Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 12:51

General

  • Target

    ae8239cc266889ddd635a02744abd73b_JaffaCakes118.html

  • Size

    43KB

  • MD5

    ae8239cc266889ddd635a02744abd73b

  • SHA1

    d624e4b8b07d7d3079feb46fdece9d1d994f4098

  • SHA256

    70cea50a4a87772725c4b314cc24cb3d9d1e4a0f7b778f08f3d081d955f82a5f

  • SHA512

    e3bb2df4f8bd826d5bc2ababc142fd41272df821a8d5272de404f58ecc6e7d4246fb7ba1487427e5df0112b9ae4b6731972c0ffa3a59f14fd8a8ac99196b2159

  • SSDEEP

    768:2528KfmjIXUFQ410zJ4EJjQ3g/73GP76I6RuQfTPac/l+e:2528KfmjIXUFQG0zJ4EJUQ/7WD6RPacP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ae8239cc266889ddd635a02744abd73b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2364
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2364 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    772bbc4428ff7537e3533b4f91e918e0

    SHA1

    3bdb89a92a13b667ed71634b76937f12e925b8b3

    SHA256

    906bda00746e0559f5d9f7c079cb4019391953fec850a892508624e4a1c68675

    SHA512

    3520def9577d1594927d46e01b7ea58fbe11deeba47b21f5ef791087cb39b2d4d607dbc2446c654e997f8f485bcb1b8eee9a223e1553994c9fcc871f58eca769

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    667b3827e20e85e092110e78a64db4b3

    SHA1

    72a6cf07be5100d30386e9e3fbac98d0dcde3990

    SHA256

    dadf3205e7165b8f4bca7f5bb8352af24f2dd604aee0829bd2e1a04e062516f9

    SHA512

    6c5c8595602b23834ae6b0a9ab18a95c5a8fa94af700fd1b25289ce7b636d95e6065e8c9206161efc5fff623b4a5462c22f50f1ba74cff1f9ee5e4827164f433

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56d077ee59349a8c33020189291b06d0

    SHA1

    b6a1a630a0879ea89220b9cb49aedf9e02893348

    SHA256

    87ba0fd352f07359fb2769c42e38070209355d57aa1ce705e53bcd7e40c1fa61

    SHA512

    aff84b300103e6d7bd5a94972a6760def247fa33bade8d65ecabb34ad9341a67c873cd68367bfb54afcdbb9aa6ceb4ff1becc8f03c82b339135060dc472dced7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    510880ae2b295ddd2088b717489e73fe

    SHA1

    3ef853e8bbb583f41c835c78ad59263a3994f8a3

    SHA256

    d93d2af25ae5624ea1e071de48ce4ea272e1756119b0127a7500eede4eda0ec2

    SHA512

    fa9fb7081c85c71c1f628d00a2b5a5a9b4a85391bd77519f2501b1827cc23852ccfa0bdde07764b060372062a56cb41e4ba3fbaba96cff8d2d714af95efa36be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5ca7c06b8acdc401c532b380ab4e571

    SHA1

    79f00226146e476c9d0d757554c1fc54c9f99adb

    SHA256

    41c938cf99ac214f3ce97d7a17e3f574fc9798b1d5526d20442c0110a9eb9435

    SHA512

    4cee90462351fb3810090a8678bc9871f14bf1554cc094531bc307aefe55d7d3d20614e477fb080035cef1f16169a4135dd14e87c605620369bd92897d332249

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    628e4133ff23131d3180e87826fc5325

    SHA1

    76060eaf2655f810d849dd196d96c9f79eeb5e93

    SHA256

    2bb4198a8111ad5bd07ecc26ecea743738a66aa280e246e73cd7b1ad50ff6425

    SHA512

    2a484ad02e0ae75bccd5ac5b14ec6a4efac6571657865f81ddb435cf32c2984042d34cf561ca30186b34f465fc4a02fa67a1a30152cde9a68d2b5e01ac496588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69adfaf8bf7670e73d42bb35926bccf2

    SHA1

    b8b6df43e6a76e502f5aa9a5a9febe0af12ff99e

    SHA256

    2c22ab020c6c0bb54630a311a077d0c6c29937c88d5741e1c1e293e9b05d84be

    SHA512

    623acd48bfe110ba749dfa468b87c2fff912c358c09737555970668b29f76f4ea5ad289f21326ce50c75942141ffb37c428ca3f7be817b7d1b5e18bf1fc58988

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f7ca1b9c583b9f85859297151289f3b

    SHA1

    db41c6d0169b0b97a59b3eb3ca14864eb176ae28

    SHA256

    2763c27d0d1c75f45c8a7232b60655292d0d9668c8a57c50a58105ed3ff279af

    SHA512

    efc8f45667e0c3a6f0857f4877d911fd619a5ef5576dae068bfda5f492c0057fc1df2bb43907c4d43c03891c8a427ab70e60d0f62400e9e16a0d104a15b2012d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88a283ba2789124214e1aa7593e8bf26

    SHA1

    31327fee3eb761a931ef14ed07c3ac4fb17325f5

    SHA256

    9a9a53c2b6d81958cc7fd9340e26671fa00cf5bd6f525a65631f80c2e06d3cc9

    SHA512

    b07d3a2f26de2dd3fc6fef7c06757a19695034777f789ea09d25089692c695b4fac550fbfdd6f74bbffeab930aaf544d65bc69b3e5a47a40f23f9242c01aaa8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb77431e97dc9becb7ce57e277dcc335

    SHA1

    a2ec202a09df8cf726136e314d47097bbda3b954

    SHA256

    34149e66df2aad23de712f221ef346a5c55077fef64abb7b049329665cc97661

    SHA512

    1bae0daa28f92d8093b65e27aec7aa80b80114f8ce9bdc62c3e530ca8af09aac1663858f99e94e1f2abe038a6af3c655509ba3126c863ee4e29afbf23de4b867

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85887a8b72e860dbf99faeb1f8139a73

    SHA1

    3eb89452a2f0d221cd026bc694997f7b719df068

    SHA256

    610a8aaf6107ccd54b85da316af7894c0fb5786773171650f3ca0a946dfc4a1e

    SHA512

    41c3e962587fdd5e3136495684fe617905032eeb75ae51272cc005020374f6ec193ac5e4385dba5a37b6fb91456abb0011bfdd32ee88e8c9412a345b249f3ec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e760a2ffc36363de951a09e45a7715b

    SHA1

    c3d412ebc10228f3f09d0328d9fb4fb18fe8cc8e

    SHA256

    adb4b1b5681826c534489a9e09959bf7dc94b8a9da5ee4441d781a6939004ee4

    SHA512

    eabcad4c490db76cb61e5fa4126e97801d02d945191b56be1da8158fab79fbb786d2fd74364900e22eedcfc0e717a44cb1660dba9a77817ec911a1702abb7ea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fe2b6ddcc47d02d25247a0a0961dc2f

    SHA1

    7de118f9580c8a542f87aefbf93394e1d501722e

    SHA256

    0902ac4e1b13cf6dfb293c02dbbe3ddcad30731a8f067bb7ff0a9c4b61ce8501

    SHA512

    1781f82e558fb005b99e46304290f718970c80dc92d37a1da1d38c6b87245934a7257c89f7fe904e5d8830756a9735ddc5ed95d31956f0007e41bc29281656be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd41809f165da8a99debe02b2038d21b

    SHA1

    311adaad4e3cb696c244d0d70db4d53996bb539e

    SHA256

    8f0af0215d6a31f712408377c29c040dfc2769702572aec18a38992ed470d71a

    SHA512

    e59102ae6cb7344336afa8a5a5a02340aaa730333a8a6df23d6a49e493b56215534c5a6b4cf343281887c2cd7d922733cb0ddc399f975abd2be053f91632d2ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6f05cba856c8f339bf4196d277a93bc

    SHA1

    819d36680ced3f43943ca29aabc5b911f3aff67b

    SHA256

    6e7042e8d43d7e927f0346c4026426984f4e86802e5e8ba2e228900112630dfc

    SHA512

    e57774ae8100cbbafc25a01fd7eab73799f1cfe7f317d9400b3b1edbba2cdbcabdd26c87980d21af558cb3e6f7672453dbc99a000caffd76ffbce51c2cbef4ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc5bd2d60b05837e0d2ab3f6514b2e79

    SHA1

    576dcc9ffa5a35279d18d21e0ac7baf032bc5e1b

    SHA256

    a0e73810dc54a486291521c2433daba472b2a12d0146f6003776b48807561543

    SHA512

    1cae2fcf9c8540c4562a6039866ddf93238c25fcb636ceae13feb905d57ef03ae5c489082aa597befd87dd218b7bc254d1c6a0ff16541eaeffa997a75c56f263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c79baefaafa9ecaf9254a14584eafc14

    SHA1

    d83b28fbcf8e6ff540137b042d86459cafbe57ad

    SHA256

    19bc8f26eff0e29669e0cc1205cbd3fb25e9b1bd176d8ead7361a4bbd4feda94

    SHA512

    fd104f73a82edab08271fb6919f78f429697c6039d30987b878b6379fffa9e34f98731b2c719a267b690770d1ecbe9ccdf4399c14bd065c156f8fe92a17ade22

  • C:\Users\Admin\AppData\Local\Temp\Cab22DF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar23D0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b