Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 20:38

General

  • Target

    88464a9530de218f7e50668449b80edf_JaffaCakes118.html

  • Size

    36KB

  • MD5

    88464a9530de218f7e50668449b80edf

  • SHA1

    a346061792f34a46be85ff05aa37fefd79f296b5

  • SHA256

    b3b39521e6844930ee92021266303a2d7f3789bd7a22f145958c3c3a621681a8

  • SHA512

    a66ac96ab5012f8a0aeaf5b04172776cc6a2b77e0d5afdb0bab07f606caeb8ab5bc7b83f49e34cefbc44ac1a0a51cc3f31f3f9084312f49585db95e7609f9257

  • SSDEEP

    768:zwx/MDTH+g88hARLZPXOE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56lLRD:Q/bbJxNVNufSM/P8KK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\88464a9530de218f7e50668449b80edf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2068
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2068 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          1KB

          MD5

          e761947edb1c261e10d09a19e311430a

          SHA1

          9c3b4ac61aaab7ef2def86e8e156c00580f5852d

          SHA256

          c9efb2656ea070820e0a3c464ea14abb078ad357ec57b8694f49d2149b132473

          SHA512

          cfb80e152f87e470ff50dbca6099ac11c0785c1f602bd6d40ff947e29d021bffeac754df266133554e6d604be040537d3499ff24886ecded2c387cfa2d5c02f6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

          Filesize

          724B

          MD5

          8202a1cd02e7d69597995cabbe881a12

          SHA1

          8858d9d934b7aa9330ee73de6c476acf19929ff6

          SHA256

          58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

          SHA512

          97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          df40420c0a370356ff563c32711d1891

          SHA1

          ab3da6a7fc22ea82b66132d3bfb3df9d86ef3777

          SHA256

          990ca9d11604c504a8b81c5e45eaf4ecac04fe5d61c8c4839402e5ec458ed615

          SHA512

          324651d2856368fbbeb5d3700bfb453430fb798bbf2094f8876e1e1ef89e2e5dd94110cc904a9ad8038d1610f469d67550555f2488c75f9b74a83ed023964f9d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          21be04672105a8af9c20786b499c7f72

          SHA1

          9dc213287656878845a0777948d011a0c06b1f91

          SHA256

          6a067627f3dd7a2cc1c1289104a52cfd5133fd64934ab4ae213d6aebc592db5c

          SHA512

          65ed8840790da72fd626c0c070930dd5f8bdb7be816051a3426fb72259c5431ec08cf403f0846d98e652a645f7dfb1dd3805384ae27b7af013b460df41e0f166

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fa21d529323f29b201a26ffc680372fd

          SHA1

          0f181e3ee5f10d4da78a3e1b742fd98a2acb28fb

          SHA256

          7066f506a03217c13d5600158646159dc8cdc1d0e24e0fdc33c221a7151f4487

          SHA512

          53adfa38cb3efa0976176f2342709d153e4e3695484bccc9566b38fcc58a0234a4164943809c4fb64bf19c098cb193aeeef4c8dc4ae6295fbfebb724c2883dcd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          675af48a9ed11c332f26191e3f1a2969

          SHA1

          9d87754446bbbe9093af7b2bbcba5ad70209b7f8

          SHA256

          d236927f9d08f624aee6c36f9e5c2c6fed4a80b3f5b6a62a217efdfd4b9f1138

          SHA512

          ae6ca58c3b4a8d91fd48f0f3f9aff5a6d35199c97f6eec84f084cf8d44ca3c86c0bd882d272c28ecffc628eddaf0427ea200a8546a9e43f214b254d75b1a6e4e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e2b0c904f0dc7ea2ca77752f28afd119

          SHA1

          82f76e2e41e531daf10e31a7aac80d997529e8a6

          SHA256

          6c50fc3c481021edf7de2583756e53ef1603c4642ae334adc2d33883c7534c31

          SHA512

          6b3a31be8572913afdb59ad0cd89b22746d5cb8c2b495f1e9a0053a8495737bc3a023a488b99b3407452d279398d16e8a69830907ee529abab2ac1641febd7ff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b0f922d5a9f1174727d4f78f6b0bb87b

          SHA1

          5e0a7b43cc6b7ed12cedfb2491ce5e209b59cc01

          SHA256

          b30747f1bab66c3a12cb3a6403eb3736ff26fe864b83372f233e11c213998a21

          SHA512

          56993d701092237d13ffea06e1b5d2921b8865b83d874d31b1d695f4291e93c96da7b6bc4ea058ef48e53cf907732e83cbafb572d15cfcf20e6e8c1fbef214f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ec6217008d197f43db55e08a11177e72

          SHA1

          cf57c5d1900d06adf3b8caaa09bed4b0c9488d6a

          SHA256

          9ce13ce726722e53d6a2c9bf5e5a42a5e1fed23c9e3bec278acd1dc89abfaae2

          SHA512

          8a65b20b56c41426c67fc23b69bbdd1e3dfc924eba5406890753748eff4b9091e42c8657d7e9fa88d526ad35f520dca4644c6eef3bf2a8ffeddded4a7bea8be1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          34ac0b5accc0393246c5420a46b836d6

          SHA1

          274a2814862192e796e40be297ece460af62fdf9

          SHA256

          39de1dd26a52be7f2ddfa534da9b552c9f56d4c4eb0ed48c727b1c39fb28dd0b

          SHA512

          e8de7e03b4dd1a666fb0fb3cfff6998907885a244156632be5908df4b9494e8e38e13487776ed38169d917f1e127a2e37057a81df1872cc532dd492aa91e4447

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b4c13382b8ca5c8c3a26d2edb375f0a2

          SHA1

          a3845028ff7377c23d167d40db22fd03e80bd5f6

          SHA256

          8e5867ca94a85e24749e7120a171f73ed52c5563477cc85ef2d90069ee4a89ab

          SHA512

          89eb3c4483f37e7349071a96b3997ef8a7292d5b66dd3616df00c1c5751e6e4dcd3ad9912fab3360e28d44242ae5813b4c53c496c0823f49dc6827385b18a370

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d36637c4afd39dc3afe26bf8f2d06a92

          SHA1

          1e0c70640890b02a9164b85e9d7b19e93fba6e17

          SHA256

          5286ebc03a873efe9e63dd484bccd88f920f63e0cd7368c8cf58688905b92f87

          SHA512

          a8d477e03916a90313877da38feb9b0f1d69d770d1ff7bd16e5b2677721cddaf744d3fbafe9c6fff582d61ec08b51578e1705854e2b6cb83f012a66e065a7bea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          141d4045da22e195477efa125ab4f2f5

          SHA1

          b1b1bdd0bac920294f74287ca893ad48dda53df4

          SHA256

          0b43d4d214b921d2c197bc8c5c267e5a57a7bbffe336557074ab36a75b1911a0

          SHA512

          059951876e30143fc5665a3a4079a58d58f62be1fbfe5320cd62d34870edb4962298f635bba24012538a4de20969f9abb7bd048bab38cfb4af1cbe7f00f713d4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          776c1d7dafeaa867e0bf211c044583a2

          SHA1

          9f04032ac1e48f4b873956ca4bcdb29335dab386

          SHA256

          3678eb83b13d7bbe4878bbc4c5f537c85a340a38f144b0dd69768960d6ba412d

          SHA512

          c12e2a71ff93e9404df83175936af99b35bfa0580be9a12762d9bacb538fee9cfd3332b9b395d39da3b0722fdeb1bcd4ef8bb02be9b2619bcbad091ac466649c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d0037f81a20f28805f6757cfba6adcb5

          SHA1

          eca427ef77ad1a950fbfe98ce85dcedcb1fb627a

          SHA256

          034adb03d60b796b788cae138ccd48830026202d03fbe6c43bff7b7bdbcd9667

          SHA512

          08fcf2b4f8d4555d81f8c557d13be9546e2372e8a7c310ba3e7ac600f0f815b7903f95d48f46aeb3b16694aa3a25b577db15d0674d6ded105041e70e37d15f20

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7e847b467153a32b32851a90d0519ad5

          SHA1

          3bac3c9b81ec47f1b156c102c780dbe6b193381d

          SHA256

          6197c0bd008e8f7288826f8deaaa745a1abe8369febf0923be00b1c0b048268b

          SHA512

          0fac8000003136e8f4dee14083ac8c16dfc539c1dd8973b216dfe0589df04b44fb1622fe2af4229ef6c18e7bf74dfc4725f88ad792dcba349c41f3e1d129595c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b8e4cc59b9e0da91fb70fdcecdf463f7

          SHA1

          cd1a792efb8f858ef2ed9e4e65901e8346991732

          SHA256

          72b4deada27434d92a75e0a3c48549a41e9e7737350ce78f3bca62b7f1ea1080

          SHA512

          fcd1cc98f13af0333c3f13a6640bf4ff3628dcbdf182be64cb0f3f8217da4fd4ff7edc2143e6eb0790c0b7b6ec32aea5f58a112077b72e139c08809f571690b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          33824f6ef76f414122486f88d5ab3858

          SHA1

          1ad19226dc43db8900748c06fed93f3b19e0641f

          SHA256

          3fe89cfff36b12412dba168f80dcc61d5f46837bce787a32455991e703e0a42b

          SHA512

          0cb810cd22336c45f12e90e4818b08e17df1cee56c754f3e159798d6245c9dbd48af9dd7c24b9f5a33eb09c954a695bbf666dd9aee9996fb4d46c7315aeda583

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5867b4f7fa14ba35f506e0a532a798ab

          SHA1

          6ca099a172c02cc1a7784c137ee24a80e6588847

          SHA256

          b9b07b18fb24a063ad15687ed5a384e4cf1af3c586062fd3fc1bebddd3f4d8d1

          SHA512

          24a06351d7434ecc63581bdb0fca7cbc59e1a91dba22834af9915c0f484cb3ea120ace9e1577dd042514fcada5d7372dc30ff20251a1217c1e554bedbd9caa47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2f151123938d0581e56b448c778c7600

          SHA1

          3d554c7289fd711678dbd8beaf0992271d42f112

          SHA256

          cfc060be1b0684c7a6e7efce79701773d224cf3de59f5a8603930613287a0cbf

          SHA512

          f983b6689110f5aaf5d9a0e251a7d0d42e29eb8f4524a212363bfaea666e5d590eea90d224c88410fccbbd351fa8deeb514965b88fdba74542c7e677a9af27a6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dc0f9ea253042b0a431256faff406de6

          SHA1

          f992a74ef96d12e1bcdffc705e0a192dcf573f13

          SHA256

          b384c878980998f0c82a7153533ea500342f4f4eaf035823485cf1f53ce82f3f

          SHA512

          bef6b2c0b4f7d484daa7bc8c6d276f62e3db98e7e1620f6ddeff67803536bf33bda608f454daf8ec3afb25eb39865c741b05038505a6651392b7cf55c4c7b92f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          957daad3d647089579924274f952d28c

          SHA1

          c78c98db982ed2088e1c7578e6aecd5216c7a545

          SHA256

          914784a3afd3e3e701ca6e81484eecff287b2673b424551827689cad53ae5c80

          SHA512

          7e9ad5f363889c9cab2742d71e01a9f0f6b3bf7523f0bd4bee4ce00de84b118c02dc488095ed971d5bffe7b635ffa264379b84b8476bd0c2085dad8dc5376446

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6943147c6298f1706f47f7f5ddaa7e1b

          SHA1

          e8f0f36d4d6cc73e033ccd91e352839f3ba59e0c

          SHA256

          084e4bd560526f2f458a4c9d979995a8283d272633b3c4b85f9050b750d47a27

          SHA512

          312813012518c92d88d7dbcbc4ca994f53d94a84b6a0bc4dc86beae88ff6658a98bb1c7b66893bd2739cf48322f81c96cde950d70255b21151f8f4c027a688c7

        • C:\Users\Admin\AppData\Local\Temp\Cab2010.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Cab20D0.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar2013.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

        • C:\Users\Admin\AppData\Local\Temp\Tar20E4.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b