Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 14:19

General

  • Target

    7d4572663aad22408c5259dede6d2beb_JaffaCakes118.html

  • Size

    67KB

  • MD5

    7d4572663aad22408c5259dede6d2beb

  • SHA1

    0fcf35afe820055b2f2582229fcb81ad2ae5b924

  • SHA256

    4fab6610eed0dbd2d323436cbb251fcac091d7b71fe3b88677d55cdb2dab68fe

  • SHA512

    56388f17516bb0f5aacd114e00bdec4aa3cf7168bd9e0be210b1daab4d87048ab41d6f0df57e5c512e4425dd991e13f92f1ffeea8678cc77c4edd70952ec2466

  • SSDEEP

    768:JioXgcMiR3sI2PDDnX0g6RJrzoTyJewCZkoTyMdtbBnfBgN8/lboi2hcpQFVG8sM:JglTk0en0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7d4572663aad22408c5259dede6d2beb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2108
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2108 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2456

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e954a57ecd4ca7ad4f29fb2f996d2626

    SHA1

    1a6b60b20afc82168c2977e7d2a12d220cbdc02e

    SHA256

    50c20b6d1aaaafe8ea7598c259a74251e653e28db87029f489bf46a1a9a916f2

    SHA512

    700742ae2117a30cc3f160691fd1beeca6235b8aba6b3926100536c6267a82debb8ca054f08a9989ab81441ee7d93238dadc8598bb799330157712f4bcab6652

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b6013f0faef7de32c5757cd5bfcf460

    SHA1

    567f368acbe07d05286e59ce8f4e2394e498ac46

    SHA256

    2ded74abbc273cf6a7e8605b3948e6d148f09560ea16256ce7c7f8abfff3fd26

    SHA512

    7c03bcc2872d1d43675b6f0ddba20d79cbcdf277ec4802538139a642934c738933de0e7b79ec1e34f95f142699e2015528dc2909bf2c4a3bd3731c15ffdada2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e011cdda0805ada227e06c70c7d2273

    SHA1

    57eebbad487d3f742f44a0c12fc2370840c235f1

    SHA256

    964ab6d662a24b1717eefed152a7028eb6e07d4c6e64f7d0082d4f92178ddf33

    SHA512

    427d1e7950d6da39e8f2b25e590da02f0af33787470add902def1de6433a455b77e92ee4e5ec4fe356c34cf99de1f94cdbcefe8b7660983707e7606bf94a7c37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96828cabe2c71e84b5b88543176d2d0f

    SHA1

    d40bad9f146d923bc72a005bad1f262824b3296e

    SHA256

    85c1a9ae5a8fcb766e7edee1478a8f082e89779b6fce9983858f9677a9b2fc1f

    SHA512

    62498081a0ac01e0288d3c58c941ebfcea4454b2cec74deaf9399fb22257d7692618fdee6e77918466ba2e05beb8d31cc22b7846143d0575d223b8c6d46ad0b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73c6ff9f94556f5c5a3224ffad42d11c

    SHA1

    8e7743f43bbac392bc689240a71ad791f8e1286d

    SHA256

    0e1ab228c7ef6ae859dc3d10c8111944298c6554c6d13ee432e792d65b04514a

    SHA512

    5f7cfba7f9e4fcbe67eda3bbb696e2474817005ade1332c273be2b114df479456276ffd5813ae0a6bcbb9106f88f9189bf9cce59d1a33073ccdc731e49a88691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    773dae1950f20eaf762316f6f02592ba

    SHA1

    f99f0e1afdf3f491de7a9e50f12dc7efcf0aab26

    SHA256

    1138e530aca2c6fbee5594d789e2fd8df32c5443b4c94888cebc94437b1698c3

    SHA512

    07e3beb34c6941315632962cb047279b4c66d4dbd725bd45b657e148c5969898c728fc4f179e39dd7f431b7749fcf3dd459857ed1224e028b10505fa692f4a88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d661f9b50b86a099d067c0267d69c4ff

    SHA1

    321ee6ceeabeea0ed24d95a0f28d76a94b7389f8

    SHA256

    ec6b4a4d69b96ce7e8e7af2ffad572df0d40ef63d3512e4d249c4b5b9abb59e9

    SHA512

    8a49d33be8def0f702fa9ae217f84fa72036b9a786c0809a6b8934089ab8e08242b26b6f7b5adc113b6cf14bdf72d0a7ba62f6ccff600fd188c46ea3af209b57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d076db3a1e643040874b4b6e05d23c4d

    SHA1

    0ff03a1fd38da979f65aaeb48ceba20ffbe67bf9

    SHA256

    e1aa406007950c065bb3470c66f74a408b8c2a76a1af44135394e5b890a88dbb

    SHA512

    a391efe60e88a891d83374015680f4a19d988cb88e4861777c4bcc863ed647e8de8bb8180e6f1e160a641a235067804e34969f1bfa2281c439f88568994e498e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84348c1552a79ed32592df59c2921929

    SHA1

    86bb4418b7faa9ecf48b936b689768acac1eff1b

    SHA256

    ea091f4fe93c0fd997a31d2c4035d9745d8d59bdf04893c411707d4782a8d269

    SHA512

    a3041ef091b0f3e423ab077852b63f66baf5187e8ba30139321643a73dcbaea765efaf8bcafa6006b03a5e68b50611639f87abba15afa68fc55ade25cb0185bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86751490d11120614179645bc934039b

    SHA1

    062a287214ca75731398557b0f6396e4056beb2b

    SHA256

    f550cb0f415b9d2b8d3defe1c6dbfbc3d0f0554a3486b7085f3bd475e6c6d31c

    SHA512

    9e3da47c4e0291016ef32fc4565e701525439010939a5a06dee5d7ef8ceb06302afc887a79ca495af47e70a1cb39b12d023862681673bde8c424dfd297f0d0db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17a67c801e4c33ba4212715cb91a6476

    SHA1

    01825c4a64f4bdb7e5467b39392f66e886c13266

    SHA256

    083f446ad6dcb4618676c32307e6236a7dd696cd3dfe1cd189ef0401c939aad7

    SHA512

    caa9705ddcaa27944d6558c04506d6270bcfb806bedbd69cccc10400fcb2b1ce4731b18ebc6961ca58c596343d8a843d49702e1b3b6c8b654be0f030e53f8ba7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f157e235827d40b295cde220364484e2

    SHA1

    b471df15d2a41ca57b845f3b68c7c6a900024a4e

    SHA256

    d1d952fc1a3906c8ee13030eb3cc997262b88436b01edeafb58679c20099a9dd

    SHA512

    59a7d5da7320e5f6b61ebfd7190545d129b8ec61f054b9ef752fc12c3103da4c85de434f9fa89e2883c692ad45c3aee210416cac6482bfdd9501d785d6e057c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1360301158e35b70457fcdb71f7aa161

    SHA1

    cf332a18716d5c75f51159ce3431d9419bc1fdbc

    SHA256

    cd960397ab324657ec6c1cd135a71fd5a75e98ad73e1711deb9b98ca57c876b2

    SHA512

    0ed59fa7bc53ee2a3edb52ae1108451efb51d8e376b5208fe1ab43723a36d970bd8b7794db27a6a51b060fca5fbc4ead9809bbdfc90fb8ed5063d7711f2fb592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16e48a1b428e8e49ee8a10e4cc48eff9

    SHA1

    b780b9715f07b3ef56d16cbbb68b92a503496e33

    SHA256

    794a804a95b1d386f94376eeb672d6b751a5d3e4c47faea03daec7de5c391d7a

    SHA512

    dd8b56b749d8a09966e3cbd0704f0dc9c15d050af7fa26865b284672fa50c0d6666aeedaccd4d90b9a1d58568c84e3d0c4460e809121466bcf2a1aff80ab06dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4a8a90d6f820766bb7e4d6d123d9cb0

    SHA1

    a603d6d303068cfb251b458f437231c1a6f3fc16

    SHA256

    47b26bce7841a6f5c5aff6b5b418d430962d36ea8f8e4abd380753ba7340eb07

    SHA512

    97c552930758ef95434482d97747548754130a348773fc93f22fb146950dac773804806b68b25cebcca0e1b19d88e0508377c00e321c0e4a40435575b10d71e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    483ea1469bc5510be438a2f171b53111

    SHA1

    e06384617281a4b71b2836dba1dc091c77cc77ed

    SHA256

    46fb8d215f9d39a71bff8b47c0cd73ead2db4b712a2178eb95fa1a35931553bd

    SHA512

    0f61385106f9f166c7b5d5c25243146aa2417d3ca9e266e7fd4bd550091a301a7f89cb8449d655787b41d221a23eea9a33f18f09d54c32edba3d8b18f7811de4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2caa9823dc0e7653a678ff2fe092277b

    SHA1

    616d5094743069effc8745f409a2b7b668fa3eea

    SHA256

    8645d6b50fcacf4f2a489a61549a70a1f503f499bbdb3f00e63362d8b8411dad

    SHA512

    48a010252480d3907de87e0205ca5a262d05bd515950a4eb905793d64f9ac78c827ff2b137cdae35af582a548e6227d282291054bc0259e524f1e904721beab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad2ce046bbc562ee90684e7d34852e53

    SHA1

    c69685331ddf30666ddc2e91ae4c5787b848a3f8

    SHA256

    2efb599676d9ce04030673816e5077bc919321d2f4c7be331bc70722cae7f827

    SHA512

    6f055d0fd4a2c82e3374421125e798debbacfc62b77f6f8a906a736e3427e3b260262a85a9cf0fde79db59cacdcb8ba76923e1dbcb384730ef3240b05cab4cc7

  • C:\Users\Admin\AppData\Local\Temp\Cab2D97.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2E85.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2E99.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a