Analysis

  • max time kernel
    119s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 10:34

General

  • Target

    9482bb9471d4852517b342827bc38f4f_JaffaCakes118.html

  • Size

    36KB

  • MD5

    9482bb9471d4852517b342827bc38f4f

  • SHA1

    cab3230c1bca024cb55ead052a845557eb510acf

  • SHA256

    af1e6a39813c92d013e4c71e3387960778635cef8df6f0ec0341e23902f66b2e

  • SHA512

    342279e370ebd32cf1b1e09573f206d3a64555b47e6a5222026042b0da7e546cebde9263f8670d5d5a5612e4aa8d27a203935f68c8bbff799f08cfe152e91134

  • SSDEEP

    768:zwx/MDTHfn88hARDZPXiE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TdZO+6f9U56lLR8:Q/fbJxNVzufSW/e8qK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9482bb9471d4852517b342827bc38f4f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77cc365cd0b59f49f73055b748d93ac6

    SHA1

    2566fd9b385aa4f5627f0e0b9adb2b45494fb5e8

    SHA256

    abfe4428ae1f7a0209bd7b2312326b1749f2f8f2dd2c2f7bc60d36abef75934d

    SHA512

    e4fe2a8fecb5b3784893c1ef62c5d722df63e44b1bb9b762790ec2d87ecb78b65b75976c7457a3539e62bbc2a94ab6abf5355b87b9c0e061189abdfb70003421

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6e35e90d8f73a87963c6e0a8382598b

    SHA1

    0c750f1cd20cbaeb433f4259d2a22ea5f99c69ac

    SHA256

    0b5912ea701786c28c026104e17d2e16ad4273a3793212a16d1eafac728dc1ba

    SHA512

    8cc39438f1a809710bde1f5b7363c4990e5cec17858ce90bf33018dd733b40c64fbd781bfc2af8dfc6bb2ec5e7b05fba89b3a86f79455e7864e693f138b1d1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6742761d50d46f7af713f7dcd53731ba

    SHA1

    ff657896040c4a9b18519b1b559ef23f0702b477

    SHA256

    f8c804e9b21ead93ed76238ce4f537007cb5cfd31e5d3123734c9fec17331f64

    SHA512

    76b54327fadd7fc1623e4671b3fb33f2980d6edc4073e8194327f1b54cb593e3664227ae950fea853f30b8d4df0b5c20ab7055d55ebae23f2c89b12e312dface

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6532084991e3e6f53e65d9746e258cfd

    SHA1

    9127e675bee9f27164a02ec7a5f5a65e12c726eb

    SHA256

    feb04232374644574be1bfe360a8433d215db2b84577870f9068880cb70ee8ac

    SHA512

    327c5508b5a85f9854ce5ed09e162817ef47f2f81245a36b4af86d75804c10210a5c4a015d25dff04fac01e98f649a157bb26ad0aade62021806f0d2c6c41b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d03bfb7544bd6bd6ec156165d79d44f6

    SHA1

    054b9218192ff6bc3c851a960dcd9dd3ebe299fc

    SHA256

    a32b204a2dd9fe7cef5116680dc27b620de75e7210b8d792e947144c8f5ee1da

    SHA512

    785dd4047c6473a3bd7e0e351c31ccf659ddcd788cd51705ade4a37cc04d5696af9b0f16cbc1f52b15f7ce9eaf65b173030cb29239ab002deec62ab00f15d9b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    392cb29871f5c563b8e3b35c7fcb5f3b

    SHA1

    da34280f926cecf841fd75d796e23221d8583b88

    SHA256

    454a306d3ba6a0b0d5c1911436170148e9cb224adf86fa025ac6fd09d8a6c393

    SHA512

    e16ce6aff319bed2b21800a13a41c9c511aaf26d75fe1077acec5b3ddb0f2c5e111ccf0ad753dbbf5d980af22747adbb857abb517e71ec7de1db16c6ba32a225

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    899ab5eb57984220319a36f0d0031fc1

    SHA1

    344793d7b382485dab16575d1973e466508e51e1

    SHA256

    d3ca1d1ec3fafe000dd56ab7751a6d2bbe821ae474c91f213df0f1f8b8c859bb

    SHA512

    347b95eb3c8d0148b1db316305b127529dd13e6da46e22ae105b1c2443cf41d14971c3a1d06e564d9dea9ed11c83033349aa49ec7a9546e23043bb8f42e3ddb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab53eee5937be31b018385bac0d7621d

    SHA1

    c69ab34b1e5202612dd2ba8e411bb0c1c8a788dd

    SHA256

    37aa97ebd41f71178f9689b4236f70a84e5a1873ef460c6bded2162a3b29a527

    SHA512

    1b6459f2957b8a6387f8d01d3dc3bfa60d5d3ae1bf56cef2c8dd8b9ba0e98e0fca1e44fcfefb4d282fec1edce54e7b60e0dc79002be862fcddfe912671066703

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be91302e5260a40a92773f5df2860c17

    SHA1

    4557da692f1cba08eb39546281f1f4d86397aceb

    SHA256

    15fc988cd5aa6b5beca7e243193c29db4cb106d98d0395c53fbc735aaa9acfda

    SHA512

    6abc66c01b6bd808428886ee3b6441ba94eca5a5d7270b8b9a43c313f7bc2e0fd2ba497f90a0d20d189ea399b823fde12beb9b37685c24149a9eb1b563628f4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2baac965fc7efea351b4220e9c880d22

    SHA1

    f7c10afef949bab5104a857cd2f1553ec930ab1b

    SHA256

    aeaa0c0f69d97adb02c16bb2cdb02f06f57234263e3ae0fb1607ca4f6c1fd699

    SHA512

    b4af2731ed93cd322159961515a60b91d708a648852acd383f73463f0ae134e27799fa713cd1624e68732ae7136625b968ca054a514e7efebb2428c64447ed1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    513d2ea76b1e8853fbaba00142d592ef

    SHA1

    403eac8aeb2f38633cc719c937963b3a3d4eda01

    SHA256

    ef95e0a4630cb5b476e9526b946cacb62732517db6647b2fd386669abd7aedb9

    SHA512

    cb8317308526947cde5dad42371aa66a13830d9b3d4d58d04d6ac16577382d062301c08acd611edc67ec1ef3b2c7f7e8b67995178617507ce81f2bb5bae22db3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bf857f47b3a2802f76054e9f656afda

    SHA1

    1f723e72207d7164f6d9fa812c0d80a7dfef16dd

    SHA256

    59f70045cc20c6e800ac77b13cbd3561997b2b135632a4ff8bef2f47169b8796

    SHA512

    d73f2350ee9b80965bf137eebe03d669d127a483d762f23ae180c6132e192e4217e4875812961b307fe04b8dc17adc13c09044fb5b4f4a4103316f3dc89071c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aaf4d81a7073b2a7cb212e712b14efa6

    SHA1

    c5106bf890f7fb43b86d1169b95337fd14a8be21

    SHA256

    cf9a971a63686c129e8b401288a6f5b86d421fbada9999a973425be4f9453b7c

    SHA512

    183e132b1b6af79122f59d7ddec9b5a58369dfdc92b97f242bd37abf8a6a21aa81be52c2c8ed13dce56e5986e98e6bbc8b3be9e2eec6cdb9be95d81689223c66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fec8deea7ecd0f9cd690036a3e5cf530

    SHA1

    77fd43cf88b173e0356c55b367c4fc886c638f55

    SHA256

    c5aff980e95d84eefa72dbfc0301738bf216bf26a600d6688b991785e209a5e3

    SHA512

    f4e5f2b6e037f8bcbdcffb5c89b0fb86c98a83621763aaa3306d513ddf828ddcf945d3c9e6c38ffdbc8286725bda03d85760d1eb7fac29897a1e4bc89c7ecd59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4ef5f22ecf29195c146d85b8803cc8a

    SHA1

    a2dc8c5d8a69e4590e669aeaea9c131a9f3a7c52

    SHA256

    583e2dca5bdf0c83f23e492eb1df144d0486702e097b248a5dc59eea31e4365b

    SHA512

    87587856b744fea4c0ea26007fa988b1c3cd2047f46df860db4e38acb1c1ed83ab5178fb6a70a56b2ebaeead90d38677198b7de3ff3fbbf66eaa1dbab931eff2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0efd745793b22c3b4ad8311e456c7076

    SHA1

    105e1a62f78a8501955e0bf559795449b25dc46c

    SHA256

    f961d3a03f6a4a889eb336db1bce4eff3dc58af05a9ad98ee4a1550b8f7967f6

    SHA512

    df5cbe64731098b8b8e9883e78109cc3c5224ee914877c60eb1361fb38c7af5c94c46b858a5c15b4f403f3059aee4fb5232e43848796e92ad051f3940cef7b8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba68f838e72dbab9db5b4cc972c18614

    SHA1

    426684bae2d0f31f4797a90693a5c452b63e140c

    SHA256

    278774a103d10fa12903364f3a4015dd01e70b411da8903d0b2d70b421a2768e

    SHA512

    a528fa89ec184b99b7fbc9a0f71efbd19a73798e6d40d5d6657da2e2c36c1baf9f251f4def9bdad8bfb279fab682f99bd7413209b12e1a50a17b4bb8e65763c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    394838f121256e68d5fc9714d38f47f4

    SHA1

    87c484377b65ef02f712e19844b20a14ef49c5bb

    SHA256

    fbc47b61596f65339f29f3e04b44c396fb5e738ab418bb7e7dad99350bc2c872

    SHA512

    e09944026cc6d672b65ea79b3aef459d5ec6da89413bdc8a20f74b4f5d11f431e8c71653e80dd7081365ad428f80fe9b17609d83fb8012b4d0605d3a95eadb76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23fbe6891ea246725ec4dc8b0f386dd1

    SHA1

    aae13d18e230e6ab6bb18aa27a3447b7b1bc297b

    SHA256

    56e2894a5ae4e844d867b09a01ee9735db29ee4e8a90b72c5558021cc3f2ea2d

    SHA512

    bfd0fa4263a073e46a4adbd0cb3d8a09a519bae8e8e2a28c0e054086a64be0db05e02da53baa7fc0242d176740b0a7df8eccd6ffd6a6f605594a51268fc87407

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63f7e91df9dda49675ce37529113aa75

    SHA1

    45a558a59eeb5495ba49c51b36567f215d5fcb49

    SHA256

    8e58676d73a1ed3f4d58fe8107cdffa787cb319c2dcebba3592baa14d3d4bce5

    SHA512

    14f274973f92a0ecac44ef7faa368f0b47b0deac47239a96125167a73f6e07ebb3181a03ec5efc5d80b3233dad6690b174c06a7d45982ed8a1c29ff9d6fda4db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    21c0f0cdddbdb4c940c78652a585c83a

    SHA1

    40fa4da69dda42a10048175022348c32ae0aeeca

    SHA256

    2005554a5ba7ad20c71d2abca42e446e47f3e202e15656f62457d94ec99e1c23

    SHA512

    686311289617c8d38228c55246d6472d40e10665e85f90a09ffbbd4c028dac821aa306a6251751e0fb0523fcf29d6edf0eddaa8ef1711f74516057dfe91cee08

  • C:\Users\Admin\AppData\Local\Temp\Cab2156.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab21FA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar215A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar220F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b