Analysis

  • max time kernel
    117s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 03:29

General

  • Target

    893e9ee141112c44beb2dc8678a545ad_JaffaCakes118.html

  • Size

    62KB

  • MD5

    893e9ee141112c44beb2dc8678a545ad

  • SHA1

    45ca92546901bbf63cd8b2737c3c7aaab4191286

  • SHA256

    f34d796e1efe95da93453bcc03596d9c5df6b891d243630aede239a04d2d0068

  • SHA512

    80fcfe9b74311ce23ea7fd768807ebd2304c60cc862c430a922200e6fb21531c33ed10b7df2ac595cc706a309a809ef859d5450fe9262aad1ca41a05933a3882

  • SSDEEP

    768:q0a0D0XVIFlQqI155DVwaLV4dmXdQTHjq5ezy/piddBlLa97CGMJy4Dh9ZMVRIk:q0a0D0iPgDVwoQTHjqAy/pi64Dh9ZO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\893e9ee141112c44beb2dc8678a545ad_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1196 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cad6dce09de7e2a6c0821e71c00373c

    SHA1

    66f4751efe27b6eac5e1844e85efbbd44209886f

    SHA256

    47fde06ce9ab747a100acc917ff9adf6f9dbd36fef2996350ad49aa99e1e8cb6

    SHA512

    de412bc6c573a4c9b8a8d9e4ef8b326c50acd91b71c719fd22f2dada62f9d067d808fe969ddf3a44d1686c048b9126682e55f1154bc4d4a9c49247186362342c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4880a594182a889071656739f9f10bf0

    SHA1

    a8f9c542ddb5ea0f705cb3454086aa09ed037349

    SHA256

    cc0e57ce4443d48c346b8c64c112da253077472e04b9f82f2529e35875d8ba13

    SHA512

    f247a8fb759367c40c1f211425fd07da9bfd3d53dd4768a06faa76270b78e2f059f87689123f36ba2169174ee3bcc6f7817058c8e41690d4b1208836af5a6df9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcecab6a6a8561a9d3749cf619dddd31

    SHA1

    deb44ee4ded16b723519a563293c766190b0870b

    SHA256

    9e2b2455a22891dfc78d69a0b183bad95694cad05c34daf53ee2d270f6e5bf21

    SHA512

    0a5f57623c48098064bbf6adac67d27ae80ba0950b3112707d15b406d2d4c360edd8c582f662b5ca4100cd4afb155e58510d98bcc6f6d45e264dedbbd85b0965

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c968a14421c7f1895538e2bacb386393

    SHA1

    f8eca46afb8ed1df4cc783e78c4d14e64266de44

    SHA256

    d563b684281fb9038d7d0cab5ebfc54bf1cdaa4c57e9ff044afa0cb050d4c173

    SHA512

    bc57308e73eb9ba04cbdde25dd498649dd6b2d3462946c52bea04bdc3ded27eef66527481c5db569a39db31125637114f66aab524116d57bc5d78ba56c071ee0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caebd94c5a90ee093abf521435751809

    SHA1

    e51f62ea0086ccba3a77b45e6af64d061c563f25

    SHA256

    fbc38f06acb087b1e96779a495a31911a1f01b455ba6cbe993896b3e461d41a9

    SHA512

    2821bdd6b58f0bab37a0c252aaede2e0398ca485cbc288be7651a6cb9c199bf3b7c569124a7b08eb59674dad0c4debd2faf614b932e758031bf4e8fbbe229083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac1c71e3ac85f5ff89eba436059690f9

    SHA1

    f5adb25b7e1319c8e8f3a66519deee320dca66b7

    SHA256

    1e635910e0838d7a9030198f82cc2d685b815ece97721744e5c9c0a50c44c6da

    SHA512

    6650749c75f1199930b24795cb09908388c0f3f31e6efa2239c9e2d5dbe94987fce8b5adc20cb39c1e1b845b25c3ffd75dfbc4dac19ae5c3fc91fa1bfc0455c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d3ad3f9e7b27ae2a1c8ec8c8c61ba54

    SHA1

    875f03b7e083a2f616db9ee2091f92826ac191d2

    SHA256

    b7ab15b357fbe19c37675dd89d71c0e9af5931d553a7daeb7c73caccb17aedc4

    SHA512

    068b40ce58c5f7b784d952cf365afd989cdbf5f2f87fab5759b61585ea99db0155aad673229d9206d6762f6631a154d7d85da3e5962ae2163f3bc0e7120eaee8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d758d8cacaa5b2de883d30e4554f7ef

    SHA1

    13d268e2afffe61351de0b62be13aa1a7557d4d9

    SHA256

    fa227b04f020400e493daa93d2e8c7db8dd27aa28433748a8dd907d46b5ad689

    SHA512

    0a2f194e252a8bf3460f46cac6e3e85eb776a261cf8cd6251fac880e9a45200b76c2082b416942ff612adedf8ab69cf14770fd4505eb7a3e04f273c2c9c627c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2779005103713dfea0bd4902d2866e2

    SHA1

    cbb129cc02254130e954d27bdf827c2cd1de52ec

    SHA256

    3f82588bdc53d70a65fc04ee9968c3622c960ba2d6a9297ceaa68f82cfb76b54

    SHA512

    2dd8a0f4dd923e1d1bc2b545f9d52cc1c6eccab8e75c4c0dd697055822e5952f15360cac5e79a20100a397ea8cba11ab9c617a3d02240c6c810fcc4b7ad96d77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d095242ed8c61bae1fbbc46fa2d05722

    SHA1

    8091f5bc630a5b7a8d1405f35ed3b2cdd3ad0072

    SHA256

    367bea3070d3d90fea6855b42360ad1d682776fa5a38b54231b02b303f722c6b

    SHA512

    5cc8158924883bc849ec95bd4049468e67ca514031b5efc319440ccceef2a9124f77af0cd47715798f8fd6fee05c826fce0cc05a08d7049141cec1be1a13b60e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bf5a1670eed644e3861608fc6ba29ee

    SHA1

    81946241e4eac332299f30d959a3782e465e475d

    SHA256

    1f55e1153541935d4d829cd570dbb3f934c9b36fab250493fddabe3483c8167b

    SHA512

    c35e9b7b7076126b71d1736ad9a881d83249d6dd38efb0a9aca446364627a12d32e8023d8c840eaafba9142feb97b7d355d04f9508f6c45d31bfa446eabcc2da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3be1e5968e085eeaa0b7108038954a5

    SHA1

    ed379b79b9cf534079b6180f1fa6c0d427f20e50

    SHA256

    2267de8324eaad7f4bdde217bfc67958c67e6880837122f4c2b7dd80c624a0d7

    SHA512

    8776856b74102a5568f82b557ef3d5443a4b2ce6bc4922753ef757b27db2323da1ca4f648de807836c85d73a51b977efa5725f65e847f987b8412ffbc804ef37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7754ecc58dcf54e4873f58c48e8a3a3

    SHA1

    f9f89ab48c40bdaaaa466963a207f52b3e8c7588

    SHA256

    65cf0392777e42844f80e47c9ce6232afd84ec2b091fb18ee51882c01e32ada7

    SHA512

    da1bd8beedbaf9b1b5233cd89fdb5899f5b15bb851b6b3a70e49207754fa6bffc100ff233e80b5618d772c4f2b05e77f64d86c57d2e83f583b48bda302419ea1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b535b3cc17f3692fb79341a76fc00ec0

    SHA1

    485b155267dca3165c788d1652f27e0051558cdb

    SHA256

    2e1efc0b7214d86874216f2f1e6618301e3d1fe16ab1e35a8baf2639b20b34e0

    SHA512

    7640d08c9823eb8c9a5d7a69ddb1aeb13e026a0c0db3ec92c81c5eba524ff900018a1b8e26539c83c3767d9b371079537bbd3d4b2f06d6eac06d71489ee9b7c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    607bf1618804c1f5c194c2a2da8f08c6

    SHA1

    ad8e9bcaee5aba760e2d9cc948571ba39c144ce2

    SHA256

    95ad692dd07af91a99d02455efb19e1cd4b52ae117fd6a2da7aafb6c847365d6

    SHA512

    8a9ab5587cb6aa38ecd1399d0cd0f2ef5c486f8f021f8ed6caf0fde7736c50c9d7ddcb93ef8d4d2436cbfc5a8b5ab2552128e9d1f9facf9c2ff8fa733e9c5d0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4abc21f0c70789dd33813555ec77dd1a

    SHA1

    eb81a46aef98c2f853976ab6fe8256f98b2f8707

    SHA256

    3472b76ce511073f4387d2a44362ac8cc59ba10ae51ea351cb0997b6cc31759e

    SHA512

    ccbede97ba0282463d3d34b1e22437f4bc1aa4dc80e4e08a19cc7b30b034b0278cb9a67fcb550e345d8454ef068201a8b3163117ac63fbb1963e190245a5c329

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d02a221fd35eebb28f7df476e0ba58f1

    SHA1

    7dcf05b46a77750b9e720ee76c9846fa502eec81

    SHA256

    a91a27228c7585d433a2abf46fbfd85870024bbd5446672eb53373fb117ef841

    SHA512

    a2f048b803ffd73c7c495fedce61224c2f2aca0fe19a5611676b56b55f4308940ef9fb7ba92695c447a323143936ab32fc24e65091a232ffdd4aeb682eb4d01d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9fffda559ddaab3485c87ae0f7451a6

    SHA1

    9891fe4ec45a2531ccb4819c79f7937ffa8e50f7

    SHA256

    bdf75625730e27e063d795ee7d0e6fa173d6bb4be06b641abe22730cc5fd8f64

    SHA512

    959e2f5993fc702aeb8c665263e611c56b65274cfd4e5f0dba0bd2ab49ae12b2c9726c5e467dbf6dae804a437d58b0036a54efbb75da7058d3848f9abdc21494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a587dce28ec824d21582943f4ab483a

    SHA1

    a7cfdc17fe7397a4505bd5c26157a86b13449191

    SHA256

    dba0c2dcd077716a6e3c9339892899ddf9dcecd3d13284ecf370281751058a21

    SHA512

    8e82e7a5145a58e1e38ee24ef2b40eb358a191659acf90bf2baf9a92d7eb0e1444899a596a4087f6e6903983ad6814693ef6ac7a18c3d51893acee5403b08d5d

  • C:\Users\Admin\AppData\Local\Temp\CabB202.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB3A0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b