Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 19:43

General

  • Target

    a209aa2a81a19dd4172ea53c527d6fc6_JaffaCakes118.html

  • Size

    462KB

  • MD5

    a209aa2a81a19dd4172ea53c527d6fc6

  • SHA1

    4f48d0b65608ed0dd9746661d7c60fc31d11900a

  • SHA256

    a04f5033935821dc43d6f3f6ea81e80b4fbf538523402c4040a74f32389f3a6b

  • SHA512

    7468c4607ef7590cdafc2b25a36d488550c4b675a9cbba608e951b73b13a08c311357d5b8ce076eef4bc2e8fd3061563a96ba1d8ccc20bdb768be3d0e2ce1de4

  • SSDEEP

    6144:SusMYod+X3oI+YZisMYod+X3oI+YisMYod+X3oI+YLsMYod+X3oI+YQ:R5d+X3Q5d+X3G5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a209aa2a81a19dd4172ea53c527d6fc6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2200
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2200 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1680

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    925999f314f714b9c0415132c16e9577

    SHA1

    8747da8a04a7a94cacb2e7a0ac84c3e98fb53ca5

    SHA256

    2f80469799b5b7fbbf0764c04ebd9aef5afcc9b4a6eb13c044c974aff0c7656b

    SHA512

    05c3adfc6470aa039b34151644336026d324c51343236d1028359a2390c92074630505540985c939c6b016981451f4a2fbad1a8871e09a2c5e992735ec650025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09714f2388420ae82c448bd41fd31206

    SHA1

    dd402be6239b0b84051c1a3499e9cd01d4b05d32

    SHA256

    2922098dd8acd291c3d5ce608ff6301b524fa8b1e4c44eee26ea240b2efa229c

    SHA512

    7b9c69c7b7f90bc52cf2b393dc222a0add8aba148efa4e5d30d7d64a89ceb1e6ea932d250fa5b77d3c28095ad4098f50733da77ab6f0195b203b98b154577bc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc36eb45c06eeb4d03e94ac63d33ef4d

    SHA1

    dd9eff1f65ced77165b03d56a7c5a34ae41fb6a1

    SHA256

    6061e88ac8cdba6cc995cce50344a23119ec0798df99777b18daed406d37492d

    SHA512

    2a7178acce0657fc39dafe75aa2857154baddc94532d95517d1aaa22b5bdc3883aa697b0b95841a944b83a6b8901ce2c268c2559e22d5d0511de284bdee89318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2ce42beb5c2630cd7e9e870a1468da7

    SHA1

    21a7e76f231405a5b1e9451e90a6869fb3f1ab6a

    SHA256

    078273c168eb00b65e0c063524a7877d82c4a2dddcb2410e722dacfd3100fa39

    SHA512

    50f9b2cd0518ed8a504b946247bf38316ba9a1a359a98f8060f48832cd2980f3b06084a190f977e3b42289d08b3a909b0480682deff0f9daaea9f974d63dc11b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e54b167e46293fb81c37acea227ed6dc

    SHA1

    fd6c1e8e08d1346a60b188fb18a0387038724a2b

    SHA256

    872057866172663338dee697e7b7937288cdc8181a7b9ecced2185ab522808a5

    SHA512

    f129772817fb641c7e8dab2d5ddb084e6b0c1f128b2ddcf87f154064c50e61c5dc39506687af3d193dcde995afcc7aee85dc7de829d48e6657bfcd0b4ab1c75b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06250354416fd04a4e400bfdc6be1a69

    SHA1

    30a654603f6f3b5e204f6e344cc114f31ed0962e

    SHA256

    eea7b41d380cb8752f53e1f3f1b51b6ae9ddf9ff197bb02636c7f10470a4fa21

    SHA512

    377390d1fa66a8d1cece305f1486c51ad74e968a6f9fa878920a870d5ecf4f7781e9d8f6014a5d316d066b2a4d3d01b5f90b6c0fa15e3212511df69c2fb8964a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e91c55f286b93173e4a92532f5b51df

    SHA1

    aae82f511983aafa62d1a7dc06d428736d136496

    SHA256

    b3014c0631ade05576ad8f2385691cd523a3e67f98b0e9df78e87eb8c30fbde1

    SHA512

    0cf679a24373320d7fdeb3bd68ad91bf9f7b740f93922285fd26d83b5171fd8d652db3a3438a17fd666783591f3ba4fd1a66d1b2f05a19e85e4b50173a3beb9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fa3055241bfcd9436c853cea47401fb

    SHA1

    2f0cb787f2d2dc70b6db2c30cec7d6a25ff9a2c9

    SHA256

    8ed098d79965149b7ca52505e77dba3a110c36d6dc10dda0c02a0ef9e81096c0

    SHA512

    6f5efe6e91ce0a951dcdced10322961ed5b1b027533f9923672728e4ecf32cab67b2f5bac4a09773a1076858930a5ab688742f59e30d0612b10be21354f023d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d2240b926e4841f1b61b2456fc4494e

    SHA1

    1c914c95cd54f8455d8e8020caea708e5490f0f1

    SHA256

    91f274731f0fa8dd861fae7df00525c2f779606430b94979cc55ccb6e12d7f75

    SHA512

    81411dcedcb82284dd96464e7f950afaa956443705aa62a06d742ac17dbd499fc3b77db128e212ad3965ed9b26444d71189b66a3b1851baac02a5ae2884cca3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c0774fc331ff202178d5dd32d982faf

    SHA1

    d92757769c0a420af92cc4f83c3e51cdd561e9e7

    SHA256

    63a4eee15ddd77ce79fe48e3117eaafed32fc8924bb6d8f01209271e61c210b7

    SHA512

    09705de35b813a227c4dbb32f5cc311f666cace7b9c911ec1612d9b43b53ba2549d230610f663951a1d5e32565a37a67069628e6c6785aa3589bf8b2fc7d516c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19c9e5a9e49794c3c98056430e9bd391

    SHA1

    b0f5af78871b45e73b294d97a0ab31243b4591d9

    SHA256

    768b4e4a40a4f2aa26a62db88c1570cbec1f32cfcbe708cf096ece1e8e3404c2

    SHA512

    333f2f02f69a81878ec4d6f4bcde14e3a85b40349749416f9fe0e654394f498e12eb4c374ddd250f04ac8ed26c4433585fa0e1984e18a1ce879887616bed2f92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb415ae9982ed25eb9063ecc397285df

    SHA1

    d67cdf2d72ab7b179203c492a8ef802bd9d978d0

    SHA256

    86afacacde3eb0f15cd02ab9e73c18b2c8403fd9f92fd39a656056b262f521a0

    SHA512

    b58d652694300188c78c4884504829fb8748ede798c163f878298d8ccb2cf1ee529e80d108a12514ee9390f6b9a749d034d9f293fd64f88cfbb61e0c05731e47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72ec47dc2fc11fe10aedacbea3e552c5

    SHA1

    eccaa803dcd9ae25f5cb4dab78695bc0ef3fb173

    SHA256

    5252d42a39fd200d47bbfb4231ebc07fdd53aaadac330a54f18133e1b90e50b4

    SHA512

    3ec57720f5a075949b4c09a5f011b121b767ce984c7b2b4bb905b0f0e42c12cf24e5a6a02bac49aab9cb5acf66e87bbd0aa31f055f5feb9788c1e58637d6c854

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ef5560b6479710a2820df97402ad6bd

    SHA1

    be974bdf3340380b6737f006adcf1efc7862e329

    SHA256

    e0502e64227fa7c8e4ee7072700c4c548fd2efcda5c066288cdad321538d059d

    SHA512

    5dcf2c7758f27ddbecfd8ebdccaeec63d06b7ebb0db7bc3f1e2731d69907dfad83791a31263e4374a3e4d1af89cb307df97a5d797e67d2d45e89ea5ec5a307d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    332229c03f0e1c1c668a9e943ed311eb

    SHA1

    faa16a557dc0765e6fd494c79e9885e7006fe161

    SHA256

    49b6aa94717ec6bf5c24cf08e586962a47f860f9d6fd852c5c202113b659571a

    SHA512

    33c55e52ea703d30b3a6eefb044505d80758dc24e2e49c2b8ed6f06b2df25c819cda9512e102e70e27a572214da57bf264e78f93682e9f872ef07336bb8551ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eced88089806ddf36c0cad692cdf2d2d

    SHA1

    c57086c23cf72b5577fedda6d7af4a5ae16dd4cc

    SHA256

    f69fd11a6322feb3566380115295802e1b4e18cc9b074557c53f44ca69b84807

    SHA512

    aa16a7244e3ffdd2e5f4192e5966ef87847a2526d00adf01d305bd5106f64ea11aeb3db1b95ca33ae85f70e6c8e186cf50431d92dbeed42d9b0b51c66c4dd183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a32a60a3fdd2173687a5008a49a226b6

    SHA1

    189ae461b7b43e8927b6fa869a0cab9eb67344dd

    SHA256

    b78be4096565c5bf8ef4e68d656b170aa8336560c9e5c3b8f72c2cc52cbb9826

    SHA512

    393a4901a5a8a048f7f51165c14c2b707bda4bb0e7cbd818c899afcc9300e73cc9418ddb358ba75e6db8d83b46a57f9c271b98b6f28df68c652d059fcc62e86c

  • C:\Users\Admin\AppData\Local\Temp\Cab3CA6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3D97.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b