Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 05:59

General

  • Target

    90c18501f9651d57947aadbbffa01ffd_JaffaCakes118.html

  • Size

    461KB

  • MD5

    90c18501f9651d57947aadbbffa01ffd

  • SHA1

    900ffd09b2a25e2c455d4653951e9534920d6ecd

  • SHA256

    7224cf1ce9b1b07c7289942fdc4315690251db7f2323d14b911569ad5788b05e

  • SHA512

    921783d0141c45e249daf54774f545951b395b848d02d3abb66e7be2108c8994e95368e86b7c09dbf493ae12119824a73b96d005f510d0968c68c1d164744182

  • SSDEEP

    6144:SLsMYod+X3oI+YC4QmsMYod+X3oI+YwsMYod+X3oI+YLsMYod+X3oI+YQ:y5d+X395d+X3E5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\90c18501f9651d57947aadbbffa01ffd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26c970d4b0e3454231d525d88adf1d32

    SHA1

    818861bbbc156f4613163a9a869150f22c4616af

    SHA256

    33df8c361b4d5f51a6f6c7c15e35b399454e00f60ccac30e0529f96ef62db148

    SHA512

    05f3dc35041a3f7aac623f3be10fac62c86ef6de0a2fbe38a15490121b0a40ef1ebf51c2962c7917b810259dd35f26f4a8ee206f79c13f063f65b6ae369758cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    114b17c3e5a5067df2b4fab41817f7aa

    SHA1

    ee3db33b4f57bd79cf8c9ac66b5550d91ccbdf16

    SHA256

    d37175f78d01728243c03698a7f2455a281d434fadac5f65849348823789745c

    SHA512

    f7bd346a7a146959fc671a0ace30faace1e6754ae14bd5d6b1d3b69e83d2a7c53d80c623ae2a737bacb421e14c8c45e3a8420f605b27fb38093f448e1ddd8d3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    977aed92e1205a4192fa1ecc0710e658

    SHA1

    8d98dcfea6d0ed2413c25520e5dbb12f40ce5623

    SHA256

    7e23baf93fd6c98f2ba3125714fda520f78bac1e0f766a76dac6e105083af24d

    SHA512

    9e2f115f376de83b987cbc4404218517d72d7fad6654290788ed8233bc6b3c106177c1deb3c2c739e8736cfdcf7a781f98822c5cc122936c217e2594d112a14c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f1e41abcf7c41b948601d4c8054d5c4

    SHA1

    019a5072bdb0de216533b3454239747d8dd725f9

    SHA256

    ddb838c801510d01ed460fc8ff510bc6ae1d7d53b5afca626796deed8a25ef9f

    SHA512

    4508f8d8075b770f38b882d2144c4d5ae459227e620b24a9e5ca9c24a75bb8aef0707d1bc629febf5ec151e955e1fbd00411565d1df8b25f00da7203bdac9643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b239ebb8ee028e2690bde1e333eebab

    SHA1

    b7c73edddf5f33d2faa642c275c16b415121d67f

    SHA256

    2041eba641c45cde190f893c32feaa92e55a20d9203a520be62eb32a4ed21475

    SHA512

    16416487bc5b6716e44d03df4b5e098a1ff9571164730f91cbb363f4823305b0cd229d77791c2bbb6ca4b476e3565cf6725b4d1156819315b96184b9c491183a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2035b975d0c8dea7bdbbd579c5ea98e

    SHA1

    7f4b39e645fd3df0502fcb2f179941db08cd89cd

    SHA256

    ddce57f1569349c9bf84eae19f06ae480b5f188456d545211b0cf1fc3bc906d4

    SHA512

    c3cd6861136f25f3c397ff476caa969f612db421953823c3b74df0ffbd0c5cddd43367d2a94ba470bed5813a18ec8a3fbc838a1c089e374dbf643346bbe9f25d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf00ab7b7e7fd814144674e8745c3e25

    SHA1

    51f66479800bee510356dbc440a3067a66f73640

    SHA256

    cbb0c1020772961041b0971bc7a3ff58fc6614d19893b80a7ee00336febd633a

    SHA512

    0a78002b6d5cc22f9b00c6b427f385795bb2a6c6b3276e853903272019d571362fcef9d364958a0ca5c4e6d905d7a0750cbdc15b83244fae626df5a65fef5391

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59d9b76192b37b6be65914dc9b1821aa

    SHA1

    40d23b5fb6c1010ca7081a62e495bcc694545e55

    SHA256

    8d1ac4f51b8b95c36c82daaa4b95eace8155ea6c7c853687661d0f6b12e12a83

    SHA512

    cb7fbb38bbd34f7b74cce9d71d1451d61bc70fe5aa8e02a9350a58c4b48834ce2e39ab7790dcad38705eb605e0b660ff16002efaf49f01e6d0c312a3a7dad11b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c9316b0ec0187066c13b264445ffd59

    SHA1

    3e8ee448948345bdb330cf743ec7de03334694e8

    SHA256

    b653bcc85c0b44f79ec4b6b128bc8bdb73a93ac5d115cfa72ec51fcd2c287872

    SHA512

    1ec877745b32bd6aa77c49b4e50d9f36a4ab8116ecba847b59c2293ea0bdee150f70db7a623f30420a24ed56f1d01a7ec7afb7e23475ce32611e6494a756cafd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd17fe5b16144e67ca59b802d1c78745

    SHA1

    d21afe07a9d855612500579be1081cf171c2a879

    SHA256

    914dca1153a796cc1f2e933a4c655246344e2d858252210307decd71acd9a61b

    SHA512

    f4c0b823f25c686b34227039b04dd7e36c3aea8abbd13c1063f856df4d930b91aa6bd7cd0237fc04ea265b296ffed19b6e8477d55ebee94ba292c2d4268552bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d730a92b757c457f725b66367fce2405

    SHA1

    1dec7da7d46f76e5087706ffd6b9295bb2d38bdb

    SHA256

    d945e27a4507100753fc50bdc1dc38ba05f5d5353ea641aa3edca04d9e709576

    SHA512

    30dee88ac923c95c4699eefa2252a951194aa0c5f97e8d44e153066a12271c89c25cd7130c15cf13331e86c025ebcd448ed01ac9f6915997dd76aa6f150f774a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f4a06ae58acab91f48f6656a0805b50

    SHA1

    ce6f25f0ce5afaad6f300f65cc6b269dfb7f41d2

    SHA256

    3c6fb3e7eca7ffd789807662fae2e63894d2bf12894af2502810e1ea5802434e

    SHA512

    6c5889b81513f73089c28a43131538d6695c61c73176b2b3660baf8228b10218a7c478c7cf95beb1e43d6f7618722b06df1ccfd8e151ee3264a15d59b505d0c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3047dff41e41805ef119ecf763af2f6

    SHA1

    469fccf639e4bd4d85a4ecf6fd20be75892630ab

    SHA256

    969e26f5d369fc7575892d7e6df411d0b1b653f2f9fca12fca358855192f7a29

    SHA512

    b8d32135c13ed195c7e681e811a5513c17942ae58662050a13af033120a5f06b57d0c6602185f02a510fe5ce13abde835498c46cb6825e3df859470a5196c0c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35be76e763936c62cd1a1f8fadb357fc

    SHA1

    1872d85d0ba39130a9b66cb126157715cdc1072d

    SHA256

    b314f56acf18fcdf3ddb3716d1bae32696225b1ffa669d77bb96ffdda3580e56

    SHA512

    76b8d0654c751ab82459cd2bf3eb8e74fb7317f62ddfb4e8f958ee93aa9ed1c5acf436d54c5a5c4b1f136ba572f8512bbac710d2e652d2197eaed57f770e69fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00dd15d274ca2dd14df93f1a991aba5c

    SHA1

    5a6a9d7c9dcb55733e894d7f18d1a44a57328c22

    SHA256

    f95d1b016238c3990495c8da659a842fd5ea06062befc4b84ff74ba2df8f14b3

    SHA512

    28f22ae95c4c19a96c8d83fb1e502d4f35d470e5d3d449ea394a8a59a96751c75497618c62ea220e1f877f1cd77a7560a4062bdb9acd652f38b137f33331f1d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    658877ae0efbf18cade81134fe3ddfcc

    SHA1

    fff5d0fae7e44fb0eac2be9dfaad58008ae64c7c

    SHA256

    e57a4af5a3a97b0c7fa2d52945aca1f51bc83bfb05205caf1fbee6cfbf8842c3

    SHA512

    a4027e08fbd5df8316bfdb2a3f4fa61ea809de609ba9946f7208505b90fbd965a0c952d24d273f8b673bbf3530d7b0b26ec325954229c84c2fc34f1879162a6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    777901b7672e2bdadf0dd85a92c0142f

    SHA1

    3e3684a98d0817687a351f0cf575c37615b3767f

    SHA256

    99c58ecd5ca1d97fd30532dc1f312a45f7b26793d698cc153b4d5d3983eb2b93

    SHA512

    e31173b83222d387879c50d79844c457582bca58ebb5500db50dab1330f8acc1fc1d6e6395be05639c48e8d22f74cde69833f1b8954582995b80c9032ed5e855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6ffb63a78d01858c960cf5182b5a7ca

    SHA1

    3bcb9a617929abd70f67a284975dedc2de777a08

    SHA256

    a9069d596b214c63ed40623d5ddc08ba9dc6eb8a1e47690c5e7a98bbd5ac1b07

    SHA512

    8d55df6dcc0a732e49371f70c2eda20d591b36dfabebf08c1b9317a0ebc53acb347cd29ef8c537e93f2f55f7dd568bcb2acc0665fc442d6caad002a990486319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1aeb91e3a9bad3a0b58401b5ebb6573e

    SHA1

    9fee19aa4ae275e137333935791787c2a68a72c7

    SHA256

    6c93f3c468906b175656095ad9bd7695bcdfd748edba04298208cd566f522a68

    SHA512

    7ae7be9d3fb4302fc6b87911222d5a7f30da93b263a8a452c3ab9e8361eac752f7336b727844b37f995875445c0d5dca6038d7f09eb4e8bdb06a9ad1cef9932b

  • C:\Users\Admin\AppData\Local\Temp\Cab3EB8.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab3F37.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3F5C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b