Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 06:25

General

  • Target

    93dc256fd42ae202f077b2083e5a5a6f_JaffaCakes118.html

  • Size

    251KB

  • MD5

    93dc256fd42ae202f077b2083e5a5a6f

  • SHA1

    2ede2de587e6a66144220969e97c0450cf7d27dc

  • SHA256

    5d42dc56af7134294b2f358c1212a80cd537a9c870739f73d6bea1a7ff744fbf

  • SHA512

    4b90e1e42901d6bbf26e66cc986292db5138cde048156ef6965e493340d617504ccd2564233d3157557dc9044d24fd66e45d1e5d97f2bdd081bafec16e7032ad

  • SSDEEP

    3072:PON/VxCIax0ew7yfkMY+BES09JXAnyrZalI+YQ:E4BwesMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\93dc256fd42ae202f077b2083e5a5a6f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2364
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2364 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2144

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8cc4e766229cb2788f3a443b7a848d9

    SHA1

    be2c70b92fa3d8869eb92aa1b82f42d7fb1cb292

    SHA256

    d2c82df24939666c708f4eaca6064d40bda8e4ef5edabc0e1c25e46a9ade225f

    SHA512

    af79222768b09eb18593815af2dd3396fa258e479e348aac22e884d14cb22fc8368edd99da37f00145e59145fd65bccac787e4e6948333960b6684b812f0d4a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1f939b83255f324f1289c1dc4880fc9

    SHA1

    93a69d267e0932a0af08630a066e676d552deef4

    SHA256

    609fde3eec48fd8aef6aa9312ed8338ec6560a0053433e974c2a86685662bc7c

    SHA512

    9207ad52461aa393c696452bdae5903b9e2070792cf77bae546f43e8ab7e83ad8874476e7afed357498b1ee246a5087612fd4e5f2fd696d6fb77c6de74eaafaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    242f8d2024d791bdee40a8a059aa1bf9

    SHA1

    f65f22c73d6e3ff21ebcf03361cb8111e7111e18

    SHA256

    5799b9650eac6a87693e0ebbfceb3bbe65441aa00b996b84460a4af54494e1d1

    SHA512

    8783fb3ee8c647cbd0be4d2031dfe0c1c8b3798080341513bab0746df11b0bb2096a8169b56724837757f58565a7ec62e912f34959a151807d093c260c140e67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2396d890ed5504a6e74868f360a41d5

    SHA1

    6e762114c9014b979ea93e2cb830fe280f87adaa

    SHA256

    8ec4004e95d374229bd6c3620423e98ce6c096732b3e327d0f855955b2cfc474

    SHA512

    a16949ba983420be0a3979281e374885554ef6f8895a982ec9df859619150ebb84a444fe98a928808b50de281c5a16930bf8624b007ce0d377f8764ec9309615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e0ac57427dbb0a04047a2218cfdb14f

    SHA1

    53ffdfb9815727d94d53be1a6687c27b3ad66baf

    SHA256

    5a63717c469363de374c868a84818dbe0d07b7455528c1beb0c568da06298576

    SHA512

    e0bafc41431e9398c206bac1d433cfd29013d538517bcd069b86499ecb3044b9ab239f59288730c40346e98505e59257967554e0f8d8c836e5991e0f26f4d621

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    939fda0be9cd50a9f8d120e59a76ba8d

    SHA1

    7cf78e508eab7c985209fce4cceeabcb84965edd

    SHA256

    b5f203409e635930076c8610fe8877ed63e59ccbfc84e04ecfd7da0f6a80b471

    SHA512

    551afe43eb5689c37f64eaa45fdb83a2e4676cdae910720d92ab5b6c57f4877e9233f743af8e8f893bf6b2159da1424be28179fe6c79b73d910bc018607a12fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bea90325ab44413f99e2e3824af998f

    SHA1

    bb506fb06b190c74ef8ad86ef1b19dfc7d263027

    SHA256

    acc4cbbfc8ceebdccc2aef5910a35fefb2a9f70dd7d89e26f4c8f40196315488

    SHA512

    e2295f5d5e899c1e3b77a6da43b601faf081c1e1ddb7321036e43b27de2fcea29ac4b2d249df68a81d179cc3f8dfdf93a59e7a293ba57cd6f98a46bbc6186125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47b1e405e65faee4a514091f031618a6

    SHA1

    9016e2f72be985bcd94e306089f5e0618d5944a6

    SHA256

    850c64a0baadd3f4f81270bd17ad2dfb3784c9beb215b04b715296b956913053

    SHA512

    b28b56abb6145649ea2412e8426abf397989bfe55ce743c1815f1aed36961b58976ea656955dd830300ec81906dd485cff5388af47000cbe714d76edaf49701b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8defc92d5c808caaa0dce6c45694c84e

    SHA1

    ab8de1d1bf04510b71d96e8258bf29211b7b93c5

    SHA256

    c13f8ef6c513b434ec207c02f4bd8e40fb594e52f881af4e60256aa978d5b893

    SHA512

    f2fe0110428924f81124f07836452368dc182865c803956dd61691ccfa8aee58b8530ae6ca9fbdb9d639dd047377aaffb2814648f4e1130f579ba0a289acf3fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94fe7398d5bff2a33303d44898825150

    SHA1

    28b32e2f2294c3dbe2fe205348322d769f34aaa3

    SHA256

    e0e407708028646f73884305cf88301ac9ddd2c4d6d9cd4b2062f72a9262ea6c

    SHA512

    9800fbdea59976f95998c5dff9253d99ff77a0bc1683daa72c8a7b0c6ff828362b5f63ddb0a357d18ab63676cadace04028e55c14c894bb999c6aca789d8313c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ab5dc982874c189593ccf39faa5572c

    SHA1

    be2b8d17565aa534158ba9a50875321d7a1b3b15

    SHA256

    b899c316f50c76ebde47bb3c60b81e5af06433414a8b595540abcc42ca8b962c

    SHA512

    7998317efe4f349cb3c1a3be439dbeb14869255661c00b8d09bd7864665e7ebdec57858fe33fd40d5521c1d3834790034298a43ae0eff636edc417ccee26a156

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f76b18d07f54c4e01a67b3d55e203ca1

    SHA1

    2907f8abf631c577e5c730cb03d935d84419ef14

    SHA256

    a03779fda37bef7d3e1b7d4026773dc320ee36f5d10d0cf277dad6155efaf930

    SHA512

    b32c0b15e42ea3629bafa62ea73cc3adcdd8699e43e5820da2c49bffbde07a4ade46f031769ed8470d5f018424fc7072fcf7686f418248d2bbd99b93d0d3661e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87740451137d0b167d4c3184f363a4fd

    SHA1

    b56276e03a37725db42545693d7a1c529d7d8bc3

    SHA256

    7c90976609543d53b8d315fd7d4f87fc4e2c35681a2cc34be60a03c51f39559f

    SHA512

    6550da508535fee3c259a9b47f1af21df9bb4f04693d72eaa20ebc40a041ec6f55acec98150fbeac9bf07f0224faea2afaa84481e35486bd36d8f07eccecece4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    813731af1bb90fccc5668555f8ff42f3

    SHA1

    b14a9e7b5565e1c71c3194149970c26a043d637b

    SHA256

    bde0155286a76b362e2bfc6556a5d0143292126c044f4e1a2b7179d279b53059

    SHA512

    8726c3e602a626db17391bc2267835b5c451a6ba250f6f932cf5c2eec02778ca8b56091e74b76d15943820fc0b0c1b73c59eba3ee643e7de45cce4e11bdad723

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    039e887c5a7b254d66a85a6134423846

    SHA1

    11487ccb816413302d8b41942f06f91d69a89cf6

    SHA256

    b561a7977efe69ddf51b281e637df071fd2463adf44010d350c7ef48fda47728

    SHA512

    2a58348d5cd63011d65709ef353d026e15e18162ce9f37b5ac156edd63aecfa6fa68d698d8a5aeead74058f340792e809ca34f16872123c73a69e7b463620070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    658c10834a0a9d60b3c413c73e59f28a

    SHA1

    48bf113948ca34880df72d65a7fa1aba88aa9abe

    SHA256

    85cb5852b6735df8328408ce1b16992fdd1765c731e68e7d5381487c58426d38

    SHA512

    0ceb3ac2230e4be61ae5523b33f3cd22fe848c08fb0a34642d824854afcdc3153c000bb148250edcd6c0c1edec1850e8c7549c559ddf64fe55ff613ca55ffd1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc0f12efe81c31ddc09329e63bee6097

    SHA1

    3fa50cb99f135f4d15328aa8d349d229728a0f59

    SHA256

    97b588392726fb63f31d3a259d194630ac50d7f6cce12aba901b3933919c105a

    SHA512

    50cd3c9427f7c0b261e1035eb5fff67501023167fc28f27ab7340ab127868d12c8044ff95cf15f30bfd0ba7efe4769e3882a3db39ea632b2dd4a8d2d79037ff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7133aaaf2dee63cc492c77db8b8eed2

    SHA1

    a192e7c83562717980a86955c6a9aef8442bab75

    SHA256

    38fd80961472d4baa8eb4b93f3c16d22ed1c3fed612f0232b9f99a1018a5a6f7

    SHA512

    5a363ebcc99fb798fc4e0732ec41d835b1201e6ead3cd6a1e3dcf37c94ee113176f27f4c75b541574348c5288097cf36239ceddf07b2f282ea194eb8e1e6e726

  • C:\Users\Admin\AppData\Local\Temp\Cab9E2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAE3.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b