Analysis

  • max time kernel
    138s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 19:13

General

  • Target

    8b7b203e30c7e736b2279c4a46f00a35_JaffaCakes118.html

  • Size

    159KB

  • MD5

    8b7b203e30c7e736b2279c4a46f00a35

  • SHA1

    97d8fb9cd3688bec2077f5cd0fec746156b84160

  • SHA256

    046a8e0bc4d5daabb765b4a24e5baec8447a03a5aecd93133a67d88ff22cd095

  • SHA512

    800e14d63f15c432f2cb9d1cdcd4693a02c162f9857b9bad15d80b1c6dcc302fc73f49440e3e469f4c1c2fc3aca51c3505986cf778d0a125ed0883b6670c331a

  • SSDEEP

    3072:SjASEQjc8idgRr+8boyfkMY+BES09JXAnyrZalI+YQ:SjASEQjcz6C8blsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b7b203e30c7e736b2279c4a46f00a35_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1100
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1100 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4267308936ceaf116d3c2d7981293a9

    SHA1

    d34c6ea1479e217beee6c30b26547a84efed7944

    SHA256

    9e2dd560c06d2b278746f1c9efa8de52bc87852c5183b546571b3df48bc60450

    SHA512

    6b1383e447d2bd81dbd9a8515ac2bee4131e149273b3cd597ed4658c2a6273ffdbf7530a55860bbd9801e8e2772323cb8e2e54938e033c5ddf0a020e74bfc2fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcbae2d2ee5691d6035ee1d0528b858b

    SHA1

    8fc41bb1fcdc46fdbe4e667a9ec15c75d338acf8

    SHA256

    96b25908d6195f4a768fb1fc809f8d9aa9f3e870ebbe3cf819bdab8283467040

    SHA512

    27e4683821198e29b46ddd4b22ba5bafff2f413672792d2a71d4843e597750b026b8a02affa35448784e916b1daf251a3a7b7ba750b59b94a3c9fd57e901ba1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    919825ff73d6bdce525b6df1ce836925

    SHA1

    0a188e06134d85936353288670d9888a17aaf147

    SHA256

    95255abfeca4ad6bff5e98cceec62ade8cfa747aad4dd277de91d65cade7cd49

    SHA512

    5d6d5de73ffc476677b1cc761feb321f2eafa207e603b69d3cfd62d56a99271ecc4e78248c36f1b25d0ae4a2bd25686dfcbe68dce32beefbed2e194b2517657b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a8faa04a8365451b634a9a293d46910

    SHA1

    cd942f1742637e15a335b95717b084198c3a3e3a

    SHA256

    e40b47f739e578c72afb94987681fa604922eb345f3e305c0f4a413da9045743

    SHA512

    b9d32eca3e734211c112f1a4fb9681e4af367fb379e29ef8d69ed1c3e3eb5c498f199bd0bb7ef81a97490b5516c297d4ab143ae4c57fe27d2d05588efbafaf2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10f6b1805a19a9c1542763db9b2f25ac

    SHA1

    e02df153eb173e82d9859e6b6c13534acd12ae72

    SHA256

    19cf6fa14304012a51100051fd4ea0ba0314d123e9126bd14cb5dba64cc74324

    SHA512

    dcfdf94f1662bc6d777d7d65ede6cf57542ee3449f6604b55e654b975a492b5e95f7ed7319c6ee2f7e4b1f3424d22a2ce1050b16ce204e35e0aa87fc350b7915

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    134e8b0b7131456ae6849d66b33f8787

    SHA1

    7217188cfab97b25759fdd13385e5612d8faf56b

    SHA256

    db2782ee4d9204fbac38262f41953d61163dcc4acf2bc7da804e4125711556c1

    SHA512

    35e428a70673e3d27fa636a8a5c035b4815942685105551a3e9c3faf5bd2ac00529e37ff21059bcb6c380b1752a53f3c7a9617fa26438ad5b6b2b1da40375501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d203aa32ee4314ff67a96ffc7619fd63

    SHA1

    919096c4ed3096b1e46b77c4f37abffb64512982

    SHA256

    9d9d91a6ac130b1a4a10ca120bddc857012674d65408245ed6b230b9ae4ef963

    SHA512

    451db172f7b40de8c857d03424f6bd9dc37fec7dd3d722d38a23d1d2c6c4f56c5c2455f02d8bae0afd56ab1a4577a6c936daea041307ef473f656ad7e703f85e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8da9592ded1bab3f7a69cfda68680834

    SHA1

    b0393bad68cf6b007c9a34c7623c2bd358dacdd4

    SHA256

    87637aa6925a0f7377141ba22adbf7805f801a15704b0f51ff5d2e4a1ee8f68e

    SHA512

    57e498ff789bdb54d4bf3439b2397a1b97323fa422f02a7dec532d5aac2d433a66ffbbbe4ca0b31681d4b58ec74e5904cbe9a91f2ee1aa80c461e20a1dde01d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    829153e787dbf14faf8983c1cd3052c3

    SHA1

    775805b65fe747bcb116555b796852a5c4c953c9

    SHA256

    2d226596aee6c10187867f3281bea3e93759e75439105f29931235161eba6122

    SHA512

    c381fd4d839bbf30dc3e45498a437efb031cccf615ed82bde203ae247791e6bc5ae3ecb6f3a3606a88805fcdf93058fe325fe7304d5e8d4ac5fb1c7984227a4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f9bceb9a9d20dfd109a2e3df24c049e

    SHA1

    af9d70501cfa23b488b7a56ef002072c83769217

    SHA256

    77b2714e1d145b705881a3d733ca95c26a5afe8fe262c66495e0f89c93703472

    SHA512

    59089a7573dcd31e9d82fc8f799a4d426500f13cb5e3eb02aabdeb82b285a4a11530d174c4b1a09ab094e8c6e4b7494902e31f1a534e9eb447beccc57349efa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    013aa9f77c4e3b8a8a4fac715843f3b7

    SHA1

    13e7b8d1473504de976a98143c8604bdbc170052

    SHA256

    8a212851f20372d7eb64528d1f450dd7cfa66214d013b72c5ad76dcf69dcb5d1

    SHA512

    24c52a21b96123353ef39f55d894e0786002cba754cf8abc67b05fe678efdf4bd660afa0e3a6aeb00b19e48df93e8b6f877c80216769d520519b728f3477f323

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46367af2af4310e967f8b770337b6803

    SHA1

    4e79e4b3b936301fa3a9646b4d297ce478b57341

    SHA256

    18676209f4acfe70227069f30311815e7feb8a4172b580f871309862ef28ee39

    SHA512

    a722281e9161fd802687febbe3ed7f1c0e66d0c78889d00c31a226d2a1349f9983e1c9e49efa2b6179f1641ace3c551adc41ab5caad0a657d20cd5463b0b2a86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8f98b525d949cc64ba0de4763e2e7f9

    SHA1

    4676ca32f38a797e4f956f2b77e05c93f52e45b8

    SHA256

    5d33177c6b8a82a56998553f96dff4201113f2931cd1f32963a47604cfa8282b

    SHA512

    a738996deafab8df210062a3af1666f31ce955222c194d04e486306ed60d9348b06e7c86fd3ebcbff2e1857da2c6eed6ebd85dfa009b8e8589ba4f1249436df2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    896704cacff05f5935f5d62857875ae2

    SHA1

    52b80636181ad919e656abe8b80f4a145a186818

    SHA256

    a9b36d4b60e83d8807bfdc6fa3570e4bdb3a059816f256ea873bcf19b7be4e0f

    SHA512

    fa6802436335649b8c0a4bf69de484a176218466c2465c390d2cd94715e5633f52413fb77ceb7ac48bf2f93c433c30e096ec8b90f25938d35a6c112b57b88c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ba9f4f505d449b206fe47f8f0d85f02

    SHA1

    04f166c60f730adb3c534ce4c0c8b85d1a0a0c31

    SHA256

    65ad57e1db8488328badaf641ce15ead24f824bf0c35b701bf7e0aef2005c5e9

    SHA512

    8c29753f2317dfcea5cabb07309a5678fe669b882c5f2b25f34f97e0dda6c1c4ba249f7bf2235ca46ae9daefa6ca548c64bf63dcd29792a76da8e82d16ea5950

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6192f33bde072a6c7a2c7c0202fd8a29

    SHA1

    620afe54201e580b0eb6cf4c1b8a672fc360cf9c

    SHA256

    f611b39aa8f143e1385710379deef6744aa45d7c929b28de5218d967c6e3d7a6

    SHA512

    342355f2a6e5036cb532db7ebb8d880ecf0b98e8c9404b608ea33dc0808f59432610ecd92098133c6c376490419f6fe64870c3d17c3866ce6b4dfddf906d3aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16ec1a7e6e66d22134b11ab09e8b6856

    SHA1

    d59fcca01cdcb5d1f13ce7db7e2f723a8d32feba

    SHA256

    f45644ebc320a49e140f0d5665bc9cfe735c8878cb6e507f51762f76339c0f05

    SHA512

    688975b935df45a52d3fcc17cb0b3423486ed22e14e6346039e9cedf9fe85f615bc8f0c04e888433d7aab0849c3935883a19e03c11fc664184ffdb91230d7439

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b84fd2dbeeedbecb06621bf34d65255

    SHA1

    c6cba08ded7d5a408b0fa5ee4df6e9cda0c6cf39

    SHA256

    46a36e721606eba0431712aa1af8e87273d7902dab2aa4a15a46069183575d83

    SHA512

    baa4d0e6ec5fb874776ebabf9b9a1f7abc54d06ffa19c058aaf67349a525d670693cd5ddd80b3e9cd3743620cef74796f9a6b134d03c50842c94dc49495d5a02

  • C:\Users\Admin\AppData\Local\Temp\Cab9520.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab95FD.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9640.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b