Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 07:21

General

  • Target

    93fdf2b09c1afbfe25b58ca77e3a447a_JaffaCakes118.html

  • Size

    460KB

  • MD5

    93fdf2b09c1afbfe25b58ca77e3a447a

  • SHA1

    24d577cf21ba4eb770cab947be798fc255b9256e

  • SHA256

    e09631faa7e93584bde33ff2eaad9f72fbd398947e7713ab7743f6df53392248

  • SHA512

    316a2ffa736b3e73380efad73d3a62d997de0a165bef7005fbb02dca77910e953e46fddaaa3dae2d0af81691d28e73ccc2aff6b9669c59f2df1d187e3affc796

  • SSDEEP

    6144:S7sMYod+X3oI+YQsMYod+X3oI+Yh/sMYod+X3oI+YLsMYod+X3oI+YQ:Q5d+X3Y5d+X3P5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\93fdf2b09c1afbfe25b58ca77e3a447a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab792fc7809451c930da458ab3500aa6

    SHA1

    dd298b3564f3c536abbda430ac71432af3c3c943

    SHA256

    a68e38060ce87c51b3787361c8912857fbfcb587cec76615d7d29c8542a12a1d

    SHA512

    54697d9e9aeeb70d61c5465f80c8c38fea3e0b8cc2e665510470144d7981ef26a70444c51186fcceeeccd167f68bdcc29e817ce6e51d82e340b0df77471d5351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ea9d19064837b79f8583c066382a8ca

    SHA1

    06f00de2d576b83f523a729f44a2f948bab75afc

    SHA256

    4f4da9af6f599323e102202c87777617f6a8c1e34071450b338f8ee489e689d4

    SHA512

    c716a416210076dc9ee78ce377f9eab1080aaf0a4bddcbd054528eebe383314b526f871fe2f9d5a52d91def4ddf91408ba67b18831e56e42f14cca941910fd74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6153a364dba753b1a0842bba4f6dd31

    SHA1

    8676751b7ce7f3050c8564ec24eccbbd0828fdd3

    SHA256

    b566f44caecae9a2d3a007bc55ffa2c07168e9440edb8ce9eb26499dbe34464e

    SHA512

    58a8166c7ad7f10d8c483a7095361ad1568712e3baca67c9556a37c985f7e25306f930a2232b6af66d9dc1ec822938c6273b3b5fdfa1dfbd4aa1fb924449f203

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    832b1ded95cd4b235f1122092a1a1803

    SHA1

    540da63e71acec7f428421b019590b0566b32d74

    SHA256

    967856335e35d95a5814c5257c596c8b599fd787091371809cafb1c93b1b52f2

    SHA512

    f482e98ad0962e7dfe9724055efc118e2e12d837343564158297f679a64e19a105df3517cf6b148fdf23ffcc49bfc0deb56298f64006c2df141ac9868d1a017b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e11ababa2ce0279447af855c1fc56d6

    SHA1

    03c2cb2a0b006932a9c232f6977fff0021c55d16

    SHA256

    7f31df4fb89b16b587b91d6438bcd5a9fcac9a469686b02c12f7e376416a21c8

    SHA512

    26a71ca26d3c3e3a066309a8f086675f7795f388dbea53b787733efec313b940bda15f82a18e46dd0adf639c241439eab5fb552cecf164a51b7a641766a0490f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e880b212bede55ed7dbc0cdbb18d510b

    SHA1

    e16590f4eeb15a5c5ef46efdc9b32bb16cf3cfa3

    SHA256

    560c85351be21473447db12e8299bbf9eed58f6f476bbd7b4f2e1dacb52f6eb1

    SHA512

    9a2db05a4b18f00755fa6d050eb94f1ee15fd2493fcb07a6fc827a7e2818c534b40253778bba39723fbe02461d8c9f96a6983eff0c1734e0be8d615e2862a041

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abb73ba4a416aef65874efaebe1f05b8

    SHA1

    a08a6d08886603d7993a7a3014094278af9772cb

    SHA256

    196c291e3aeb78f3f6f53ea23898c31bdabc6ee1831d892048563ee256a4b9d0

    SHA512

    cbb96f827054ce5f46a589330e5d975b7d57dc220fb6b16e55bbfdbda620d54d13ff2db9caf8f092dfd293def057b1859cfda4875419a7aaee5a2ba34e5796ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f61968e999e7e9e742b305225a980884

    SHA1

    a1d326abb1cbc0fec4b314ab855be045b7f294ea

    SHA256

    428a20f3b6dd0bdfc7f288a4a1e20a63bfd0abc64302305be5a68361963254e4

    SHA512

    bc4de60024d322033b863b6dddb04828c853468b624ae50a6a037c9428738b8b8ea41c8aa6277b42aaa6554b6c55b1c9fad671e3db39e3305359796a37b767c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f0acd04f6fe4050f163e9e359c5999d

    SHA1

    c1614ebfdacd159740f3158b270040bf2b3b9ae4

    SHA256

    4ad2f29b917f66cbeb7837b89054904214793d796b9dc8cabbd628338868dc76

    SHA512

    338463ede4435db70edabbd0d0b494cf56759757e0110025fbfa80344e97bcef2788964d3cb25e5f8684498239763e10a8b9ed4b3f8f08040b458f5038b05685

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d3af88a1fe3fed97b34681057763628

    SHA1

    31dd6d728f68cadf170e734a973cbd9fa7614fce

    SHA256

    8cc0e86ad37ae25e6dbfa3166f2fe32bc9dda135be7639a5c52c855358eb1db3

    SHA512

    34e21b58b80ede45641c6c5f6d42c806af2a2256cd588be78061a50999f58198a0de266bc6b06f89c72dd09c4c3fe7c70b225be00766dcad729598095bcfe3f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8be40ab50554de010468e709c6a837fb

    SHA1

    b578e2460e0dd6813d979c15f30fe730cf5101cd

    SHA256

    9c4ac031b6421e6e45b2198fa496a821d9cf18ad26456992e07647ac44e15574

    SHA512

    c6f580e9696407fb19d25c4c778b2a74f1a92ea324e881cb3ef4655dbc66487fb9121f6e412a35ec0f902946780acc53bc51cfbcc02c363bf8a24b73bd44e883

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25bea5393973bb39e973cdb9eb672209

    SHA1

    29ed2d1ad8b18e669d19501bd189de3eac98e4d9

    SHA256

    7b820426788cd84399aa68f5aea4f25377631dbfeb6f562e35ab3498babf9c0e

    SHA512

    8e10fd84a15c02dc8d1006927d95867cf1afec9a2637c202470d924e98bbd55aa9d7352a7e43b1fff00fa523475e53aaf373733bc5362f1089658ee95f9f1957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5df4995e125c28bbaf39789918c4b29f

    SHA1

    4dc40dcba300c98491638f16d600c47ebc8a61c5

    SHA256

    74edb60ffdb723329bff06bb044c2e8e5992aa8fc11aea811906249a095932cd

    SHA512

    2c66d79f91ae92fb604c6edd49aeb919f922d9f35ba0d28731ea505b70429cf441d4a765c9e01c3c180fc1a1564224e07cf9dfd958410271c0cea59065895b27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e7dc31b2c5f79972e60171543df7690

    SHA1

    f2f2a9401372038816669e4f72c18d131d304f70

    SHA256

    3e9404f3ea4abf047d67c9e4294678477349154641c8c4ad8e70049d3a4bd15f

    SHA512

    e007796e8be0e4cb45fbbb90438b661de79792ac310da43afed93c9d2ad4af24f8c748c9c9731003ecb1258541057fa213ec70f9a1a5d03191d4dd875259a061

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99849b4fae8ace7f2761685b66fd04ff

    SHA1

    a924669e2754c94f57571620df659bc9926364f9

    SHA256

    acf15c7263e7ff4fdadb576bdbe3f59c551320ef2039aa6dd16ff650d0251883

    SHA512

    fb2d61840979b05f2c7f47496d3d5e5cb5fbaeb179cb9c93f631f2825bae866dd81ce0dc4bdbbcf0413dd016f84b3c3666f0dcd8e21a0cb299c1abaa1cffe1f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21ba78c1d1743dd0977d044e8b332cd1

    SHA1

    8c96a465b03d313ba5e4a83d514c52def307109e

    SHA256

    35a9f43a0c346fdb316be5be9cc3fb645ff5054f70f07938e1ad05bfe1ed15c7

    SHA512

    5fa11c52124cafabaf047f028edcee7fd4e83e26c25c37eede013d6cef25a1e87a556bc3dad910f66aed33ee122ad207bd3e40307006ab90f86e571f047755bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fce170fd1233d9092f42a500661243cc

    SHA1

    891e0c560ff917e38ce6b9bbdc9696b8f6b77a52

    SHA256

    4373ea7127b5f14dac43499176936e42a2bca2e3d747163bd25516f8c048cf96

    SHA512

    e23f9c8a20f6175d353661852a59b8e26a967d027af62ebf842f748dde262d92877ae8db9db0b2a9b861398e0f472d1a2c2901ead4c2b7a7a2477d6794d0517a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e24829857671d316b764f9d9f3790a6b

    SHA1

    9fab60b4264f931ff8bfee8c7aaa0d854e91afa2

    SHA256

    fa7b5238e10bc3028cf322afda812e87dcad825249a7c7927790bd11e76a455f

    SHA512

    88c2051fc88d1d424968a67a378c93a1bb46a4362d172b48f13f3287d03d30d2e99b127c4efdf2ad75879bef927ecbb565afaacdced987baf8379862fd883b1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee420dc731aea5d4a6947efef5511005

    SHA1

    d46c768e170644f3a7c6887dec975cd43ed8c728

    SHA256

    e95444e028968dc05f9d52b17e454a5abd02ddaf67378add33a942d133e3d638

    SHA512

    584d06c8d49ff1540d77816956e0b8b649aeea302dde201b2e076956cf3634a5b4b6f8f28d218122f1eaaf5acbe1151cdd1ca7d4a6e527532d324b1d6e653c40

  • C:\Users\Admin\AppData\Local\Temp\Cab5033.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5126.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b