Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 11:06

General

  • Target

    7cbd95d2a8714e33ba985dd17d9761ec_JaffaCakes118.html

  • Size

    67KB

  • MD5

    7cbd95d2a8714e33ba985dd17d9761ec

  • SHA1

    5fdd8724ae495b7f99658ef3f7d0d2fc184061df

  • SHA256

    8be70c40e81f2536bf79af4481725dbbbbee09ab22aac82f23faf8b291ee4b0b

  • SHA512

    be8bf2227e5cffa9803fcc32a3f325ba6d78626455edef64046b8e31d41ffcf25d0e510d12fa2c485fe9c59415725ccbac40fc578ea8848735ed26296c898b33

  • SSDEEP

    768:JiwgcMsSZ8tN99OIsjiMaHXGNuoT2fQCZkoTnMdtbBnfBgN8/oygcRWQFVGys//F:JaWxxOfT6Pec0tbrga6crNnz8PJ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7cbd95d2a8714e33ba985dd17d9761ec_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    921e96aed67c6a29e4c0595567cd960d

    SHA1

    0cbb2033e3058e79e754ebcf83891faf9f8951fa

    SHA256

    0820ffd10213bf6a76b37d26ad2f94c654e7f43767bd0bee1506b1821d471554

    SHA512

    28300ff6a91bb78424fa9aecfff6a9c7a50b9b95722ef1258165840e392fa2be3fee4528d3a4d2c41e7f04ec2f5f0ee2446ccce3d3b31e65b619de6d22e40e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a87bc6c95de88576e12d0dfda72457e1

    SHA1

    170e4fe5fce5435bc8885cf6b8cbcd3ed561bda7

    SHA256

    c7b79a331ce76de5cc3d652752b899384589e9790d04f8ba5880f8d40f8876b7

    SHA512

    b3f5c531c263265cbbf911f72ef3f37e35eb1a90184a41907b0ffab98f84f63cba387c62f75af85e472cf3c6e255e861b6506fe3d9bbf3ee365e0214b178b80e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4ade19791d37ff5c57e49836a008917

    SHA1

    df87ea73307bbf61bb59af62abcd0d7cf634182f

    SHA256

    48d03346069dd7ab92937cee9ad4ad078433c8b109f23d7a7dd4d5b808a7a176

    SHA512

    a307c3a7fd5d9ed466095d3c28a37434ae0be0ff88025b259bb55eb2274d9754ec1bafba87d7ad24fc7cd8bdf3afd15c1177b653644d8c4946c341fac3b6e7f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c73b38a34ae96a9ffe4491ad33a35514

    SHA1

    6fba476411ab1c9ef7f34af90729c12ab9fe7f18

    SHA256

    2b546ce36899d3dd79729eb124ac9c4a344c63f88fdb16f42fa395134b5baa02

    SHA512

    3eaee8495fa0acf9df5c58368f4a0b718778d57780fd4a4735524657ccb5762f20e953b5602221cb0c57e92c1202181ec4a2262a57af9753b1d26a5aede7b396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d0e258f4dfee6563009edd6c43f0515

    SHA1

    8ab24ffb62ed5bc72d9e18f3c95590173da4ced1

    SHA256

    74ae0f6e718a6dc35f8ad73547025f50f374dca8568383fc42fe75d084609367

    SHA512

    fab42ddfc4837a890febaba6dea1889051f09cc0f4ce7af4df01162ad89c91444333a8d1053deb68c385d5be94d5b3a60e4b71c54fdc5341f760333707922824

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    992693043ca3d26ce69bb82a4cf728e7

    SHA1

    2e86b859de0a514cab6c011515c6545987274674

    SHA256

    a988f1d56d8d354468466d87736e24c25cbf78335c3454ab47ab4110d9385db3

    SHA512

    6d682ff53a4119a1e6f255cebb817aaf345df2df57b808d498cf824b76d23df9a83db2314c310720ee48916bb9ef52372101b952ab07f520b1bc716a0bbfed54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90dddeb5cfc8f071569d7c195429b6b5

    SHA1

    919db268619bf357a12e79bbda78c20038da35a6

    SHA256

    d8a989d7b29ddac6bbea5ece99db9622dda88644cb3de588e530cd0851fae72b

    SHA512

    2accd62b669815688ef1410c1ddb5f418f716d527b8175b525f95b1db933aa772b47c57dd8ca864253ca5f545f94ba752e75934b3b97824998e59a50208ebc31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa9d85e5ed51725e34dc30d6d90aa1a4

    SHA1

    21dc3aac01c68d32867e2156088551b38fc0ecab

    SHA256

    432d019d4cd5d0742fc88cbadadeda1e71e494ec77a3212b5edb3210eb7f7c65

    SHA512

    ed6f2fc0d0c5e11f9c8ac48273ff5aecc61137dd221bc74d42d82a66afe200be0df4bad385822cfc4755f63c3ef31d32d2059d3c8a4713e556546b6fce54e452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e9402fff6ae6426aabfb245e8d99ce8

    SHA1

    e8660ebf40bd45dacc846e77dd3b2e0630d42fa9

    SHA256

    937d24932eb8230c977e922db3c76dc10267494ef6f044d2e5b610f8b7f5d77b

    SHA512

    e6bb4c2368c23ba557912fb5282e3a7a4aa6bfe5564c279ce91fc8989626c30de4873a6532d217568c223735e0187dab95577055e0185118aba4e568831c72af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    694a5db32ac3aefb0968ffa52aac7103

    SHA1

    1637e3d6a59f86e62b8cf1f50125f7ea4877d593

    SHA256

    e119e538093c8b6cf350111fc8b8af4d3f2995248bcd0710b14a9172bc84b3e5

    SHA512

    2b2d46650e28fc799248289ac4892c5b1e58dca8bbc6365f89bea74a6a4021a761862ab1a75358b31595c7b8a0b9e59a7f390a97b6bad62898b0aa1016687516

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db3ef45ee93cb13de780a7b217e2e19f

    SHA1

    bfdac34713546a81a78ff77314dd042d7bba6d80

    SHA256

    cad9f39d5d2c8c5e869d91774bee111542fe923cc9a0e1a2977dd570e9fe2f64

    SHA512

    2e5f5f68f6d26fec1d0995020b1c1e75956b83a44f0b333015f5ca3dfea15a15b131f8cf044dc1f2087f4c4c7aec99063bca8b160a02b851e371dd88615338cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e12cf818cc95ab344f44dae886863dd6

    SHA1

    77897c1d47e6b3c167d5d93ecbfacd8c167bf306

    SHA256

    76e5d85a66dd3dde6a0e1b873c501781fe2b32e9c692d11098838494e075b6f5

    SHA512

    5118878e5a8e39a3f17b4a967c0aefc42291918a818a614bf008c8f293bbb1cb9335d9066888d7ba8bf42b8fe302ac45a1409c29e6eb2f442d887dfd5f122b71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    230d1bc5083dec9108c514db460f8347

    SHA1

    33dfe6c346380b442faaf173892378f8ec8f9986

    SHA256

    336e11e6bc182dc8035d44a64bcbd011c64104f2b299ac38f3865621acd6ed01

    SHA512

    693fb657ca52a08e42e93d0a3f2acfd49e468e4cc3757fd1dbf1fc1eab2ff438ba021f63af646277a5138623a485d5944e7c9c53dcdaf6efcc76982ad6549c7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a27ace2f80dc8a98e4ead493a847e35

    SHA1

    a3c766654509df58d96da930917de81c2cc72d4e

    SHA256

    def8f07df94136156600db31ae259f3e54f69f9f26f1173f0587be6e626319be

    SHA512

    eff96d8115cd1698a02f90407e3ea2d053f400791aea8a6b3411bf0048f4c8a593edb44f661464425306824f1fe637575f3727e55dc2f3164676d0864af151df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e283bc4f17e25a06927a9bc05b5b5901

    SHA1

    7c573ad7537dcc67c657b17b7fbb5b40eb07cc6a

    SHA256

    7993734b226864ced183f1b5938bf738906c7ff173d64d84e82592318e52694e

    SHA512

    314eea68e1ae2e05d76304833cc4c20de68d8c15c3b5053d15f5f2fa7584233b07df5b7382f54bdace09d50eb6e1f59711aad6734cc055911551801983d94306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fb5e83e605c0839a6d9f77d03c2917c

    SHA1

    9d6e9d89cc6cc5acfec2e6365c67163504c17dae

    SHA256

    c4c8f3f5e3946acd0ab9342d85d512561252a30af9b01b37c8f91c1ee87fb0f4

    SHA512

    798235eebef3e1679e3e9dc7c9844418658e1566da3c4c5db71955cbd7f4d4fdb27305d909f35f20fa30ab52d73f167b8de0523231dc44e9eb579badb6cb7903

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8600a1f37e8a304a76a812dd3f55592

    SHA1

    b89242d8d50b37d0424182605fa95854d25be889

    SHA256

    07fce0b1c0403c93fbde5437ada96ea83edcdf529395c2f537f8f85d7c7eb315

    SHA512

    0f6ce4bb68b44a0083582167912087b4b73e05fc03751bafd771c526076e28b69437ab4742cdfd4281fa208862f5b93c98f8d87c21478945a7f1340c4ed9555e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4440c381f28dec86396e8899def98daf

    SHA1

    f7065143b79d3ebd22e39ed6c69d8c7580b9463d

    SHA256

    623b6d751c0464f67cecc4f1c1b9f3dc32b9a404c68414b5b12265e184c3f4d7

    SHA512

    7706f7c63e945dcfdaaa8b62bfdb1a78f9f992b11c621ab5879d0dc401cb255fa86edd22cc7dda3d5ad52b4d163e328c02d6a70f4ded9da7b66df07d0e84c88b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15d2ccc8513cdccc7bc0645b540e89a3

    SHA1

    97735ec1615cc41f258f3caa99dd2ae0ca53eafc

    SHA256

    c461bacff896407ec1553f91b31326b26378d49f8e2153d146e3155c32b9a6ea

    SHA512

    cf47bd9b589a10479c15f0909c7cd5e4d0944558bfea126c4cd731097d8f7bf9623be70e2d645e40e9de41c4c48f5ce7c4c85bddf1e9c28b68ba8910c957366f

  • C:\Users\Admin\AppData\Local\Temp\Cab170D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar17EE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a