Analysis

  • max time kernel
    119s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 00:23

General

  • Target

    96c1ed11ff9f0d3d2b4fe479f0eebf26_JaffaCakes118.html

  • Size

    16KB

  • MD5

    96c1ed11ff9f0d3d2b4fe479f0eebf26

  • SHA1

    514dd5830cf1b795f2d78f0a98cf8e7b23a3e611

  • SHA256

    e984965298a2e3153b59a4bd2ba537a699a03c4b934a1ec5fa2f83cb7ad9b21f

  • SHA512

    2f4b7ff175e4ca71dfa7ec48ea81fb14be91da33ae1b64de77dda788b94a4098a17f9ae53ffa3fc4e611eb74a7c58722389604cc3397577de0c88bc4a3891524

  • SSDEEP

    384:SIVKZBqjnKyl3YYNFUHayQeg+uN6wolFxLPr5PAbSz9B8og6xuKgW:SSNoMG3f2o1LzD9jF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\96c1ed11ff9f0d3d2b4fe479f0eebf26_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2804
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2804 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2204

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    feca6e77d3efac16dbc8349ea9b08a13

    SHA1

    830718454a5fcdeead660ec3c95e5fb96bee1992

    SHA256

    f98da314c47689b8afa258e34dacf88d252379fc4445fcca8044b68fc0bdd58b

    SHA512

    4357082c8e37916d1e756a3531e5d0a11250608c4b9a3fcca68c9b86dade777253b76f8763b067daa5a93ec5340c39dbec0820bb00d5623a78a59f8368356a7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5efe91a02dbd7dc4e7210b07e7b25519

    SHA1

    5ba6d04912db4c127424bdd8959053a4fe004701

    SHA256

    a56a9eeb992f0c90e3bfcd8b883284fc1498539b735748b13c808fb47b95f6f0

    SHA512

    636ea3567492fc20380313d3c54cd7fdfc2fb588b73b28b6714ab8c5902cfd36bcbbfc4c12a7160c1f694a35ed8bc86cc3be09156e762f2ce5a56b39238940f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92f8df21db8c18c407c5c91c442d3167

    SHA1

    2100153faaaabd1d44b580d4ff7bc1dd6b5deecb

    SHA256

    5683156d911b03bd6825845b639fd324637db086650d6f6b022407765d42dd7b

    SHA512

    5fed02e51b169cda55c9a3ae59e79d41a268fd26b8e981782cc762fd810adc4bc240f3f5b7e343e8db418a1691e13636753df53f9c582ed08b4d054298892087

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f64e83de6d741fa5c1bffac93b9f5b3

    SHA1

    f7b3f9a245a18de355390fe7d7c92376991c5ea8

    SHA256

    fb746b4eff675f0b32dee80bc711857136871ce4b4363d15035fdaacb7fba5c4

    SHA512

    dd99fe63cba0073601b4f7020b0d4e1f2d9ea9b62b72b264eed56fc94858e330e687a0e646d25fb94af2efce5748d6da9ab5f05825191dd6d95cad9a97558ef6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75f3b6cffa98361006a6ad9c2e33c9a6

    SHA1

    7713230f2481c55e4654859047d7a035239421c2

    SHA256

    088bb7238aea501bdfd7d9a6a1073efac48383ff7134c821ef3ba1e2263b4252

    SHA512

    435962a912250d39464b091204eab246185fb0a333155fecd302b2fd3e41d3396bba9f7ac18fb49467ecd9c12c62596bede0278a375379e38da96537f6f4da07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    747dd2c4aa5d496ff0b1f045be0ef189

    SHA1

    f8f520d2c375413bd03fa49e7a1da509a0076b05

    SHA256

    72574f4d718c9dcafdc95b8a9d1113481fa0dc7426eeae443d5ff44fa685ea29

    SHA512

    ba4d993f80d31251730f0e3a16d59ba201c24e6a0bf31deb2ca400a73a3965ee058bcb7d25e93cb5faa58450ad1cfec6e4d396defa3fec452c0e73688fcf8aef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fad6cfc00c43d80529a82d5d59470d0b

    SHA1

    2596a6c2ad57069aeeba10780fe2c58ecc8167a6

    SHA256

    a6e1fce15872a730dc2c74834279999dac98ff5234748a0bcf16fe959be2759f

    SHA512

    99270af9404c23679f6662403d0834559ee90474d24088f6bc9723135f80a473521803b0be6a2bd11314823e9cd338fd480bf660feddf3835df416c6ef829e5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b5b06a1b5485264e0c313242a3ceed1

    SHA1

    9ae0b399b26ab3a7991633512efc307a6e8c9929

    SHA256

    f8b514109bd9f3dfd08ef1a0fa01df541f100976b853c4141f23a54632922fee

    SHA512

    8a32a8d16e9eb920e93c16e85a0000bf46dfa8f6797d57e5ecf89593505917189c5ef5e58017a08ac4cdd501c5d5ee199335cd559186482f2c91df794c58a0cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f3409ab57478f822833f875bcd7b2b5

    SHA1

    b3db17320d19aa76405635263016c4870df796bc

    SHA256

    1e44bf162b66ac2b9c52738e9e0571aa67c35f83160c24c18746b08192a7c9c4

    SHA512

    c1a914d3c5c18f9cf017c3bdf8842b818d0c6118f36192b5c64052ed78c6c0c20a75b1eb20d0f52af32a3bd54e2d5567f17b57ca8bb3a83ec959294649e7ffe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48fd66c2a44ad7188b704dcfdbc424c6

    SHA1

    c5b5a38712ca0ea82a4d5804b03fe4f801a4bdad

    SHA256

    a878c33f6214f4a996662336e0b3f5465b20d358f0d30ece2c069cf59f585cd3

    SHA512

    4fd08d0fb8fbc18c99c5019de7f40551328724547d91cdc3b0741fe4ef1855d2354ef69b059a45f83b677147ee61b3bf9bb041903286547d3ca15169ba2376e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d543a41768cd922b6383baa13b4ebbfb

    SHA1

    89f4886f5f45c119d48dbdb1d4e5b044c4e43573

    SHA256

    4fb1c34e0a8d6d1513245ebd0c3fa6410b618c1776cf80ec2216e8b3cca67dc4

    SHA512

    4fd88712874a3acfbb3cc01199f7b7a2f59542b0829f01a5c842be77e506dc11dda93368708d997ed7fe3126881ef39bd76d9e3bcd35f554185669e71c12cd06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54edc3aa1c613bfc8950e26fb6311b95

    SHA1

    237a31fa2472e6b6a22a5e6e88e822241eda3b6f

    SHA256

    eefc49828a7280ba35a187685823303bcddf15764452989ee521ea6f2aedad57

    SHA512

    8b65018a7a3467fb697577e827eabf6d567e73ca12b950c35f2f94b613ad94368ccae9ef3739bbadd612f7af4046370f452e5ed33b0562172f03a02aed8fbe96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93899b973d6a1feeb04a281a226b0eb4

    SHA1

    72196e493ccb29bcd96ff3155a3b6139e0e442a4

    SHA256

    9dfddfd269e221949618287d9bd3fbc4344f1032394f93244fb137c5b9dc7368

    SHA512

    e24f0935305ef756a91e70ecfe4f191d5c94d74b9c15aec1e5a374051008194fa89ee2406bcf03abf4555944ff9445210cd26c32d7183aa3dc31b26bbeed120a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bad4224de4eda2df774d4bb23bcd3dd1

    SHA1

    64c1cf1b39d7e5b12c7347c5cd532fb99d51c430

    SHA256

    91fd8db171adf43538023d6879693446c9d5a9e37a3eb7b7cf06606ace26f064

    SHA512

    563c8024de17de04b62cc20e737cbef46730ddb995fd35dde6f565abb483a1ecc578e7bc486b0c0341b4564d075fec2d6f79d1b619718284f018053037101a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54c2dcc5420c89d3fa404b37f177bb75

    SHA1

    3f77145c34c5ab6fbdcfb624da4177ed073ced99

    SHA256

    c4a806b7730a615c4866b6879ece1ecf7fa61b89c79f0d85f8b29931c6deab13

    SHA512

    8ae62fed0a8259e7bdef15ae5dc6bce53a7436c01869f2dc6d9cdfb0f966be5890999e76d4bd0d44ab0e1370b7923515061711ca01b3d487281c05a0d3a9d077

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db31ba8a32e5758236a84bc299028894

    SHA1

    8abd0dd812042a1e27ebe4d488675087e51b0892

    SHA256

    e01db33ba9da111e7daf23b5399f3a6cba58ec20f6935a78ae5702400186b76e

    SHA512

    d326afa85d6732a0bb20b2794e32fb3a999f45bdcd054d08bb3db46b9c67408235db1e449a58c99a41565f1c583b4231f4f59f433972c11c659340fe8351f4a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7573570e16dace9a1225aebc96a60830

    SHA1

    1bc058945aabadba7c38860eea7c0bd8354524d9

    SHA256

    17d12c31bdd743164915e89ad9305e795607a302cd858259f26d96e11756af65

    SHA512

    6c8c09b16e3b3882268eaba873aace31bcfbea1c54a3a98e375880a69f846c5a4fcfe047b6a8f6cf269390629c2a12299f77e80d12badd3b4ace85219f320088

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce60411ec157777c66705236c06da334

    SHA1

    6b944deead7c5f4ec76f55e66b26e501ed07d5e3

    SHA256

    81b2caddbba77c8d719c6a1c64b6b69b61b63966a02b7cd41686891fa025836c

    SHA512

    60f49eb2ad57f818e4adb3adf2d9e1425c721b64302347d21cb532dec74c2a607abcd3f1d1c892fcb2b179eefe2dbc14450585062f827c1252feb48ceb6b0292

  • C:\Users\Admin\AppData\Local\Temp\CabC969.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabCA56.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCAF7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b