Analysis

  • max time kernel
    141s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 21:50

General

  • Target

    7e85317433d66ce91d8b8944947ff0f6_JaffaCakes118.html

  • Size

    43KB

  • MD5

    7e85317433d66ce91d8b8944947ff0f6

  • SHA1

    a6689ab6d6b91be82d2ee795ad0140118a3e86d7

  • SHA256

    1fe6b3d709173254a9f3cb517709eba101edd28b678ae5cbfaa7fe446b4f7045

  • SHA512

    7540fd40cb9cab6356a6bfe79ff0bfc936d4c3e5c5af7e1b21ecd9ee700f66a6d1c02f3abc2c9c59228d10ee7ddbcfcd70d680021ffd35eedeab45fbffa828a4

  • SSDEEP

    768:1+iJPKw022X+zqh+DNjZAAzxuGc/cx7lT2semy7g1mmtHb:1+iJPKw0f+zqh+DRZAAzxuGc/cx7lT2C

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7e85317433d66ce91d8b8944947ff0f6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    922027b8c88abf160b6e0c1f1c5167d8

    SHA1

    52ca8a9d7e75654b142b882a0d5c5ca9e76e427b

    SHA256

    080a0818fbcc67fd4831bb46a93a177064ec88c41a1623e78279d82a2a8674da

    SHA512

    6e0d8182bc44aac5aa999bfcb6b1b92e077574e9306208f6a2142428bc411d55fef2fd93c2d16b3ef8813a432d65b53d89899d643099f7b9f00f8b62655d396c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d497c98932be282ec339fc9f7fc7c31

    SHA1

    7e8a6de912b383c7755a501493a5658954389f49

    SHA256

    0825c6ce4a7ae83fb5fa8fad74d8845a6a822b9c856f02e5f521560d6dd36133

    SHA512

    89828118ada7840718edefee91953f422f9cd6c0a29694c7af1a50443bcafd72c884183b4e3cd0fe91a474b3f92bce2ac80a7a0bc29ae790346f741b0f072a50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d48f9221e38f9d6476adf3486cc39ba9

    SHA1

    c6fc66580100674107ad04a318b111e1ad105262

    SHA256

    b590140f2f968f7f3300fa7e8d48181a8e7122f1a74c1078bc1edff0f91f683e

    SHA512

    d6b6badae8a1bda12ea4bdb92ee72b7dba7bba5294e705b287564de7bc68c65d2d903348cae34ecec225ff3f16e6fe7baa3b5a35f172e6a84030f75c00402802

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5dbc6f4620af8d10b97cc9f4ea9d3b3

    SHA1

    c1635cdc0118bb469da402c1fa51d5378626fa0c

    SHA256

    f1e6d63d242172f80eeef279f2f03941449051c9585131896722d29f5106739b

    SHA512

    ffbe2ce7b0a96832303af1e5c4e8da1e429907ab0b0f32f557919453345632adf226eb84f62347af1b246ad1f37f38a852f358b367047f7962e55c21703cea55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8a704e85aa9b62a49017a408464b503

    SHA1

    3610b42de3250ae2b1d57274c923b568f0ad265b

    SHA256

    45fc1f6394942ba66d0e5a536a199e7382cf55c524cc5d8caa8b1db0cfd39d8e

    SHA512

    42f49b85115800e325ebf4f7667a6d6293ff4ca2d47afd6a374082be797231f5c83481b2dad1abf88543e2c88b2c64f8a153a36b9f15112be1c276ceebae2ae5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b9954a739d04c42f53861ed01f5a678

    SHA1

    ef4976d812072355f1bc75707829e1c5e7aec189

    SHA256

    c7407b3c44d13484382ce89631bd8c5d83731bc57a8ae85050dfc235654782c9

    SHA512

    5c2aa7b7d6def751102ed2217b48e3997e80456fcb524cae5c171a662339d29a6274741e9bf635205b2d1bbc4a2217466f2af79a629d0d4aa5b30a1af8e580c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d71a06fdce02dcc805700f356207dca

    SHA1

    87bec144cbc4baac540d2529cf14083b9519522a

    SHA256

    93d769a7d079d7f60083c5bc7b0bffe9cc2ce41f2d8cd994716c1968169176e0

    SHA512

    94c50be4960127f71096cb864cbfe54f495aa3854b54c789ab2a922090af356d952c1175e54d97a7603a994d2038cf774b3b5d7e8e9fe29832a2608469ef25ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01fa7bf648516b1f7b96d10d6460b9cc

    SHA1

    2273b6832d70fc9419c2a7302451151f37f5f62f

    SHA256

    2c84240c9b3512d9a52d61b6ca2a7ccebde631454ed5b23e508ae4571f3107fd

    SHA512

    5a6c98fe91d526f6671727f5857cc54194f6ef16d74567785b1b96d11f81c85696422fcaef9a2c76029bb6f4e44ea44b8fd06dd6434fc4a65c0662cf9cef39bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    675c3b8c079fc58d419e1364c9f89501

    SHA1

    c079997e186296337ceb85d07689343017d1c53f

    SHA256

    c3090f2e3878df3554f9e2284e7e99fcbfd6f701783b8e7c6d73e1f145f43fa9

    SHA512

    3f1915014c1b54094c7493d5327d1887d3a2645818fe219f78a25f44df83642b94f5303cf20b67ba1cfa6e13b59cd2b6189fb3707da10465d86f52a01bcc2431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a5bb98357f5879a582aae89cb5048c3

    SHA1

    c780f03eaaa83b46b282fd61a61b331fc0f9dff9

    SHA256

    8b25e6707d10498a41713145627155647803b196853b6955944ac45abcea4de6

    SHA512

    39210f3f0cff7219234baf9c4a87c17fb51a08f15876a2354a115ba4d3b8466870effd2c6ae44b5ea26c4c6ddc1305e009ffdaef1e573c6d7dd7437708fa10d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fdfc1a7f5c89277f4ac4ee326356d7c

    SHA1

    318975fc8840552dd431e7a851dee347745757f7

    SHA256

    885f0bc0d1e41b5e1c51cf18dc6b52eace6255c359c9082b548a9a897d605877

    SHA512

    fb9ece4b0cf722676c56ba5bcd16612df23f8a084920e1e12baa0cfa413bf5edf608ab33c3d3f4a5bd8a22f67cc0d0b980885d3bba1cb380fdbdfe76d1261db9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3f9285c953fdb209cbc965351a46d3b

    SHA1

    0963f2abfd7befb28a0ed712da9fc6116da66f28

    SHA256

    499a7d81b50f4e5b1a952c4a3ad33b556e732e65e755c1b13d663521103ea1db

    SHA512

    8d1201d8c7de04f0e8b50869cd5ec30c559c464a86de4f698bcc543065acf2878848bb2718c354467f671b5b91b5ffb435e1a479895537535f862050cc1fab61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3677863d340e070f55b425e67df9c6f8

    SHA1

    33c7443e2f9bb3e12787b7827934e32718b4bcba

    SHA256

    6a3c5a96684c0395be63f517e91a6390189f8be2c3ef174de662be061e80fa31

    SHA512

    f998419b2b76a920062686ca6966ee4b18de429f2b5b0bba5c77f01264af3263f0c1c5cd431d368c51a89e38bce8864e2ed6895c3c9f5f230264916a808c9f3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86d16b5c02c3c59c6d9c1676c220c3ef

    SHA1

    4edbb41603c56fdf08d1097a9ff72d13b06fe53e

    SHA256

    737c2ffc202cf9eecc75c8d45bc9764bb37549ed906e6857ffc4a068a4bea772

    SHA512

    090fddc9c2cd25d5a62265bc09e11e333c65a8598f4c2989cc726017b3cd284a440dbb391c200f9b7158b887ead7b408257382f9afd2e0f42c613112a5d60651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c8a84a95af8e3580b5d363ff7e4e04c

    SHA1

    140724ab5b4a625c56a0183328b5e996444646ed

    SHA256

    f17203f0d71cfcc5bd5f070d68e11008bdaaf32bcbab17ddff9539a6555c133c

    SHA512

    74fba424b11723f1ee83e66ca3df89ade856435cf388e04754959af7c72fc3ed07817d6883d0a6940f395e54af0812414af695d535fd4dccdf4a9753a67eb1fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48193e9a5daa3d09267701f5e0598df1

    SHA1

    df11f721794ce5652b920a6ca68dc6d8dcda872d

    SHA256

    c9bd009210fbadf3c2d80f637c0fa36ab3d12f18f947a01cc354e37bf320a5ff

    SHA512

    a0bebd72f02eed062ce3f681a27754d44395bfa0091d6395d9660684faf5a058bbca576daa309b76e5859d7a582e7c9e186b387cc83899d7f6906afdeb732dab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a38f14f9b98dfc65bdee9193a9face07

    SHA1

    725011aa28aa7a78ca043a701acd151014ccb0f4

    SHA256

    837c828fd4c90efd4929cff157ede14197f425f2aef1ac596dda235a80ce848d

    SHA512

    b60147979d6e3711d7d0d4801be1f57cd7e26fc3228e7f14532ad0fb56b227bab5e293715521b1c0f050a08e03426b49da611cf178ea86f9306462696e5507db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78c00af36cd5c883bb988900610fb6e9

    SHA1

    ddd5f52d880ff49688888b340c4ad8672f6badef

    SHA256

    8903cf112d0635ce594c303647d6e1b86feda4117b5983e4d1ed0103e3216281

    SHA512

    7148ae797d39ddd0d5fe30a8dbbda57bec145a7ba36ea0192aaf0adeb7a4797b48815490ae83c0b8a65b8e4a30579b91a35c42ff67706f359b8efd1ff13bd1ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad9035815db9a48a799ecb73d8509e72

    SHA1

    06ba07142fecdd2153a64abba2aed804c3a26f70

    SHA256

    6a553b12a95f62424d060aa52d269b2d6b65d12eedafa031633f4dd72c7d1a30

    SHA512

    4eef85d737dc87d20c06e3b685c3cb2a4d37a5f247d6a2cb6d1484c0e1fce97800bbed2d5ea48482292ba7bf8deeb035a0bb786c87c38786654d8d8cd8545c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    512a7d108a1765f83c15c8c45ff80f4b

    SHA1

    4824f4e7794eb5793ae48b8ce88435e3c2722dd4

    SHA256

    09aa8fd6cab8d665865de1a817f93ed49c52a8a2649a015a526c687abdf412aa

    SHA512

    c7aabe44d39bb79d3bb66137d5ce750efec7ab22df11d62601d0274cf5becc75a6f6fde9ccc2c55cd19bf5b51a4c9bc75f27f30d324ab432c937e4d7a047dfe2

  • C:\Users\Admin\AppData\Local\Temp\Cab280B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar292D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b