Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 23:13

General

  • Target

    88b0d0600384458e8465291f5c4e804b_JaffaCakes118.html

  • Size

    4KB

  • MD5

    88b0d0600384458e8465291f5c4e804b

  • SHA1

    6af306ec5399bc5eb180662fda4ca10f4fcf5983

  • SHA256

    e03581237282264b63a38e3e3b8f26ddee93c3b991cf97c9512d0f3dfa6cbea8

  • SHA512

    14b88b5d0a52c525d6801ebcee7943723752a5d549ba265e5d02ab088f7e99efd3fd9066bd053657793f05c2ae0c79a20c88c5246fa858fca840f3fdb67c3ee5

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8ooHVzKd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pD4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\88b0d0600384458e8465291f5c4e804b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          abde6518a1a41d62fbd9b2aeac4e1b5a

          SHA1

          f7dab43d672124cfad034162cdd895f894aeb06b

          SHA256

          b1c7a22aee07fbe77bd39d8c70d341bdb276af0a50e11fc8841c746cfe1cc7b1

          SHA512

          47858876888b1c261fdbb7d5df980bd2b4e46ec3b2d6de8d633c53e265906e69bcfbd682ecd8f738f30a09bc30eeac5a484d2b4e845675a45fc8f4e43f593289

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          208d08705a79d7e6c97a3fc95ea03d98

          SHA1

          ed61e1c251056ce9a261ae9eb35b349e14c643e7

          SHA256

          8f872ee0977d68ab79c57879a923c18919c3f2c944372437a0fdf22b40209602

          SHA512

          47671f17ccbde0c30604ed001a875bd60ac7a954b8fa880ca05f658dbe4df2a10ea76de9ba0c2f4f0265cd27b9c36f1066d71aa00079c6c36a630eee7226c326

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9586325b36904ad46b01aeecd7cc32f8

          SHA1

          413e9b1d8beeefff07e74d33b4c52d167f4d9a38

          SHA256

          0d059f9a730d47a08aab615d76a7520826178813a21a1995aa86c1a33ca0a381

          SHA512

          9bff14d311de2ac83593a8f4f9f9c92720eda0a2723511064991ffee7a994fc8942188b4cbd25976a425b3b31b9fb4df1ca34867c7528a43364fb477e1ccd2f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f9b7bbf872eebaf38f76c66bd3369dd1

          SHA1

          00c20ffba381a914b16de84c00dfe485ac32a63d

          SHA256

          e36a75e029ce4ee3c1c6d982459901cfeb1c78a5675c402a1c9d4250ecff311d

          SHA512

          5c2677a0716b1e8188834ccdc5da8092ac8d9b9319a42d0b327c988871804d16c7c66d9c0cd3c020eaa4b139d3b5b6414cd95c27ae22058ab5b43e5272f5c3e0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          75a38ce4e9c336828ebfdf10506046b5

          SHA1

          b8303e08ebda62f84d5b11ba0a72b871f6587c37

          SHA256

          e777be9380998d0e0aa5b8ba7afeb87456b377cdd595b35f263bc57e7af480d2

          SHA512

          6117296be354d2caf421863d13c67a98f21cef00eaa24bcfcb986e8773eaef92343f46461d65f31b699758151df1aa17701c28bac4a5ce28549f85e4cf9ccfba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3325321bec01dcf5f146831b821a9ebd

          SHA1

          1123a559b30271745099c19337403ec07b931fc0

          SHA256

          2e7ffbb0b6a58f761c0917fa052c0e603138f8fab7f27d4842383ea13e2941f3

          SHA512

          2e5317e7c0eac952aa81b0a24dc2fa42969b68a9a792498828e3dcc4caefc10f6845232fa62cdf2ff347638d651195eb39b2795a1670ea5037035839e337f34f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2857c325046a8dc2ff77f1c631321b83

          SHA1

          3fabd200494d27630b600f244aefdf081d681cf8

          SHA256

          026f8d2ae4ceb7570cefc3a8d4c6f02c9167f1e125e08eee772cea23244e4fe5

          SHA512

          58eaf48bf3a07e51b1853939302820e02d2df8253d8a304c6617f315a2af3556ec5985bd565d296b1ba34233b5564f972ca806ecfcd2199fd93277505f31dae4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d88f150df476b581acbad2fb2f107b01

          SHA1

          13cff3f8879215b8d75c00fe0f39a169bc9a5336

          SHA256

          95a9ed467a5fc50a63d7cf096cf3521c24897cf4d9dac520d759dbd70c966db1

          SHA512

          f8718c73658864ebe9aa860b422852ed7f2b41d02cf8e05feb6dd78d0bed2718f97716c77604402bf1b302d46c4c338a53488335bbc4f92594846be2e584ba95

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7f7e60469794dcb696da97fdb4a4fbd3

          SHA1

          0394f19ed169fbaad84f3e930ae82e2810333d5d

          SHA256

          15f3522513b40e6540a1e93e69b45dcc53313b0b75676c3587455e2ef6ce77eb

          SHA512

          2763554a7814cef009e872d09d0a78865f77b66afdf8fed12802d33f34feaf86e121a4012b6c04d0d54660b7911a6760128ed31b4a51e81108673e78bc0bbfbf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          68b5f58f1df33efb34782edc685ce810

          SHA1

          4e348622e94535651f9053419cfbb127d8ba26fc

          SHA256

          498cedefb3df02e432871978499e4677c28bb88363c391a5f1d2ff1b9353f99a

          SHA512

          6645394cd608d8b4a7aa75782eedf93de85a50720d32b75bc42fb5ec9fadbe969afad9b20084084bc2d667b0c7a5259d9e2e160392f9ebc89554e65588bb9846

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b302953a291c21e55511361fb2c43a2e

          SHA1

          8606a223363dfc4eb782c96f92ce5951efc6e99f

          SHA256

          8921ca2e3274d7d636221c0fafade6dd352dc7922cbaa3dc58a692af2049613d

          SHA512

          b97d7967c03c05090fba3f56a24938e775e5399842a6c9a296c86eec8c60880ba22e993a6ac452fc654828d6ab4bf990ee18f0f479a6395cddcd340ec02035b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          89d69a372aa6ebd4017e216ecbf2edcb

          SHA1

          d5f7ae70d60f8d54fc066bedae0ec238c3a939a2

          SHA256

          326152e7e5ed0233d399bb702ff91f88fe6753b32e9d0a8a74daa232ed82c5b8

          SHA512

          638ba8d3b175de4d9b4147645ca43b046aa7bd3cc64827c8f302f2040393f4154cda992133a5b655da7e220b6adfd31f92855822919be19c8563e1b8d8bb7c6d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2ae47ed649d3baa308ba66520b6a3fd0

          SHA1

          d2d28f0265f536bf9c2eca34c02fe3933f99f71f

          SHA256

          df94adf4e2b9e2f4d3e02bee9239f1b2d0518a9e776e11843fd815a21cff6c3c

          SHA512

          0300afae3cf11813f762828620ee13d19806234146519724956bb33faadd7125790f1cc8301690ec61fd8c068276785af3879511f93f5c1644b27e78044c4640

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6d1e4b366fd75944b87f0da784334800

          SHA1

          260956ce560af0190f19985f927dc30c5c317e6f

          SHA256

          67f3da2c42992e32607fe3c387e8154b6a100529a598d3901e999964b8c037ed

          SHA512

          8ea2d359be67a3420369552faba36b8a10a54c95fd32a25ad605dbc25df639e6b2d079347672a4785426c4999ba6d3028af6c38be971c771e6d8c9de91ddb8db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9d7327df036d5bc2224e015967843d5d

          SHA1

          47f42e19e5515e56da62d2f05e228b980b252670

          SHA256

          285d61fb71dc5f546008b709dc0f7aff2e6ba8b3e104b635888fb787a1bed533

          SHA512

          355ff5b91007988ee7feb8747ac266107915cb4b45d6d722ae4ceba9082445d69d3a57d307bdb1cf831c5c793bcc711f9934df8092bc852e682b9d3d4311e18f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1cc102bcebbb1087a7a0adc8565cbd81

          SHA1

          e4145d8964d73b71bc3e969c65be3c5409ca8049

          SHA256

          d13adc06355ae057734e28a225897e790ddb73239a2304064f2e2104d9dce01a

          SHA512

          ad7e1779e1c41887d77e37e73cd5a6ad09a72074387bdfbb36438d156782184363d701bdac576a56ddd697349069180cc14089b1e567e4427cb8604b50e4f64b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e2fdf0b8bf4b2fd21b09483cc2812b12

          SHA1

          6c78d3949b38a6d4fefcca6115c104edd7621953

          SHA256

          f6c33d9c04a7b6d5ebe68528c86d4c81b0736a668cf626ae0ee33a6be1f267d1

          SHA512

          9a21be4b10518528fab6bd8292c665b5c941f4cbf375cc655bba1c144fcc14ba2ac167c7068fe9b42f8c3910a1b5fbf0fa9f8190395a50913d42f587365fab04

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6fead7ec37b6d18873793449a21beeaa

          SHA1

          671ffa6051acddd4aa47022aabb84e2fb5a6f548

          SHA256

          3eb3573eaecf29953712bad490f59155f7bcd74b30fb9392a8e1b864034ddf0d

          SHA512

          01cea6cd43ed28214ea294db40ee834e08a109be8c09bbd75e408891ad0417b8566e036c7eeab18cc345547853c7162424cbb63a1d90c090836e9792f36b3d86

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          de9fd8733dbff1e1bc6d58c16a9181de

          SHA1

          2a347e141330f78ffc78f6fcd50f3c4b0e9876a0

          SHA256

          a76dff968c8e99f5978f98b1ccb9f040874f0fd266a1a53cd82306a654c6905f

          SHA512

          35661cd8ae2824fd84542a611b93c145f0b1797a1a86a536e5563f53e9686e365ea10531723dd4f209e9b0306e123eb48fe69d4ea501db1ee33b6f44cdf9a884

        • C:\Users\Admin\AppData\Local\Temp\Cab2A8B.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab2B59.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar2B6E.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b