Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 16:58

General

  • Target

    8b1f6608cb1bd35483135e917c28c529_JaffaCakes118.html

  • Size

    460KB

  • MD5

    8b1f6608cb1bd35483135e917c28c529

  • SHA1

    0aaca6665c9c9a2e95a83a4040d4c5ffb97b57b6

  • SHA256

    20cee93bf1c3fe12ee265bddb8b2480de1e36cc5395bc6b0667893a6961b56ec

  • SHA512

    d3f4792e6c6a109aa920a28bcd4b654a5352bee4ff2cac2566a1145872fcd87c26353fcf613d2dde2d13f8b91a5351864700dd201440e570907f69e5e2eba21a

  • SSDEEP

    6144:SIsMYod+X3oI+YrQysMYod+X3oI+Y8sMYod+X3oI+YLsMYod+X3oI+YQ:Z5d+X3t5d+X3w5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b1f6608cb1bd35483135e917c28c529_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2696 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    543fb2d86d7ed89580783bd1fc45a658

    SHA1

    0549aa096237d3dcc085916078957a9029dfa089

    SHA256

    72afffe63d46a1a5eb1311cec6a5e7d736ef27d8ece0e32e5f46cf27a0e7dcbd

    SHA512

    c762e64661f865963040ed2ab5d3db858be0642c273249d6767ce3e4ce4bebabee2b4014b7b5426b0df125a74ef186a160d372fdd8fc0b96e183e4d656ca2a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14fb1131b93539683c1c309147bbfde9

    SHA1

    24eaf4847eb54b962c13c55f14736c6548c1d728

    SHA256

    6ad967620f9c1f877ef7571bbf5cc1f9c49d0612d40957546aa227845b816b3c

    SHA512

    59dc3e31a38322436df123c37f196ba289d766a44ebad2d7d0b0ca630ed489e0e93d4437d35b74d3feb14e71da3c083ffcc26438700856dbd2ad4f0939a8fc62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6ba70e05ca5c75c83475869fc02a7d5

    SHA1

    6b9e10ebc8053032adc95862876a1cda132962b8

    SHA256

    1885da2ec23614945d45347f675c7ffe39d7bd3f3628edc2552124e53b66a22e

    SHA512

    35c767794279ad4553e17a35488a8f9c7b6dcbe76571d633cfafdd281b2a89b5b2f94ad9b9175599e384a6e761c46165099107ef2e216381d332daa54899209a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b57eff8eea605d0e8abaa1f9269b2d5

    SHA1

    2cdfe491a106a44f07ef0af6ee74ab7d047eba08

    SHA256

    47c819609d1a09a09de40f5a626695b446487979165d084c443db051e65b88ad

    SHA512

    bae2a756f68d4955445693ef01f7fb19e29aacdffcd1cb06b810bc78288f6b8386ffbd1df408d31aa888d724fdb82dac515598400084c177e95736f8d3fb914b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    204ab94016479ccaa52063c52643bbd3

    SHA1

    e88a6e10aba763656229e968f279fa075f8fd3c7

    SHA256

    9b89241e80ea35526ec0519624aaff5ecc18e9c03fc1405371f2c4bdd89bf0b0

    SHA512

    37fff518b0851a93ff6fcfaebd94d42778a5eccd3f38aa5adabd134a09f38344751a77a1ebfab4583f093770cdecdf348e3fa2ec1685bcf5fdbabd3c2b5c9b1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c0914ede204e1f8189c1694c353d841

    SHA1

    ab9a6eb649281d13ddc35f6567c0a0a290a962ba

    SHA256

    b2e50ffb073d6746aec4330b78620f26b4ba7f75e631f3825162f50e0ba0ddb3

    SHA512

    f59d25343c10697e110bcb6aefd69bc3178b77c40fe771460afb8beec5210f3ba36257d0fc2f2763dd7444640fab03bc5b86312b9d1142f010e5f45efda4a5d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eab54d372ae1f0c273a93ebf88b55c18

    SHA1

    d0ce350c494a646efd08ecdb6c064c4004a97af5

    SHA256

    6188d581c648d53dc6472348712f72ea700dd42cf760f39e184822b08a4a55a5

    SHA512

    4fc2779c3dbf20475f32310bfd9e8a1a035bf9a36f3924c5492a5792d9a32832b61a8ef90e9f323215c2bd976d363121cdbd809ca12fa6ef73c8216a89ed300e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ff811e213d9b15e0e6eb08442c14e6d

    SHA1

    03edb92f800321a7e0da242209136730dc960151

    SHA256

    48a2b359a709c8b5010ce719a5de971c90790a8936752e6547c90eecb7292a4b

    SHA512

    b205aca3400312ce06bc5591efe5c29028636c7e69513fac0e6bd2dcd4134dc321b8165a3740456372b081185ff4e8ac613de402914d838194d059c872f5287d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdafc47ddf2458930f02a3a37b5d5f9a

    SHA1

    fc78e3678cc4997d52a02cbd310b5f9e92c7239a

    SHA256

    95e82da02a7f127b2835ac3e1a753a87b109b16f89d24a9122e615b91d4236d1

    SHA512

    d9ab031f566d7788f7ddc41bed42c3ed9d0c2a56553fb38490cc326488a5d86ef9cb5c087233e6a49a016084793b77d19286d5a0a3a706d9b61f1142353d7230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc10184a4d8b7217449c5c994c68bda8

    SHA1

    5214b774651e9b0ab4726d88c81b4777425abdfb

    SHA256

    ed41ef9e4cc08778e5e7c5ac9b1031a80a689ef9833ae2742fa384c3efe4df2a

    SHA512

    2fcba674e7daaae14e236d8935c5523712a51104da86d08eea0460323f3981efbd3d12a221b8b0fbf33a59127fa681609887fd3cac1e8700d7a6ce9db0d71b1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2fecb1325e620cb85b6758d28d7894e

    SHA1

    cabaee2fa67937fe91dbcf63c5295da4b6e20da9

    SHA256

    5f5dd440743d1b9717c434dc9da2111ce30416755a4bf2b3de19eab2b21aed9c

    SHA512

    e92ad4e7541bb9c87ccee62bed39bbfd56a40ffce63f21be3cca418a5ee72d2f21354c70f5a7db4e52f43d2bc87d90121292fd0fe34ca1c46811c08ac28de763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05656ec2cd43d537bf78548b5e3d4db1

    SHA1

    bb59d2b395a92d569ad8069ae31f889a239e45a2

    SHA256

    f251d0751fa1a6f0e100599538d914e27f07d11e5ff31a72d2692ae3bdbcc8ac

    SHA512

    cfb4afe22c0931a777cb33a615c68ab115bf8f391baa026698e2974ae823c4402a3255282ad073a944f31074f7271aa30d503470272bd4f405135beaca5f1270

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd8bdf68a45aee253edc0448a0f0f5e0

    SHA1

    cac95c3d47277c4b52e8d2433142244e26f66cfe

    SHA256

    03b2f7438e918f6e593e64982b89f4149f7ea4da73b2e5f33e253493c49529d7

    SHA512

    9baef7f8607f16fad1c418f76622396fb39338d59ded5cf5bb991e3409d6e44b401894c5bd77f7b54d81b60070972af0a8d8f6e835a75ce8e164339c92df4fb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5dce2254fb77bddefaae57b3e1f1d67

    SHA1

    2f90818cabf2865b7f25e77ba4221783e794ba22

    SHA256

    109e255903ce9b9bff20f2a73e0a3e3e79dfe8ad01773e47ca0c02f8fef46364

    SHA512

    ab9c05baa788813e3160cabec5ac5c338a800b0d0d9f6a406b6bdd41cf363f4f3b8dc72b3ca2606caa50d0f9703610a160ecd0075da263b8e7053b83dffaa5ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57c6d103c214b8d7de52c1bc395c7e3b

    SHA1

    3b68568e499084d0c1a7866276c792e8a5b12467

    SHA256

    dc6534723dc12f82c86a8ff28d02d0614eb25936cba4c285efe0325f53444b24

    SHA512

    955bb046f7302342a5780d07412df03ec7ed17b7d5f34e3aef613992e0b37d5940996c5a5f7f40566561f334ebeca659fb68d6978e1b9d9e967c090fc9819120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2f62955ed6d0c67f67a577c205ead55

    SHA1

    a4f764ce2b9b922f0dfa90a5fff7b28f45393eaa

    SHA256

    e09ea5ce4cc27e24363404344c111ee6620eb936392b81f7d3e3aadc324362fb

    SHA512

    0818e192cee21a962a019a99d5f8a2f115f62363269246bb5ec152a87744b2cad6f668679b7d4eef8be05bac784e8ab1a07e1829ae13b19324fdf5e1d59bfaa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a50308fa51ef686e25d2d2eb8d6efb73

    SHA1

    f92a5b6d562dc5d23791e568ac3c4f1e58607dbd

    SHA256

    94305d24cf09fd9a5ee06f03845eede45f8b18a2ab4db4db47cb9d105ceb4e4a

    SHA512

    27f6de26c79c074a69906d51bfa8467c571de868fe64e5934d3c411d81ca757194f3ca4ff4071e1c0e660efb1cce8fb3b9567eb6aca7494e6fd50a6591e8f95a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90678aa6dfc624a656dea03b330784e4

    SHA1

    b80efb925570733d5a77ed07b51c76c7f85b7658

    SHA256

    205d3a38df989cdc5baf648b98dd9f3a6571f41df821ddb5701066ea51cba2e8

    SHA512

    659c72920e16b985c72aeb75205a9bd79ed88ae9907817a77ab833335f3384b0e87a8631191a650a0f07bf9485bbeff8a75917c89b778f0fb970716952da5fb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b952535d7642f93e9a6d438addf7294e

    SHA1

    aff6dae779cc73484ca0268d0750e20925f12b6b

    SHA256

    d16557c9fc7e82804b961de86931695711f173aa5884c38abc3f1b6a172025e2

    SHA512

    b31ea5c29636d947834b473334b888fd7568585eff2e12cae759640489aea3f83068f87078eafbdbea9a644db5344a13b32eb7e1899e45c219f878d1b08cdf3d

  • C:\Users\Admin\AppData\Local\Temp\Cab4952.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4A34.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b