Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 23:37

General

  • Target

    92ff88d1234d717642fbd2df466dc678_JaffaCakes118.html

  • Size

    460KB

  • MD5

    92ff88d1234d717642fbd2df466dc678

  • SHA1

    2d74a9c62c4663036bdd29b2a7a89393be8d4a17

  • SHA256

    3618ff7ec574a1bca8364366058b53d88a0269bd068b92ddf4cd601db69a85ba

  • SHA512

    746edeb75cd6c9c24188aaccc5882c9e2c9360f036c1657b8a1468569da2ceb37044151c0105b9093b1857940219c4d9374b0f93a6f9ee744ad1201202f27b4f

  • SSDEEP

    6144:SYsMYod+X3oI+Y4sMYod+X3oI+YxsMYod+X3oI+YLsMYod+X3oI+YQ:55d+X3o5d+X3X5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\92ff88d1234d717642fbd2df466dc678_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    997accf26a95cceb0b164831b7ff96fc

    SHA1

    22365b65bdf2ffccb0e0fc475a7aa6c742c7aa20

    SHA256

    d7743ad21a8c5885f882f0f16b19fdf8aca236a5f60958de475749905d8d66e3

    SHA512

    dc9de73cbd0892a79c7fc979fee4eaa6cb823bf1fd9d5c6929d8e12fb23432369495875bfb3c6ec07867a1fdad007b342f8f202ba525bd0ee8405987454e630f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8ed3409f954b40b2ff8fd174ceae8d5

    SHA1

    4044e6f6120b83e8907d91b45948d937db04be00

    SHA256

    1464547204004d4a2f4664d3ea617356d6758bc5bc9ce2c4e44b243c7385ba86

    SHA512

    99f45c58158af99be5e8d7163a3932cec04722ebcc0ea9a02f8e416d0f4c7e67d4d433664aaf6860672352601a48ec5f341bd525958bd2dae1b01a25f25441c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be9b3d0c55895493303a9dd27e72f350

    SHA1

    1a235b3ba57192b50e58c4c067bef19e74f23d9b

    SHA256

    7ef98834a4410c9ce5dfce27c3a4fdafe5a15b28a997d7d23e9740ccb75b53d7

    SHA512

    67fc38ba8ed7f0b73cd7e7f5d92a232b58d9466348be590922b75727702d7315bd9aa98225247ab5333c66b5dc0aae9450438a208e12d28ab7abb1e94e74299d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e9170c7e01a7fbf95743a6774deabd6

    SHA1

    cd010bc18e0aeb2c88cde0ffaabfda3b78781410

    SHA256

    7c924981df0078c45ea89b52c13b09ee83950e9d7ea5ab3c6cbe9031d2ec8f1e

    SHA512

    18135035088e8fbe5f5582c2499db9c99347088e9757702bb579380e7be95d486a098f7efcebe17d69d1290398c9c0b6a71d7801e31425ed3d4e4a53fcc32451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a1863016fec0ae965eb105b2df0a8e7

    SHA1

    991e5f64ed0076c27cb6f8b42aa897933cbf197f

    SHA256

    bf2440c5a3101f1e305ac9d8d2004724a6e1ded3ab0aff455e0bd0947888276c

    SHA512

    28b9cf213bc788f19235d9c7897ddba76179269d726f3a9658e7cc0645dffadcd97d547b0f1ce98519c0e2d41958fc9909dce4d48f6ed7c916fddd0f8f9adaaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f60375f0382ec4ac868828fde3ed15e

    SHA1

    e76bd0625f0bd9b6fab7e523017872aa68d19bb5

    SHA256

    43cc8e76dcbf954ad0a5b968be4c50e78e9d6fb20c68ce1e65285c23217e20f2

    SHA512

    aaadd6e10aef16a2507ae69a500d8b42e46f7d226cf7195d5b108f1016ab2ac9be9cff51363c3d3542202df93c18049b6ea0009f963788f806c2e9225edb3a3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    164f4dba784cfa907176524885651c1b

    SHA1

    dbab3951f202a5b2c2febf87c7e51e7efad0c961

    SHA256

    1bffdcf520b7f63a4672d3f6440aafc062cfb7d25ed0a4c58ef8faf0a39d6692

    SHA512

    a594ef73f605d3c4584662189939b763f2add8975e6623255531416423a27a712bd12b9765d5c41f85f5d5e8e4f6748eeca5f9c6084f8c58129519bea2bd5e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc6354b1420b0f9bac7c1a14e3f48b7b

    SHA1

    f8959d96a367316591298f183b3e2efa8a5f7d2a

    SHA256

    d92070f5a40cd4acb3bff6ef11c313b9e3ce3b96ce12fef127fed33a6f157da8

    SHA512

    03e6fa08700d4622eed08d62df054bb25cb7449329ff538b1169fec489ce59ac746a8b311f42fef1ef0e706bb8fb358a1f19526ae20d324fe2d31527cdedf429

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82636f496ca95c03a9a06a4e70043eb8

    SHA1

    824bead70653ea2242961049a93e4e393d9c7027

    SHA256

    090391d7d9e4d61ddb505c79e37b82b256e1f727486289e8c37948cf7988f29c

    SHA512

    9bb276231798fbb304a3804957706b0618d96d9afde855a3feff3b7adb61011eb70cf4a82c008e3d2b0dcf5befe75bd2acf586598bb350ca1978b488db5cc867

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51fa371eb0d972cad3263c965273e13c

    SHA1

    452ce23cd28ebb551051816cf5589a06b906e9b9

    SHA256

    b8b569f50283cf6f24a51e441e9ef737df1cd6ff26a11cccaee91216b63dbba8

    SHA512

    e786811174097efab1eaabd49fc6ba7638e35ca9c0efa85db9c7fd73036e4ac566c5b295975d91fbd11f05f282e61a2eb4f50fa51ee50d15d056e8e63c8453d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9548f2cfc9e0c24936626c2bab8c019

    SHA1

    4ac6d693d56fb4ba605c5c7f1e03a443a2d247d0

    SHA256

    3197615e53349bed1e746e90e71adc7cd554bd93c5f75728d52779e75feb28e7

    SHA512

    9419492e28077e203d64bd6dfcdc0e63b0308c1ea48a0a98b7568becc7a5510f124d622a8a1ccf10a4463a4a46fb12848d2dfd9b386b0128f2181e80370930f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a7081f3e2dccef3cb58203a554e9c67

    SHA1

    94d6cd2f50d4934eefaddd5193aec466b913d945

    SHA256

    2267edbf97bf04d522408ee43122429616b91079a0da938fb449221ec77d4006

    SHA512

    9f693417e1d835a44970c54d3dc6c66bbff3536de1920df93ec6666e156504323f155e9e5a647047b51bdd85b5c91d291c3a83931f1e4d923450ab27eb8487cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ad2abc615c8c32ad1f8eb30d85c8ee7

    SHA1

    36527e21e0ff51856764f657d97e5f6628f88f12

    SHA256

    3892c3971c1d409433c3e7f8a963d893737eb06d9ba9a6b16d4d2d2bb69cb3c7

    SHA512

    16685a6e7b3861a412bbbb64a1bfb0e42c7e448c560aaafe1d029f857e8414db71ca5b5843290d52cc38a179f2bd93c11027f1249ad41cd26712fa9239023922

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9546458240005c04ca3ca84b4414948

    SHA1

    9815b9ff54a2a3c8c71f96668e59ef4f7f7d86a3

    SHA256

    dc339d4c0f7dbb313b5b6bdb542c1ecc4214fa051da085296ad19e8aa05935f0

    SHA512

    4215bbd7fcad4be867fd36c34151441f24880fd7812ffa6eeaca4eeb1c0d830963bcf95a80dbb2bae19c918138a777eabce2e419fa932ce0267826c19a84bf25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e44ad9e1409efa8b0ca473ae992b650c

    SHA1

    1bba427190a239b4bcaa78d04897b37833ccd4c3

    SHA256

    8606a27d82fc537e9c9ca5144ac29ca50ffe9e1cc781ee662a69bd73441402f0

    SHA512

    6a7185b9d42a531452d0ca4689fe370d6526f869c822f3a7621071ac0f62b86b0c4593b7e8a0b4f1bc515b78433d32a358205dc2c2dd0cf6aaa9acf60b63ec71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b86bd9aaa829ca8bb2ba2c7ab5ceab96

    SHA1

    e8efb23cb3a8f82345f79c93e185c1c864abe0c7

    SHA256

    3ac7d0fbf3f632719eadf57e0be62b162165f81ef4bb28508da038239a076596

    SHA512

    36b39047ebfb6c4d1ef537305acb8c12cb95b84d2b84bf9d87ed9cebc90e3e66c681c583d8104d13674b001a08d715fa35ad15d153b9a68384478481d90f762f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9e27caefdd1619b52ec650fc9bafafb

    SHA1

    17e5d0660d83c607862cf937012db38181bba2db

    SHA256

    cb8e55d70f5ccf8866e3b63b616427a4b07a5f68e799ee130bcbe85b3c8f3a63

    SHA512

    42dfe72d1950e35e6308e7b73eb59288ae77055ab17d333aeb1427832dac1d5acffc2901b0d2ba999e5bce6f61598d1364f3d1070aef09d363ec0c8374685acc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc7fef54d0c52cc1ac1b19bcecacd34c

    SHA1

    542475b217ef19a6f6351e21fde3f68c5160638a

    SHA256

    346f4e09e2da7de51f216ac479de12680f14826363eab8d79a373376d7c5204e

    SHA512

    27514561102e0b6e85766d9d52deb33d00b8c051fcf01c501b2edcaf3a3160c8803ae6031a7704d3650f76050e18f91096337618025780453718edfba5893b04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06a41ee5394ff1b9124bd90894a344dd

    SHA1

    7eedabed718808b6ad4157d1c26ea5969f5b225c

    SHA256

    bfcfd3439eb11444c9de43578048657d42370d20c2fbe914280c187ca31e64f9

    SHA512

    12b8fcc707692be0024ef0930494cf1ef5872dcf055750101a39b5d1d03b193bb3fb8b6f12fd94333d5217fd11fe3a1929cfc0743aedaea359cb4f38ce363e33

  • C:\Users\Admin\AppData\Local\Temp\Cab53FC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar54FD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b