Analysis

  • max time kernel
    136s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 19:19

General

  • Target

    8810bda43f7c6d90d35b72d6863119c7_JaffaCakes118.html

  • Size

    452KB

  • MD5

    8810bda43f7c6d90d35b72d6863119c7

  • SHA1

    1cd2a7ceed6237e23580d269bf44c3b41abd2558

  • SHA256

    f22424cd73fd19e861dd58ead06ceff9a17839c2b855cd3cb4e207bc57e53ade

  • SHA512

    8dcb2b013ef4c1bf27bdad5fc3b70f938ba2e7a511caad63faf6721bfbf706ff78814405508405d20fccb6465a39b72687d0d1a8ce60579e1a506952ef4f5441

  • SSDEEP

    6144:SasMYod+X3oI+YMsMYod+X3oI+YRsMYod+X3oI+Y3sMYod+X3oI+YQ:j5d+X3o5d+X3r5d+X3N5d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8810bda43f7c6d90d35b72d6863119c7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2264
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b58167ad46190e13a35285c7f901a31

    SHA1

    6b2a2663dc5fb0d87958434cb08fc29381471408

    SHA256

    edb9e5ed3d621cc2261d1aba3a9e0ca8b9cf611e489c5f9da4262888b037914e

    SHA512

    c94d130924ede626358c76df98e5fafc0bb55d05c6a932b6418eefeeeb38ea6651d6268e486b12620591dfd7eed640150a0a05958b007ddc01372d9c7b5f94e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f37734813610f35b6378cfcf720378e

    SHA1

    682e7b92169981c2bc8431a57a1c36e98ff8f2fb

    SHA256

    0af2e746fcfd94928776b1f8189f51873078d654e01d6063361d54c86523265d

    SHA512

    d8f9000ac8cc79a1e71c7bc4258af74ee663b9e056d9f6f99ed01fe9c265ef73614e4df47c7f6156a683fcae38ec158670289d3393b41e59dac581e41fa2631e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37dc5c1aa4c806d9a3c1deceb1435f64

    SHA1

    40d304372c078f95db1cc09fe5c11c095a75e51d

    SHA256

    6bfb21aa56872784335c8a6d2a453805c67f4b5130b2f8bdfa15853b78e34991

    SHA512

    3d05b0b1aa2dc16d3e14f28521e8c0360ded0b1a7727bad4183e129380362c107439543a6a92352b5cad73a8e472eece9e7d362299e626ebcdbd641b00cecf8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d306f85410cf3d87304ff7c0ed312199

    SHA1

    b0bb53d0e270c8cb2c22789835fed60316ccdbd1

    SHA256

    9b7277a6f802994e4a1d760ec7242f399a197cee1a97c520e74e78344423d6e4

    SHA512

    27726b803710bca7bd02a197e8386393e181fb618431428d4ac83d84da15c99ea493f5bb696f6aa66c12fa954d89d0089885c03336dfa90517eda67fac228d31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40f8972a940e4bf9365ab4058ffd258d

    SHA1

    075d36e4be47236985855a35192d61d47cc85d85

    SHA256

    e2664078cb99f638e25cc4791714b2c646545dcae42c313e27a6135dcc6af9e9

    SHA512

    2d0ab312da1a199c8f8015619b17c661c618533239ea802769db9d9848591d976fbb39f72e809f4123c36689943db13d2102242c57d8c2c773a2b79d0ffc3431

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21ae902e27eaa6a005bf6664b318a51f

    SHA1

    587194c32ae39c8560e354d59b322991c312ec8b

    SHA256

    b0a960752d53f5def8061be4ebb26cf36be455168a5ebb043ed8c231955ef68b

    SHA512

    08efdd3aca28129278e1ca0b0c11cabdefce05e73c8cc29b3a801ae7d339d0c20ed1cffb13bdb33b20f7a307183f8f1b7b7daaeb92d1d7a9826fc32b8ba527dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34502bcc8dd2c79148814a9ae34112a2

    SHA1

    77c46b261c69f6fbf33e01bbbbce25ddbf31ed1e

    SHA256

    4720d9b7b6fb4d5fae6abb51a3db8b82e1bafbb4c3955da43bd6a279a0dd30b0

    SHA512

    f3a60ebb190986f70548a51b60401e1b84189d0d8c5740926f8ec9c2d9130503efccbae19e8f4cb7f7c5aeef7f7650026c6a6cd93fa4ef2b0d672826d79a325d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63eb2f08c46febca761abe4e9d2e8cc4

    SHA1

    ad9f4de1809fad3ea8fa27d7c48a4341c94f6b25

    SHA256

    45d44a1c06b3fd6d80bbed4df8f52f1001741c80deda758a634020d8c9cf512c

    SHA512

    b8b5705a9dbb07850ee08a224513dfbfaffb112026f0c90cd71765427c36fe0453bb7b9dd18abf0ace30c2ff06e9fd353ee6d1f86c4d97e1a47c066f9d68185b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5066ccb0e975a1029ecb18804ad97e73

    SHA1

    1232036ae3fc0d266a14f6286ee7a4246135f6c7

    SHA256

    7b9a7c1eb4b309e77afa9cc7f6ccdc75da4b079b1cf277496180f18dc0358965

    SHA512

    3579cdb9f43d9a804be36fe7f3ef96c56dd2c69fdf8a05add26efa19ebc1c9a67875b595892d1f39b77d256ab632c569eeff9190e8d5e1df214b535a3471ed79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3ff1b60d82bef11273663de10cc9dee

    SHA1

    878f500665fc2d9d8edb9bbf8c0edb23cc0085d7

    SHA256

    2cfe5d34f32da5d49d91071619eabadb98e47bdb4cf2eb14922bc21e41b029dc

    SHA512

    e297f98579044593d1d06dbb09a27e8a740a25239211566aef8b4b88c765bfeec24b36e4e859736cc6cba2618325ffc05f86215d361a1d00726068049be0688a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dfd25ca83e7e455df0fe145872ef162

    SHA1

    815e5dedbbee85c0bf7448bff92c93d423009559

    SHA256

    c72318bc15cfef62a388d6aef03c28fbc289e9b1b2de20f4334ac94a40aaac1c

    SHA512

    b38a7f94d8a7f45b68a04d9f99c1074ba5f1e80587439a683e9b64303f870f3c0cbbe1a015e90a9c1992691118c3819b3f1e4d37447501a175324a5cf91a5333

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee8ae7b47586a24ef9333fcafd1dd12b

    SHA1

    8cf5eeb10b7415d72bb4f41d06abca3701abb506

    SHA256

    86a393006b324200a74fb609aecf2d6ff3bcf49768f41605c170fff07e4247cc

    SHA512

    c99d878662e6b01cce6cc9d8cdf9528c4fbeeb46ed06f67ba63a8d895181a766db4c7447d56d6ce486f32fe59f8f41549044f151a392a48ae727a1cb45105e24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    628547b1729b3d552f61a5be0d2dcea1

    SHA1

    60fcb67fe5efed70b672e521196313c87ccffd39

    SHA256

    92288ef69fd533a1d226abd83491ecf66338e371c472544671db988f53dab1f8

    SHA512

    edcb6180e4f2280c8f86acbf6134be865f503417624fe827e1b4479ea256940ae85c763701ec31b58054bd803bf4ca5a4ae90cdeee9e73952b881848d05d0e5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84db8fc8bce766651d54e3080ab5b27a

    SHA1

    9aeb4a1e0c5c2a4ce3ded75de8209d6f5e978c0c

    SHA256

    705d348095b4e4d02c618ece0b30f3fdbcbf491ffd27dc34f26f605038e3e73f

    SHA512

    5a19b171e59809a53759367501849644523a52257e606ab7e971a4ae872f81dfe2416dc20c02b485151b050438045b4c2d93ec09412f17ed789097ab6263b9ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b77a8c7a593e0d57b4f23be9640c273

    SHA1

    e72c43b5a82fdd751ca509f4edaae95e962a8e98

    SHA256

    bcdaeae1d83c94658d7cea5b7df5ef38201a8ed183d3406d2dd91440efcf6b85

    SHA512

    c44a056b8bdaa8610828375de67a0f3b5b2d89f12587964173dc9c0fcad0886994a13b6540fb7883f114d8eed64ce327c2a7291e5fd08ba7a016102027a7d524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c8b5c24942610855466b501f1ab81c6

    SHA1

    027b085bc90948543fcdabc951aac57e3c786560

    SHA256

    627dcfbab825eeae9cf88c658425988d36408ac6c7e77d279bea285d60f70ae9

    SHA512

    1e44b4c6ec9ad7c832315ec904ca6a2615ea460045844efc25c9bf76ac037d323e9750ea342dfaaccb99bbcbd68fe83b7033c52ca7924a87270f0c1d822805f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ce1714799ccbc5349467f530f6e83df

    SHA1

    a242838acc8e622ad34ff189664565c285901a7b

    SHA256

    a9211c48264386bba7ae6964b8fa849c8ce59914b79a3953eb50a901c78e3e09

    SHA512

    68fd4f3aeafbcc07ed5e0436204cb15c67e63a01485a9fcfbfe7ec7ba1408a25c3529fbed719601fd1fdee642865868922851912315da0500852f46a4a87ebe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a3f25bb7cb4522944811e4b83d6435d

    SHA1

    5060edc98b8f838d9809eefdafe8a057963e9e1b

    SHA256

    384adbe3ccd7ff7c563abc31c0eba897cb3fbce5a5112c334d7a692d37a40526

    SHA512

    3631344e12d4fa4c59798354791c74a2760e58fffb21c671312fb9b2dac69c1b3fb929fa042c6f3afc6caff1c981a6aba6b60e796a8065beaec79a1fd4ad40ab

  • C:\Users\Admin\AppData\Local\Temp\Cab4B4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab533.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar547.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b