Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 06:05

General

  • Target

    ad1ace38825332acf2eeaa8e7d15b56e_JaffaCakes118.html

  • Size

    460KB

  • MD5

    ad1ace38825332acf2eeaa8e7d15b56e

  • SHA1

    fc7aec03e615072157cb7a4754827479b0ec60c4

  • SHA256

    3a803a2af82b47168f34e24b782cf5dd36367336481565d2992618d8946f744b

  • SHA512

    c1950452056a4ed3ac4b31fdd9772675fcb8f3ed2aebf975ae433c7752bf66a1a2f461df1e4e41ebb2276435b8abc6101f30d15f9613ee64e3f40fe5b4567f57

  • SSDEEP

    6144:SbsMYod+X3oI+YrsMYod+X3oI+Y+sMYod+X3oI+YLsMYod+X3oI+YQ:Q5d+X3h5d+X3W5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ad1ace38825332acf2eeaa8e7d15b56e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e80fe66ac0c334c4a79ebd8aeaf0d386

    SHA1

    4f37c2952c5b2fdf605020a2e80af39a0be6f017

    SHA256

    ee1bfcdf4abcf0e503b0289f372e3dca010f494345f53eb3f7ce0e095c595de2

    SHA512

    abfb874471c159155a125a8005ebe55c9aa8934f97826a1028bd439e6bbfaf38f0f40403f0e1c2717e9952f2dc621595ad371a65f3e6c418ffa7094e26b02df6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    300a24f38b50bae93e353e1fa4bbbea7

    SHA1

    3fc5a9f6b783674588e4499f5fc9e4665bc19f11

    SHA256

    ded2b3367b8f0e1833426cd03c31a755b810e6e0859ac50c3917bb1e57a98426

    SHA512

    6c879006ca0f285dadb5d78291621f0db7090146213575c867f192d7442fd08eea279a862eb1a2104827370feab51773dc85e02e9a6d339764e0ff1d68151835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cf84627fdc1fe8a679f2682bb8005e30

    SHA1

    3d8a51ac8211f5a56a37d096734f2e91a0ca1e2e

    SHA256

    53b86fd0c5b0262cfa4db347c74643b40da31722da575bdeb3befb042446bd08

    SHA512

    ce74f11476707a80a598d0c44da029bf586861cdbfd7ee4e8ae01ce2e9cdef68a7f645f3fe5f1f3c9c442eec9dcc6066172d8eda223a4d62f70114e5ec141680

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0505299bf4be51e3385a9ae21734877d

    SHA1

    1a107be45cb5a8a7c646d2d12c509772759c478a

    SHA256

    d52f82cb996ee61a8d1bbc5cf5ef1137d243792a121fe8510552a5d128b74ff8

    SHA512

    a63d66c4078c9d32a206bcd5958a60f804bbf24fc6dc6645583a4986ff325163a26169499e15f281b3fc973babb4a1ea2b2acdea82b4980e031207ccca8c26da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    df81a8c2ae73d83d46fbd6fce9df83f1

    SHA1

    7dad197f8f8b5eeac2e1d234bd7065c8fa371fcf

    SHA256

    ce6d4a1b4baa25c661db8e0bc5023aba6d2bbbd066fc713ee2259b015ced7d6d

    SHA512

    cbc580e615f13ba77099b4cb7da67dc2e3171df2bf20ae4d25ae44d44c401497b17198fb2000481825142b36622f901001c4d77c1e5e8b893f81b070b6f428a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0616be9cd6c76fcccfefe8a3106c5bb7

    SHA1

    f8b4d6912130595ac32a5f865003fae1be6d7940

    SHA256

    da1d1cf7d765899bb67549ce43dc16701a47535e3db89e689cf0edd49dfa56d3

    SHA512

    83b4d4d78983c2e9f6aa694fe24855da958070fdec0c3e6c38f40a2cff3998a1c7750f4e7027e05b332a2cf9c868e981a6c3b9a479a30650035fa657b2dc674b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2c91b00b0c5b7bf64b230d3a705be0bb

    SHA1

    fb63a70a9781c2d802d8271b9e734ed29e35a985

    SHA256

    1555abfd91fe3328583f2e47f9225c40e2fee01e1944572afe4104b5963b1bf2

    SHA512

    10bf787d8900a0cd2f42e11b713b3c41918ad3f52e021b66ae0024bcc06ad477735c2e5d18ceeca54560e9724a56fdf398e4c1e606a4f361fc1e728f41b082f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e58509d27af81fe0d1832131a1c74bb4

    SHA1

    a1283a0c42636b77a30b6b11923c5e333511310a

    SHA256

    563cf9be07347d3339e6bcf3b84c0ecf18f822ebc075de7d25170504f0271a68

    SHA512

    78ecaace80803371236a2b040f7e30b3dc6dc81976d1f04abbfadf313b2dba4bca56eb51452de278b1f12e54f98d03ed82d1898aa1c7f370f168b7a105813712

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cb84761986d4e14c9fc5d389363988e2

    SHA1

    58fc406cadfbbed097795d71dc858477f5bb571d

    SHA256

    5bcb134edaf93b31f83b23a62eba1e693e3b0c8c7cde64b4ad95fd04a51e4ead

    SHA512

    b57272dcc09a46d8bc757a0627e32b73bf0e5926d8bc44d609460c7545fb6987ce71b52f9b0f66d5b792ad1c7a3c94cb5332ab7d0fbbc0ede761f3cf938b7755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8daed6f1e39d73d3dc38fde6ab174a5f

    SHA1

    275c9368ab6e4e81288b9bc6cba81dd9e8e71158

    SHA256

    675bb4fd8be15ef23952cf459e790f8e9f9f7db636b7e5b90592302b0e3941fb

    SHA512

    fc8dc232ced64ee016d98ae8df0849550e1b8071b6ca03f3088658c3b34438b944152f44e1afdec85a9c98d81d5fea94a9261a04be3600856eb0db1b09dd04e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    acdd4b7c3b30746db79416cbc108754a

    SHA1

    7b04235cdb604ad801cfab8e35dc2fd2b3a3e8ad

    SHA256

    d6f7920420b9aab0949835c828dfeddb4b57946b528e5823a913dd51d0339172

    SHA512

    c4164ae564d8b64a97ff80e6d31227c0421954f0c7d745901743a18f52f4dcedcbcff20c91490cc93f343cfdb2c5c98ff5d06bdeb9b130b17faaf522e982ce2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7edb3cefe77ceb478894ba53470315bc

    SHA1

    57814ef90e999cca7b47d0bdda1603a97545efb0

    SHA256

    968772cb46e8def38397de2cc1155d8ff1bb88c7941f3ba880bd2768d2552764

    SHA512

    a1c6414a010ae8acd0ea9b268684fae413b5f3dce7597b3004def7f502f7e96682169b7d829578ca75762cb02645afe55573d60ea15752862398ce385250c4f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1b61ad6a988390cb6c206875596057da

    SHA1

    051fae089d083d365dc07f4eb317acc235034353

    SHA256

    ceef5e8bdce297334fc6302508deaf0841172086d6ad2ddb7f382994b475e2ca

    SHA512

    a408fe942178bf65e783fde4c1cad001cebf2160572abb97323cd48271f0078c708621267b3c585362bb9853c6c9e162b1442f0f2b93e386292528b9c97a3eeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    243256546a213cfbcde592436e7b8649

    SHA1

    a244756c50f6e5348abd31e19636925786a28c1c

    SHA256

    b53f7aed00cde2566d2d51b3ef00bfafa399eeb07aa156c1abb996bca236b40f

    SHA512

    3f517e56640069733ef8212ea3fb88a4428f314859a544d6f616491315886be3ef187354207245518390221a7cd72e3db4e0c36994969e0ec5ae7743c2336d9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f0afd8b9a820d44900b430a2d30c097c

    SHA1

    dddb459a034f460e7760f9ebeb5db2c12bf13a3c

    SHA256

    7120f309f91e34ec90d8c5516be3dbbec85e09d92c35598909b4d90896aef94a

    SHA512

    5c1553af469d7f267021f133a51da48b3a51a7c8d3e49bc67bda6c9eadc10e802a3026841844be82c2a47113fde0290bcba52febaec678c158937e63f6de2764

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8bb0e633a013f6464016b51f2e9b2dbf

    SHA1

    3d030e7c8e87b8df9c38724ac30f15da492c0680

    SHA256

    43912ae3db7df83a5c2b5545b238f7b911e186aea734891acfe0985d06338dcc

    SHA512

    da323f98e732f6b3e9d37a1de471163f86e1ec2ddf6083306ba07a115c0a68e74243e37fa3bf3155d2fde2c6295b23c05c4d1dd6712163ccaf63ee4dd868fcd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    211fde940a7675b92ab4d400fcf5466f

    SHA1

    a1c9a8043c5ec61e98bffaa807345c87bede323d

    SHA256

    425113054689f9e938dd95b598fee9b43b82763c706c6b15f285f94a4244d45c

    SHA512

    f92d07fe21ee87598839c315ee4f8b71ae6b418da90b0e76fc5cb0fc5a8e5d558d8c53b088911012ad41ae02e6f1efa1230f87b9d5adfce0bd3ee06c25977629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    affaccc63576ce0708eb3761491602c4

    SHA1

    5bd72fef5066f42348fe69b1c216ed3d7871ffbd

    SHA256

    60dc94fb51dec4757f2fce341a67b2879176079db8afd30c6e569557df6115f1

    SHA512

    46efc20a5162b7a7f0c674bff88d5a232eb89e66d321d42bc2e9c48cff1b1dde9c950a29edee2b713e1ba30b9e79dd69e522acd69bfee3889334bf07e85c5014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e69401448b7cc3738efc70c7865d3697

    SHA1

    761041c4fbb728eb2c719e39c10e5de487922eb2

    SHA256

    d3bf2c148fc286ea8111b3ce8039cbeeee3b245e15aa8beadacdd06b0aae11da

    SHA512

    e877449b53c13854361d0dfd2fe65c11468a7018ba526b1b6bff6f68301cce06e6be0d1b179e395cdeb6110650e5e1b72f6e2fe499827f99805670d7da3b65de

  • C:\Users\Admin\AppData\Local\Temp\Cab4157.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab4224.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar423A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b