Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 11:52

General

  • Target

    84222d3f38ddd92b3b95a98997eabc66_JaffaCakes118.html

  • Size

    463KB

  • MD5

    84222d3f38ddd92b3b95a98997eabc66

  • SHA1

    02c651d5d426c61d90a2e8f673744ac98ab66437

  • SHA256

    43a367212e5b3f910e08259ea111215b44c6e752b7f235a190f3c39c98477bb4

  • SHA512

    8cf9aa0ce99cc8c8e41a2a91455a5d4ef4ec75f779d407d3836c31523e4b9ed0cae3cf7e77dd66f0866d5061c39f6d96802564847f95508858f2f518b6d98785

  • SSDEEP

    6144:S5sMYod+X3oI+Y5Q6sMYod+X3oI+Y+asMYod+X3oI+YLsMYod+X3oI+YQ:k5d+X3V5d+X3/5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\84222d3f38ddd92b3b95a98997eabc66_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:332 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2912

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          39f4fb5fa4698cd7a7ab210076df577c

          SHA1

          8e11afff6244eb2dca16a97950a85e37ab4d8c3c

          SHA256

          7caff9a221801a68bf04604be8c53180605ad0fbde7fa52fe1681bc0e4819b53

          SHA512

          329b7485938eaaaf049eab72fe335b5fc0767a422fb829101adf2fedf15cc7c567eb50f542a3e3fdc37fed9837d21aa64541dcbb311cb54f432e5e13bdf156ab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          afe6a16cf1b019259b1e9996ad0a04a0

          SHA1

          b2e3016249225fa4a6b001eeb5cdd0c9a1b4438a

          SHA256

          e181316a9d737bfc94b3daf648ca2a9425fc7db2cc8d96dea15e468178c0c50f

          SHA512

          4d24c56f774572608d5a0534b963b33b385a65ba03ece5f3f89e3ca21f2023378b585d8a16fe05cf5e9548607fff3a266236e35a95cdded21519f8a4dc8544e2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dccc3596184158b87587500eae50aef4

          SHA1

          7050bd353f7510ddf56feb975c3c36598c0cc0d3

          SHA256

          1869819541a0113f3667f70519f85e6d2d05bd8db8f0a876eed8915888126d0e

          SHA512

          0e1a06603d2e31da455f429fd52122c0923c3ef0e015fa3f811debf5166efe69769c2536716461dfc3b906243d82858e940dadf7ef1442e18a033970a86b8e57

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4003deeb2a2d29d10be2e725a39abc9f

          SHA1

          2aa922c61608f85f81298f252583b9ad77387dbc

          SHA256

          393b13109e6faf8d6673f73347ab87ba6fbec29d0fae7d753555bc2c559d2552

          SHA512

          206732465d2007ebae1e03e7b597ca74d78ec48209f379435f2e1ea871b30fc20385d15da7252c04aa28c1ddf9d49adaa006fb80d7caf89bbf715bf9efdfb066

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1036324e7f10f838ab21eecee18627c0

          SHA1

          09b099637e1f01f29e03fc8e790f1fb5db393914

          SHA256

          779bb6f977740651735e88d17cf8a180ad343d3de436f33527955718bcd22864

          SHA512

          7c5589e838038ba30261dedd34efaef86370b4016aed6fa4dd6dc6eaf24682ffa0f848c1511fb003974112f7336f818581bf522ec35ef22420cfc91c2642466b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e759f7f26f699df37c06f4282ec9a9f4

          SHA1

          af899086acac6f040522af1ad073c75fd613576b

          SHA256

          6ab2b8a6c4c8c3c12d311c6b50c61d91f90b48f2c8b63925c789ac35bce3b89e

          SHA512

          5dcdc4da8c88d216f8c4c5ca520ede71cb59508af59d552bbfc9c7d923f2f3d91ccc10376172a54e31809a1942bd147a678d52a5a562b8d49a5024832974b87f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ca1c5e5f9fb8eaa510e091376bab1a81

          SHA1

          42a2ac012b5a55f077cddacfc9dd3c5785803ccd

          SHA256

          9a2817ff782240b2f593304dd8198d3139162990feb04eb8f8e06c853f407607

          SHA512

          8ca62df5e8e4a8ce36f522931ec9387aad01d21f857018c6a81204e0ee82262e34c8a580842822b6851db881109e26e38515b85b478173f4173330312e455f7e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          aadf8387ecf2ccf29d9329425207b3f5

          SHA1

          683242305181fae156997dc2c9c55c4c25a25bb1

          SHA256

          acb1be294e1318c34e222bdfd36cddb5cac9bec0dac98f730996795fe845cdb5

          SHA512

          336c777dcbc286665370003ffa7093ae87084e8932a30f257c3f2edaaba9ffa46c840d82d74d73ecb8ed1acdeb6492c88c4dc512ce3d8e4e7a5850e8dabf58ac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1572690d1daf694bcf7b5780bffb37ed

          SHA1

          489ccef9bde1776b298133bfb5404b77bd4178d7

          SHA256

          fd8554fda5b1a2b1bf0ba77fd157827e5bea7144cce3a5e61c0131260a966d68

          SHA512

          3da8d0c08e9ef651424e016c5b4a6028539073c7810e7809bf8069bc9a88dbe516395ce3b4595942fc413a0efb3b5787fc7733ec83798937fae1201228077cc1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0cd662adf889c60f6d1553f60128053b

          SHA1

          c8d5db311acd8b615fd1cf590c219674fb5f6056

          SHA256

          26ab7b53556ad046d2d7a62f6443d4de564b54341064dfe22b7f94fb50d25e23

          SHA512

          939a4a58052dab0d32c08cd7b0601248e038bc5c43ae5c398e9fbd9cd5c812a01c1f2e0738e812f65dcaa615f44007e3638bb5427737c7d8b87e3dc0c2408b3f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5703736b31e62694ad698cae2f64f8d3

          SHA1

          42c6e47d549bebce1e1057247d86719f7f40d5cd

          SHA256

          55c50cb03cafde5b383c5985b567ddc22b2268a32e3db364433f8b02a060acfd

          SHA512

          0840c9935e0184b33b9bd7f4ba1b1ce4bf8f0d3c7d642832b703db9b882763d7481a92e5db5b5771849b9095dd505194af4a3e1543c7516ff7f2a01a26e5ed54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          31f7288b2a1a7c4de411e40baa8f23e5

          SHA1

          4866773df9f7723ffb0988c1e1d51c393e1dfb5a

          SHA256

          d1f3f0b4cacaca5ac23be9c7313ab884f82f90aaec42d43a0d1c220f30bb1ed1

          SHA512

          7231eb3708764ccf26011393f4e168b8076caaba08e56c66726a90ed5eba93fde0537d968e11ae97ecd55f289929c19f57e5df2041cfa73728f490406823ac8a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ab176c8231df70983c8c471d416b34e1

          SHA1

          5669a647dfc9f4b424eca867f903bf0dc01b7f23

          SHA256

          6d15794a11c110d318bb2dd8639c9c07481c9e224df98d12c7313eb96fbce648

          SHA512

          985a23d55a1de75edafe82f1a8d5dd157d68524642b6f7a736f346d62628bff96334f6b4c9769d359b176b34e879e65f73b8fb4fa79fa816ecf67582db91eded

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5037ac4fa4fbc80719dad3da66f0cdf8

          SHA1

          a6c92c85f11934e82a696b47679bee2b3dc5d08b

          SHA256

          6cdec4222774538a5a7afd6d5e1a996c4555a853fac7b3f630dd4b174205cb3a

          SHA512

          36bdc32d09a4ef6f9f4b91a5665b8f48d96ddbb652898b72fcc16dd615d7bc2106f4257735ae680199131b7ee87932a2cce71319ca6e7382d0f2688902c03468

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e9d561c8f48a9cb61a31fb0541854840

          SHA1

          1f31d4bc6850049680ec932fd5df3827779458fe

          SHA256

          ce08d9ed02363bc568794841b259793cfc3236a8a9fd8fa5edc3c69283679761

          SHA512

          444fa331314e28099e0318665deb8c73be95fe5d2dee0f1f74ef3d88af451d8dd7e0da7f12d593f2a55811500b5085733c8c9dff54bee1244f5caf3747b0cfb8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6eba3ac4b65dade448d25d06c90ed6c3

          SHA1

          3e68dde6b90c4a5ac3d4b93301f229faa0f9acf4

          SHA256

          732d1e852c43e6fb7f0c978ed3f15d9f13ad428eeb0e73d3c9d397b4b1d57e4d

          SHA512

          609d7c52d8df8ff76d6feb85f69bfd2a3922f8f3ed5b7fadf8593a12517d00ce093924ddc05f61e55dcb0da52c3595a154d3464a3137a83a2081e7b96f9bc865

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6c63572f28800ec08a29e10f01eae99a

          SHA1

          6f6a619353a62ac2f7ff63039162afaa18d10fe6

          SHA256

          b093770f943cdb2d1050a99143647dc8df1779b233cb071c895347a4d35550f5

          SHA512

          a225990e002c1eceb80ed9967d55fdc485b8b23a3c88f7b4be3f8309fa51725056a0fb0afb03b0a567ae6aec0e4613c8dc64e761e027ce0cb8fdcea565b8563c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c3337465797cd6825d11541602edf56

          SHA1

          ecbed96a6df2c9f5d454e069d1cae70ea8235424

          SHA256

          f2f3386eb15169d8ecddd3465b150a7a91a1357cc3f6b7b904b2bbefd3328e5b

          SHA512

          7ec7b3af78ca31a4e98de8bc6483cf0da342aa6689c20c34ff118ca3099c512c007b9ce4bc64707a549ba7ff587fe8278e72e1b31ec6d154be9c8e6bb69f98ec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1981bfcade5b6c9d5612a5e978ee64ec

          SHA1

          f21ebdc1b959ebd12815f001cc167f8283413dc2

          SHA256

          b51da1002fca572cff1d73300a5bf0419c3cb1cfbc3905d22cf927450819b7d3

          SHA512

          843bf29f3791e4ccf388764f503cf0374c9ae54ddf601faafba3c9f389cbd23f157ab4a86d6a0898acefcdbf2829fb74a3648d222812043fc676f463f8e14393

        • C:\Users\Admin\AppData\Local\Temp\Cab47EC.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar48FC.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b