Analysis

  • max time kernel
    141s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 18:10

General

  • Target

    95cc22e5cc5f788c807f4e092a4e5340_JaffaCakes118.html

  • Size

    122KB

  • MD5

    95cc22e5cc5f788c807f4e092a4e5340

  • SHA1

    fde18ff36f65685a695d5f6a2d0ddd3fda823506

  • SHA256

    ad592b86a589e80ba7fe953fc5daf6419172bdcea8cabcd28e013c9bed2048e6

  • SHA512

    cd2d35a66fecd1498666fa10298aa6646de4a51e68fb24260895b9d7a5c3a05c2d9d48d1a2335ac91da6975ab7a53b699e59dce33e5e2370b3be877bfe271cec

  • SSDEEP

    1536:SsNsoyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:S9oyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95cc22e5cc5f788c807f4e092a4e5340_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2288
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63d424755d7549613d060f7239c015c3

    SHA1

    175f681e184c5e55c08eef4837e4a950addd5a06

    SHA256

    e882ff96400d383b926bf76b4d8c635ca74892867560e6900c649925d9efb985

    SHA512

    f98d0fcfbef12aa697d8915fe5fa5698ff10a0fb68b9cc32e03be46a7b375fe6f2aae5982126982c7c095a9a647f417ba4b24f3646fc98919dd4b4211ea82bdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64cd32834fbd5e2d65ba7e382c7e410e

    SHA1

    ac959a442a4598571c51f24aca88d03413264369

    SHA256

    ed87336ef3bd90703ae5ad2af783d11b71ee33de2848cbdf79d7db4ead804861

    SHA512

    787f50f72eb0e8686542cc6cd7355b480ec03e65251b2270f3411d43bf7e087673cfb52651f51467a53b45f6bfd602dc1bddfa8a11ef875faa5a0893f4d33434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7e5edaf839bc1970bd52d6b1e05be70

    SHA1

    29cd6fa080b413b99e243ed23b12735064357622

    SHA256

    c1763289224be5da11a9fcf3b4a1783303e55b657d3fee99c6b44ce9a24c6b5e

    SHA512

    e45cc07ebbf419a7a02d2ea1e0f70c74f09ee99fb793176337ee9787442b4a6d750aa13b18e2ade3ef5f35b6f9bbfdb0cc280b93b2cbe61ae7ec1c51223ea3b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7cae630944515c86b86e58181e79719

    SHA1

    41c12e5ed021f17fad681df6b425a41923dffb3f

    SHA256

    f5a277d37721b46cdf2d3a26d9bad5d215bd7b49628a9cb52de600686dac37c2

    SHA512

    6978e0c7d73c0a6f65d0c250eadf868d034aada146232efeb55121ef1e08b607f263db4a217319a37278231569f56f32c5c106b89c8a3028033aaa9a3c5cac20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3997956405ed56d68aef0d835221b8ca

    SHA1

    193ce4b8fddb038f10bad478fa91c452672bd53f

    SHA256

    c85859eb2936a7c3eb5252a77447f136833f6008de3f065eea23f645683c1454

    SHA512

    8964b493f12de0b17ba0dad4bfe3902fecddb19e72bf842e19d4be5070685a3b8efa32837bb4ab5a2bc38ca442e686d8b560d17b86dd8f31abde4ee34c6d4b74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb31381aeaf94176e276acdc2ede8f79

    SHA1

    ed8efc33e21024119f3ffe89b524a4a2d1830d54

    SHA256

    727832dc49b167449bfbd5a9be36298f0f4d42631dee59073201ad8601c7a87a

    SHA512

    20966e2554bbdf63d29cda5040555b555be9f62a73486ba72ffaa351d917b1a6096405f8a916d6fd540965497bbef172d4c384a5042db76229bdc42222046983

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c28492cec6539e00ecf9f4cbae19dfe

    SHA1

    b4e6dd6af59d22e85b19e5b27a5e8b9deb6048b8

    SHA256

    dd6a3f3f800d638cb80cd729a419c2fd12ab321003972780c09c1b3258d053ca

    SHA512

    9e059267d7ecaa5684288cb3650338136c6a2fab9164a6a7275b1c999a72bcdb93ccd5f8490ab365caf949cd9efdfb72f46c3aaf75cda02d0955c0750c663af8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12f549d0194521564eb222cfac3f2220

    SHA1

    b909be72aec85f31ab91fc1dad2f6b78a87c215b

    SHA256

    6163708117573d5b45428f722372aa609833530679f3f565d0d8e243bc624590

    SHA512

    c6f45fab3268e101b05c72e73d4cb17ee5580b194300b1710b496ce07676d6262ac01672395d82fb7e0ca295cd32c4c518f85d663861246603bf1f72e5632fbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea1ac610f51aa63d7483f40cf904c5fa

    SHA1

    a71f9445252dbe94ae23a313ff93e6ea880031e3

    SHA256

    44511691aa4ef0cef9b88a028bc5b30c112e569b5eb4d09ed4a6dae4e9d3fa1e

    SHA512

    239c740ec0545f91419286f48fd80bd751cec75b7508b92e7e247b5d49efe3328918265b09c855d9d6b28ce8f58fb1dc6996fe11dfad95ecd9f184081ad35e2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0281b04c2e38e72242327bccba1a0dff

    SHA1

    c204c660135fbc9d52025937d9cc7480ee8ce437

    SHA256

    fb745f14eb51ec07c622088c724b60b9b418b67499325edb1c662c5d88cb690c

    SHA512

    f2a3fd2c9b6f7434ebd2f90cd2f0e0a1150928fba4fb982e334c3fab1d38de6194e072cee59ffc4eb1b48bd81add3427ed2ab2a39ada11970f24b1ab1fff7e62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcdc1b0a40d644fe0cef9d647290fc24

    SHA1

    25546ca53481ae0d07154d5e13fc8f0599b6b9b5

    SHA256

    e876a7c91bcce846774a59dcc7ac613249119fde9592d1a0fcef58c2cf322bcc

    SHA512

    a0931e15ebfc3725e383ee870c34a3c06970dd6f4cd43fb54fb8a9fc56c1f01792d5dd0eac232a946d72e5a220838ad70ae62bda2a34d0516de1da601ded4a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fabec11138c4752fff1cf937580416e

    SHA1

    44d1129d37691490a73fb543369a27b0d6bf6259

    SHA256

    d9f68d03ee9a4cc577374ea9c8ae6cc54c2eaa865ed1eefadca0d2a79853673a

    SHA512

    4dee7718783a2d52a57809e9871a00be037f90717f782c6ab981614870194c43443643f32f1e5cd1ccbb460d45810eb8ba201bc95357fa2d80f23ed8117ff447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fab84ed94a3b35a8559e9c6e343baa8b

    SHA1

    3f52ccd0c539f51750799799d9daad7abb27f4f7

    SHA256

    c4cec94db2509b1ed8182ead55d8d25c8f7bbd32067b8db434f2dcc4741fc8ec

    SHA512

    11c9f7d4155267a41d47d886c1b42316bfd7fff6565ee300b4bb42baa34286d64ae4aa36e02b91a6e197c71f285c8ddea7b94e78e363d45c70d1ab7d73c6c240

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dd15a3f77048342cfbc0af2dda0cee8

    SHA1

    9b7400d70e41d802897235a826d9d0917ad8cea0

    SHA256

    d126a9861486c32c8249cde79de32dea9110340ceff5aa8cc92130afe19bcdb0

    SHA512

    7477c8efdbffe14831d53bd13bffde6d6a10e1d58ecb3e66938cd01291d60d1da8791900bd065455229d8a824497caa026b1677114232eac8fcb46a3627f857c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a42f58ecddfba785513a20211dec488

    SHA1

    d33859cf23a4f78019d6296d771ae85435db18e1

    SHA256

    3bfab72970a0595ae304983acf3f7a83d4691931407c4c7512bc3c32283cae28

    SHA512

    e9c124028d343fc211ddf9686913ae128e49ed1507826e05b5345a09f04923ee9d48dbe3bc6b67a30ef50ffd612ecc393e82f8bc577a75f6e92e7af81210245f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3aee6fd3318bcb417ca78e3cff252db9

    SHA1

    6c528765378cf6ba796bebb9e9cce6b47be058b0

    SHA256

    1417f3bed6065b7897b30f1ba242d5db89b4075d28aff379711498ccc25cc17c

    SHA512

    f2004261fbcddd75ffa1a3d5adb784823d5266fb111862c71865eb23872181e3b3dc5d28121ff77c6cf41a7980a16887bb85f96c6e18333e23f89024bfead1c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    831879c3ccb9928aaf378b7d0a93e83e

    SHA1

    6806a26bf2a278770501059c25020ea5047fd551

    SHA256

    27beea48ee6cd494dab925cfe3284ebdb89bbdbfcb1b871b02199a54e396c0e9

    SHA512

    33dba68b1f5c9a40f5a7eb3b14457eddba5d182c1a01afd59418286d529241fe5b915c82df06e0e2069b6307c44b6454730b182efb947aec16d0ebdf5a9a67d6

  • C:\Users\Admin\AppData\Local\Temp\Cab17B7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab18A3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar18B8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b