Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 01:39

General

  • Target

    859e0882688c0b3950b62bd013aee818_JaffaCakes118.html

  • Size

    94KB

  • MD5

    859e0882688c0b3950b62bd013aee818

  • SHA1

    ae3507d0d636b2999237c8022c6c04afdc5266da

  • SHA256

    aabf6db7c43f57d6ffea674e61ee003c86ccd2388f245ab45d3491bccd379b5e

  • SHA512

    51e31367c3d949c84524133fb84bfdf7efc22e0c8fe2ee0f24d3b844af25c9b334e1978e87bdbf52eff8e957990632b52d56e0f4963f98ffe16d891f2ce12287

  • SSDEEP

    1536:WMLiNHfL/AfqfKr04qFLFN+24f7LrX0ZyOMyuZjBdkrY8mgHC+qpEyW:WAiJPSBdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\859e0882688c0b3950b62bd013aee818_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1964
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1964 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2500

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9407c233c8858e6039dca5279374f4e1

          SHA1

          98e0ddf730255d1e1582a64d3fa6c530a45d6298

          SHA256

          3d00d6feadb614e0fb798e745b832b7e09ab2eee6650952fb1a6022e57f01860

          SHA512

          e454f8fb885f70cc3f57fc288a06aa351944367a6021adc7f80b4b965f4bd7d1dc4b920532202c7a500453ce7cf50bfb0cb851f3d6e0713fc9fd87f4c6e313cc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0c1653b1f8bfe43a1e14874317bc66c0

          SHA1

          c22dc059e66fc2c9ee8a2cc959ddba66c3cab62b

          SHA256

          070e9ea8e8041e856cc3cbc0b0a0ad85611ab91a9951a49bf23c1737a17f1a84

          SHA512

          bbfda569258d1964f8bab1b057dfc4d78ff755974ccbed425bed79e72651eaee7cbcf2d647c00370fffb231489a1042a1f7b74c501ae76d28bb8a765d097dd9b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ce4872805ada69f025282492b5dcbce8

          SHA1

          c491d864031655a3a59f204b5a41a0ac7613dcf1

          SHA256

          79f88887111433dd7f29e813b5c3d2183ae8a55b6255a3a399b2ddc574c99bfd

          SHA512

          182fa542f339ed98035180f5f7558b28cc03f23e4dce5816f6f17c416aaa2502f6ded51d6777e5f9721b974715112a12f780375ded1a3a0e97410fcabf98f384

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          860ef716abd1d39591087871a5e05501

          SHA1

          463e4ec440f579a7e584dcbd844dfeb004f609db

          SHA256

          4b35bd9e75565eb676df9585df5fb8e3324778c1a9a3635860594e778ea8cbf5

          SHA512

          9977800fc66af644de5c1073c677c0bccf5b8ee82beb094b91526f2dd7fc38a0cd9a0cd576ab886ef95f92d50372329801cfce61b06ae6b62ee06a3fdc7d84e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d825e40d10e13c52e48843179f70861

          SHA1

          78ee7ff1b66a569f902d994b0e67214155f36b71

          SHA256

          ddc694de966f9be167edb639dedc4f0029c942ad8f4589930c343c0b2a9d19c4

          SHA512

          746b58607409f12f2d941f7657dbcda87492ac36b8b9c2135c842cc322aedeffad38ac132384e5928adc7f45184fe4b5a9df26c009243c67eddf5e1f5f3e2c08

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cea88a628ec4d03282b0ea60d32798e4

          SHA1

          504a021f2c3b16d6f89af4c17e3d3dc8d5ed7061

          SHA256

          9730231e7a302a96a79ce374e53c034d103d033308cb3e1c2653a2a312e8028a

          SHA512

          7de0ee186e8330e3bbf11f49f187f72901b05269453bd38f95b247c8e1b35beddac5dacb3b7a67fc8c52527ee26656245dc0dd4371cc0e1ba643e8ee72dcdc65

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b948608148aade080e59935b5f4485b1

          SHA1

          fae235adcfcd4a06c838f4cab08fb37d9bece788

          SHA256

          be8fbf220af9ef16790fca8ae2196fe382c4a0ea333c49495ca690693d2aef50

          SHA512

          b07fd25ce572e81d8692a512e94c9ac39e3e54f9edb6506d42308b78d5e068ecc9243b7881c6f739afd6fe2d56fbf88e9462ba7ff9db8d6037873c5e3d24f939

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          661e6223185db3173c08a06089c5d5e1

          SHA1

          b1f10a9537aa4ab8c5137f0e7d34f8165130b404

          SHA256

          7d4536d9b4dfd464eccf2976715ba8b38da6a451bfb8e5552e3d0e6154e6157d

          SHA512

          a25c4609d2350428faafd9ec9d3f230417f8651a1ad4003ca756eab948a0ca61c948664d579bc65b2d0a625be0ba163f9ca34d065c0dc359f166d784bd0011db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4ccb0936a1a0d93d477b3f02b05dbdd8

          SHA1

          3d5a684cdb7bdbf0532df86e5a53f15050bcc0d9

          SHA256

          06fc1ef168027481b27ff73ef4c5ae859c2a32f2e1beffc7f7b74f9c42380aca

          SHA512

          4dbe2508b2100f33ba68edc7d02cf0e71f459876c98c84f550047c5bfb873bc344afb35926207bb39eecd02d04fc1d687c7690c96a77e9cdbc32dd872d687843

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          81b55ee2a0f442fc2aa73d99ca681981

          SHA1

          890d73036133c2d9afdb1af57bab4cf0b27f0d14

          SHA256

          f8d145cb399ec6947f25bfe7858e8345f8153dbef617b841548d22bf0ad57cba

          SHA512

          b12ee271dd64f84b9d3bae3367d7e5bee9e5ed69c34b83588970a3acf6e37b64b54f86e90749ba7a430d4207aa4f7b9299e9efc4442e752d8a9feb72e507c511

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          919c6238a1171d9c5e59a6393e87190d

          SHA1

          cd20aa4bff53e8350cf0918185164f871e2275be

          SHA256

          6c71370cc1bfd0f97864bc6f9faef69c057161f9c0cda435ea87c4414c2c88e7

          SHA512

          eb63529c9e472b93e429f3ff622f1255d9eb9f4afa4a52891dd71ec67f8f7561ed8cb1e3e94c6e74cf32e714784a0bab351d15a5c60342d15d8eb8e7d21c5d2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          98fd8a1e3c45f9d8832fbe7b208d7605

          SHA1

          12491540dc8fa88b0c8b27d30817c620966cff32

          SHA256

          281b4720135356f2f2a10019b3d22bb6ee5f5883736ed8855436435f5fccdb9a

          SHA512

          99707dbaa07d2ff8187c838b752c2238a5f1aef03a5f7700199a1f27ecb64467d3a0c97c9b7744a56069b1805b1ec781a56068d8b2bb75f59ffda40a24d74b19

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          462ed3f9413fcd91c9e255a28c6062e1

          SHA1

          76966a5b91f1a7eb9ae0a0243bffcf25ee43a346

          SHA256

          32cd952d5a3d0c82fbc877818aa34fbd5f3521942f24ed59ddfdd09490ef8c29

          SHA512

          aa112e45cbbc7125a68f1cd4c0c8f4c85ef0f1bcfa3e6b33a511d874ad490dff547bfef400bdfc1897274a5f39fb926379f588c93ad2c403a99bc65e534f0678

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          12eb02307eb1f32407be5822e19e1312

          SHA1

          e4c19316d4b0bcbc5102853bef102456a1e3834a

          SHA256

          299c76dee023c7d0a166aefd57df78a56e709caf27fdafb98130c6261de2c07b

          SHA512

          b0df8cb410ee8f9ae9a69f0ea5578720522b9b88ef9798e18f4f5c9a86e302abfcfa95e4b473dec1d5d3dd65f3625d527cfe0a4e27ecbed284ae99c56db83236

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          754d1462a15acc06227ad18544ef0abb

          SHA1

          721c5afba7da84cb3e1660994ac96da5bd1cae66

          SHA256

          aed91cae482dedbcc928ebc35131e038f38041ec5158f4d792c65c4b7307f564

          SHA512

          a7e7daae93138f590a0ebb21decb1add27e54365c7c776aaf8b6b3429cf36b3c05c7754154b8685dd2ea67a9a7f3f3f5ac36397c1f582aefae30a8f1c9c35baa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          82a9628f9a5314f6cd914807c52ef5ae

          SHA1

          0ff5797a190245d92649404bfb4faa83ffb13a02

          SHA256

          a84de22dd55609089e5e358f3be50a5e2c0ea04c28bc759d06c1733d854574bd

          SHA512

          15770bacbfe983405cc4da4b4788a990b435d6fa6d663a07b0e98c4ba78da56977a2e7d96693df794eebf6d43d3ff27c65ed1bcc1ce0f68ee6660eb04f59683a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          136e93ae37fbcf0257e04bb182201217

          SHA1

          8e919d9a4d2c0be45672cce89f50678c32afc5c8

          SHA256

          11541cce16111b6904df9ca00a4527db3d5c7e84c74323c95d25e309949f08c0

          SHA512

          ba57aa123e9beecec442afda028f12b822200c86fec6918f01c22afad15af66c99838a61b3b38f0281d71d0b7b0423cda2b87ae01e7e36421b44b712fff10cf5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          01632069f5f4390a90afb9928e451d00

          SHA1

          e36654d8ede2a62d9f7e19a7624cf73a730c1e36

          SHA256

          ad0862304a94c3270c0dd1cdafdb83a4b0cae133b09680977aa08ab0510d4067

          SHA512

          f78ce36dcc10c8db01c3b35c934fb8f0e5e12e0adb8c4b754abedf21124c4847a776e325e59b330da51ef3d7e90c74c0145ee140d4dd0bee3f72a4252b37fdb9

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VIF0OH2A\fonts[1].htm

          Filesize

          162B

          MD5

          4f8e702cc244ec5d4de32740c0ecbd97

          SHA1

          3adb1f02d5b6054de0046e367c1d687b6cdf7aff

          SHA256

          9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

          SHA512

          21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

        • C:\Users\Admin\AppData\Local\Temp\Cab3A25.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3B08.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b