Analysis

  • max time kernel
    139s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    05-06-2024 09:28

General

  • Target

    97bf050828e04a928ac84ff3d2b8772d_JaffaCakes118.html

  • Size

    28KB

  • MD5

    97bf050828e04a928ac84ff3d2b8772d

  • SHA1

    4f0152298eed7ff1f2e5340f7e2230e29b596db4

  • SHA256

    6c3f453da44e19d09064debcd11ca72e1a4fd19dbc23842067dfe68c5da94282

  • SHA512

    067fdc6bcf384eeeed3b9e6f27545fd9eee075195b46b9cc2a5f8d9813672f537fa95d62bf955c967bd8e1404096329871daea1c51061d6ba431e3c655c6b4bb

  • SSDEEP

    768:lhppSSNzE+PioioZj3GZdXGKPP5CsCl8KxUv55nc8zreGk7AscoCAo:lhppSuz3PioioZj3GZdXGKn5LClzxUvB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\97bf050828e04a928ac84ff3d2b8772d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7d07dddddf0f18441ef57aeb54618c1

    SHA1

    a6f0792366417e8c635787874976b506557de5e8

    SHA256

    7183e151e9948be91feec339b012c729823cad82d74e358f4ffbe6b9311778ac

    SHA512

    fb5a74f3852b323cfd00b8231212d095bf3c2adb2bfeccf9d9271220344d970e4d8d3b33bed08c61f24ad972e946f5da94460759e2cba1d51e849a5d2e5ddfb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6a10b783103a39b5fad6602533898b8

    SHA1

    b9efd8b2871d2b525540425c56ac0906d5e75618

    SHA256

    9db1f81e9be081aaeba99bf3e7d32beaadcd9492ca7fb34951e4aa715a258f34

    SHA512

    8acd1dc1e20604590ded17c2ccb794b40b406f6b4e70af62c694260ce5acdc59665e68f5eaaf7073c8c815f6eaee47eafeb3efeaa2f945147c732b1340460f48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92966aa47c8f1535017d7650a4cb6fa5

    SHA1

    7ae6afe7c5225091f0f0379331acaa05b5d3534d

    SHA256

    dd7dd0c38c773ab6a74adf69dcbc4758753590e4073c2445e75250762b4a8be9

    SHA512

    00d2a2ab721e527c5b715d7c83343a2fbf33f66c94e24d4ef16327d21fc46a3754e009e90cba90f335b20d4cb4d9f5cbf9e7080f752b8382d7fc5c6ec845d5a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2b903bfb5289769dc423b8ffa5fd213

    SHA1

    811846e4476c121fee9a578bb6c5517290b44bdf

    SHA256

    6a9980d5d5f7815c89d408a7ea129362db330fbdf1ed39a232b36493aabec03f

    SHA512

    bd98601d4c162465e53bd67b8512dee86bf552bd5cfb21d4c62d70b95418c9d708fbe1e2389a63b4ada06f1e79950d292126dea73bc356ea55cacd63dd143dda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4966162eb1d21534f03bff800a919d4d

    SHA1

    0d48f2cfaa2c3a44156ca7b61d4c696e34e4136e

    SHA256

    1e1d23e5f0458dd2330f4efea8c6865be19e9fa634cad5a159292def224a4535

    SHA512

    e0426e9fde40a99106a83d7daedcd8f197037c3af1690f01f4ab9b41ff5f665d67ff9530b676d58b8b4945057dce1b1761441c8c44590e1c2e2558c7043d4d90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c82f2077861529d44d7e5111ab97a827

    SHA1

    038fc441606c4139f6b8dda6768f9c1793c568a3

    SHA256

    3e51f1ecbd24ab5d72fc74ba4ea3aa3b4228d2a802c96f2594012a2a495aaeb4

    SHA512

    2023cbb2bca403b9fb92e844f9f1f94799346e85a983764cf5d3810be7ee35e8a91eef8f3d07e5a95f960e35ab429dca144b87ac4f1e1b3731d10e7b87f76aff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed978756ee678ffc431defd430466a8a

    SHA1

    b84d59aa3834e48da16a4d3b46326cad6f0d74cd

    SHA256

    d906e192d2c417c13e4b75b2243b164f7a064d76f4f532d8c99308d471b96d72

    SHA512

    f3a5aac000f32db146c312b3afbdf525bcd04fb275d478c339b28077e75e6062b9a310112e613cd9c7b6b8c212b03d565322bc58ab5ad257c0b204bba6fab18f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad5b3d40779cf35de18007a1bbd34a75

    SHA1

    018794740d46d69800997b7121f32d4e97f7945a

    SHA256

    e14fa730f176cbd351bf62de849c7b8957556df090fb7ec6da9368cf756949c7

    SHA512

    34076ee016fb8ab5987ef03506d8fc9fb10cdd6d1c35ed1494ed5a06f4d7756fae77f3b6f3b842bde42018c377eb0d4dc971ac1fbd13275e2fe3c723af8bc427

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    533760a403919eb8ef497c82e7389c34

    SHA1

    5435fc43265b353701d667f9f848459a4700035f

    SHA256

    8f100b6160b80a824c98e42185c6e1d135b4983786f259e34ad106ede5469624

    SHA512

    72016346a072071d3d679f423d04feef401e4ca1f3c6041aaa68679f588ef88ab7480d34a2aa58e586695ea58639d62ada28131f6992ff18678df4b9b8f5fdd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d33b4139fd9ae07cccff0779babe2807

    SHA1

    9292eaebe329a31046715e5652706e368e638912

    SHA256

    018558ff5a01e972a60bebd496f8f342f2be10e8209bb4449357df5c77caaa3c

    SHA512

    07f51084613fbcc9861942fcb4cc6b2dffbdd15adcf4a67655a6140ccea9ae505c71e2ab92aff0923890364e24c6ca9a53cfad57fdbdffe107642eb8d2ee47e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40d76b319263883edbf9d575dccd46cd

    SHA1

    a495b0df9e0019ed8be0cb8f7afbc46d177711fb

    SHA256

    f69325770dd5121b4f39449baf496c4d5929f514df27c89fdca16a44b73b8d75

    SHA512

    c870bf49aa66af7c5e0176202f3d0fb1b3eb5a466cf2caf57266d308f2ce3e112e366063d774c34102d721791dbfd36696bf10700f57ec9a4074b54c9882d9ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20121dfb1214699d9f7b637602d96b80

    SHA1

    09d292385c3fcf968c841498d5010a3d944dff56

    SHA256

    45575f13cfd786df03db4a1d82baa06fdd2feaa6e6a09d554e46dbf1569e572c

    SHA512

    79a138c34a85c592a78bf4b6dc88540dfc9878168acb815ed32c7005ebc1c16750f5a3bfe105c4c6efb67bb5e8bb2a4354a0ef0c6b25c3ef5af4b9af7de38afb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b98e90bf403b9cc761c84d2a2b6c929

    SHA1

    71d7dc03e3ecb86fd6f7fd5887f91337d2f02880

    SHA256

    486e663f77e969ff9386e1111f61fd7fa3320ebc35330ee55d0ced45dea115ac

    SHA512

    4251049c2425a6963671e6c84c95f66ffd74ff41c324d4af80168bc5e79bf51005e1bac909cd3e3bb31b7c97384a4e3f392b428e670b41b7fc6aaab586045a93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cac000bb05c5b2e16c95e69c3d4a3528

    SHA1

    4403cf8461221148506a3e9e6b88f8fce569faa4

    SHA256

    dfc07ac62263caaacbf8ebaa17cd9b9974f664e667776491f454f6f1469b6e1e

    SHA512

    f7de7d23dffb44b8e00c87ab61eeed465fcdc16731af14e77934faf017c0c6ec34a851bb9d3de286f215af994350ebcaaa5906c7f7326e8154d298fc272e6f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76cc0ecdcac87f390231013ddb9ecb20

    SHA1

    cd9c93c8e1a85c3f177ea0c1e3e9aaf1dbe5e66d

    SHA256

    0b5587bd14bbc21a68eb32a8ffb44394b7d5cfc17ff601df5949833ae1f9bfb9

    SHA512

    4dd2c7fc24c81c268ce903c13dbeca58a0a837f4dc37ac475909a354f91ed1ac5c03e133001f531e9a414f8af9e78c676f03d0a86fb5b87b124496e9e0d25fe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0774feaf6dc954f9ede83045b3c58457

    SHA1

    e6f6ed42ace538789dcb6f986296dc334164629f

    SHA256

    5cdd6cde2d5eb1abd651266281a337f36eed5a1f409694163d83b04d793b199d

    SHA512

    7e0d04db858e4008f14dce7b11418e4e5138346c938dd1b03c4bc11f3cbfad40df46992e48602171ddff0b05e773dad319329aeb8b8c2f155ca203e8ef5f3ed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e3063af0fe19646dec5bdca95db3ea9

    SHA1

    e1ebc4fecada146f2119a629e793a9441fda3119

    SHA256

    f52f0b682fde3caa4a75b90bf64b5b22dc859aa051fa0eee7c13ba44db2dac70

    SHA512

    6d1acff21139b56998764478c59a8d0415cfd0da6ddb35dae775259154c8500ab9e06e57dc227da34d6b15e88b473412f5746f23f081008840dbaae390dcf669

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04a083d7156a0c9f36992d9d4478173e

    SHA1

    19ab2c3ed46e0c4059b76de09d03b08197a06dad

    SHA256

    b3fad1c9c6315e743890175e43a1c5384c0a89a73a4de6ceef0d60c1c9aa92f2

    SHA512

    d5e11fef38048b8997d3e3542379949c89253935574cf6e9906f621b70cc84e4d7e00887114d867bf2c1ee6bbaeb4104d91ae07446c4ed4ec571f73acd1ba747

  • C:\Users\Admin\AppData\Local\Temp\Cab5499.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab5527.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar553C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b