Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 06:16

General

  • Target

    93d756ec19ca73d2ea8db82ce827ab8b_JaffaCakes118.html

  • Size

    109KB

  • MD5

    93d756ec19ca73d2ea8db82ce827ab8b

  • SHA1

    b65e9b3ce3bb3060fe5f0ccd491ed4ab3ef8f3fe

  • SHA256

    efe4addaf023d39b9317289ad09a2f02d1de5942c4413c83aa543122d0f19f8d

  • SHA512

    7edb6588193a9fe35f3dac18ce93ec5d4785ec43797ac5b4c4fe9942e62b521d61cfd2bbdc85995acff4249637ef2e17c4e57cac2a0b6174500832b0fef38251

  • SSDEEP

    3072:Av2Zspf9VdQzSaYQ0McrQsSze1UxVVCWQFG72pvyzN0N0:A17QilUDVXQ0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\93d756ec19ca73d2ea8db82ce827ab8b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2616

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e2ba5a5a1ec33c44db5bc70ea287c33

    SHA1

    a4eb714a58c2305654eb6a07ae37e633862eeb7e

    SHA256

    bf91ee329c643b07d2d3e890ae3eec22b11eb8ca709f70bfbd35d69639235566

    SHA512

    15f4ab3980410ec03b257e14caf5bb9d4ac182a93e9702a9ae23248a121acbf9d12f580540151a9f5732762691c400cc010700de923d8ce64d5543920dd51346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc8b24661630a12c689066b5a7e9bd56

    SHA1

    c4cb856ff27b6f85ef65db5ddf6eb743991e15f5

    SHA256

    2850bf0c0daab997e12829eff3b11d1ac7f068088f9639ebd9fc9fd9e930af17

    SHA512

    b49a878cdfec2acc1789238a63f0dde42cce35ab6c7da71dd566cf4dbcd21a5ca3b1a13a19d267b6b176495ab22c48e08f14d576c78b1b315e25344778ea8de2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    570bd864da4d4cf10972562ab9075e70

    SHA1

    7643c19097b42f86faa1486328989b76b41e84b8

    SHA256

    d82d4d07f819cb92f5cc9f653a1c36e1823078ae91f920d8c0fded3f24fa4e85

    SHA512

    e8ee552fb7df30d51e72f27a2b7aef47b7ed3e48eafa299122d43a60d5c410f8bc1f0a112f1e225203a5fe8400ddc42ab41b2324333e0175ba6fbc4b5988a84e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    276e9a1e229c8b0eac7bedc3d49336a1

    SHA1

    942912563cf55c1d96ae8c1f0bd996ee3dcbdb16

    SHA256

    9f61d09e27f92fb6737218b02454d8013b5ac8cb4ebb70884575b3125862b264

    SHA512

    480a7a241715c71445b6e44560d30d1a5e062aef24d284230d0e1491c812422bdc3a0490e5b441e70c061148dd76ee1aca5b2af9be914bfca02fbae872c227f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66b4a0260960252e17678f7173b74b4b

    SHA1

    ca07033bb8e9a24d7bd51f499803423aa02e7a52

    SHA256

    ae337198d1f2a4904e9a0ae06e356dca4d0059874a1e512758614472649a42f8

    SHA512

    3b808e67e7efc6f82b71f10b027c8ca118b8940c6e6dfa59bfd88e19742e4d2bd1a90dc5cc688d27ba724b421130805f8bc501c30a9a683352b36b58bc3f1fcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a196fa255bf2ce9614da8e27b30e464

    SHA1

    e014deb84d796573537d1aa926f3dc6790b93f06

    SHA256

    c8c12beb8d7bc6298170991449c2efed3c1c0366a5342c64a8e397b051965089

    SHA512

    de81b0e614aeb4bccd3cdbb5b9b41233e5664860ab43d01526d28c68a70f33a891d5a219bd81828abdd9376540dc517d2bca52f4b73eb458e60c959e62851192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cc6d49963b8ae3303401dd8e559d261

    SHA1

    4d83673bd4df1439f05dc3930be57ee3388fc514

    SHA256

    e3f31407c35153afa0a3546b3636c5b164f13c044e65ff90a1e1ad00484c15f7

    SHA512

    193a23d23c0e0d37d9519f9603c08b7eec6e74e64b9b4acece4e0f35a75672b9d68af794e655ac5f109293df893a0776ce4d55d93afc804e8063b35fbc6d3610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9785f781c2daa0802da826d2d99d5235

    SHA1

    7f9c9c068fb1c43979c20c26372353fad0ef51a9

    SHA256

    6e8b8ff38748022a1dd649f4ac1f58ea7ea69e4c882770b01deb23553b5b6e2c

    SHA512

    21d052f0288de8973a5757712e30d33a33ae8dc41b3c65343818a9625a5fa991dc6fa5a6b1ad3a39f22566986133141d547bc70bcebfbcfaf06b5efef634b1fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0a583e22e1f774e425353e80be280d1

    SHA1

    f0f4f76188740ff2ca104b5fb7f16dc89d6090cb

    SHA256

    4dda658ede72b437bc47cde4618b4afaee0cdd42b8c8e8cbebde096132e7647e

    SHA512

    de2bc059870d4512c33cf84e81765a269cfb731f4e7a20dc4c51765ed6067650db77d2ea5390cd3cb001ea3846717ed8fb7c94971b6052ac0981011e0b90c362

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b4bf7df665443b473b7c8b0b9e4347e

    SHA1

    912c5b44f7c130b62a2b05d3c0e08b3b8c02a955

    SHA256

    6d16b661ac532a5f8ce3ef9eb2759c1fe20ca1f5a95e60f61690bf78eeaeaede

    SHA512

    d0a3ad3725d3f8ffad88e9b38b8019e3a127bdecaed7c35721ed4c16a009f495554742702e2db38d375ea82db4aaf911a205b9e0bb7b4c088205383d7f3755e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b7c07d6c118adaa53e8a7aac59bd0d2

    SHA1

    58eac3292d9c148d1aac447c4adf721e508aea53

    SHA256

    b32d89cfb23e2606e1a62f21c3fb3aad0723b1e86b7194a82f159e64a2c535d1

    SHA512

    70d66cfd927fe97f6685384c973d687755fee3cd39462e33ca11f3ad691d91c9129c95d7efef553ce58bc5b7a0b026615fe49f65c2a2be05b2c60a79adf8717a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4e9b0a3249d2c063a1200d77abdcaac

    SHA1

    f7e591fc1a5bc22ba2323cd6d7e1168b2d2a6e8b

    SHA256

    7a98dc762c83fd67aa6042c52a4b5fb754901be60e99bee05120fc8a71f0ecdb

    SHA512

    0b6eb095b8ea4d40ee4e3a5c02ea19790f26ec38ce75cb70d200484f17b5415f42aed11fdb712ea74a02d0fa162a82de6c6de388c43dfac5c5b332bfbce4f92c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    935c315f221b60130b84b6218c3983ae

    SHA1

    a9944236bbfff61e76cf4a6c65eb9019785f24a5

    SHA256

    d3ca1cc13580adb87ce312b633ed4e96a164319eab9f1bb078d60f3f6bda72d4

    SHA512

    ffb3d1d22466e7a1f58d1dfe65a4ab4318ebfc2b8666867a2f666cfcd7ffcc8a8385c580599108468a61c88d1cac102054f25e35f5336d711d6f5a7b02788287

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d45f5563aedd661fbeb2feaa55e53c5

    SHA1

    8da44076ee7fad6848dacd220492ead225b80a43

    SHA256

    64f189e3d91449bf71a44c0eb6efe749a5b8d578edff7fa98c9e07b47c05e9c9

    SHA512

    29efbba80258a036e63783bd7c2bd38639557325a7d42f5392b10a21b304ba86ccfb7076ac411112be9d1b2ba2e15602404bdfcd75ba8eb90327a81ac4dba068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e34690281a6dbce2d8f54254147dab24

    SHA1

    d860c85cfd42ed6175dc425f948064e01a1cd096

    SHA256

    08eff88eda3e190cae63ac13c1dc9f47e6de1b1b66ab293316827a80031f866d

    SHA512

    4e5945ca0e0034f82e8e31cf39949c7dc9238566e70f25945f5ebd3f0d86cef8eae40af587cd8fb82471d385646e563ade71e4208fab318b8301143af7177e5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ca2a6d3f10dfa2b283dd27a21b1968b

    SHA1

    4dfe194b7521d9587914137d242e4cc8e6b05157

    SHA256

    fd10ff3fc266e38875fb0443cfab6a1ee3ed58d953822ca8a46ba68beb677f71

    SHA512

    7088af76197884b6acc6a0d62aa89572c5ed1ab04dfea74c854f6116834f2503475fe8d07b2526644a1d928f6aa040fa36be1f5686b182fce39849aa1087c003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3aa3694386484fa80c26f11ae3c6b18

    SHA1

    0b2ca218f5e1e5783259855cf7c6f5febcc06dd5

    SHA256

    548ae1029b1ac711e39ad90fedebd8099920b1a8b82b3eba5b847e5d316cb1fb

    SHA512

    1bc98844d4e99d3b80bc1e0c6c91f99d7a03360f2188e0c0cedf2972015767730ab51ba642b2030f09ecccabb2ea6c87dd2d7aa4a83690f34d7210cc88257c3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43f19de0524b82d6fab4e474c2331bbb

    SHA1

    a67273920c00324790730e8376ee42d99a3acbdf

    SHA256

    1e74e4d405a224e8513cd94aa78c289102801abd587d14ec8a43b937dc7e481d

    SHA512

    28c7991044f07a8c8711bd30092a5c87f8c61e49c447aa23284d998389b0326e892f505f0ff9b1d708275b4606b1ac55b05759169e0d57afb6b165c4e1051e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    044b5d49ea3789f1c8ae47a4c08237cc

    SHA1

    08a8b34023372f814c65c148ec8270e1f2b09245

    SHA256

    b454bebe66673f51bc223733ab08714ed3a4802c64faf5029aa1f8def0a7c479

    SHA512

    ea409abbb7a8b1c32bf8716f25a6a94f091cbbb5a4a2bebc2c97d5da80aacc20577ec2c3284215e52b36b8baef3c31d52769037618d3dccbf69b44c77614e7fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    751999135ce4c6d6530c5e2e5b47a8d0

    SHA1

    1a10157403aa4370baed5933c5545f16d371cc8b

    SHA256

    5b8783a0bb21abd1f84a05cddae81ea875e0050183329fe62e4dc8c8e024c6dc

    SHA512

    1dbd64102a82487557a50d82806e604f74f4fedbd64aae72381501cb06a539b5a14fd63af5724a56436a196629d1b553dfa2129d775c74d70951dcb38214eb31

  • C:\Users\Admin\AppData\Local\Temp\Tar2959.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b