Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-06-2024 03:50

General

  • Target

    938ad5f0c78478f3a4ed303c1b21b97e_JaffaCakes118.html

  • Size

    337KB

  • MD5

    938ad5f0c78478f3a4ed303c1b21b97e

  • SHA1

    8edd524b97496896dff5835f45fdd29e3bb83c34

  • SHA256

    cf4e6d99780e8f10bacbb550a95b1dfc09512e25d806c83ed5b528d816429184

  • SHA512

    d0673ad0f89920bd1685e4c78a1d7eee39495df20e393fa65e06756e985aa01e5d0873b77ce33e174e6250859ebb0e5c3159fcb20e4272d711a7b517a5657f7f

  • SSDEEP

    6144:S+XsMYod+X3oI+YVsMYod+X3oI+YcsMYod+X3oI+YQ:j75d+X335d+X345d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\938ad5f0c78478f3a4ed303c1b21b97e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1f8a092e731a5d34a2073186dfad113

    SHA1

    e5c830a8f349edfeabea22de917992f6c1618161

    SHA256

    0571c12376b39cc9ad303a4133fc04ed95092cc477e6e75de940373ea2748065

    SHA512

    b425d5376bc7876952a1607bea4f36652a68e85474b78f3de1fe61e731e353e76a9c6aa285e2d2b64ddd8e0495f2373b076cb8b99c24d26dfd03a00de5e24358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    494a0898b8c12979aabe359e6d1b3dd2

    SHA1

    ac0b6d4a65079b161996833196897d80af3686c3

    SHA256

    03a81f69d2023bc321e33a5347b1b264f9d0c4f518e45577f285566e9da7a715

    SHA512

    575b211ffb070aec61387924922fce8e9cf94fc69cfa95f45334524ec26b13dcf713f3c8413f04346b41fa1ef591abb2ddaa0252939dc0f5520fbd8d03b39664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5bc8176698a7a58426f4ca938e0e342b

    SHA1

    84378b1a25d684aaf57de08037237cafc456834b

    SHA256

    96448b8fa1c35adfcd577fd0e02ca98a18baaf1dcd7f3b7850f275aee1d50fe1

    SHA512

    06406a89caea0bad80d30a015ff811b9029d231440d21e888db88ea3d0f19ee79bc397a0d5bf1119e92b29da106b46d4ff6c04716ed00176ca8ae9fb5ce801bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b9831bce566809282b4e42ccd3dfabf

    SHA1

    ed83ef62686179a7efea629ef683284492099d8b

    SHA256

    fdc7294ce56debbc73bcbb29f215880e8d78a83c33123690bf3903770d1cb4cb

    SHA512

    0a1b362a2f57c818ed778f13f5d7fe50f92b6d2722e33543cae834709f07693fdf38baef5deee315e7a756d2a8e21d90b024c07a6e00357fa4bfda9f84f4bb6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31e1b42bf588f0ce8d918e01ae818aa7

    SHA1

    630dab75b84e09fbfd1cec8f25115f80673e5689

    SHA256

    92b83f57b523b5f46cad6f7ef449e0429349d110e28ee54cd1eef3e78327f217

    SHA512

    faf0ca7abab836b5983ea9f676246b4eba67ff0836428da871bb5cad231c023b61f6d4010c07e1aa0831b81b375de77231c2de7c9185d2e252c526d7fff8edf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cd16fce2f590873ca57e755ba51d0b6

    SHA1

    2ba5ffdf0007d7cdf707ddf6dc4e78c32405d52d

    SHA256

    7973320927528532ec4982f397f9450f36f1665d15857a84474b8f10537491bf

    SHA512

    6ba51427da0509c7768b24748b60ac2802d2c9de9ca7896ea4be600622a9664e43837e10508a7cca9ebda46853c6fae2a53f8c16b92ab94f7528926ff27c628c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    113577422599a94ae25f3b5c57ceefc7

    SHA1

    b082ccd8f1d8cea6b01d0e1ba208199907024a08

    SHA256

    b22162f3962ec6be07aa2f8807097ade79157dfc1be5979d7e383e3e423e0048

    SHA512

    255ca3926ed1da974394fc864d2ded2ff4b5cc342ed37039430bdfd0e32bdd701aaa7133dc4dc3662c18336f061f35e41269ca15a0044d1d9f618a5836f39217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4424115679e91315b3cbffea42789b9

    SHA1

    d8a2c74d61b46b1f33cfb4713357bf5b99f41821

    SHA256

    241c4355421e606656679d7bab79b92372db88d0e11ca572cc04309e739d4b35

    SHA512

    3f2822ab3cb984587fb18015800eb0f9b4ea955d4378f341189708769991f0c54d80948e6725fff9a6ec1dbd9a8581629a73cb8cca844453d3fc5b5c19a4296c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6863f9aa695a48879e822e9d2bf38b30

    SHA1

    7f1a2b60b25e3232b0679ecafc3100df6b05fb4b

    SHA256

    069e2c13f714ef8290ae329f2827c3c7d7d0b45604047e0c928674d56fea5f2b

    SHA512

    0ece33353dca43059cf5eb0dd5bb6d949892ec096cccf68c563e7f2c5ebfdcf91d7c660685a97010a2c61df211a1a3c78388af3d0640fa4b59eb70b535f531c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    722bdaa062fb9cd232aa9cb1e988f729

    SHA1

    58497a430912c370ab086ace42927de1632812c6

    SHA256

    08d239c58af0180b19fbbed0014f9ae5de68d2ba5b927c552f4661655c016419

    SHA512

    0654a70965ec6e1341d86e2992e58a564cc745865a3e0807cb0367494e2720675224687472f04164b8c184f43ad7835e622e10cd25e5879ad0f0c6834128777c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    950872053017fa24f89a7a8ec06d4a9c

    SHA1

    f53ccddc06745e8dcf233d39b6cc7ad11ad9282e

    SHA256

    bb680ac0b647f385c99172a5e521140b51a5a7f473cb9b029cd9b06fb9b48850

    SHA512

    f881799cf9a6bfb7b3833691493c25d98e78a9fbee204cb75d379675d4c8fb3cb700e2a087e8c5d6eb9c2abf80b7d9719fbd5161327f07f633c43a01f9154292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb466868cc4d9829ab8f8debeda60300

    SHA1

    7e06908a8d926af7744ce8515f8ae67f2018c798

    SHA256

    1404b82da679ae44559b663dad86b6e41247759bf5ed68965b4b90c82fd42d5a

    SHA512

    00b6d99d30450f2c1d3d57f854849b639999a920b73f6039ed08d9fd8b684cee713f3a33d27ab6e6a1ca51f343a9d0d946d6cc85de408218c7b7cf1daaffa823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7b7ea69f42843e0603000331365f0a8

    SHA1

    22c375ce509e6be3f33dbf70cf3ad202f3b1aea0

    SHA256

    dcfdefdcd7c5c19f3cb001603cdbe79e4bc231f27921874bbca33a09d67daf9d

    SHA512

    fa7221b7f8d7d24e4c24759578404afbfa7cbf90d3f588353f96722990a4156dda18b5007111d35d1e2609880b7f2446e15a4dfe422e558327f9406bcb344dae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19ef90b954c87f850510b3dbcd442d6a

    SHA1

    d2618ebcc3f3348ff9ecec8462b338d9df31529f

    SHA256

    905ece0293fe3ad6281f539897e8962e49cf67f2b84098f16ab66bc8c94f9612

    SHA512

    ad0567e23e3ebde8f00b967b12bbc577863fe19e64873727f485a6f66e581de397d19de25d5a537ca009dee7acb9d5d5aa1aef0ae131313e32c6f0d41fd0c751

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebd51ec60300d9f33940332baaf85d51

    SHA1

    932fb8e5fd97d7f4c1d9cad3105ed727ef5ee2cc

    SHA256

    b26cf49e17708f38e16d7139fc38bb8877820e2fce3e88e062a500991effe28e

    SHA512

    c1c4bbd39160d9897418571f6aa84bc7b44bcce9bf5ddb2a4c2b03d4634699151e5773ebd95d752c597bc77c2b375d4a962d8516dcab18fcf4aa2a5d93afee89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0857918092a55c42108910b134332ef

    SHA1

    cd664b05cf80f4df92a171d08e7c09ccd480b473

    SHA256

    db219bf2958bfd0568475444d0ad461c9755d977a653253cbc683730427907d0

    SHA512

    ab104a7dc5b42ee14ec55f9f73e18c4f59b9c1797d76dd1b2f95d06eb035af77b4fcba0a532b85b377630c792066f976410ac01c78b795f1e3dcdd44b9776832

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f99e1c9d65d9ac53a903992fecd4a4ec

    SHA1

    bbb0738399fcaa513d32f0f6cdb3e546ffcbbd27

    SHA256

    e810d3cd2a944d25aa18e8676dc84afdcdb489945e2b931df4fa0d480beccd59

    SHA512

    5499ced4517b1c14d52217d38c00f4ad4eb50f7417c900657f6783a53a20bd8ff27ba4cf8ccb8c4cf7de209e14637cdcaaa8da1f83eeef2bf222c0d887e03aec

  • C:\Users\Admin\AppData\Local\Temp\Cab908F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar91DE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b