Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 11:36

General

  • Target

    ae3c2e5c7953571d4f7ea72ea90b76c1_JaffaCakes118.html

  • Size

    9KB

  • MD5

    ae3c2e5c7953571d4f7ea72ea90b76c1

  • SHA1

    f757d747b10c3225fa1eccefddda5d0fca70367e

  • SHA256

    991a1f2f187e40815de7bde61f79db0b43c96d25fbb3585dfa6775229217613d

  • SHA512

    f2b49d1a1f23fc80c40cb836866580a5d2e1942bd017f570e220e07a6af3168a6fda457cef712a43f77fc3187a0bea7d7c3816b2dfeed8ade1dac978e759f24c

  • SSDEEP

    192:PcvjFvztuoTiJtkH0kO/C/bKE3t1+EaO4l7tOgDDJJ1Nvko2g:0vRvztgJtfkOext1baOk7tO2TvR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ae3c2e5c7953571d4f7ea72ea90b76c1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2124 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1648

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fcd39a137084ae65e0f0c5efba43b4c8

    SHA1

    288cf798b218d6094fc0f5a4797ba02e2e93ce39

    SHA256

    f144ad0adfa7b112927b30e163278b2c13958ec1c1b8b08fcc8e15bfbcf603cc

    SHA512

    d5f81d239b74e1248e1806e3f85862d0a286aa3130406d4fa0962e29425c1e51ba4a282f6cc1d7491f43a17d633f594b3b8c4a0021eeff49f7a65ecce64e79bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b048f7735fe9ff994db5995dd0689e0

    SHA1

    3bc99c58c314fdffde2acd81bb2cb38367be1a50

    SHA256

    6ba4c4480655bf0bb3a7c326e04b624da636b242841240eceba61178935de627

    SHA512

    5136bb6ce4ab49c30b56531cd5aa08fb98b464ac7471db306a8534dbcd68c30fef4c245cc22c21bcf812a457b300887c20c4b21d1f027b8d158bfbf1d9e35261

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff673869d99642d991133e715d642688

    SHA1

    e4ec258990f57486eb2da205af4debf7201dd72b

    SHA256

    0a81cf39928da270ae0f32f9bccd1a5109d29fd37b8641b7390bfa3564367dc0

    SHA512

    4dffd5cae0f6bbe5ba6496df3e745ff08297d7062f25b095b38fdc14d6f2bfd7ac7b7bbca3d6c0fb063ed7d30ea3bef2bcb87993d959ab4f7dd1ccaec9a9add2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d4c6296e1771a28c75d2ca3dc217032

    SHA1

    e0f633752d827ac5eec77009cb4394bea0941030

    SHA256

    ef815aaea79025e5d18d2374f8d9c36bc4fbb5ce7766167832eeea16e62eb506

    SHA512

    7adde077ea2492a9e2a114545409208cbbe66e0e5a91fd880ece26853902ebc32b00e244b2a7b278e9d2bbdb8284345029908cd2f63d031b2cb4237cdf64644a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d5ed43868604120417461ab1c31bfd0

    SHA1

    8722a64f4a5b93e99bd7fce5f2b1eeaf3e14e92a

    SHA256

    e7b44cbc816e7d8daf123e3ad3097dfc2dfb31b3295384ba4823660ca14619fa

    SHA512

    4bcdb747c429108314dfb4cdccc508ee8faba4e2230fd6d6e50284497441162e9c1c162c6e4155905de35df9ebb28c80e5ade21fcad5862a07ddceb10d351341

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d9cd43c53ba1324f90439c742b3b89a

    SHA1

    29bbef69a244ee3df7911c0e637da509ca47b0a2

    SHA256

    357cb708d549bfc799eb23b32f154784eab3d2fc4282058a274c33c5842214f1

    SHA512

    add2137237dfb25fce645cc2046d2ac98aed1c374c239dcfc60ad023e212b7a27cc62628d9f96c0decf926fdd9da573328d9156ad692911ecdc85f242964aadb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccd65687fabee762cee5ee112927185e

    SHA1

    486ec5a39d610777467493bbbfa16a8f24262139

    SHA256

    b9eaa7bacd0a13982318e14e351427cd59ed357d9cb1aff1307300b1f4bad513

    SHA512

    224c3ae72fe8686f0bb04f8479908a4a58564ca92eaed04a805ea54c9059e31705a3977f33037f11f6cce065ebb24176eaf4fcd967245d4d55366ecffabae534

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8314affedaf85999cf32ff82fad35df4

    SHA1

    9b48dc6047036a4fbd11a51897c6183adf3ddc9d

    SHA256

    2dcde71989c68b353593bcce829e4aa5aaf8d57e30ff0c088ce98f33a62b1077

    SHA512

    eb5940f7c5e0123e2a63021e699ae4bd5a78f4c96d9320e0dbce367f4edf8024918a0e2d0217f0403d1dac26ebab113cc6d5895c64bdd05ffe846cd4ff49ee60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cda6de97be778216c965e0d9f6afff2

    SHA1

    3e5ba9f7c37e2d9c08d356d11d0fd6a1bacf134f

    SHA256

    e524e2c4533d61a410d2646695474f9337bca380d1b6253e20b260794812a06c

    SHA512

    0057c5f1ab1fc6ea7226d6ee65b37cb3d6e0d79828e86108ec936469026eb6e67efdf19d943e06de86e483f8f1effa3d1b1a961c513e7c1c080d204232753a60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d18b561a789a992c61165a0f4846e74

    SHA1

    d5efde7b8523d97feda85971153aa034d8910d83

    SHA256

    e763207c51248fdeffbd3055cbef52a78a0e5e57873452d0da9e66e5cea761cf

    SHA512

    c6f763df9286072b8cdadb53a671a94f2a48c72921409c1b509de4f149ac806635f2c69fdc0d5e5b240de3ef58bdb188bd9b408b549021b074700d6a2c9bd100

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e534e7a7882014e696e2a7152840366

    SHA1

    9e4c8e3ff182bc293663304d94be0ba5d0d31065

    SHA256

    efcb03728b4901c3b56535f2df14b79afab94171407204322df69c174570cf7a

    SHA512

    25331e315040ef7479f9b42ae7aa4ac22c4bc997e54ccbf8b2ad1d80c4697c9f76df336c5ff94f6fc7a205b1ad41e18b8f7c622a62a6b9b6063812c1712ba7dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d3652a664a77446864acf4c7f7c1538

    SHA1

    d0475da1fda5004cc9036a706b0c0e6097aa034c

    SHA256

    cbcf607e78a5a79349b93bb8baabd75e04344397500d07f8c5359cde3781cccc

    SHA512

    8651d534976763842e1e914a2f3dabda20a46bbe71adca2b55f025ac49a722487ffa7080b0e25ec4e166f090df24afbca529c0c855c7cf4aab4bb6f60230a6ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e84c44ff12fbe66dd00c5e5de9b9cd7

    SHA1

    1df1fadc8927a09940abc55c1d871a5fcb35177f

    SHA256

    a654d336169e49ae8e82750b231d5ec43e9a49f68e5da4cb0385256dd5e44148

    SHA512

    12eaf6492d1c77be5b3b770d71af32f955c5ddb7eb23a4ddacab15cb9e12af6de257101620d4ae88b8ab8fce9585b897ee8212b2ebb546a238e9b68d260020ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28b85fb8bf78f0beace8add3fd402dbb

    SHA1

    3fab03c80a2f7afa1a7e5b28805c0e188064d9fa

    SHA256

    73eabc7bf44f2178ef8bc81cc3328308540b8bad04d491320283fdd4fbbcf963

    SHA512

    421126a332d6cd70f5673a7dbb27c2d0f084cbed38ef76f00ed72ac8fae811f8fadc5d65cc46a007f91819823aac098037415d7c4a2277e0a3f0d1d3d6c850f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    688f251df01050d443020cc28093aafb

    SHA1

    d59fda8a3718c9aaf9b980c63766e7d8ccf62fc8

    SHA256

    215b6988db766c1b084b131a455c34d4e1744cae128079d942facf328d512cd5

    SHA512

    4c87efd1a702bbd2bd3117e9926b101f7b9c4b50ac297eac499be0ec8745c7d8bccc4957d2b7845b9101118846f405b0a3de8ee2023ae272b5824fdef530194a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5537ee10f383d718d245a93dc8af729

    SHA1

    14b6c8eba737eef6263110bc66daeff1138e2420

    SHA256

    f31fc72fe0eb87ffc0ef5760d224d66dac08d6bd073d4322fb5540c3ad6f4d16

    SHA512

    0934bdc446029cabac7325da200cf30a232f50e101ac3113a9769805f465474306a96ebe91d5b5e84c601d5525627f06535bdc4bf1d3fc2de89110e9ce6a1e1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0f0ae564d5bf104fab20a45c18ac5e8

    SHA1

    acb270c9772ed6182cae716206873334e9dbf556

    SHA256

    7491b09447aea1f451c7df7220024c17b3029e1e97606f0bde4213397d52b951

    SHA512

    1c9092526e034a898aea0f53f486c1729361e9ff9865c9c307627f82eabbb2c395cfe5f586bc210c279ac9bebce235e2c89a0ee75a887433da7e0e8a5c40ab81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9aae69efd1d6bedc5599a8829e62880a

    SHA1

    b22fbbce6cadc7ad99a322b915b5d1e218fae76b

    SHA256

    d5d2e6ef3cc2d3d9983a9959e102046fbe01a1e0e7359d06622ff14a12b74eb2

    SHA512

    cdd0e8900581b1d223f9c6c65d2522e90918739a3ffcac91a51c5119ef275da7a4d4d5b62b94a17fc09f8815914b915ac0ac329590dc92c6f23306184a56e5c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3c6bca1ac41686dace83ce0526022e6

    SHA1

    82b9b5f800a8fd7077230032259d5b04fe2c376a

    SHA256

    1607e1ecaa1697cae97219150e898cccf04d1e3128b8a1c35b84feb98b6a83d2

    SHA512

    48f622731f242e9160075206f76febda28da8dc4780607a11c097c57875d5c1997361358d66fc7a43a2770b56aa03fd4749f3b267eeff588d6cb5b23b4db6d27

  • C:\Users\Admin\AppData\Local\Temp\Cab2C32.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D23.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b