568e04691b3f75f13fa649a7591192cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9da75f0a8ad89292947b89fd8c5a84e8

    SHA1

    da16e1b692f41386c97c77d48457138a9b3a79b7

    SHA256

    b7b3690dea606b7d4571f0e8020f5684e5c368890f817ff1cb52e8d5d7870acf

    SHA512

    f98c5b80c97fee88c13e5775b6cd5b8cadac16e0482f007b3d9e63d9f6472a8704ceec3f0ad7fd2213e631a9060bdd83d085a303dd128f7d1109c06330cf1d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cefb4356a5dd1eab0ee14ebd6f856552

    SHA1

    314bf41ec4218501625889c71c8d40b6c9157b36

    SHA256

    6b950ec3531c1cd2830f390dd6d63d62e71b440993445ffbd527321a87ebfab9

    SHA512

    b377cf52b1573bbf496a55d6e9b7efe72b3d7ed079b74b8eedecb79d7207437db7220663552e551faf9749f1533e6401d7b336b6d5cf3ecfcf926e9a15ed5ad5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d55135567420820ca110685c883c42f

    SHA1

    bfd304e48256e7ac4a399608244a9a46eba98235

    SHA256

    d5d3187e0490d3d86e1b04e35f402151a60d4984e97fc10a898a269a5655573e

    SHA512

    bcead548180dbf27363b4428e176558ab0bc7e63947565aa483537961eaa3ff4c80b6ba7e7ad4e3c08653903194c2fedb90113c5460def0b00b5fd175bb1d8df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6218d4145665a3da9ca58c43b27c44ff

    SHA1

    6b52c0a7187d2fd0efbac6098ed8ec9a2ef4fcbf

    SHA256

    feb252186b62609bd22d6e24f527f54af175ec72205824e4403a5075e6a08c14

    SHA512

    f2f9e2772a685bb04f3b8f5946f251959669b8e23d7a998cfb6b4de9212a350981f50576013fbbab2e988b424492039cd34729137eddc569c9757c304f7a4803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    898cc3e02f9e0c486da8b9faf039ba65

    SHA1

    4b618b0975eb96610c769f3baa88db44712dcdb9

    SHA256

    5ebc4fe9042df4c6ccbd4a659d3dc70ec1e6298129fb242c7f733d2186247ba1

    SHA512

    2a71f79d8124d65828dc244e870759ca9e92bc03b7a7077eb145e0f523cd090ae55d4d1794df6c9d417d3e1d89a1c7f57b00def85e8521a8cdcc248905d4b44a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9ce7a7f98ea705700032aa7848609a4

    SHA1

    66855b9bc6a7abffcc3238d5000400ea63f9f5a1

    SHA256

    09e1de5d5c597ca45ebc48ebd2258cbfb24e7a186d525aef26dc471a43779be2

    SHA512

    32b3ea43f6a1a3196d6fcfd6a2a87306d67df28f4e19238f5d1727197c1e906a5621a7cf55462cb7bc2c45d5ab1571a1e31896c4a16e75a3497d4511babc9a02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81e08a14d907b70347584a291571331f

    SHA1

    646ebae83eed0f819fe6668d0ae97498811c1d84

    SHA256

    0a7bd686dfd8e3b5a561cfb3d8556706c4bdcf65e92aaf4ce8196ac99ffad17b

    SHA512

    2078bd16dab817dbb213e489cc171358764177a6d1d5552fd1bd76f631ae44c9b7a7a2c2f0047bdc3e04ee71457efe895249c2086e00db3e6252def8205bec9c

  • C:\Users\Admin\AppData\Local\Temp\Cab2878.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar297B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a