Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 23:33

General

  • Target

    854afcd5cf0bfea3ec31bd40f64d4c71_JaffaCakes118.html

  • Size

    128KB

  • MD5

    854afcd5cf0bfea3ec31bd40f64d4c71

  • SHA1

    5cd38fd34696826ad7801e13b5eeba64519ae256

  • SHA256

    f114527b33b0edb943d7fa7f54196bd6e198dc8892fcae1848629e1448761eed

  • SHA512

    40b8aa75d029bc629b283cfc845f5985eb83a75fd75e66b182b529ed1193533c940106691e134b06bab6a6bc39511630ecaeb1d36dabbff0628ad1b9f801bba1

  • SSDEEP

    1536:woj6i+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:wxi+yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\854afcd5cf0bfea3ec31bd40f64d4c71_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2316
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2316 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ba76775c37c11ef6385a4d7f0d55380

    SHA1

    95562a40e5b66f5e57013e4cdf9f72f3581a1063

    SHA256

    528893ff25138305d2e8105cacddefd1da0306d10a9fe7f94ea0ab82b326d572

    SHA512

    3783fbc253d0ae83a5124d920fa864ea252b94372c2f8c23ca7e74e532b483ed8ceb3ac7555b66cfab392066fb8962237a6a0eadec23ec1a55419bc875ae96e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33e4e6fb386a07e34ae5dfa07394d207

    SHA1

    29adc17140b5a5bbdc283bc4e49b22d2b6812fd5

    SHA256

    5c8b000d551c779b5a21d443532df80c60650b3de1e8a2f378d411e71cc8eb8e

    SHA512

    e23040fe706629f9e94ac8a97e8f6dbeaa1fc36f6f1a8edf9262ab68b51abd317928522c743020c9c92f6a3743df839d6ddf5752178aa51477365e85c7f2aa80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa681aa20159344377bb7e697ae0190a

    SHA1

    ef61d303140a50c451fc815606c8211b52172818

    SHA256

    2be532614c2a63ee52a2642cdaf07d5843204fe0dce41e27e13b99e343f7023d

    SHA512

    bc2323f6875e78f35d1113e80098abfea33568c71cf1c6cc9b2d5ca4c6de4be4aba9915b3986840c4a2824243712475eb15e96f4c19572fc49bc36790e410cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7beb477bca7f13ded228ef32d5ed58c6

    SHA1

    73745c246a3f1af6e5543aef0dd497d8e1441311

    SHA256

    68565c9ddeee42257d4279e13ec9b5a090ba21ecf224b154acf83986a37ce07d

    SHA512

    66a1906a3a6bcaab3f09aa2ee389dc08bae2649f568f8d136e717ceb51a737603e5cb7df7e6360e4ceccae4751fa450372ab7c314d098508a251144a00942053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f13afc92af98f1e7050ae306bc374c1b

    SHA1

    2e8e4dfabca190a5a98010ca554870fe5c1f5740

    SHA256

    957a773223eb38ed34868da6ab87a3e24c86c43dca90400d1439572f46b4aedd

    SHA512

    026a9fe055f38ced1b50b775df80678fdd1de644d5b644fdd5eb9d4deee6a6a4c9cf675241becb44ee8fa80f313fdb6de502c6c0e377f9550a7e016c96fd2e37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d30e6b2397dec823a2f137890365923

    SHA1

    19a8cf94d1c55966ccac4340cc1b223cd0edba11

    SHA256

    1b807afc6ecfbb6134fa8ee7f078493247b7f0634abdeb84a9e92fa74b2c1424

    SHA512

    af937c2e7bfd80293a240faf41d788086e489046060947d782a4d639438ca2ff2f202b146b3bc53a85d8bb8c451cf56f5e080797acb24d7693557fbf12d785d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6aee2abac98980c9aefd46698f480bcb

    SHA1

    4dc05aa11a90e7cedc1f81a975673a51404238f8

    SHA256

    bbb124057c21c04948523e59391bb312033ea5829d169ac9e0711c6ea99e34c3

    SHA512

    03597fda6833d90cd8b24146d1f35ecf8ed9577ff926d76c90c05309302e9be79eb0ac1acd9d062b45dde8cd79c80183d011b69ee8270cebd37879ff7eb963b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44e6d0426ad3fd4b3211f0f48f9fb8b1

    SHA1

    cd73a374ae4b7078552b3dba3e490048966532e0

    SHA256

    2eaa2555bfa2ce4dcb922514e9d8f38414c295d0d2bc349e5cc8ab6268b761c8

    SHA512

    68b3a0d0a4306d7ff04d7190da060fa479b64eb435837b30af62e0e3879a07c30fde3eda84b574b03174071f7d403fadfd17f0395c17e4daa52581f0e7c5f108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a31df8986165ad0e8fdd1dc79495656d

    SHA1

    155f81b85cc3c5ea324ec1634d55ce20df45c971

    SHA256

    0ffa79137e9ce23c0e79282f9a48947ffdaad3e57a7387fa1538b6f5119de211

    SHA512

    862eb868b7bdcb13ff784d6ece0a3a13cc2183e9fd32772c2e1e55d29b636dc94582a66b07c7e13a8a392e9d05398e756161c8d01a875cfda75365fafe02e30a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94cb1a2350f548a38e59e0c3bd27d47d

    SHA1

    23beb8b5fa4b2ca7a8d3062931cd400a68129f31

    SHA256

    aac4ed7af9ce00738597f462c8b88b0a87434ef049044f3bfe5d66bd98a8387f

    SHA512

    0c3c63b0e82d475986bc41750a638e1cae034ddfc9b8ba96526560058d5f00e73b63f96cb3e661170e5be44c10e8ea83b36e82c4c281cea128f83be746723757

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce28ad0731476146adbe6b07986ed513

    SHA1

    d26def3a988c546935605e398cf79c6891e5a8ea

    SHA256

    af6ed9479aedb3d29125c07dce773b1df7f0cdca42c0ffceafe6a830803eb1fe

    SHA512

    bded9b40d89888acd9c795fd2fca53380d3f9b3a85964feb81106ec1b6c1a98aceb0b792e721d4f2cd8c2f179587cf5e51630e2d5fb779b2b04532a5c70c629b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    930b9512bf48b9044b6b3445ea53da02

    SHA1

    453875b31b85dabedbd9ddf2392a0e751b1bf514

    SHA256

    f49b8750aad67ad54db2a8aa42390dacf06e4c6b129be060c0ccee62e2c5efea

    SHA512

    4521b7a1169a811b3ef325aefe736bccb0f62ff537c4e9aa914d1a61bcecd89e3781f8d41ed0ed78b346a5cd8e301b85785aa3b1752ee01ebd7301693ff7f5ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7549ea2ccb3042becbc067bd9e92703f

    SHA1

    00e974ed1c45a4ef919b77a9a5dbc46a066ccf15

    SHA256

    8621820ed9df33d7c2cfa910328dd67133b2900436bd5332c7ba0a836e2e514e

    SHA512

    0f331a56be778adaa4dee085a4625421c7ea1e2b63b3db81a7550d862c355b6fcdb81b5e7f6c3c1722754c0e63f9dce9c35ad6ae40075f3315f503a4beb3e90e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca5c70db1fdf89ce7b8f76e574ebe2f2

    SHA1

    08da326cf572bfd85324047b8b7daa95a8796f17

    SHA256

    1734a1e39d52904f7efe0e33aad9a8040367ac33c74557be448b23a00b60f8e9

    SHA512

    57b90d85d868d2582e7168440a1f185233be66c046ab2fb7935297d8856c148e4a8ef618ccf7bf119374cf2928855b2988537e0ff2b8a17f39285dd968e2e43e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d715fbaf51f3e949746b5fbbf2145da3

    SHA1

    5b77af2a033e2682683491257ce4f40b9bc63922

    SHA256

    9b27dba96f1666218dd7a2608cef346455ae40eae00cddd9ad02d66b4cb9a61c

    SHA512

    55aebcb094a54eca2c72153ace9cdbd917e5a02e352754e3a04b59994ce14278c33359dc8e2ed359211edf7347985285ffc7f9ecb4c28ab71cc5e6a1dd8fb3a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4dd4b8c90a633c083c105d9cbeb0c03

    SHA1

    5aaa73c2bc54597daf56482f6268d29785eea327

    SHA256

    671fd5e438078601b24e729124e5c9d990c214df903531d33760a8fdfe48d17e

    SHA512

    48b710d67c22b7d5870ce8d063bdd9d8cf3383bd7a60ddbbd7b366098de6f3fcc1dbe8b6221a2567a8dc8ba028f021fb33ee15f2c6c3880a8975c3d303a200a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f86c39335275f9e3f7b9fc95ec24a76e

    SHA1

    90f179e5ab0ff3877ded3a42039bce97fed7ca2f

    SHA256

    f7fa9be609eb951f94c6f6c3d2d3a1b074e42c9b05e4e51896d432af67741144

    SHA512

    695e25c79b751a1c26fb5e806ed7a6afb85160bb2024210952d40dcab2eee1945306743cecd46128511511f6e8d0f44d39d8efc01e4024a76634712e30fb8289

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d442d0102cd115c1249a626be7d4a55

    SHA1

    9104c9ffe05c3163c108fbd87bd489f2a121be48

    SHA256

    dcfc6513318926526340000641a086e20bc84a3276a03a287631ee16f1871a2e

    SHA512

    e995f2ba3d2c5a44def56d3a6b3c2e9a2c2ca91f81a66e9d39d48fee4ea250c7ad771020ae77f47ad20cc17794fa46a02262d9094a711169c53edc5e1f76b26d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e17f92c4f286cca867b2e7529ced375

    SHA1

    56865d397203da5e23522e4f8eecb70336d5bf9e

    SHA256

    fcee5fa283a1077a4842c5e91cf290b1a593a2d5c58acc340306d04b41f42862

    SHA512

    2bcf589590edaf825621431cd5849e9ac34d5936b98bad7aaaf0d6bb756b7e1f5ac6ae5ff6c1186dd112fc238ca9ec10359aa033c60785b2ea0faa19fb8a65d7

  • C:\Users\Admin\AppData\Local\Temp\Cab259B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab265A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar267E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b