Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 03:30

General

  • Target

    937ff502f3f97c94955715b142f40c83_JaffaCakes118.html

  • Size

    461KB

  • MD5

    937ff502f3f97c94955715b142f40c83

  • SHA1

    b2e5f8542993528a40926743892bcc07d56b583d

  • SHA256

    633844e4331716ac1edbe2908671a2a0defc6cf50201ec4356ec92b1f1e1b23d

  • SHA512

    9d90edf395d60bc83108d39acabe7381cb3a40bec419a995afbf55b22722d0f38042b627264db43ee17e41fdaf6ef58203d5505bc76901230ef58a093836e6ea

  • SSDEEP

    6144:SvsMYod+X3oI+YrsMYod+X3oI+YhsMYod+X3oI+YLsMYod+X3oI+YQ:W5d+X355d+X3b5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\937ff502f3f97c94955715b142f40c83_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e63e4b70d4d9bca2bfebf9ea21a9b433

    SHA1

    d7224dcfd2af51620e215233d8fad13b15b3b95d

    SHA256

    468a649e66f8f0ab8ec255e28ca21adb7bac433b885c68554232300762d68afe

    SHA512

    e7083dd9d2e5d6528ef0681704f2d551594307321e0315ffd956eb6d6004536e4c8b56c4236c349f4e6d1bd9c3333b39ac642dc0e393842cc9c7dbaf8e29c054

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7d084ee87b9af767a9058671cd5f248

    SHA1

    f3733661bd52e90c8994ad0406502dab4f3c76c1

    SHA256

    19e05a6fed790aae8b2d35700f337fbc7a45fcf0d7e62314ad9783c53f162a68

    SHA512

    6dda3a6b1da0e1a56e2dbd66424cb1e32373c89bb746e59ec5a772ce8b280e62dc293314f67423bad84a48820fb479c839348b5695e0dcbd0e09ceab621c4ea3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f4a62aaa3efac57ed0905984e40db46

    SHA1

    fd37c6d678f0de74839f1df53c3d2daf388f3389

    SHA256

    73fed9220188ed42e1fded1d579652853479f1513d73b940fc5d0e948e1a3cb0

    SHA512

    f05d66ca7ae1379b7e66a253501e1b1d835ef184d6fc69294cd68f3285bc9713701d1598afead9dedc7992af3cdab36be498cc70e1b4b7d558574792e612aa57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7add0682fabe570f2e5dbdf846dfdb10

    SHA1

    6141b10909c5fa428b2118bb2d24f9ee3f01145e

    SHA256

    6672fe554fa25a0fffdd33087bdf22cfba3cdf3c7689d1268601332736328ea8

    SHA512

    ccea2e1ef253371ceac3ab6934ffe757819a9de519283bb3964001511114f03229915cae074e20f52d066325132cc798725d282f6d16a1016a72972a37e0318e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61ffcdc67cae3ce4ccb4b0dbe000c2ac

    SHA1

    b2356a2a34a50e7e02b9f8e802a5523598a8fb1c

    SHA256

    7cdd312e02f97bacb7d983b67832c0bc8ed85e2b0d0b61f0ca0ec1f985c8e8f4

    SHA512

    f9b66fe25c799eec3d2f78ff0c8e9eca2e8feff769e28c48deb211410f0ca6a6345bd2d8079824b52c36ad2df77c2935f76ce072e55cdd7d905b4ccab499d986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae595c961c91e5eb1a326a9a5be41a46

    SHA1

    bbd6199c396753ca3e694ad119e97d24fc7f73d4

    SHA256

    ed9394054ba22a3e88f2baf815ff46e60997fdba4aa53ecbce198ec0c490a7be

    SHA512

    0fb2271b8280f1e6c8cba36c68c4269b79e5ee29aaad70be9f2c0e73ed81a5c987b55603fb09c86800e966f03cff27b8e8719b92238f1fd90371bb45cfe63d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c691b8a5c94fa7bb072dbad237b647ca

    SHA1

    4ce978450ea056a3ad081ed4e4889c4e4adbb760

    SHA256

    1e27dbc47823af687b7aa98bf05d80a298e07f890339015be8c26ec093cdbb56

    SHA512

    a348c4b4972eb8379391d3479d2fdfd125478dfe552f010c5e976698eba4d3482ff30531309e5430ac537345789d486666ffe28b936c429bddfda316b492e765

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4566e4acf4cd265f84a01cda5bf83de6

    SHA1

    caee710d9289336d81b7aaad7f306f2435feabc0

    SHA256

    4d31b659b0d87f56ed73fd8715f497b658901e44a16f080a6188bd833d0f711c

    SHA512

    b95e0cfe19905e0ad9932319451fd479a498441e65a7d82416741857935fcb140bc775bbfcca2e6612af359ea40e88ed48333c9210a4fb1e663a986e256814dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b510bca7d6f2d566c52c5bbd033a4d29

    SHA1

    d102ff867fc01a98665046713ea4f17994879de7

    SHA256

    65530c5899ee32e5cf1ff5fef369f025a2f8004325800b48dcd9b720bb768460

    SHA512

    de1c6002f0df07768a0c126c03d1b4895ef2622ecab537bce9af8a8e0abf20633b053ce6c7ba46c39ed5c9bee1dd8d37649636cc40f89858f75ea92c02b9acc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eff69f84b71bbb8101accb767bee73c7

    SHA1

    61704bf863fe0990bea6c3ee8c2198d3e2db8a9a

    SHA256

    01fdae94e3c35bbf404d6a54b226d2ac6c907beddabe2f728b27804dedf3e085

    SHA512

    944f0d0d13eb126e7c7ff0097b61714decabb47df7fa1caa3338d5439d78bcbe8d1d2392a185172e9d59576da27f2a423d7bb2dea01eac2a476e863a9d9f0c3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39f3abd00c12e9672fe615daf924c78c

    SHA1

    3f805916d9378406d3b72eb995110fee19c00ff5

    SHA256

    0f5e964eb72e86d640b005780df3ff5e53b2f82956ad4c52a39e940fb086551e

    SHA512

    0f95fffaa770e7fa5fc0ef639fabe22e8c4afc4cd737f816af9106f36b8440d30f5da209b88c41a4fdc3e2268a4aea18dba826f0c6402ec626fa4b6fdbbb697e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed2b1f1f2c9f535ca115ec2096413a8b

    SHA1

    b491b33d396179157deab9901e681ae4f1ee377d

    SHA256

    505c780a8df3f3408daa8384c6e50638b6c4cab17e7beded2743df3f8379def9

    SHA512

    5609a357750bc4f587057ca8f39b42a8c3e5a6b47e50ee92e66545fda20eaa90915392a2efc3a5642255189aba7a4fd651148143a83395152600c09145bd23b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcfadeca9ca7dbc43603a2105a2a9251

    SHA1

    cb8a8c1d2cedd2a0021c46d50991177f6fa491af

    SHA256

    8fcd2f85ea992dae569c7062396d868b1d83825920552fb4cc325d63d354db03

    SHA512

    1f734cdfaf09fd7c7673485dc25af1b82cb2b9986187c9fe36981bf6d4249ee67ea0ef7042df06f0a41e28e2f8e7a8d35c4d68e2bc8d3e6fdb1386e15f9e7bbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99cda1f0df2937abca35fe1d4d2865ed

    SHA1

    4c21001d6f2de38dd6aec738f88d81cd664c77a8

    SHA256

    edf8e4b6f9dc6cf8f9c6dbd96766bf1c841888cdf3c4b21d25c04047f6d2b1eb

    SHA512

    d5161de2adf430f255689cf5a41e3f8db5be40e6d474c58b0e292ba18e2ad7c39f8dc929f63f4c07d894b8805ff4890a458249f1db943b91cb1cdae9a0f1816a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e82f1d64259315e2eeb5199c6887c6d

    SHA1

    3577ea94595bfa1a93e8dadbb6b397993fef9ddb

    SHA256

    e9c9cf5110ddd216e61d3f0b3832c40a530a62bf5f80b2a4c53db76e9c07375c

    SHA512

    5c0499f18c85f69339f02ee3674810af894d04aa9826a775969b1683a7e08a6e41af9bd20a544215dd17aac422997a810d4c837a590a1e4c75c0afa126ce8fd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    086e8347f648d13e04ddf55bf855591c

    SHA1

    feb8c4774ea2c44fe0060651e670fbdead46b2f2

    SHA256

    0fdd0c1ee69fd56e41881d632a1985e0153d65f0f1311f081e480d22d623a4af

    SHA512

    b39b6ee1b3889f6d34c799b0c17f860308ea11fad10028806f8e9383186d24f6780ccd7fa09ca6052e57331da9702260d2e96e768665720ffcaaeba7a336bbd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5ac0b71a15b99881802923e54076a8a

    SHA1

    f257760c5f7280ef990afd5e749aab05c0ac5344

    SHA256

    d0df08e6f835b36c12b76c64324237b6f2f02066cd8a25f94c7ba40048cf46be

    SHA512

    a46eb72e493cca2796131a01037e3f41cd7cb8d9b24d415318732954a96a32ff042a7875f66ae10e641f50ddbe0f91273a250b64cf47f88f928f4a212c1010af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    346d79d8d9ced36c0fdf7292c0affaa6

    SHA1

    efe3fc4253808f0a9682c51b0d5c94661e36dc0b

    SHA256

    3e45d32bd569538fdb520a4610712f128d986a6e7e56b8c0b670db4b978276ca

    SHA512

    48d73e58ec98958c8e4ec47bd220529d44476f29724a50c3a1ef5e578ac91462ab6aa3abac75a67153edfe12c4835a08412a084ff9e3d4024d184545df84d217

  • C:\Users\Admin\AppData\Local\Temp\Cab5728.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab5799.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar57AC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b