Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-06-2024 22:23

General

  • Target

    9c22d21779a8f6b031a5ffcd63b33862_JaffaCakes118.html

  • Size

    15KB

  • MD5

    9c22d21779a8f6b031a5ffcd63b33862

  • SHA1

    ebfe5e6244fa4a3ee1befc3218895493e9f60416

  • SHA256

    d364120200609327115b8923057938dcc2d191d340174463b753be7842ccf525

  • SHA512

    5cab0e0d6ee5e30399481cda46bdd43f6a4a89430e189fcb22bf410bf4505100c850d04e44b313e56f691579e97d996d016e6e26a592d6f7384fd75441f076e7

  • SSDEEP

    96:BKLVValGZ7r0VnoGMVT31dQwhe7pnVFg2gKuP21gk7GAltZrJU1i09Ab671D7paE:BzlyzQxVzuu+k3rJU1i0uoaBs36WNi0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9c22d21779a8f6b031a5ffcd63b33862_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2488
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2488 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2996

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5c9b45ae96e3eca7355407008de6075

    SHA1

    db895dbfd64429d22c9a4aa28620ba1e972515c7

    SHA256

    70a07ce36f7218d681523a501c4ecdcaa62a4ed69ed892076b141526377486d4

    SHA512

    2d30670f78e92ae196d130d64faf21dd70dad188e59892932f498a41285b03ccb2f1e3d24fc74a835aab1f130dcc6485b90ead9d49e29dfea1d71ef30b84d82e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    883f99357fb15716f0e15ff555ecd6c1

    SHA1

    d55629174bcffd83a1f4c885e432886401005d4d

    SHA256

    a3249d602f16f19a35f46b0967330e5ec063622e5c63c2f4547ff115b5f3e066

    SHA512

    324ffb1058fccd1c343bdd1b7df009321cd93a5d1814d3594bba5cabc0edc9d2de4d8099eebc8c40bce293a7e703a9f5f4c3569ae53d9dfd782c7a8baf82c694

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79f569118590ed2fdb4e6132d2c7072f

    SHA1

    0971290553777ce1bfbe44296942615dacf805dd

    SHA256

    814ef1fc2b64550373be4b745918911d647572b6635692fef47690b69e591197

    SHA512

    36319813da87968da90a8249952243b5f1cf1cc4c30eb0a9172a4163a94a8f742d012d972a7ce887c5d86ee605553a1188bb7347fd1aea20f1a31a4bf0c2326a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afb97b0fbedf1c74f86dd4a362491868

    SHA1

    17243560efc14f40f34854748fab0ca6a3f3e5e3

    SHA256

    1c2a9861e5db148aa79e3cb4ccb738cd2acbca81f0c7e10b9fd7b811547ca183

    SHA512

    893862666e0e3a0fd68904adc3bd5d689f88674afc9409b059e2572aa7f84ddb26a594c1d03a33aeeded042b590072175cdd3f9dc0a3ffb2ed43591b0d3962ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c879ef7471e86c7da1c97bb29b340033

    SHA1

    683a05e1707c553add8ad41e681a48e3b6a1b467

    SHA256

    29ea8ec6c8d4ebaceac78f919a5f27e6c77424758b4ca15b1435dde16b46a466

    SHA512

    f6b498556bb2c244c78b985c9ba2cf5a0dcc95e7362068372104db24c6635305793cc316e562c32037ea8234783ee456a8ee956615dc012f84592295b620e54d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5cf70421c518223cbf664dde599f5f8

    SHA1

    a12e3b8bfcb89fb2292b6172e8eb866a1b4cb134

    SHA256

    d19770a7f8e9edfd63e8756fb18a7ef3ffc7786518023f8a3025c8e97bf8306f

    SHA512

    e83941ed99436ce00c05f492b5ec5861653b3b7d8e53bcdaff6ba79b431db297532d9ff8b6fe9b748c4b69000638ba064890022bc02391a3b4a611f0fc77fa1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cdeaf21ee218a0ad38468bab6af7e79

    SHA1

    d88b897fa4d588dd7591331b01e848601ef1653f

    SHA256

    5055cc8d83b7b399405f4e2ef8bdf3a9b21a0f376418522449c779de3cf0ba91

    SHA512

    9c3e9640a01ac47db714896aee0e7eb763e9d22cfc64e5cc75c118f2b98ac2a90d7c80729ee53dcd5934916bb4cd2baa57d582c63671fca031a165202ab2355c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aaca418a93d57cdf78300955e51bfe2b

    SHA1

    345202fff85039f5c68c9b85da10954dbb8ca9b7

    SHA256

    ba2220d96f9fed454febba614820f4f7f06b8a44ffed661bf5ca00f16e77deb1

    SHA512

    a1beb85ecf85ee35d9f5c15e3692694b03f1f2cdddfc77ccece8681e8d5ae99d5c5a5bfbbbaa7b7ebee0420863c9e7e195dfedd7d0d38c8be920788f62d296aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a735a6d7f4a5d967bff690ef81f2702

    SHA1

    d3d1f5b0dea04ee736d777af76e4ed514d31cf92

    SHA256

    9f82ddd5f784a4076888a2a29034ce682b91169a4cc9323190cec612915e769c

    SHA512

    be61bb8348db1f7c92e0dfbd35c0fb7d3a7c2d954f4ce05b0529c7856672e9a386e0e9489fe48f28f3a87fc1acc99ae5263fca043cb42abaa2edbb263ff095bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    567e0d401ce26efe246fbac12faa7b78

    SHA1

    13b7948cb743de9b7f3d1157c6804b6cca6727e2

    SHA256

    50ef8dd6eca1d658e92877ae9dfebcae6d746a9c10c142b845d1f6e924b15b64

    SHA512

    117ef70a634a05b49ccd1acd61aaa9fd014c77a0063e6bca685f95cf87fe74a197cbd4603d441b7b4d62d058541a74b0da609f1d0bcd387cb8f4343f78fcd6a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21b62945d70756323f976abe81fe5146

    SHA1

    3acc1296f3877a54525c34f2f0044bbaaa896003

    SHA256

    b0aeba41cb6a3e16ec884b6a826ccf453da0a3ffadcd86a1573736c9dcfc1699

    SHA512

    9ec248310129026ebaee99be64681027225833a8ec29a8f83903bff630a6e6c0173670b2f0e94b6a60f21a4ac8d3642029e12c9b8f9c73dbbe7f7c5e9b4a9efa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e481e57127eaf63c05ec8b50230ebae7

    SHA1

    1164a778ef11a7f756d7a95f6e9e9a70c38d1940

    SHA256

    df8172f1b46e16c4405b2c8d573a31077c38122e085ce25579689bbcfc1ef351

    SHA512

    e5717f00c00daab7544dc9e073db89c29d7da2f8184a0c859b76b0b361959221b90abdcf6c370d51f7f8725ced523ff6a0c28cccb7b6108aa37dde38a53065ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c53c2adc9ee115da9ce9f880799e8948

    SHA1

    3ea6057e233cce8697ca780629b78d7c421ccb33

    SHA256

    6ee6782b766ce61fbf10a777b40e270ff255573383a8c832a0a3f6d549a84c70

    SHA512

    c037a4baa8427307ed66e7f24eb4a8257f23aa4c3878307f807627a0a99d0a554faf5be4f0eed04b975f75d411bd8209c316ea001c603f9dedc0de3e7b35eb4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    137c32e0091915fc9e8715e94f656740

    SHA1

    04425f81e9484eeb5603f6a4527e10b567dcfcc9

    SHA256

    79e564269e904ce1fbb08ab8138bdf0c324aa8adabe6f7fc7963bbacc02c27cd

    SHA512

    2bd29fbce01adfa22ba3aa0a252408d103f93790e3c28195d33f6fdfe964059f9f55b9a73f7bbefe61b32d8067e51a5ef98caee9cef28e761c62fb22aa91c1e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9832ab42d9b074ce43267183f3199a22

    SHA1

    7afa5a7ceb7934658a800230ec19f39be0971436

    SHA256

    f23962cf8c09dd305183264900fcbadbd697ec266926a8df0d09a25772851931

    SHA512

    4bb8a89d8cea3fd228109213c54df916e3b38261cb8f2cf88a25fd6aa71c904a0843ac852143fe71eb8fc79a6de22924ef5e83510610d9957ed24e2c08cb9f51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e113c6495469405ade529ded0ac32642

    SHA1

    3d5623d1b5a6bc3aea742b39feb76584e7220e91

    SHA256

    f0c7ad3025be40879deb3fe1dc75c8244916dfd6f7c50fe2283c09e0f6cc5301

    SHA512

    79fd6dd5ee1fd22f6519c8c390e03f6bae9831dfd040f1c3ced853ea1492b5af635261a54a43eb6d7591ea22a10c0be837581cda58a7ffdc2b1c89414ffeacdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e160e75c5715ac90825f51318a819cc

    SHA1

    99c9fed017d5b5543a5f17c58a4b339132a4d5cc

    SHA256

    306464a2c81255536bf9a47556d62485ce7ea536c242f30e7dc9e9efff3a3763

    SHA512

    fc94d4c342ba6a6173dbf0667d7a76862d6a6c1cbf4baf7940266e93ac001bcd9b9da2b41a22e14b62af4ac001eb67d2af214bddac8423e94ec6a9dbdf8532d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8093a1d93f04c2e295c68689d827688

    SHA1

    2b00ebe6cd0fa0c79d689dae2200a9166bae2005

    SHA256

    ea2ed5c2df8c16ec0a7277cdb386aa410b099f956ee8096c3d9b7741c06435b6

    SHA512

    28b56663cf56ef7df93dbbe0e05d4b0663af165ebf7797f3d37c69a69fba14a9f2a269ba9fadac0f50e0124f6613559c435e5deb589adcc1ff7ae79658be8c8c

  • C:\Users\Admin\AppData\Local\Temp\Cab86DF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar87EF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b