Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-06-2024 12:51

General

  • Target

    062482375578a775b4319f96c55a830e_JaffaCakes118.html

  • Size

    9KB

  • MD5

    062482375578a775b4319f96c55a830e

  • SHA1

    334c04d35422cdc60e3282254936826409f9a7b3

  • SHA256

    edfcf73ee7e15b7b509eb625f1791d691f22293d5bab9f1e039beff65bdd11c2

  • SHA512

    4f38f428f491dc13217c47ed26979b92d1b3dde21de874d6de1ea720a9ee2fc9c53ac9a892b49f51635d17612f18769ca504ade9f1d47d4b1bae510ab1597b95

  • SSDEEP

    96:uzVs+ux7KmLLY1k9o84d12ef7CSTUzzfzx57FBcM/Nd/QeuupJxv+yUGyY+eCxYp:csz7KmAYS/9kjYFTXb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\062482375578a775b4319f96c55a830e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7014211350b3356a36e7e516d80f20ea

    SHA1

    03dc424516d103103e9a19affec40cc5739b5bbb

    SHA256

    dd23443532a1bbdea736d93df13bc83103a8e38e7f77b268b35cbf15dd564fed

    SHA512

    38b11243d1babd72a6eb3473f9abb2b83fee71a4724f6f62a4e9a8776363bcbee53a12b3255ed5f5bfbf1b7d2c9701739c61a354e7cb2dde325bedfd4fec68c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd738852be08432ea9687e1a00bdd6b8

    SHA1

    1786bc5de983862de43d31d8fd09890a0c5a8e58

    SHA256

    54813bb3c33502159cea2ae819fb9b4a2b4ec58fcfa4b9a88566049afcaab937

    SHA512

    c14deeb8d5b96ace0b906c0b7506037e478f0913e9c2e18312078bf789e7d5f1bfb93090ec2c90bbc589a794d320054d05ca179929e548986f6c2bc495b27bd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11cef39e3c390480892a7c37b4e2d99c

    SHA1

    9ceec71b60a7b6cd8e5b6d9691b3e3295a9c943a

    SHA256

    03d23ea58a27f9b5eb23efa040d25e7d0e1f52856a0fbe3c0ecbdc6aa8b09ef8

    SHA512

    37f37b6e5915bbe26fb8044c8178d319f4f10baaa09a248351e1961d9ff0999a41ff4a6daeb2d81ba22dbe8b1f47875c2533baab768c9f7eac4375b95e3248e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    687052910fd54162885be35fb8158528

    SHA1

    ee13f260e045cf7b1759943bed6ea84d5e840c7b

    SHA256

    0774779da3720261aa7acb751c736d5ff51ef8d043de39b00ce09975549b840b

    SHA512

    de78871fa7dccb639e78fa30513039a9e8538f67daa94b6b5449d0acaa463baf2926ca76c9551e76b2d82ce7a9031327dd2e7db43ac25bbabdb5c54595b8a7ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85dbbb65a197978ba6ee5ebe782d31c5

    SHA1

    a0890f8aff6932f79f5fbc1b9c7b1c7b3d6f2f59

    SHA256

    fe3161a15721e478df27c0053370b44a2ae9f8c56aab6389df6176edbf9498e2

    SHA512

    f13d9f0fc15ab6f56ed7abb0cd467716fc68944ba187d7000c3400d1601ee4a93269a71a7dc811e06d9c7439738545dff96ffaf80ff07a152e89ec24197d04cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    922afe258efeffaa96e8a25082672fb5

    SHA1

    f0f23d8deb5cb7f13ec39af7b578df4a6862d521

    SHA256

    07e5dc2a592abc772d89221598d1e9c1c4a359c2b695f5a093a2e3b951d54f65

    SHA512

    af1051316e2bb40126cb02a276830b9b2df1e5096e0bd7e899ca50db75b980f10a49556a59509c128823f7cb14a66522e7455ea369545793cde57f9e6e804490

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3be02dc09aa77ad51894763b49c5f0cf

    SHA1

    554a619baaa6e8d1c8c4ca1955d8ce07911ae169

    SHA256

    2cac96ab083f2012bed9409a7677e80d0cbf484ec1f9f2fbea078b8022172226

    SHA512

    45c3c32dc79266915bbfa6e9bb9913c19812446f0b8802c72499d3db6750178a11b861e9c75ecf7a4b1a99d5165f2b5aa8cfe819bf86bd500eb290c6a049b536

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1656e44b5a469d2b16ca5f466b97fec3

    SHA1

    ce5bf8e2def7c1507407423e13d276d91f660920

    SHA256

    41dbcf2152553d298c62060790ca00fff5aec16497ad204c054247b4151f013d

    SHA512

    a05f42cf13eb881da23b26471a5e3125904f854f973a4206828ae0c4145754bfef116c7d6d8a3bd67ffe5b3cf85dcd79da10625b4a61250fc4c2d4c5007d443c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    834619b922dcaeaada9de55651ea05ba

    SHA1

    e67e66e8b677f342be67d08e4db2bd7ad4dc7852

    SHA256

    485d14a6f49e531233f01e8975156f27b18f32d2c1bbd95bf4ab6d155c908765

    SHA512

    7576546932759610e831452236383dd808057a80439a7031949e63153eadb7a25e962f9595baace3d401b459e1b544a9c009e89c84a9ca29c3348ff3361fb718

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8321851cf61d7dc326452155ea92641

    SHA1

    84b83ef59c9d947aed637d0bbcfa4d98da0914ab

    SHA256

    2b77ec61566c6cdacbe55ba7fe67850813f543604d1dc8c78c3e3206ff38e511

    SHA512

    2a9cfaeab7ae277ffe0275032ee157fc0fb3c76eeb04d72d19375179ef06387d2b40f335883ac2982591cb21be63f712f794f5ddc7f9f5ad7910a60358d9ffd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a139d81d511d6097fb8451100604258b

    SHA1

    382f3e14c3a0677a43f6909e6ab70279442a25dc

    SHA256

    8f48bd9e3e82575b384662bb281f954ceff0a2b4a4a2ac91df94591690cc0080

    SHA512

    3022b411b4dd1700b38125fc7db5e2fa695a76db5be4b534ce14da5abad2768b27deb8f191b59da29b311239f8997ae6d364d64d127f1d46b15fa004130defe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a75690c6543d9671303b9b87775a8e2f

    SHA1

    f815355a02fc016589adf51d255a48bc986faca2

    SHA256

    8042f9d781465c67c48b2de94176c196515a66adc36ed0ee0c06dc6b634e3b7f

    SHA512

    c302592b65c14a7b9410db035799fc431017f5d3f974cc8e39ed667fc11043b9e214e564076f956cb6f95978d1c90c47b2e528f7255212eeed6b0be60d19f7f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50fe1f13aac9da904d466cb9a11683e6

    SHA1

    9e4b2fff2c288bc3962f755a6a6a1c495d52bd08

    SHA256

    4e2c3b5296914f854fa8c0c351c5855180eecc3b921020c7f784dcb6518975e4

    SHA512

    eb2855cdbb1f6b119a02065dbc8a6d2103ce860aa2619ef7801940140032ce22e86b062a8eb6945465360281f31261ea793ab3260092f3134bbae6505a372e20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cab170a52af04e93b6386e6ffb0d3583

    SHA1

    bac52e3036ce76e3cb08aa113465b293ab62edbc

    SHA256

    12442989ed3430e780d68d289f2020e7a983ee3e6ac44eee5c72300c6dd88fa6

    SHA512

    ce1e2ff39b50b4df1cf73f1484100bb7f620024947f0ae578e8cc7c487a2da979d832803b67a2f416f25ccdc8a755e91a133beb80e37e95a3e09b90eef6129b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5099c0e0897082b35a29fc1455ad51d3

    SHA1

    96bc50216ff2edfcf0da20af183689715b5fe51f

    SHA256

    1d2fb43ce921e436f6d94e07d86681216e6114b3184524bebe6b2a85f464af42

    SHA512

    0c8a10e09d6cefbfed87f89ee08a5e1cb6c430d29be5afcdade3c8b77c98d5730586916a511a4819b8e9d22ea3c8717429d58999b8bd147ed882e0217893b0fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f84138e55fe7fd9de0570ead0d420ffe

    SHA1

    ba5d0b6b47daac5b34f532baba5b6600031590c8

    SHA256

    5bc8a5b9052a44807c77cc4e33ca737c876ea2f847d816a50f5ce9e36af65a01

    SHA512

    2c919ee599b5d8592e7e909adfb8e269d4a72e9a2c9554260bc30663bd4b31b237b619de31ecd23ae625626d98e9c20e18e62bd8a632de64f14350b66d215a82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    452919ed0defebeaef8a2a06e05eb6e6

    SHA1

    76c80ca0bbba21d61c815558329fb213c9f239a7

    SHA256

    04898e806c6aee081823d3bbdbbc8a16524e5dee8ac60dd36c189179fec323d6

    SHA512

    cc35b09a1c5b2eb2c9a14792b5a0a2c8efda5de3f4e91c0c0cb79233b07eb060de6bc5e4e65f7886823426061da6dde5fb048b444a91a385297e0bcb22c3434d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95adae061781e5e46ce3e8002f103f24

    SHA1

    97b177836a3437fc73006ee76152f72bf7fba691

    SHA256

    39e6ac4b3019e818db3c34295a4a6728ba8070a5f4f9b1abb4f53974c9192de1

    SHA512

    41ec15abf8970410838a4ee150b4c01a94e66d8b9321b7f484f4ee196c08ddb7f742bfbed7176b2664c75253c8bff2a56aae1ff193228dea22ae92346b34e832

  • C:\Users\Admin\AppData\Local\Temp\Cab3016.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3119.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b