Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02-06-2024 21:58

General

  • Target

    8f92939de590c2d8396372bf0e9ae56b_JaffaCakes118.html

  • Size

    461KB

  • MD5

    8f92939de590c2d8396372bf0e9ae56b

  • SHA1

    737a9cbed08d21bc5d82f540fbe8fd0877d5ecd3

  • SHA256

    999cb1d4e77166a66e92b6d668384a409ba32040fc7eed0f2c645895dc5ccbfa

  • SHA512

    f9a63f8428c0b6d822c50fdd6131d896ba8214105dbb36c2eb9a4791ff0c9d953f562d58b5fcade49755f4a34c44d860f2838ff5934eb31e83b78a583ab16620

  • SSDEEP

    6144:SCsMYod+X3oI+YhsMYod+X3oI+YxsMYod+X3oI+YLsMYod+X3oI+YQ:P5d+X3X5d+X3r5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8f92939de590c2d8396372bf0e9ae56b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2880f6db87ce98922aeb2a7b5bc5da41

    SHA1

    4a0ac8c4ddcc9f1b4cc393796bb2676d3c5f4f1a

    SHA256

    7cd34ca73848276629c1e922186033fc00b8613e10eabb6f5e8aa1b8b5e14402

    SHA512

    9830984d269a2018190a4d9354ff08bd65e17fe05dd23ead347d5126b2353e1b104242dab02e9bf619bba0f2b6fec22d366888fa3a47ffebd91f017805aff6f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81cc1678c4f19bf6ef28052f371cbfff

    SHA1

    9cf37a268ce57633c62e36ac5810e0ad3055eb11

    SHA256

    16f28cf5a38743028efca741b1419bf5fb4231ae82601c50257b426eb6d33f4f

    SHA512

    cda3b6c868a15072db32852a9f57c338ade8c675484d80b021da0db7dad7af77ca2c6e86e80afb20f297a83bc3520418cd73dda8907862a2d3f41efe57941341

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21975ac2eee9ac8ca4498229af7905bb

    SHA1

    9f719afd776b7926787a41a81e6495de48ee99bf

    SHA256

    0c0e4492003d75f2d56c7067be28be319b4a6d3e4a99af74591c00717b3e08bf

    SHA512

    65c7a69dba3913da4cf660670c8f5cc50af2308bd2fbd5b90e04c0ab5d5210483042e00659c90e3772dd5ad70aceec387f69d5e9760770909bda716357725fcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfe1e7fdf4a7f271ab92295af0dacd7e

    SHA1

    6572867afbc0f9c73813684296e46a3b84e495bb

    SHA256

    fac2a83cbf7692186ac6938960e679200bc60993cb5ce6c1b516a9f2321336aa

    SHA512

    fc86ffd6faaa313a01211a4904b6d3d67dfdb709581c9c33fdb747d03a89ed12c934a060b166ef7ba0eb20fca2d9aa740334e2892958eec44b3141d92ca31d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75ec5bdb1c57416e3ee71fcf4f4fe81e

    SHA1

    713e1262bbdb0dad85c7ab024eef87c38909cbbf

    SHA256

    30afa2bdb8505eb165f5d7a018cb68dae97efb599f6a8ddde8b8a4df665ec6b8

    SHA512

    9ad0c96469b33c21de0e8a0e50905a480e10b6d2930e2d9ed8d8420067488a050b38186336f93ab223513aba06c032747a122272a4c7d2c84c156b7620937f41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5abb882482e926088f0356258d13f3af

    SHA1

    b5081c641d096eae35fcd66c341ab65244dbc3e2

    SHA256

    53ba8300258362364e852138cc5921d5daaf6a3ae435baa411be3d5e7cdd63ee

    SHA512

    6560e76326410e6f149889bd86b0073466bfb6740f9f700321c070dc8f2b03d6ee25e429b99fe5111b7c1b514c4883b4b076f272732da476bb44e75190231cda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b0c1914197f7f8d8961647ab6b884e0

    SHA1

    bd2d758c9d062a239f25e7d3368bbd634dedeef8

    SHA256

    ee60e40642c1307799e49dd9efee0fd77571b44e7778a79e10e436e311767e2a

    SHA512

    05ca6a0453876f3dd4145e4b5dbde7c8b938fd0f18e7946217ff4bad90b26ab4935acb54b95878964082a3a4e1cbc8a25acc43fcce0cf613f605826ec160c234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3017e79ca316ab530aea372ed6e5c1e

    SHA1

    0dc7be8e6617ce1c854424ada49a147cfec3d3af

    SHA256

    ff10d468aadc50e41693a27eedb5c2bcf5aaec93b3dee31f3c2f11e1c547103e

    SHA512

    6e299040c8cf037593214d5104da6a4a3fa0012e18c15d770edffcc8042f08c769efa9e441eb86b7fd55834f2fdf9ca6105efa5d526990ddcc27b7637e44ba83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd9ad631178f9c31d929cd6ab3b8909c

    SHA1

    ec0879c809a36d5deb9438092159eef6eb02d75d

    SHA256

    bd3b8a9a54b05400b3debc54adc4e0fd0988eaa6f07ff57e85ae4d67ad2f8f85

    SHA512

    955714d4c49212d4a6b2db8623856b4e09c3c271a59b93d7b16519984de3ea50c817bafbb6383da66a2f24ef28c88bb984f26617e26c6962f8cbeae998d6220b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c11bf0c557b281c192ad30825dcc903

    SHA1

    bc5492f9d46a08950579970c0da59f754e5eba61

    SHA256

    f2e556eddc11f1ed68571ec4d48cb2cc14ab432df874b0a29fbd4c5ccdd23010

    SHA512

    e19e827e3440a953cc679ffe512c1bf386c726b9e4d1e568737ed5110c17e5dc4f1538f22638be1edf9739c09ebe28415c1bc6ff7ba991e5b0dce5245e562fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    141bf10eb9721159f678f937b898180d

    SHA1

    b63b2977c89e43ea05e8fdb6b23b6d0e39a68150

    SHA256

    825a7920f73c17c0aba3c42d562e8b0c32234f2e3949a81299561e5a66127375

    SHA512

    1be7cdcbedd58e237d44b5effe070656f53e323d9cee19c6fab7678922066d414ddffddd53dc6fd73db818794c570adc630201530cec6a348350cf0b1824c247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68cab191130754bc38e877f99ac1c006

    SHA1

    760cfe8f2588d3c85a9383fc0778c66bb5dae9d8

    SHA256

    327b52f815e0aa3f95740f3dfd0e53b0bc5430482b36e5370d3f9b40ff9bbeca

    SHA512

    f4d765011b5f280d32b9022b5836662b75fbcc66aad7f284d603cae22abe8ff6bb1ad9780468b0364e4f6249b1a6180dca7fdaa7582a6c400bfb2b5583bd02d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bcfc5b344484d1e7e93a9bcf71340de

    SHA1

    3c3b8fed5dd2aefb2ec8365a7eeb1ff2e7608871

    SHA256

    3777ad9f8efc190549c922425e2a58cf092b12f93d58a88e4270cdb9f00a0376

    SHA512

    94c842ca1372eaec4deb85d595be9b4d0fb40b123b1f383ee2f7466dad750469b8533caf049e10480a774525968e79ebabe676db5c71f6f9061a019105a1d3c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eff9e355d88f24f72b70101f006784c

    SHA1

    306c5fc08b7fedfceeef6ee7b5f5e8e66c0c4cb2

    SHA256

    3a237f6b1ec576f97fc7a9acc4d39d5dabcbafeec8abdf6aa644cee54129d94a

    SHA512

    b2fba1cd2c90f426391707a5d1a9f1dc91d7e7a971978fb69c1ecd04f280ec0e8ef398edfbe8b54f4af4b84509310a38f3328e206d0d110b62ba9ccc6ac57057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e45bbca44682d00c71a1ae5d9957b898

    SHA1

    0286f2924299b8f6cde630c2f8ae2f149c8ee9c9

    SHA256

    c8dfc33819d822b9d7bab48c93b15a28dc0541560133d5e9f309519c9849163c

    SHA512

    1f9216c5aab7827802c9698281bf962ff394800b8a772476053ae1a2942ea4d7a95416d22a2fc713e39a7ad65a0e4fc62dffa9ee0f39f0cb02efd6d9809f8510

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26ce9fd984e5601828b84f9ce24f782e

    SHA1

    11306dddff5cf7b05efaf7effaf4f847b8bcf299

    SHA256

    9488ef19b2208079560d185aa8af0e3c12dcd0296380ae3470de958811d1c002

    SHA512

    f320a1f0b3636238afeb7d2babe1f2321cffa4c4bc1bf7803d7bd7e1a1c07c90721c8dee965894297c5f042efb0f6e300283e05844810da7fc80b20b0575fa9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49b81aae776704b1e10e59aff4e10390

    SHA1

    13f3d139800471aaf56195fb1e885f168f8c8a98

    SHA256

    856440c8fd177643fa07f91ef39130c0d7bdd1f35d57832e6e0eb86ec7df822b

    SHA512

    39ba3354f376ec725ba5df8b8eafb273584be70bc3dfb77a5210c52ccf2582aa2da98da29c738a3b998059912e05caca2cb63874809aa025248063a9ba1a7dbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b19821ea920cf6085df09640e3e104e

    SHA1

    9628973e3246c18283e432635110e63d41e631a5

    SHA256

    f0e0082b34d98618026fa551d83b3b05fa7b9bb583d57e6703590ec12e0171ce

    SHA512

    d77ec05de1c492b4f97c9140bdce1d8b7c5664e1d801769c8fe8624d00bb4d536564628e69d5e5a1e62895975e12ec476f6e8455bed490d57182be25aaab162e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c49e2427ebf630e709c27cadeec0237a

    SHA1

    87bb70af15db684db3eff3adbe45160c19b5b3f4

    SHA256

    64bc0305384d4d9bdae67955ca2753555df076c0bf57fefabc8153694e2ec475

    SHA512

    f09d2d5524a45c648a3e9499ad3003460256fc513e8d06c6da09d10a73e8926a5f7847d1858258aae4d785d25f9f1910ee5b5d460e50bfd990856d548bf6d4bd

  • C:\Users\Admin\AppData\Local\Temp\Cab4157.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab4233.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4248.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b