Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 12:53

General

  • Target

    91db51bd796c958084c8ecbf36b0eae4_JaffaCakes118.html

  • Size

    31KB

  • MD5

    91db51bd796c958084c8ecbf36b0eae4

  • SHA1

    231d6462b2eafd3927b29366ed770989bca3f32c

  • SHA256

    a0df0f9d9c3d92dec8d1ae91eaa0252da4adad0ab50a16b2e6593d0e493ccc9b

  • SHA512

    e9b4d2e0e9a5261b9a4cd3c768f168d3fb92f62f6173f25de3871b87f0f69da9ab5521f208b54dfc07496dd96273a9714260f33fb4ea7b7ff1c30788a81f91c6

  • SSDEEP

    192:uWL9b5n8lnQjxn5Q/rnQieCNnnnQOkEnttpnQTbn9nQBMC2AfbLU/IfyINcsitOM:HQ/1k8LuxVP2ZIAlklOo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\91db51bd796c958084c8ecbf36b0eae4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a24a37ee90fb3a9ae2b40dee825b616a

    SHA1

    9449ac4f6e03ce15a95a83b54c2909efa3a888b8

    SHA256

    2ef6b8a5df3c13be26bdd97ba4d4b83ef8fceecd14d8e9b35cdbbb94f3670a07

    SHA512

    f2c366858e9cd3a334bb833f203d394223d1daf926d27719140f191eb99db20a5f30bac938388207ca965720d6f9a5edf7a02f2cf50337dbe3ec499feca1af8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    531aab13c4aee6670fad54c86dbd6fc4

    SHA1

    f1f057a51869b8d52331a80c813ba3c1aad02e23

    SHA256

    8805f94d0d6768e1f09fa573f217006cc8d73c500cf3194f871c718b54d5918d

    SHA512

    5e9728295389a7bb376c9297ea18f088b13078ecf4092d04347ef5bbdd3796f1d5102616099ae78eaeed29c3f5670039a13d348716e2997946084c58e1f655c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb0867b5f530fbf0c8564d15b83e794a

    SHA1

    e94a60b552a0e42ccc95d917ea344dcfae36fe77

    SHA256

    8c8106536de185b01145f12644a1f10ab78dee18ac826c39f183c86d6106e321

    SHA512

    0a0ea4a8c1b80878747de7e48a1cd849e1e48e39fd44607047489840f330a385f7cd1116700689c746d102eeee7ce7120f08a35d184d0d3c1056555a26d4ba8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1502ab0ff7a35dad19cde184f6404ded

    SHA1

    0e87f2cb4bef4a6fa2c0dcd05a577ca7f7aecea1

    SHA256

    6a271c72d38b6b615ec641ff72df06207f396ed4638e6aee4479c75e10687828

    SHA512

    4bab77e6643f0d73090d4fe83b0f46c4aee9401d28fab3e48bb05a461ed4082948f7d919e64891d532e491ec44f8c44a9a947e659d24d2e0bf08dddff19111ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb02bade80b95ef4af1f00f37c9af384

    SHA1

    76ee1aab79a6f20ac0cd4050b0888e17b1f299e5

    SHA256

    d200b9d7dadc7105f07548d63f6cb0f498ab61b9f1f290ee3f1de846e9157b83

    SHA512

    96c2d20550b9bf0e464357e361df9153b06abdd4bef143e18acbef7756a78ce7ff901f3c9a93a2e97fbc82aa65603f8d14b14825b3ca6eb633035914092e3611

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06a1481b28d9f6e96c54f4880636860c

    SHA1

    38e96db10ced960bd6117f64426beb58839ccf02

    SHA256

    8692b4a08c392daf87548ba01a2e71387d92706c42f477b72bd0e5c32debb5c7

    SHA512

    4605ff77d7cde46362bebe4df3b9ded9063f1b22b7cb46f24dd9776208c62c62d466e84ded85a51cc3f65b973a2922b27029608af2a15a4f3224ee1e60624568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1f0d1bac7aa1935c73e932eb8141316

    SHA1

    e9029b64ca976ec34a2c55ef44e7674cfe06606d

    SHA256

    80f2e83830dd487dc1f7b0e3d538543318394be6d9f4ac43d6f14f0e93c75e3e

    SHA512

    904ee4ade48aa6741fcb71ff9c8154a81f3ca9dcd9865fb97e7e1e0a67f65cecdeb0ec27b15ebf8705d85975784905bc84ae3ec1aed9429685286409ed62dcb6

  • C:\Users\Admin\AppData\Local\Temp\Cab8DFE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8EE0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b