Analysis

  • max time kernel
    138s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 17:40

General

  • Target

    84f077635195e3111ed4013daf69318e_JaffaCakes118.html

  • Size

    287KB

  • MD5

    84f077635195e3111ed4013daf69318e

  • SHA1

    d13e869b092716849316a035a0b64b2c2cf96d47

  • SHA256

    8fcf0ada0580cc334ebc076168299161b924a699d10d039a8f7a73882d52acb6

  • SHA512

    a6f2f6cd12ab7da5e267274bcaca074047a2c7c6c735402cb85d47640c182b57c83e0b82ae2ac8d0b4b9ec9bc13e86cb169c15faf4f5e06701fc16494c93d9c3

  • SSDEEP

    3072:SyfkMY+BES09JXAnyrZalI+YfhxcVhiCVcejF1Yusd2t8bHuEU:XsMYod+X3oI+YfrscehyusdHFU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\84f077635195e3111ed4013daf69318e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2440
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2440 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3000

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          072e455d6ef10d0866699d1c0d5ee5f3

          SHA1

          2d7ef236be24a723c1aa0bb5a79d1b3058f4bc03

          SHA256

          274bd3d4c116296b6818684408d3afe42f63ca024d5a6cf60e5b5de506cad390

          SHA512

          2a8c4b26c8dcd1f8f3317cd03ce222747671b2822d18dc183ac498168da844a51925196e22ec79254df01073b993799e436afb4deb46907d86f1e3c346c647ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8323b0347ce05c353a8cd2fb46f20bac

          SHA1

          fca08fd3fb51e1b9227f946b1ca2f76bd486ea0c

          SHA256

          d73d305f0cf466f81820144fa7e524e790d5d3431b3903def4052639322167aa

          SHA512

          66d084e5691034ce4a018d90e45dab43f7b8e1c12b58031453ca286491831622196d6204998d13acf1a181acacfce317190a901361433b19903600f19befa417

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          041d7735bec5b570da0910cb9161c8f4

          SHA1

          3fb673207e21e52f7b327edd36a599193d0807c3

          SHA256

          c3abbac18d05ab739724688c3ef361f4dc62157eda3ccff4269b45472676b808

          SHA512

          e403b064475650f4dad55672f32cf563e18cd9e69b8b5a70ee7a24c4468425993146532e538244f4a2b5dc7ec277e6b8eeedff2ebb26bae7ac34ad6365664e72

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          75f7883ccacfd03c627fd5b9a0ceb59a

          SHA1

          04940810cae3b6279e4bd6f781df6b9c6804b43b

          SHA256

          67f860376957b0d2d2312e183fdffb34e565b2e07263f8f66747ffc7845ad2b5

          SHA512

          1482d943be19bfe7147ef13a329fa0f05b588f6f4410fda0bc2959db8018c909e9abfbbe08911a0f39a285accd783da87f0de39086c82412d01d603b554889fb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d7193109adec6bca0f8623006bf2da65

          SHA1

          24c0eeed141d4b1868605f700b2f9cdfffef7e55

          SHA256

          448047d6e436cb0dfbd5ff889d6547e1e5516af40baa9329fb85499c11fe39ec

          SHA512

          41d925542f6c7dd3b6752b2b102f048900ea04a1ec68dc14394442244716260d14c1d80c518d0a38a0edd82a60d71d2d5f2faf7a55f7f61751f481ca83fa9bd3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9d8a444d1aa23a40616bb6f5a0edd58e

          SHA1

          9b8414eaeb23c0dcd6b673909949b8869afa303e

          SHA256

          e7fdc87eadfcce98139cb747b2647e490d4ec859e7afc25049a56c43034fe642

          SHA512

          c538a173d3b61eb51342221b185e75fa5f1d64a6cae0f88faae46d5808222dd9608343f6d29869f7da81bc95276b13f427401a94606d5e9cd5600d407f699ac2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6af49f79e71ccc912f9eb1491cf64b7e

          SHA1

          fc7c2bf679c3e3f4a502a0f24e87d9803cc5f163

          SHA256

          8c13d3b6ff58b492a642328a27474354180af6905eb950d58eb35c284978f57d

          SHA512

          1e8b90b5804bb87db7b5866ce507cf0031a4dc1b6b5590fe71ad24e5e0fc13cb8bf9b080deff3ccd08d9116a1223a37d83dc0b954167fd0e86e34b4c45d42d5d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b825e76ef4648be8b738d68d91d4754b

          SHA1

          7159bf22e31d405418358e8539eb8237f2b7a8ad

          SHA256

          17aba08fd8bba65c16255008b7d9d6f8b54e2da69097960f6da429b04db8f6d4

          SHA512

          7c504dc84c0aa2dd40e252b48f3198ed82ca58eb0c880bd41008456cdcd3887f85bf1d16bcf22dcc1cc52da5722c77f5c44f225a855beeab4a5e6e55b16d9074

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf70180970db3e07af1ebb52f37b4e19

          SHA1

          2327c5cf000d2bb8d7049ef96b7fb415f0222af7

          SHA256

          90ef0969723a555459fbb7dffc4e2cf58e203c08defad8623ac954ef4fa829a6

          SHA512

          d2f80b3c9849963332bd347c0d3d235da68b917694a28f5f9ee5ea352b6022a5dd810eee9a55e6310af2e6f33e1bba513bcc5dcf04a1ad95cd34d321619c941c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2387a33147b435ef026662d3b22d3113

          SHA1

          787ff102e5278c43f55c1f7e707691bdc226e053

          SHA256

          2bc6a0e8d1e55e3a34b711cb892220dca54d23bcf9edeadda38b48c3b31b958e

          SHA512

          97fcf0bab0dc20c123f18cde7eaec84593b0d95926d71974ebdb89c343d6f4f07a7abbd5aee26714313b95438ec675c97a454518e722ef72b2a3a63a521ae9fb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8812f30ab1d768971a390049ae0dcd98

          SHA1

          d9cbe356690f83d3fa1134bba5ce9c2e89412fea

          SHA256

          a7e5f9ba188b47b2d68d740e3a4784570079601e63f3174bd4ed1a4579d1d6d3

          SHA512

          2f16585e2718559aeddb228e6e87eed998d92b6ce40cf919fb68062135cf55475a0f005e4296b7ec064d12a59c08cf5fc9963ee2076f56a7b9c42d6a21b805c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2b00c2da155c3649b867637309dee121

          SHA1

          2ba483b9ffd2a0bf72e2daac1ba93a0aa9a0e8ec

          SHA256

          1e3dd869b1afa3e4451ee6413354d3f8b7766e8a31425f7fb8c59016f45bf503

          SHA512

          71ad465b60797240179a95f6ce1b6998477120975cf81a74da797bc3e4e37976792027a1029b793734ad720e6ccf827d8991d35a7d576a9b017d077a0668dac8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0b1932c3e2a6411507191bd9aaafa57d

          SHA1

          92fbba210cebfff3ebf218a3b85c6bb7c0faf89b

          SHA256

          f5922afc498e4d7650080575471ecdf953d04dc8cc073d0f1b423e087b458ca1

          SHA512

          623d9548c6ca5cba6504f688a7892827a85504ae5ef74b55466920d36719d41df4b9de88f21d00ef8478d20225fa864cdb92e3e4edf248649285885cf0b09061

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c23a760f9e446c69bcc4925e9e2d2632

          SHA1

          aa6778fce3c8891963ec1bd5df6565b575e45939

          SHA256

          cae153d62b66c1171f035cf01b1b573c6fb8ae01a25a18d755d35660d645a3b6

          SHA512

          ccaa3d4ac72933ad8b1f7a81afbaec8bcaf3da8b072d134f9fa8e04b1faac2782fe376eea6d1fed1d34f5b6c13dc40ab66b0806357d26f61efa51ae701778745

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6f2bb3e5b4c0afba7a40286d4080eedc

          SHA1

          3bd9ed7960a44018d3e1af1dce57476ec2e49563

          SHA256

          228c2345e65cba8fb8947b454385ae991526c6e05261ffc58b6060b7a2217eec

          SHA512

          543b8f709da4fc4dc94a0b244d370b9a8269563644f15c98b2198bf4e621aa43f25d4479f2023df0f083e18a8d2a38aa0e105adb5da7cac56b80e5f590c884f3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3937d37fc621d2f1ed03023a8abba68f

          SHA1

          79061ed9235cb3c8696cdd95e2ee517e895e7abf

          SHA256

          86f79dc1efa4722ed84e8f05a7177c01d8714c232e3c624cb93e79fb1323ec7a

          SHA512

          5bfba1b8d88b2c02e2a9e8b15f5e8a21e9baa5986a30c5f7b1f97c5149dba991610f9422cfea7722b93bb82c300f5779e8d988a6b42bc513cdaef715d278defb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          425dbb120105a5c2a64ae08f72847a3e

          SHA1

          94ce6c9704a9d321ed06285c14300e73c6bd33ee

          SHA256

          8f40a862caec6ba1bceed0318210c56b2ee3d3336bc3e371cb5d884dd43aa6d7

          SHA512

          c4d7ca681c5dc09fb03d271ae75444a6c785ac19e43843e3f4e132cea59dac63f44ec56549abec13a25637c0b49f4c2bdb657400e9a47fac4e56ebfb32d8d213

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8979f6403e07b8faab7dcc8080988806

          SHA1

          96f6f0001e9779c3cce4907939c422488d7fa3f2

          SHA256

          7863b5eba10dd0ab251245130f15f0b860b13242a0ea243078de4a40e24be6f6

          SHA512

          8199c280e6e50382343958f8661f44bc0d6d3db70122d6d680379f2a6948366c43dfaba1393b487b5a67bdfd5484fb770fed5fdf9849db3932d2647e493cb551

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          06f952ae02ed35a24bafaa08bff7b370

          SHA1

          f03ba4b837c121cc0531bcc028b32f8f92bc5a29

          SHA256

          b7784b955fceb34b951279c8ea22f39c7cf709201abbba6708548a94c5237257

          SHA512

          b6f64b78d64cf2453378ccd79661244ed19d99a512b912a11396e910cb378f6fa04ebad58fbd5239a6e8b427942d9324c864841cb6c6a5c0a95662ba4fc09a65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6fce46edac1ab06dd81cf5513796c41b

          SHA1

          d06df508749f2dc918c1449125f6541322c91192

          SHA256

          bb99169db87e3112f1b14d3712e041602ae3edab4f2b956fcd3c41f7aa402c2f

          SHA512

          b53dc36c6b587abb60e2a0d4239de99c7e276c02115bae318639b165f586a241a317adfcf1a9e6a856e937e5bbba3714cb6e878d10b0656f7672cf666a09895a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          83061fc8c53cd3d93542870f6a7d1aa0

          SHA1

          37aeccb9ccb8fa2c9b42e0218e1177f9d4c4fd7e

          SHA256

          0065b227986158d8ac1c4e958199b354f738aee8248cabcd1014aa177c4b7f7d

          SHA512

          2cbdccf5ead5dc80468c5f147734bb9154498819e138196b3b8dfff544b90cafbff86b7e5d326ac8bfa1ad51da43519e3885f116cb4fe9e5a0bb1c018c356990

        • C:\Users\Admin\AppData\Local\Temp\CabF45F.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\CabF57A.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarF5DD.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b