Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 20:47

General

  • Target

    884caf131e9a446199b5cdedda148e9e_JaffaCakes118.html

  • Size

    475KB

  • MD5

    884caf131e9a446199b5cdedda148e9e

  • SHA1

    b546a00a479a741d77ac19b76f45d6fa87c90bcf

  • SHA256

    5b623937f25503f31489e550ef7fcf90209c7c0aec64b8b5a3557f9f8bcf0657

  • SHA512

    428db5a56c4419d7568a0aa20d747b44fdb764c850327ea8d3046207c1ad699cf467030a2b53bacb4818b142b3911d0136694f5edb01f2e120ddafa25953c8df

  • SSDEEP

    6144:SWbxsMYod+X3oI+Y6tvu6xAmzM86P5sZpMFzBtug4r1GcFBU/b:Hp5d+X3poCPuzmrugwG2qz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\884caf131e9a446199b5cdedda148e9e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2324
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2324 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52d74774af1e6f31b0ae7390c5e7fc7c

    SHA1

    19a714b2fff0df3de87e63d316d54cd3912b7580

    SHA256

    0a5616ebab0ab5a6aad6e204e8c553ecdfbfed83a36dfdf5403b819befe77723

    SHA512

    7cd4d3f90fcbf5f2cbf199a69f89550095a540507d9481587643762a9a09cc932319b62326d1d11283968f5f4a399ea3d7fc97ac45a59514a9edb86c588a238d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caea960ccac01e19a103bd7963ba3402

    SHA1

    58b8f9e7e75e0c1e197776aae95ee8c912a72ba7

    SHA256

    3fcac1fd7665e89827f7690b777371eecd9661f632c51dbb4c87064a49af13f5

    SHA512

    01c1cfa29536e390a11e2227adf2d394e7444dec3115fb58f1a2e584b6618a3b609f5e1d0088e4854ae976c26fac449d2e0a0a6430f611c986cdd457fec079e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    989a5571cf36d8390805c2b033f9e6c7

    SHA1

    7e9be610d93e0fdc54b3a5d78b0177d3486db475

    SHA256

    8983bb48cfa99f9d1bfe3c00000137437939bb1ed0a7710ee11bab6c37ab584f

    SHA512

    fc3a1200053b1aad5fe91551d45640ea1fed051019e58ff11f52eae14e91d82f737640759d57ffab8526c15fd69faa5827c5f458785e647258c42ade19630cc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08476b00150f5ba0853fdea36da2e086

    SHA1

    abd052768efdf23f93501a9bb67668df36a3ec40

    SHA256

    4150fefcfe34bce4865e6dd6f17013ee1161f1f59720611d854d56b58e263e40

    SHA512

    aff106dc721c4cdb2f298ff0ceeb8c69567bc8b42ac965b9c0e8fc16cee05cfa2b6c80c5758e5552d4f1122f0b43a7a0f63f0318e43483ac990701bbfced80a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68040d20ab130609454ae86200fba32b

    SHA1

    53566451b0e4a1c1c08f3538b9ac5e2f1a85884a

    SHA256

    27195f1a086aa035516ced0a9dff2b0233fd410a87978a6bbd2cf967080358dc

    SHA512

    b21e0f581e55ff2a5965c84b527d923b11c6e5c480fd861aab3a33834c9f251202924cac9cdc46570c7791544c4205ac4207f9193e9d480ba8848b721e291aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21e49703ab88cca72956e197ba8e9f14

    SHA1

    744b60a09e990db7b6b7c08f394b633353c225a6

    SHA256

    1d0b1e87faed57b97e2db59c4e2e439dcd8a53d80959d1944bb91e91b8725fb0

    SHA512

    db1edb275a53fd825df65bdb1c71d01ebed765121f57f3bd4d8a3a8ee8713c84b76c982ea87568943a5b7fe5fa1f2d54b6e86ddab2fa0c0f18563a1326324d5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    703f4a3f9ef58186beb908b70817674c

    SHA1

    de1d9e9f9783844b87c2a52b035221f865aa6d67

    SHA256

    9d6faf0037721c09e67052e469cdafc503fae97f77a1c069c852773b553cc796

    SHA512

    5f9122ed96ff17c75f6f33aa3bba26290a630ab8755e01efde8f7b05622860f4f22c894c529acaf04850671d0dcbb0b2209cbee5fe82ce7ad24fc4bf138b1dda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    483c9aa9c368cdc2015e88a04a696a97

    SHA1

    d2e81cfbf79303f01879b3790bc6966860a7bad5

    SHA256

    527a0011010cf5dff2ab290104e9cbdcf8218dd97dee2f430e2891e87280d14b

    SHA512

    ab6dcde68378568d9968a9a568423cec6f0331a604211a910b6f360f0026fc6bb61f050829e4d26ee2e42c0a111f8ec35d1b2278e72d05bb7fa85a7c60997cf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb2177f1d364afa3d76748298713186b

    SHA1

    2ac29337457e0a9e25d0187a48f8a5aaeddc3afd

    SHA256

    7e566a1a1a88a20f1f34ffb7046f9599bf60b5a4d46039ba147f0d5710c1c8ec

    SHA512

    3f3d3a358b6ab34a03fc427f3ed37bfbcc58b10020c651f20171ca0b0de7fc5d9bf7beebfcf8cca0999c63ebd816ffe61f7255ee73c4fc58e12feb77cd16c9ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93263513939fd733e1674ea95bc79e88

    SHA1

    694a1d5526febb3bc30fbf2634d7cd09a46f46e9

    SHA256

    bba246203de232c94711a0cda9c3509e1ccd3e5c1312e269cf7c1961455aedcb

    SHA512

    906edfa1d42724c3492f0fe59e3c49621fc8f930109ac4d6ed04b52623b29ff02fe1f6735412ab5e55ebfff7018339f44ad2b6d8b537638068d1db9c12cc2479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b00da242f10dbb30a3a8219b1bb3fae

    SHA1

    dda6716df4a963adfc117f84dd15475ba4dc424f

    SHA256

    f578c8cd282082f65c305241257679fca8bd9a9ccb1211b79d7d603f04282e50

    SHA512

    e4bfc30acd155398e8d3936f824dc9aaf4d32371250d90afb309daa49687472ea3e408d22e6745537137a9a879ae19150e9f58c1a3de7bca623218e423af6c46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3fe57a7951a5850b3ec641db025804e

    SHA1

    9df1dfd1d52f072c708264eac5613acd4e61e8bd

    SHA256

    464c9fbd4683483ebd2980a2b8bffb84679d2a54ab0b06a6694c447cb3b533ed

    SHA512

    bea97009b767832f7a0631d990759506bd54d616860cd33defccf3fdd72ca392d778c121cae1499d3c13780c8e035aa6ef1e179fb1a5e22d9c83b8b242e7ab57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb3449a5bbeea2ace126ee06975cacc0

    SHA1

    a5820a162b58dec48527ecd0d42b0ee4f77552b9

    SHA256

    bc0b7b718499fbef09645984d7dafcaccf4385903e07984335fbb6810c5715be

    SHA512

    b12d58afda4ae063c7d6fc714ddd9df8fe33d0f66e96741e12cd0c18acddeb30914bf0e881abfb2859f1d84f1b437a0701e50763cb6044ac5d13091e886e145b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    499ee3a3922866200a2367f8487ac0c7

    SHA1

    e541cced660abe3f44995c1ce30e008cbcaa9b26

    SHA256

    f8984cee2d9c032f43e1aa245ffad9ebde2603797d9050087aedec83af88fea8

    SHA512

    e4ad761700aaa3067aa592aec37fdd815ba4da2dffd1124739593b814852890b56f3bed26215b661184e54a00ce87a04780a7bcc3319120f1bcd828377eac240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    455f132b814ab95c1468036334f952e2

    SHA1

    d9ddbc1e6dac4f7500cbe86175841da87bcd3aa2

    SHA256

    44ef410c8dac0f75a9496341486e259269cd1da807c0e1ed98606ce82cd025d9

    SHA512

    9e22b063c69705998ec4fda237a2de3a095a70bea1478e2c213c85f57d0ff5dce5a85783b1fbef04f760d46195e1485f06667c0fece27e4caf891e693a63ff44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0735b327792e809f0c7278efedcba5cf

    SHA1

    9b01ebf6c6e34524f72022ad19942517d1a75224

    SHA256

    c08a2b5c593d8a75144cbbbba1c5b4b7059c1462786a120726dc0aa34d16f367

    SHA512

    b9014842bd8d347f2c42a6223861995b15a56cc76672a03595786f21d59de16f77ff00ac64085564c56950eec3ee8c57cc4baacf46be846ec5a898019f67c86e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02527533600b0ac8697a39c2ae7cb43e

    SHA1

    b8261dd8e6acc8cb05497911d22838d4002eec66

    SHA256

    4ddc5dae24fea02914da700df4a1d70549bafa0cd37bb128527499842dd9b1a9

    SHA512

    943deafb35ca3596a64ff354357426ec91fc1b75f717a7e45e0809a4c6d3871c153ae4a9de2d32225f31d7be0585483dda5ca7f080fc334123cc915a43ccee9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    939c80da1b24050df2239fba23e51aa8

    SHA1

    bf1374cb547ecf147985f77a3c52c5aa211677e1

    SHA256

    1dbb4af025ee0d883f87fbbf9b3d73c6805912beb23c009b9e7b2d327e505557

    SHA512

    9e798481114b186f455ee284bcd55a5fad49669575057385714731d3a4c151b8e6bdbd86011eb0e5b275c41fbb1788b33583a764cd8f58797550e51a82cb825b

  • C:\Users\Admin\AppData\Local\Temp\Cab2BF3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D13.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b