Analysis

  • max time kernel
    135s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 12:20

General

  • Target

    8a778f63e6fde6f02c4e13ce2282b71f_JaffaCakes118.html

  • Size

    461KB

  • MD5

    8a778f63e6fde6f02c4e13ce2282b71f

  • SHA1

    637b34049ca9f398bd67bbedf344a19f8d49f2f2

  • SHA256

    b8d068eecf1ce604bd5e6902e6266dcae3ed3cd305eafbc3342b8b22eae141b2

  • SHA512

    eebb6582c3ff72fed40e4d033134cf37858e69fe246587217d6af37f84fcaaa125c49f99f72e579492b1af156e3a598b0dd1237b776befeef6248097675eead9

  • SSDEEP

    6144:SysMYod+X3oI+YoQIsMYod+X3oI+YYsMYod+X3oI+YLsMYod+X3oI+YQ:d5d+X3M5d+X3c5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8a778f63e6fde6f02c4e13ce2282b71f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1520 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5869353898c8a869d56b260ca0df8b7

    SHA1

    91c191899189009163f192aa750e0ca95d8f1c4f

    SHA256

    a8966570b925492350cf57c51b53dd68527e2310d58d2ebaf9ea49940a82b544

    SHA512

    c2d6daa7975b0c8ce7b41a804f80a016dd4bff20b0460d64368407287cf1c5b8c31fc58c0e88fa87cdc911c83f77aa734eae8ac3ff55baeecd9812b37dd16895

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d5079f1c7673e7ab3eef1c873db16f4

    SHA1

    7b61ce813757e924a8771121d9abc71aeb746057

    SHA256

    a7739b512cd44877fe7c496475deec01d57b3424c5b078808be436e9bcfdbb80

    SHA512

    af6e4ec7580094932e6a720f73ba4f39c28069964726b3d3c010e3760d3153f8647152f588ad3f3cbe21bc9d5dc347ec10cf8cf6826731a56548b174182b7f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72b70c14c0da98794915fae97f627397

    SHA1

    a76fddf235c9e0f1c59b42e5994d0f7c1ad92282

    SHA256

    e72fcbb62d880efac15b2f5039b359f3d35b591de2268cc9a1188bd6c5bde40b

    SHA512

    2ff3aef0ea44bcabb6ec1f1311043f0b826d5f36bb3a01328a83bbcfd6b8c4c3c79dec68a1e5c8fe0e8883549f1e94958d8dcf916b963620d4a5758e1aa6cbb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    838d99d1db9071c6faba310a24e27a09

    SHA1

    fab498722bc78356b0c60642f393a5dc44d83af5

    SHA256

    5488b928a29f4a3e7b2ae54cb726321d91834d9f13b8018a17a9083637b73641

    SHA512

    df96f0d6b8f7cab273dca2fb9a4f30ab2f34f8556849e03acea9fddeda8be74eb1b228d177d315e2af580f93cf90e1d4a2fe9166773332a705607854291021c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e29a443ab1c3c596977d51d70f12f0ca

    SHA1

    d3d4e07b107fff03df9b8add42543e855d5e8fa1

    SHA256

    5c0b4fbbacc824afa10d14c7c0c4188639c006966d2f972833a71442aea72054

    SHA512

    75f00c4b1b13b28f555c297cdce34e39cb637ca08db870efe271beacc813bfb85c9b6b44d63c3fef1a140c8fb643f28386f0405bc4dee3a83b045bb1c186990d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33e1bf4b34b2fd1c9b4da38f95eb5025

    SHA1

    608b99a115a0d12fcfee3461d18a8192de6063b5

    SHA256

    c7cec11e79c96c28cd65b42f54242d04809cabd3525c95e3c50246f93ed305f5

    SHA512

    a466b358a1c8a5b023081751b3a3612265c8277094f571694cc038a0fe70ba4884634b6ad7a964bf9518b9de3aa569cdbb3bcdd351a5bd264c480d41d7aaa86f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85b50075f95875f8cfc5e7888a54d4af

    SHA1

    dd979f662d921dcebfebbb798808b4a25d704507

    SHA256

    92b5835bb4529cbb0a5af451c73692e4e464e4061a20ee1328dad96b335a6427

    SHA512

    9b373083c484cb146161684ebe82509983022908cd067c32369f9eb1326576bed40ba4531af67ff27998f0db9eec0c50acdb42275bfc2f9e1e3bada5f88b1546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4bc345b27bb821cdc86888756a0987f

    SHA1

    8643d81f871a0ca5be85d6a77381f14b60c20840

    SHA256

    1cfe6e4cef37a910ac3403b7ce4fc627e37f3831faefe9a7726522fb84fa9b3c

    SHA512

    faa60d78905e0d7d60c8c9f137d601c122626deed317cbdd88678e9a11db46ee89982c78b04a4cb3b1d42d0a50409b3664cd6102433fd0d3146ad51bfe23ed07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee2dbd84cebe8846c95dffcc1d638e6a

    SHA1

    f3531ad4df59b33687f99faac149379fe7728f65

    SHA256

    6ca8599032526527232b4db39e279a5615f52004cf1483271c82686214cedc70

    SHA512

    032083deec72c0bf4c1698b58aab56fc37fdd4814890cccaa8dc6312773b4014891c762e870af0ddd39f91d8e5902ebb07c47d2044fca2105bfc6884625402d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    834fed3c23ca66c6bef5e5e3d18b7368

    SHA1

    ac2c6ecfb7f4f4f99ce3ce0fe825e43cebbe46b5

    SHA256

    d4072e991b31d41da19c74a450af742d701a1012acc37d25155ce04641379dc9

    SHA512

    cb27606b5a2351b4326fd4e3ff66d05879223bc740531388b8f6637cc62061c48c84d4b4fc146ced8acb527c2650925c43a4731e2bde55ea6458bd9e8b5a32d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53a0d4d6e9a4382d060e7046677cfd92

    SHA1

    074e7033930ebbe5b36616789434be00b7c7b791

    SHA256

    a0109bfca74f92506dca3fbb49d8f4f3fea774c124faa3cbe7dff8c142908782

    SHA512

    c5bb45c7bb3b96cb24d4728d0e9f36387419ceacaef75d2883942f536e2b3bb506f1df01f74ae750f38bf17a42d89b69f215a0abca09abadf963ec316d6605ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cacc3de2078699b30890aa5628c55f2

    SHA1

    434b4815d53a96ca71e15386827a5877cc7ed7b4

    SHA256

    de0ef2db8b8dad07c7aca243d321e3c08eb386a8a0751e685fb21899663e5b39

    SHA512

    6fcd6dddcfe2f850116380f75c8bcf2bf3216ee74a19982ade0f50a707dbf8885bf0046cf8defd6c33e1a29dc06ab6d2e2d5374d526952c9cb769e4e2c8ad430

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d7cb376a72ec3dc1669ce317d7c9fd8

    SHA1

    3d2749d3f0063710cfef841551c3c9a4d30685f9

    SHA256

    97a64f6d2f792d29caf33e6839b3919130fdb581daa07ad2429bd4892c53e21b

    SHA512

    ffbd3f09c738757981e4f05bf822fa27c6801c1edf05c6feea7e2600807906acc897cc35a1dfb0fbaf8479af0ced97c76db5f110fb57dcabebf52276963f080e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f7be6e449c0457fe8bdf3590fae01d7

    SHA1

    3a67eac3428b30d49ecdde54cd55171f88635ad7

    SHA256

    a475180930c2d8d65cf8a2499130aa61a6502223536748723bc74e0a01ca40eb

    SHA512

    367270e2f0d134e06c0d24c19d731d71acc0d8c8c3e793b7e7d42a50605b8f095c2d22de1829b639187e1c675e7aa73590c09ff4c9f6228dbd20b1c380e77b0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6a8fa72563dde6fea1a78f0cd85ef82

    SHA1

    5195ab19f8e7e19841fac283191d7adb48914711

    SHA256

    351e59a81c19765716685cadc371a67bee796120359fc74747242410aeacdb4d

    SHA512

    099cc2a5ca564343a5f7680a3ff19609d61166e1dea2f79cfbcf7ac863be08ec45f2a02db773ca83b8c462648786e9c51de4a70e80c2b8688a01248fad237625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29bdf96198d51ab700b928263bcd141d

    SHA1

    b9fa63ccf3576696df56c213a41b6f43c680993c

    SHA256

    a1700c7e130a58ac61894d7cdc3200ed46c68d49b4a083b9406783b3656ef8ae

    SHA512

    e2baaa4727959bc20bdf30bdae3c54432994cd50fd638d503262e8bc6b9f64e3fbf8fe71b0896c37d86e5cd54139e95c53a3fb8178ba973596f4ff5f522e7276

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1813f5ee44edc58ca05f22e61dda71d1

    SHA1

    96fa69cfc465a6e35533d287001a23617b8d73f2

    SHA256

    3d0d6ac48215e705ebefdae423a5c14c10dd0cf1de4a0a881bcf4a1096b43dfd

    SHA512

    71413f2ffb57e1269595ed413796025da17efdfd739cf9aa5427bf4526df90b6f54f3a3335b1cf4aa2e869755eb5205f096ca1fb9c36ff6aecd1c0731a87ee51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77c0d1ce94992f31f46cddfb929f2313

    SHA1

    57596dc931a0952b03890d6a0870da8d26ae790c

    SHA256

    db4c58782008b0a7a1bdebabde931f35434f114eb13896cf296f39ae577fe077

    SHA512

    e7e0185491a709a8e659e80462bdaa5a6b35d7b204cb7e2056c6e1877e57bf39bf27acd04b32bcb7b2352cb30a85219777c9dd1dddd91341a521c976a395dfe1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93485711a9d3010ae8ba51088960acc4

    SHA1

    6148c9c1a8e5d380550aa119dfa0354a8bfe3820

    SHA256

    c44d393b505aab31f35234cd96351dd37322040cc7c8b1cc7929d8ebf8973614

    SHA512

    87372232c2884b25ff7b7946c60a33ef06713df91d68ec24165edd3c9ac1273845801dc0cc14a7f6e7e403e82d0defaa5969daec183b86b62f486fb0807e9bab

  • C:\Users\Admin\AppData\Local\Temp\Cab55FE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar56E1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b