Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 08:49

General

  • Target

    9437e7a5e71847d6456fff0fa04cf71c_JaffaCakes118.html

  • Size

    136KB

  • MD5

    9437e7a5e71847d6456fff0fa04cf71c

  • SHA1

    f47a324af34877c691d93b7f1d7cc764feabe243

  • SHA256

    9a543ea0a5ca44a0948c9ccdad3e5465c2077c57779db1cb6be21ad30158af56

  • SHA512

    e477a436eec354d44cc1d382964a43144a645e936d90caa066e70bfd89bf7a6b43c5c1492de3e78f2707d1fa807ab04e45d6b91dccc5d908cbabab8e719e4e0f

  • SSDEEP

    1536:Sja4M+CyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:SjpM+CyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9437e7a5e71847d6456fff0fa04cf71c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1736 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    441a0a711d923cc83cccea297a850665

    SHA1

    60d677c9625e45a27b6b6b48f596eac193342dd1

    SHA256

    9b885493e82883c669e722f5f78f9998de82030241c3da4627230bc2f81a0bd3

    SHA512

    ea1e66d7ccd18a25a66483b0611edc5a76eea02edf2697ce464ea7b531db7b385a2cae89f76eed961f4cd7a3762ad3282d4e8cd253dae1f9ad0af39d13f21440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd12a68984dda9cf71318c3ff3ea3503

    SHA1

    f8e4fbf9c4f25593c4632aef0913987dc95c908e

    SHA256

    354020418fe8cf482dc680cf95f1048383d8876c6affa6ca2cb5af1ec2cfb33f

    SHA512

    72ca87f3feaedc2c03b0df9000afb78ecb2207242fd0dbd9e05874d7ca16b6de52e15d9228e37cfbe68f06989baf8d26f4596998912a84b6dd168c0dbe4e0479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53e5afa5d5f471129c08e92ab14ad6d7

    SHA1

    7614e0cf613cc9ec8aec6a1b12f4635bea7187d6

    SHA256

    a48d4d38916337ca7be8d0a503db3d8a803a4332a5d17338b3b49a93858c3fd2

    SHA512

    9244306077468185b2b47f9fefee15f2db277027b431b6372b467a5c4196057559b1d06f717acdfbdc123d49a44ac4ec152e975b53087a1178887d147ee6d61c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d28f54e25250d19f3f05993a3e2a2be5

    SHA1

    323e9b630ca60986990945c3f461ac769fdc3cc0

    SHA256

    a7ddec92a7a6ef72aad31449cd19057c4e03af05140dae1d7993845ef6d949be

    SHA512

    674172d2fe3e70867e4fb66a7afe72d903608cc8f1c2fa4fe63fa2c63c143841387d56dfb19857655525f38a5b3fe8e124a4c4c85b21b12c198b65b6e4da9c28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e63ce9ce5691cd8826fb7994385fdfb1

    SHA1

    e5923e0f4d5212e6553ce23e0182ba0c932a8a81

    SHA256

    fd43dde116a5c4c7b83d40117c1362cdc9d9aacc65ca7965b0b3704e05ad6dca

    SHA512

    d5484566a555caa495282fe59d92c5bf81bda1c7e79c24e6b1cc67a0ffc31c7efbc00b8b4080e5f49d32ba59a1dfa66c534a880d4045cfdc5a753da48f8a16c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3c49a6b1563c980eae485e615614496

    SHA1

    3384e6603a4c518a2e96c65fbe0e0ebb201af127

    SHA256

    c94c0f7e2deeb48cdf44c1d8a615011d9e48b5a1eafe2d3ceece83eab8ea0381

    SHA512

    716443bf0f4f9ec3668e3109040b0f384e096cf21a905028d50d17e64185256e4cccc7d073f50b6cbe55f74b9e08890b7df5b137b734e134a4b577c1355b0aac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0735a78cc331d126247158cd62e33130

    SHA1

    2d7385a1765677a8903b1dd5f1a778a6856fee84

    SHA256

    7d24e782b047eeb43aa81484d548928a018286feb4347e045b6325513e2c8b22

    SHA512

    71511a6e4a8a4714e60d1a714b00d4f973328c18df7bc528de0d728df924ada9e5e82b8e275b791be6af2eca915bd828f7b118233a65c73b5f6818a86e8ed3a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a18e14e0e98c457fb2c0dbcc39472b14

    SHA1

    3a70f8bff3bf27ea264ffffc9852c2c6e50fa537

    SHA256

    51736ac7fa349778b6533f1a5996dc81330b952c59637f21838379f993dd88c3

    SHA512

    01191e196dba127117e5c319038c99b09636d5ea94abed3b968d28072d11515e54cd80b61c2518b9895644d7a131a6322dca7d44e700341daded5e1afbfd4a15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    752f89469ea8bfb0256927b8b8707249

    SHA1

    51b756ae82924c074384fd09b541c3fe32e6d167

    SHA256

    4cd556e0b1b8c801a2658df49a944a675365bc7c6d07d0be1b3a3e6b14d8d57c

    SHA512

    b482ef7f5319048d6c01e9e2d06db39d1b687bd08ef6e34f10d0661cd133855b6c51aad5235311e3f5758fc2d96215d99cca16a53cc06d87b8e0be6859ac1920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61047cc46202b54891f0206e0bd4d471

    SHA1

    05563f659899ffcd127ec513166fc56ae876d601

    SHA256

    6ca23b166891ba8f61364099dad6fbd8b2a49b7dc4fd4b8b5e4d0b016bf036d9

    SHA512

    e198922c497df0ed6fdcbef4e1fb934148cbbf66cb68a03fb10d4ddd9da68b55a3eca3e402b6561261ad364dc7bc1141c13f392d7995e1b86193e582008c3ba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67df0519a63989ec129fb4731d71b9f8

    SHA1

    bd72850bca9aa2a9283e523331ceb4cb25e004d0

    SHA256

    d043faff6e33cb0865b0168c64dfca2a9b95aaaadf8c9fbaa75b3d57923d1cf2

    SHA512

    6cd7852835d5bce85731400ec9e548535f61f810d8cd0b5685e70c8090c01ca60931b0e39bb2c309d53230c9dca8c01a0a48868767a803053d341ebedb89d902

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0108a4017ce5b789ff1fb1e6e3dea59

    SHA1

    cf187449cabcdb2e94d9e6d49c1e245270faae37

    SHA256

    8e99ddfbf88531060190d72a097da1d0dcd53991ebed635a41dd5a0df9ab9a46

    SHA512

    32857347de1ab73e4f786bb3cd3618d8a454f46173feb1882918938d26aaecccfcc53277c56202164dadd3ddbd86a8e59f8edd2e4bf4aab7dcc83ff5db8fca76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98be8b6a59a21b9a6b45b85c7ec8cec6

    SHA1

    51932850505dc66e898c3ef5e7685d163b500b42

    SHA256

    a12747a9906d2f9fe3eeaa15848019c8db685977e33567daf786a4b6ed8d7e5a

    SHA512

    5d0e9781f34ff3acb0a03fb424297af92876e71dd192b9658260f2a1bcd1b768d11cd72176b20ebba15d42ff8fb4f1168da7b6b24ab0bbca2332ca92b47cfe22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee0b54cade370618b8d3da077f934356

    SHA1

    cd8bc2430b327afa43d65ec86d8a5bcdb42e6a9c

    SHA256

    df181d87e778db97f7b466797924510e4a2c3fa9cf337e05e41a00f5ec9688f6

    SHA512

    4916172bed2a5a67825f616bb25ac84ff90511b8ba589de5249b65378803e46e76860d1920c0b59611921f7c0ef5b831158dcd491696ed0d58f120f1a0f3d04a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3015aa7da3c0bee2276c9967beaa8f1c

    SHA1

    bea394b7dfccda1037b732773632a7f0b123a3dc

    SHA256

    f24f5debf05da624c0f9388f23481a9414c50a8c50b995932dbff93333dded01

    SHA512

    79c19d47534d72be29a7064db334b9dee3991e27eb71876a09a093ad021bc3a1c2b44f5253fcdb6ece7d14bcf5d08bc7e5ac95b365ae7653f19893b5ff169ae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3bc37eb50fb1b3b3f15eaba4c938c0b9

    SHA1

    5b81d88bc812d461a738d1f590069d018fe668a4

    SHA256

    94caeb35f793568fd501cb17a5ffa58e75ea316a600a65ebeb5ccb1761ca5530

    SHA512

    92b522a39e602e2009fda76b084fc8800755558ad94ce5c5fcdf62bf50dcee19c5f9c2d1b960557c2427a8d5155d969bae532115ba5f2e45e1b546814a5d7265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98e152f5eafc809e43550b4bed21aceb

    SHA1

    ef2cb4b5e9b1997dec1670c67d611549c85d30f5

    SHA256

    3e78312de90262f503079190ecfb8f267c6880398b2f431a719ef3972b8af078

    SHA512

    5fd0d30880a69d7ec8799e3c357889d50b595e0ec5b0242ddd408edbb2717bcb26157bc2f95d48dfb47710d3f0972f31516149c9ec8dd3f6cdff794fcbf136d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bb821093bb2cf14495527434499edb1

    SHA1

    a2c6c4a0c09bf46b4ab9189de2adca854fe5588c

    SHA256

    dddca855da6f00a1e830f3f11839ebb64fe75363251edbecafaf28b3eed8c8b0

    SHA512

    bc4a973dde1e000c4b07ac78736fb33c408e0e3312f9153bfce96fa5c8a41d411a7cc65e4bb5b2b06af0d79809e279650047b63692268a3027db6d0316c4b819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b4346826be10ca05e9da3b6620dac71

    SHA1

    990b4baa451696160477cec099182b07c60e9ba5

    SHA256

    bff351875b9b43fb843b2ba06a8ef95677b12f34d96f56c857ddf48a6637ce98

    SHA512

    ec0a9137fbf702c978ca160a3f1e6f40d269daf999c42442b321ba2f1f53f6bc3a9f01782312705a760ccc42c47dfa44b7b7b4934d311b591e6fa960407011ba

  • C:\Users\Admin\AppData\Local\Temp\Cab3121.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar31D4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b