Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 15:54

General

  • Target

    878c45a8c563d56ca65d9d927a711c93_JaffaCakes118.html

  • Size

    460KB

  • MD5

    878c45a8c563d56ca65d9d927a711c93

  • SHA1

    81ccd39b0b77de000f219faabb841a0b629d87e4

  • SHA256

    39a94ffa148356892b6f7eaa961384dbf7e0f4f0f1ac794c6ab4959ee22be3c4

  • SHA512

    8debb3045630e86deae209073fb0b54d00382d167006a0d4ee80092f4025ea7a78eaf10902f9de731c4508e1e8628f8a1ec1a16b157e6d0d7e13f562efbe66ad

  • SSDEEP

    6144:SLsMYod+X3oI+Y2sMYod+X3oI+YusMYod+X3oI+YLsMYod+X3oI+YQ:G5d+X3G5d+X3u5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\878c45a8c563d56ca65d9d927a711c93_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2348

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8f7bf0c28dd92b58935d287b3d44b32

    SHA1

    f3999569077a3eff8e8fbdcdb0f1b171eb439b1e

    SHA256

    f5d85f405a0715f204f918fe6232b10ca325ccac2559d2950a11c88f9006829c

    SHA512

    39ba6c49beeb0ee593b8c562f06130f7fc1951a61a2337b4e5b14e74e0bedf4b228b0082d8894f01c1e4b610018c7b0292ea3ace765d0d6e7df7686e4754b6b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    568b9e67d00c157316b806638c3e76db

    SHA1

    92dd118c9522ca2bca5c764649f430936ef63d6c

    SHA256

    ed5664e44a53722739e5ec67f0068b4ce4c302c3b809003913ebbd78619395de

    SHA512

    d55d38dab40924523a35684078e5209752420ccfd02735b0c01d181545b09a1e9a9821fa9dfb90ebb5fbcce69093bb5f7ebe9c279dd2ac3300d45215a4ea9394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3aaf3fcac2935d348d7266427045259c

    SHA1

    33581db45073ea5d1d6911e6591eb2979258ad02

    SHA256

    6a0ad6b5b27c0a2f4cfd29abdbf1cd5184ad6ecbbd3550eccf7a4a4fb09919cf

    SHA512

    ce6f45cbebfe547335c725ba08fc217e173bd1a8128583c534675206e8770ca5d4cde4f0d06b75f27c41adb1b455e892dff816f479adbb68d8f1e524160bc6c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd35fe774bb3295bf77752b2ddd78f61

    SHA1

    8df929bfbbcc5dfa92dc3f64bced6ab311f6a625

    SHA256

    0c321de9e6c1cb78a2a5cf051f0cfb95937abada47e12eb09ae0032cff95c872

    SHA512

    69d7bd67ae82dc0d6f1f0df901c67f5e4afa30407402b4f8cb489fc3921388fdcc405cde373e8b3ef2c080b9ba8a8c3c2ed397f91f1cf7be61ad5e208862d124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    432891afb730e43020c7973c0127931b

    SHA1

    0ff87fbbce57303127ad64bfbf69b8cfd52f9371

    SHA256

    0d3359527c79e88addf90e4722ffee320bf204a0a6ca1c1999ba59f7932fd130

    SHA512

    f21fb4e4d4f25ed4713bcc7542fc02ddfb2120e00c5ddeaa0042432e3acf002bc8cddd44b5b3e27a0bce7a10e29a2c23ef635bbf0c22abed7ac0fffff2f085ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b755ff3cede489c132c10dd7b95e0a98

    SHA1

    e1db2288419ef530ab525e9c76a174760a9490e5

    SHA256

    abefb0a3895e606b098698311e3511f9d4ec78414de0dfe925a63760a849b95e

    SHA512

    1b1d03105fecccd9448c563e0ae15ec5a848e4fee246d42ce309824b626de3b340bd3e88799626d2977fcbda9d384cc6fa7eb363df43c17a6f2187b086801a5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a890e1796f6fd26555d338b63cdbd34

    SHA1

    8d1792a5bc48f7e65f7701f03c140cd3ea645695

    SHA256

    6cce6ffd75d9aadcd1ae26eafdd72da5a1fe9ed9604b1b8c6232ca5419cc762e

    SHA512

    7b28090da923bc57b06a6e7ef64c3d1795b9127e56914f20e12121daf8592361822a08b5820ee53d74d8fdd8db5caec12aa691a4ecf5d6c842429a0274467f8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6afa1faa0e228f6009f04fb59845a713

    SHA1

    aaab850c101ccc36f035f02da1b8fa22eee3dcee

    SHA256

    8769089b1915e1c8edead1883a7882083cfc6558e4725de387239eabdbed9e7c

    SHA512

    ed1aa56e32bb02c5c2ca095bc6c87e95e7f274e051bbd915d7ad0160adb995828c6d6788bfb7f627f7997948095a2fb6c0e31c47d072de0ddcce06668ea772df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18ec8598e315affd96f48e95d930ff76

    SHA1

    6246e0493abdeabdad4a8a4df889d297a9709285

    SHA256

    648b7000df50974e7405cb5245c01a931f7a1d565fdfdc07dbfec579b22f09e1

    SHA512

    150da2f56064771efe28b24f8f55977072d8d4c68458df7fd95b30548a0cf2996bb60619ff502be0de17394bdc9d8b1108591316a0e85716965311d0f618e7ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9f7f410858c2f7d6f3d05615dc77836

    SHA1

    92f0d1bdb1736c021284fd938bfe6f43f89746bc

    SHA256

    fcb6a0898138274f55988c747a9bf2dc24ad6fbd88b5904ca820cc054115b9e2

    SHA512

    772cc6cd61a56b602cbdc4c1ccf8a67a17259f543dd2d1cf7615457c2612a1410db669c8fcdfea90d60cdc5afaf7f63fb88f3563835067cb69fb887510eb61d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4add413e722bcab2fd0e26492497b426

    SHA1

    9432cc8ac279af9b9bba1ff069a7a51dec1ba92c

    SHA256

    9833eeefa52fa0341f6706f17af6849722c6e1421a88d82c24c0554d782120d2

    SHA512

    dfc11acc32b6295284f4d71b460de705fbe573b2bf30f1bc605966baaf96aadd2d110d4d2c312ee9991650671c0d43c96359ec146162b06f9fbfc523bb28200f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f722431a1145ce095c831cc6df283a8

    SHA1

    97a365f4b1b7ff99ab62009818c947d2e490940a

    SHA256

    e8c0522d4437f2f7045d38926e64ea54285674fbeee15ddfbc3fe4ed6ae02725

    SHA512

    476a46d10e5d1de6616a10afa4b7fb4fda6c6f42faa190d12edd7ac00c579ff3adbd7c659df939b2177ec77589429f7ebc3e1c31d1fdd92f4ac5cc46b4af864c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5cf11736d183d96c5408639522d8d76

    SHA1

    f52a8bfae9381262233e2ececb43368cb5234f37

    SHA256

    f0fdbd67f07b42e16d47832f62a3c0c81b14046217ffb2114ff269dff4aae154

    SHA512

    aa30a4ce671cfde9ebcae8255ab512bca51ce189a4a538a7d0fd06efbbe3a789514862cc09480fc1a073b35842a131e48f9c2a2792b2620ebb96263dc6d64699

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b471abc9cbfc47a349929e456139a8e

    SHA1

    28a252d6b97e14217d31e51d0ea1ad664169ecdb

    SHA256

    ae1ea68e3578fc22c7992caa6e209113f4ce4a86a29b982e8599c670010773db

    SHA512

    938cae83367ce48c81e1bcf4d94cc45696903d056b7e605e431778267bb47cb45903cd31f901474dc6b6563cc7019440d6a93f931cab37697311ac80ad034e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6633bb02c51b37c085565ef1c5002636

    SHA1

    edfb218a5f97aa6d1d5a1735f0e1d1ace29268ab

    SHA256

    7f02d1c4d0817f62f2432daef51ced505f2456c4c2bca1b23dc4a5b221568316

    SHA512

    736eb1ef9086a995c489a4c6bbe003ac10b2a23deb4e34d9e45efc804f53cdabcf406ba6327dd7596e3b488f03ca4d683e89a14c45bdb000ed0b0f85f61b7f4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    414a71502ace4c92640041734abf035b

    SHA1

    c619ece63958b61bdf59c59277a8f006f1229c3e

    SHA256

    771debe1bc4484f9e9ad2c7e6091c7923d5140de0b85aa816027898b3d369869

    SHA512

    422a2aad0a1825e76944138625ad8b665edee934d0268001135f7aaec61ee1d20268c98307f47b235471d2ad6031d5faac3c3ad4b67d7cfd48834f30f1aa7346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30689eca723c968ecca4c7c833034ac0

    SHA1

    84a1b521e68083b90625b42e6425c80a43fb7fb5

    SHA256

    52bdaa5bfd8df10a7e8a9fd0d153b6434632f81665309ef59f88b5e6312d736a

    SHA512

    481211b686c8d0518b80a266c5b67931c0ec0a784d8a3ebc13816417c6230d05d226fdad8c8ab2ffcff1b75bf1bfc8e00369e85332df1899891209e5a72fd976

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    882583af1f7125e27fd59f87b16762ce

    SHA1

    8e8eafd544a5ed384f446729aa1ade69da596569

    SHA256

    a7eb30dafda979794c9c3cfabd1885449e58dfcc4a9b82b9e189848bec5cbbfc

    SHA512

    a7647173ab65026660492d6688c82ab76747895955e6a8d31c9a05af2ee6a60a864f98bcc5a558e4a6b570c73a842320bbbcc045e62990673f273fadfb5bd1fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d68cb10bda8defd1a7f67962ee08a5ec

    SHA1

    fec9cc11fd960099ba6dc6fb5572a7fb3ff21bf6

    SHA256

    3b37e8f264a026fa07686b08eb30a29121bca2cad297be24bd0970a37d78ba6a

    SHA512

    4088b476c4110743eb4509f066288ad3d0bb33220e6d27fa616187a731e85e9c27c10f74605f16822815c39de46a1291d20c98299e0d84e175e6f21c80fa9450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    812c8b61a14723ceaa1eb730afdcc1c2

    SHA1

    1292a47615ac81308a8340a97429cf85ff277bd7

    SHA256

    fa7b76dbf98d05523b49283b7c73eeb07f45bdf81321d6b0a5ce8903e1b37ae5

    SHA512

    273ba5a6a84201c4e163aa3e9cf0e9b66de6c4418407046a740712e88c2595c5858bf491845b73f648b5d81add8a07fdc320839a3eab7e584240460c7af12093

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11608d2ccc8eb6aa52d929584ddf45d1

    SHA1

    c22e11aa402f195786c2e67a7da8bf33ffd77bcd

    SHA256

    ec7cbe4911dec87d20d7605c47caf295adfc2e248b50a7ebf7ae705f1b163349

    SHA512

    a1d904ec2dfff2fb9291337657acacaba39868fb34cf348ef16b9c8439a38984733337921a6ac542e549299995a442f2f67a8a530099bb4e745e15033bb6c221

  • C:\Users\Admin\AppData\Local\Temp\Cab429D.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab430E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4332.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b