Analysis

  • max time kernel
    143s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 09:49

General

  • Target

    8a17edd49444eede91f37d1feb30eba3_JaffaCakes118.html

  • Size

    139KB

  • MD5

    8a17edd49444eede91f37d1feb30eba3

  • SHA1

    5e6b180b11a3a33a0da58b17cd633efece287c0a

  • SHA256

    6880cb355fdd182ea6ddcd1b18a55fff82df89a60911b2448708bb8405827752

  • SHA512

    7f282fea3e354f805177bd8ceba4730a776088e686a7b433abc8156cdc4f37a50a2be0fd1cca48165d734103abed5e488138b25ced02e2960c4d2e97c655aa49

  • SSDEEP

    1536:ScbUkoxlyvjyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:ScroubyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8a17edd49444eede91f37d1feb30eba3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2632

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6ac04ae03888c401b317c1bc6a4fea34

          SHA1

          42488e49dc8be898e968dd19912611b748664f32

          SHA256

          094f2c1184095b2c106a36c8fcf9c98f618f979788909787c21584579048114d

          SHA512

          af6b11b8ba7dba2fd6142f2852d165ace8d3d25994856b45793282df3c119826d2b19f0d8b37e70dad2c7a1aad5bb122d423ad1fbb07ec0a8491c0db89605604

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f0bfe491b63ca7206493f6e1a8750a2e

          SHA1

          09383e680393e1bf00d4f63ace60e27af7d26e5c

          SHA256

          4c287e9d127c4fa05778a07c796cb19f072df2389483031c315f84c3a40691f7

          SHA512

          d08cfb03c3a4f7a8c0c552c7f3a285b34da0c27159c1f02a9caac4715942836c13f33bc3373af5aa75bd2c5696790faf5f1d1809b762e4ba66e72dd322d70361

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f05f293bc78eec4451b6f42cd907db44

          SHA1

          7e79e3bfa562d38a45094433c07a15401802baf2

          SHA256

          2693da876eb5002b1affd064c6caabdfdc061ffb364a3c953e7910c31c8a57f0

          SHA512

          2b0768942e55e2aed7c303d1e4c32a855d4c2063bb89a475db3130db3ba24213ac111dc0699b56fbed753d1b71d953cd11d1aa28b08ca1117675ef9b372d1ee7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6a8b68405d3c23cbbaee8e8b1d7f3a68

          SHA1

          eb60e8eda0a005e8a7a454ec0c662d9561fca690

          SHA256

          e4cb0cea162c3c96963535c1df1292f08722eeb07de8f77a8fcb98b66549eb85

          SHA512

          b3009f240c0616e446cd9d29f303f3f248146c66bcc7c450123bf63e8f6511ab00b48cae72a765139050dcc6ff3d75dd0ab23d020b6092013e4af18a222db238

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8247169f0a9927a9dc455b51ea01a52c

          SHA1

          1fc12224c35b953cdd4b1164192e61b27361f618

          SHA256

          3ff125ca855872b66b3907179a10106eb67dc19768b80530c7fcabc56be5aae2

          SHA512

          d940d0e080acfc5776a77c02d6d1cf4ff2465c5682b75cd8eed776862e455c23fa855b29d9bda8d3b15e7444fa3d875ec4cc416afcde7b9fbbfdf63c98a7ff70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00b7d0984b7a63073e8695cc09b2aea9

          SHA1

          1e747c1040f2624788b25e6d1dceee017999866a

          SHA256

          05d523f06ce5ed38809c3cf14856fd647c14c7ecff104637ab8c3b0470e2c7cd

          SHA512

          e1135e648f16dc5200b7373f68f512d0ce552fcd8aa47eb5e1891c1203ffc865ba69fbe6f651ff1de8d2ad4095a171b76614999a7199d25d803b6436a504bde2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3b7d6979c61a42f32c2db19eafcb3319

          SHA1

          2eeeb135569d9fbc70640d9aa111b89006f92794

          SHA256

          dfa737336d8554417dd30318c43fc44d53e894a74780f6192ded3c56b390890f

          SHA512

          bd3a135acae6e810141c6eac0b65433594a0417bcb9ab622d01efe082217d16f0996cedad9e1866b18f4bcdf83e2789b8141822252791a807c89ff009a1397a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5ec0192cf3396148de80062e36ca402f

          SHA1

          5beb903029b7b9faca3db050d2f37be0c7b1f510

          SHA256

          8787eda9847a3a133cda80af293f26cf86de7409fac88f592433c02bd6925203

          SHA512

          3cad05eff2e9f563293b3d8fd68a6591d11219e1bb207681205ac9fcde401275a2c3f7422c3dcec4767c165d20434e408a7db10b033114667c7b525f2531500c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9a77be75007ded328922d0102c906413

          SHA1

          b8c47f310193407fb18e9eb4ac8c562044892b74

          SHA256

          d39466cff91674dcb64bd5314b583655bd96800a6605d4f8cf8c3b5cf86bb896

          SHA512

          7c5fac4d951d1041f898668c7b402c7708c628369c82d87351ef91e07d7ca01867b6829d71e2283800e1e4df88c958a51045406947633837288e14da2236fe5a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2b0d52c558a1ea02a313163179b9991d

          SHA1

          74679ba8be20028ac84860b5072022e5b1cdfc2b

          SHA256

          039c3946a7a59b76970407c467bc10e6955ea28dcb7abfd196ee95974cbd26dc

          SHA512

          94846e404d4319c64c32822feaab8807490cf892a17b82161f625fa2463a1fd4dd1135d9688465ba3acc89201c20e34e2601ac41e2f9a090e1464fa5481cbccc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b9e132ae3dd4b81e2bdd13e25efad138

          SHA1

          ba97b1ecee4ca2ffa7d9fed66ef344133e8f917c

          SHA256

          4489530cf165df48a6019850f4eb625ca4fe5a5be31928195184319d1a201877

          SHA512

          eadec1576093cae8b88ebb0bac511e57711994d668595e167411fad4bda33ff7c516fbb6d8c9bd979a9aec32faca1753ce849ec6f574790adc9f134c5c84182b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e8f48fe66ba38d25560a6c6b10903de2

          SHA1

          0600aafd644213b233cb845c1e8432e38ecb57d9

          SHA256

          42dc33bf9766e68890d8b01b35876427bf8e071654ca3967f73405ecc21cbc73

          SHA512

          13005d25562794928028dcbeec8fcded4bcb752e634ed0176e830c0465b4bf573c8b3a5a0bb8e17312ba7e530815a3fef07e1eda7b7c3988a358e4b9f6ef9f8c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          99f4cbe7ac2dea925cf714782d1237fe

          SHA1

          3fc235ac78211cf45e2acb5a2b3ca269f5b3b763

          SHA256

          c37cc0255d84bb0ca8822011c4ac1e3f15f1afe9ee5f073c91a1af878761ac65

          SHA512

          7f141da4042ba0165f0d734078181731e5947dced120553d33d2caad6190054242292afbac1a5d905776b794f18f12b45b7b1361373f1f710833bd0766bc4c0c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          323048b35e4497bb3d1d6a363844bad6

          SHA1

          21ea16fb99007892772da75d387fe8246ac17846

          SHA256

          8e157acb790ff66a03751a4700a9b011fedfce740ac45748b687795658f7afc7

          SHA512

          c0cec42925e01e01a0e71afe39b23f7d3699697470a7d6f1560752c2f646cdd4bfccdd64967d2090af9df32ca436e14c69287c3323669c2f00f953142c06f1c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3fdbac6335d3ae85501410ab18abdd0

          SHA1

          84e4e5e1be5b0d956eca211a982f8faf560e144d

          SHA256

          1ff9767bd571c453b5411049f8682dcf05a7be56440f82bae232aece6155329a

          SHA512

          1ddb7bfcbe68b4c8eff62400db5b7af6b0d3ddac68013b67559119a6737a98da97430bc2e622f970f889a4a3613db691c687abcbc63085d19c255bc9cec44176

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d328ab3a44820bd3c4a9fd175b9036f2

          SHA1

          814c7456fa8948c11a8a7770219b6a90e48acf9a

          SHA256

          898ec463caa76a5e0d285e89932ae1b52f699ea1ce5f2ca6713c4a75deb93c93

          SHA512

          2c41278cf3f8223201886a162d72d25f309d6c6a8fd2971b2ff52535c196dd51b2b36f743ad4bae56e909619407065c3c3e097d031bfc8edd3f7502e77ca9142

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          050c06586a51f2a59295d7f107b76996

          SHA1

          6f8972b4150f300b2d61e4243315dd881db48dc4

          SHA256

          4218c2deb863ef7dbc7c87efda460d94860f7b24d4e4f7f2a80f5810819173db

          SHA512

          045265758ee4832a70bce519ab9f1475efcac80e0a9c2d912e7ea1f2dbd345e7370f9f9a8add94251f6ccb7856831d25ab9794e32a9fdabfdde8ce40bc17fb0c

        • C:\Users\Admin\AppData\Local\Temp\CabA100.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarA242.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b