Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 11:25

General

  • Target

    8a53d4d74e97ad7469f8322da6f591c4_JaffaCakes118.html

  • Size

    31KB

  • MD5

    8a53d4d74e97ad7469f8322da6f591c4

  • SHA1

    f6050e176da93cd50f9cc35b5702c81e09d5721b

  • SHA256

    9e170cbec9a49e72788367a02d6e214ac9c55dcc78682529089b91b6b4f3610c

  • SHA512

    0514d80b2e7160b0f5280bf42fed0ae34dc9b593e8109b860d81a228c1d78a05ac940fe0e06106dd075f572199f5f45711868e853461f47b5309db93f11cf35e

  • SSDEEP

    768:zm+NnYV0VakdJdj67pF1d4l4YOmZu139mJfyhR:zNJ5747Qm1mZu139mJfyhR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8a53d4d74e97ad7469f8322da6f591c4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2272
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2272 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2980

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0fd6df43182d4ecbe6a5ec82e120c13

    SHA1

    abc76a1652306664f157a8ae0da3762caf67222c

    SHA256

    184ee2e0e3d59cfe3652160850e9fb6a5e007d003ac44b90de90a5fa1b215e6e

    SHA512

    1734b390e21aa1ad6e3d36f730ee3551a9b182e247f4811f9f4aa2d1791baf8d8b94b17adef3b6456837414db96f5ea579843056d406872a5bf095f669a184ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26033fbc1f624b006ad1844b89101204

    SHA1

    467a013a51d7a21817e8195ea9810f58f46fb37d

    SHA256

    609bfc40dc35c5fd2de906fef8776abdd9e1228db73b37e35258d015e081bc05

    SHA512

    ae1956511cf40b1fcced47446f31cfe8d13a73e0f1c4b9b9738836393edd66d57731bd24efc885dd093bfa56c4dafe2ad3499f9d04048eff42b5eea034b7cb32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bf154a9fb60faed2eaf35b4238d0811

    SHA1

    dd1033b776b737dff56605b10e9a058a0c2540e3

    SHA256

    b5e4ebab97be1c1da01f95d5754d1e5d4f1bdc0979f548f14c8dd40145a2eb9f

    SHA512

    20881c7152074420a3543a1d2639fdcd8db4f23f9c52a96a5d999dc703e0378122960b6e34c1f30070ba9726ac6393c42fe2c75f79e6d92802eaa71d837846ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3afd50df07180a8eb0cd28c18bda1514

    SHA1

    129f530e9fb1f5653b12d70b51dbe648720fb2d0

    SHA256

    7a6b803f94763d1bdffde9be5846c68be4c6429439525d4eac339216a1b46985

    SHA512

    ff376250f6673d1fa887dfae07654c8fca089f9ec38a4eca1595af69b132ffa717302efd0f919c976d2ac431e01a75965eb400929c81acfb08088c00d40e1c8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac721e2c14624c2a9343b0cf7a5e955e

    SHA1

    98cd8cb4c4879ba9b13418ef4d5e8f81dab153b5

    SHA256

    b6c24f77fb8d12b62af3f4dfaa4ca16723fefecf1c479a9323f25cad4f56a107

    SHA512

    8dc9b8796a66fc6d0693e38860096afdc35dc424aa505397db1d24bd158cdb1d36358ba2bd2211007d0f3bf882cb8525627f6c3249eaf1a51eb3176d29a43a44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51ad04caf08900528377f34878f16c38

    SHA1

    fce82fd91aeb119045739b9620911bb0b5027c5b

    SHA256

    7974d1252a97f64bd15f4f86ea6157faaabc6c1a242f17e8df2ab5ae6e1ea28b

    SHA512

    2f0856df12565da91db7651d5184cf2e9dd257ce33f235da08366ae923b4e024277cf406c85a8d8827e44dce6ffb267e58e408e2a9a7fbd4701b43ce9d9f5c96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ca941e308b2632b23f455f571ef141b

    SHA1

    afe59f2a8580a19208287cb609c2b4e5c1b5425d

    SHA256

    55c74707f9589ad0f6982ebd6d18e29dd455a58874cd23b27059cf295a4d9795

    SHA512

    5613a6bae30fbdcd238760dff569e067ddd7d226fba6dbb98f246dce4083f3842c0eb7105554194c31f5b00d14c0f731a63fe2fd0e98ea08d9c3d2631d137e2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6dcf901b3ef03a858c89c540bf6cdac

    SHA1

    6e81972e896d21e5ed675407b9ed195bcaa0aa7d

    SHA256

    c640150693f4d9514e3e1ea95b98855e5d70bbf4763e16e2aead22fea8b70525

    SHA512

    170204adf626604701844993d8b510f27cdf04f6aeced3430af58840411f6788c420aa07cc692c36b6c8d869fc38ee8327e531ad05aae846733ec2863a411306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d05b670459b4ba8780a867d6c0f63fcd

    SHA1

    7328af1c3331076e20386ad7793e87bf2738afb5

    SHA256

    153cb8d651460c2c6ff5fe07b3c26613620c5097f08b5d81f37dd792a4afd522

    SHA512

    22659ff0928c205cbf2cfc687e7267fdc3e9b306a1c7ab322d320975356095458189c6703e8f4203de62e292de0011e70d1b8406a8f96dc78a7be27b0390f583

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28d067514d871ba01002270aad154ab7

    SHA1

    9894522a8a9831b7dc5a8e8b4938a163d44a102b

    SHA256

    57c707b914254eef21b67e42e7208764ac4f39a9327d74099c0abf886ad6db38

    SHA512

    1afe43a69bafb5531a84fb46226ac795e86349a0dcae1ca821616cabccffbd6fdedd076ac06ec400b78b6224c9d4524e5773f72b9fb577745d8d683ec0c16ac7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f382294d83e81a752d55af2555dcadba

    SHA1

    ffb7b5cfeac802121f57a9d194897b71113f8882

    SHA256

    6b992191d391b296d9a8d1931dfd48af5afc688672e4e911cb97f0042fab05ae

    SHA512

    17205f48105f41aa37ec5a12df1e3a755873d7d3d1342c6150218b78a98473766b4775bfd5622d2f041f4c22306b42a5d8ab3971c6089b34bab0853f81944bd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c43e22e49e17d82a122af31e919977e

    SHA1

    2ce26252b19752800cbe61a7440d8b4e0322d4d2

    SHA256

    d82ad06f7e7af879710e0b92da3734389c1960e8806d6c445d6105cc5d4d53f4

    SHA512

    1a2522939e09b5db72f97384223bb153d4d7717c569a48f57906e3d7845dac673288febfc6e3e1771f4b75027dca7a22b02c701388e10d4c436b527974b8e010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1ad1b94c1b5ea66cec13561c0a10674

    SHA1

    a9053fb8e70ad070339c3ad58c7d15606e2a9e22

    SHA256

    fa7391ce9359562ac6a21e5d208727e42d29b65bae83a3c2875140a3ff959e04

    SHA512

    abf314623f2e21c3fbbf80422a4f2dfc58393b1c34178f0386912e938d131c577aea8da57163cda5aadad10fd46b04cc22b0cd43c9c1e8d9e12d08d57e58c4fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76bbe385518036519d3c2307a5aef701

    SHA1

    e8ce6c4ccf7d1ba6b8db393831a6e98a1319fabe

    SHA256

    3dabc42125bc3493e34c7c1a42e3d0085d876d2122e61c3690d2f474f0f84152

    SHA512

    21160c61ab12c45149c162706614e56533892107ebc1d00bf3278a271710173310029fb26bdfccb20c6593fbb6f4c7ebfbe36686e891146d87800b78ccc6f464

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4154062d4131e87a46a6a6b26cb2f68

    SHA1

    686c2073eb21d34ed7c5d8b8625cb514b6a14e1d

    SHA256

    ed5f8e6d11c34fa3ddb44efacc4a1cf49867f0a333cf28f1cef1bee70974c85c

    SHA512

    9de197e4aba3379c33d37db40e365bf7994e77edcefe9e9da2a12a9045053c43144cfcb820263f2b6f314b9a945d95ccd2835cf113bfacb7690c51e2b45bcc87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3945cbb8f2933e37d1c033bae1c04c7

    SHA1

    f0e5ff8fe7bbe9a9fb3e39b3b27cdc3f8267b0ea

    SHA256

    26274761e192345911624ee25cdf9ebc0bced18ddb2cdd087d827d14a532504a

    SHA512

    cd08de48b0ec28e10964f82ef4bf671c01320f5580074c4ea120697375eda715e6f7b6aa910e6ed739570d4eacecea7264037521485c951b7a6b073b9d3ce85b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f468944bd728dcc7e057191309745ba

    SHA1

    976d988c4ce68924d027b1bb2ec08ea8b62d67ff

    SHA256

    59d224546e672b3dcdb73a258576df217b457c8b81792a7f71ef3d6ac0a5b7a4

    SHA512

    c9a631b073ba55bfeec12a988fc2d7c76a5ea707986f338987cae9ebb8cd03af6b3d29f21d9049cfcd1216aa3e28024c49db90243f1747c5ac40f161b0040666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70194aff83ad438616818baa309f2dcd

    SHA1

    d840c4419bc81c76ad9438b798274c4a85eb6709

    SHA256

    5e3778ca9874bc7dd0a5d7c399c66900c2ebe4fc0c301d4f894ef585fa083653

    SHA512

    b5f89cb7f424517fd05bf1df10183b85b33b0f788d13c3c7cd2e91d3ae07df061b30cdfc8167d43ff13c52c2be0491d4f587ea8c34c599f1af45b4ffc7af96d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0a6c150018235596b6fd669dc897513

    SHA1

    16d5c08e984ba52666fe4d493899bf3b6b380bbc

    SHA256

    da66a6637ed27265387488ae630ebbfe89b54d197661eae0be053f68d9b89f83

    SHA512

    b02f58eaa18594aa66e68202bde42d4c7d7023d76058e940efddb23bf4a97945d68805ccf0146db5f30d9907e959c22445c3aaa41ac5bd3250e530a788e886a9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MPR7YYBV\jquery-migrate.min[1].htm

    Filesize

    166B

    MD5

    3ea1c8d079b38532a6e01a96216ba5e2

    SHA1

    598d3ff91d3e252f1e13df8cf0348b270ff2da3f

    SHA256

    87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691

    SHA512

    cb4f800a735d5ec435844ac114a81ee6c4a429138119b97f2266edb87cf729f1a64662190d04917ce955b0bd3681610d49be42cd6782989ecd4b0d87ddf8a03a

  • C:\Users\Admin\AppData\Local\Temp\Cab2F0F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2FF0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b