Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 13:48

General

  • Target

    98527c642f420824b869fcd31f5d5d49_JaffaCakes118.html

  • Size

    15KB

  • MD5

    98527c642f420824b869fcd31f5d5d49

  • SHA1

    6e3cbb5d7f8e7c7a5d2ec9eac5ef1a5fbb010de8

  • SHA256

    c2dd79d0f0fd9b68f3d7d1fb77fa0692753f56f470215d7f7a6beec9b8b1a46c

  • SHA512

    6e4ab890a99a14420fd42ff84f5d839bfecddf470b666922f52c7031c2f30b6762dede1c3f4c5eddbb14ccd0ea98bf2b620c1801bac8e29ef72dc11874a61876

  • SSDEEP

    384:SAHlAuQUnP/TFNbiNH+/jIBONMsKMnhlvukBMUc9DVViKEPoA5pICiKEJF:SAHlAuQUnJNi1mjIoNMsKMhlv5CUc9Dz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\98527c642f420824b869fcd31f5d5d49_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a680b4ccbf5e54bea82ffe4db24c980d

    SHA1

    0f661f408a2a964b861bc4fc69d39d0587d005aa

    SHA256

    b9c7475e37fb3cfea8a981008b0e9f0d6211c166b7130c2afe65ec8bbe390554

    SHA512

    0a379759e6a411c88c0f1f91e9042841dd8ca3b902f0f551997cd635767dceaca3fc8b64dfd2734cb5794778cb20d6aa1e93d5514274f763709fbae7b2c31b35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b949cebf9cc4a5df0b69e9063996a7ca

    SHA1

    23d009bd26f5bda40644f08df03192e7ed283118

    SHA256

    2410d7b690c032354b216797a979156a909e03468c3b1946a8f8b752e43a8690

    SHA512

    ae8097b8a26b710a713d15b1bb860657a61e413dd165b75ba219d8a7e9fca5435cfdc000eb29f7271663594a5c9b14b30091ca43a6ba9c677824c22b92bae0e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ce16229502adc8d514f09743c5d0e16

    SHA1

    72c211bb6403613bbeac9db4aaa1217a99e62827

    SHA256

    1b30b29c13f06ead2ab86b99625dfcdfac3be565fe92c56650be67496e59a590

    SHA512

    8336d506150a9eddb887e584ee566befeadd59dfb5a302ed3ce19de92b51f9efec07aecdf558955de46313513f192c7356f33db964a877c4bff1710b4a2ca480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f18ada05b32f63c23d416897f0238b4

    SHA1

    73a97012a4908e95ebb501d09907ef114a6e52c9

    SHA256

    fbd336767f9c46b851c29c5b54fd2faa472de442d18c0215040b52336be975fe

    SHA512

    e003d55fe2874007064ec7cae82ad1c857eceaaebeb5e87a3f56b70d9bdd593dd4c0350f501fd4186b4eff94a88ea323fe5af3c51dd125615d43e52581cf1a2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddaa9122a6d417c384255368aa4bb9fb

    SHA1

    cac0aebce30c3f9fc48e8acd91068fcf3bb3e845

    SHA256

    7a0821f35277c17867878cbdc8d895682c5f462b24309162bcd96858147a11b4

    SHA512

    b01b199a0b73845d798a174d25a08f814ba75012f71dbf500c0fa5d69c604cb47d34ed95bbc480dbedbb23b60b1438b439740575be517c268a9631285ac260de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e8b99564c563d3364423cef5188db1a

    SHA1

    f42d7c4608e261457b96823d7de140563aa79d53

    SHA256

    74d47f7546d499e8da63a2a42805399837681c5af19da5c269068ec4375d164e

    SHA512

    b052df5b7f159cf07d387b3a4e8b4c1891ecc7a58444e87786f0e7573fce94e36da3058e63fc2d21bb3f065e890a81be1efeeb37127248ed835ccf62bbb7f571

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12921eccdc76ff9943bd49cd1bd3ad2d

    SHA1

    251d1886b8b0f443e529f7c21f720a712f12a3ca

    SHA256

    77e0c5f009ad90dccc46b7d5b8836c1e1f20d55f15324d711fc08a5402b5da81

    SHA512

    a1cde062bc1e850a0fe689420ea90faafde2d04c781ec4a06e612452768acc23d6815ceab9015f6aed6a25ee3f2579568cb80000d243936cf44c359095330ea1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6baad12fe47ce3bbd90ddce6c3d75138

    SHA1

    c0e9a0a40711bc4e0e359a1c75ec8d4545543a8d

    SHA256

    9bdeea54b39e89006f8ffc2a166015604d20b672ad467ac70bd466c150de961f

    SHA512

    db1e9bd68afe7bf6abfa262fc1fe7a768d85e4f0c702f94eb4bf77b9384640cf87a29dd8675b37bf0bd82e505ecaea7ca0ed031acf1491743a628f595bf10319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc97821f16b91909ac2958d527dc082b

    SHA1

    3b187893cf3a534dae17eab164620a347280776a

    SHA256

    cc8dff70355b0dd0cb42a39febb18c8f35639bdd5292ba566b6632c451ab09d8

    SHA512

    78457cbb3800db433567d8be93543691cfe267b9088048bf96b7cb74d8ec84f2b75c6dcedbefc22f4d93cdbd5c0986eae6d7f5ebc9cc67d0a3ceee461b79576d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6718c38f886c6fd768809a3eaac3e15a

    SHA1

    cb92094214b52c2309d4391bc6408034118dad79

    SHA256

    3669ccc47db6f426176322b0909c4386728e50c5dd767a635423a9baab9bdd68

    SHA512

    4280de2233fa1f17babff29d8ded436c3474b882ab1507853f5adc6211ec2c1e6c741a5f2477cbb18a1421ddd50341cd0fd6fa08ed6d3eae8430fbbdaf1afc50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe57c035a7e6a148c8a5680c5a4e3111

    SHA1

    7a81ada225758e661cff4c5e029cd90b06458b62

    SHA256

    d95d1663576d221cdec74b439154ed33d6503843ff7df694c70d77dc6ee4c966

    SHA512

    613dece7eb9ee8508df3d2005fcff8038118ef46b11760ed86b8576325af31c97b07beb5e575ed2f80c6bcce69fefdb07c80bd00f8fca205544d4768d788c2e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79b5415ab8dc09d2fe7845170e31b12d

    SHA1

    1717aadf7436737a1c15b012b367bbdd718892f6

    SHA256

    b722dda002f8459a93ef6b49fe864b5983a5a8bd7cc490771ea7bf04f6aca492

    SHA512

    edc3a90ca24e39134110a0c624a64a30a52342864343819303912288e22857c3d7e28ea2e55271abf0a432c79f1ec0a84d68860f129dbd8e6bfdc9b815585b6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be588bd14a372aefabb396491dd3030d

    SHA1

    564ac0165955d94bfe308059e6d1464f7730bbde

    SHA256

    c45ba16954c9016d19edc4a06db700b5c5eb0badcda0cd1cf4014970728b3ba4

    SHA512

    8ca73f63cf165509892dd480b71f6e51b262a4e024ba266b37b6cdb90d35a31e4d4c7d3147663eedd2dead2fe0fe63303b7a2e54ca5d5b8eb7824bbbc351bfa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c84b16a6dbb1de48b86e36ba47f72ffd

    SHA1

    a5b7d5244713cdfddfec39bd560f7fd8da67020b

    SHA256

    a8aff37312fb3df46164dff2a435338e5b79c83df8cee2c9539a2cbe38a46648

    SHA512

    fde976ad5e64f6a8c8e393731c17dfe120ef4e911c758cd114038f363c9879868ac0154df4106fe955c960074d27de6f36663d3d67787911d449efeb3171a3ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abbbc7760d726181ebc5ae7215988a55

    SHA1

    49b469280cd44155609cf17fbd1c5f6238b40493

    SHA256

    fb74b29ac3843151b461d3943099517391fca9bbb49f161334d9dfb6a8fe77f6

    SHA512

    e29ecae651b6d9adb20d5162a2bc024daaad17bedfdc0738cfecdcf710a35190256ea7ef136caf69694af961b665381f8ba17aae3260dbe6df5bf6a41299c082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ef0a43df36b201fba7e9c56caf494d2

    SHA1

    b9c0515a243d2c4b4094ddeae1d567665eb94f36

    SHA256

    c337252efb09e320cabc07503e285cd1ea8f1dbc9ce598fd01731f953c9d0f9e

    SHA512

    ddef4d7efd58ffda538669dc14882f48cc740817e69d7d2ed86cc68361664026b4cfa1cba7ab231c9fe735fb4b4aaf6a2e70b2fe36dac4b35fa670f1627f0218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49a43ee87751e05f119961242214540f

    SHA1

    fc4fa435a260c4476b6a95f7ba1036265e134c4e

    SHA256

    bed67c02b538317c457b584f4b6e5a4e5badd63ad9d96ffc557f2f004e5bcaf9

    SHA512

    f3ea8c2bc4413fdd881753eb5bf06083bf721b19a6cf88196b0ac77c767cd35813ca06c71d0e1d11c1cc3c886a818e6f1a18f12e985a1a0aa9f0fd5064a70cbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f2d462d6c37a20641b30d3ee567ebfa

    SHA1

    62bc041466dde006664b8afdf678d6d175876f81

    SHA256

    942c626c75d8b76ff0f215a7ea4e47cd16b2d252889cb19a78aa1eac3b982e5f

    SHA512

    45157229091c402ce2fe3e66fae21a9bec2e1bc24837acc48644fedfde930f73fd441d754e171d039de5414fc1af934d167501f233c3f65143ef600dfdeb84d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e3c6f0a9f83cdf51772ec5fe9fc1da8

    SHA1

    e678c483e344038dca3a2f6e48c5bef0cfb9b5cc

    SHA256

    535bb479a4884aabf39932400cf7e63e6318524ec65dcc958283ecc4bf648787

    SHA512

    9c2f854d207b3d1ae23448729caa124b39c559f04e062f99f0445fb706fc40f9be8981aaa02e9c3534273b0850ef09249b9c6595d81800c41d5af38880736983

  • C:\Users\Admin\AppData\Local\Temp\Cab2953.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2A36.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b