Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 04:03

General

  • Target

    0c712a39ba7f5ddf465f1f918d2cecd0_JaffaCakes118.html

  • Size

    33KB

  • MD5

    0c712a39ba7f5ddf465f1f918d2cecd0

  • SHA1

    c41aa5f0c72940ca66edbf289b6e7b39e600c180

  • SHA256

    d6e4494ea1e85c0fc13d8b0d88fccaad141768823f265f5c487809ef3c237dcf

  • SHA512

    c6cee792d2cea013329feeeeef1290c550c3bb16c75fc7b19ff2205874eb0420bcda1f767d40ca4047b910fb5b1326dd6fd8b45597361191ad0d895d3bcf2d55

  • SSDEEP

    384:tL7HZNheqjnkQxPZ9sQzGJtc+D30IlOTHEORqthc47P6M2avTwpmKfRwEHbyBg0v:r7GjS942C

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c712a39ba7f5ddf465f1f918d2cecd0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1268cccf1dc600eabc7cf3929b6d9550

    SHA1

    e2dbd8da84fcbdf443bf84fedb273deeee04434d

    SHA256

    c1f9b476124d98bb228720d62053f3950bb0433fdd18a67917b1dc6b3eb02c2f

    SHA512

    a053bde5abfe71d56668a6ba6ae8b6200d1e1229595d67e11a6f99236245d1c4091c1f391b973b8d3f6e7ac2e201dfb427a7537bcea53d338a7290033560544b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c24b66043b3021961209a2b126d17fb5

    SHA1

    71683b58158be7674fd709c75dc0d40381b53aa1

    SHA256

    51b12598e5031b3a653897caea228fa05025b76b36b083de66a075760c2fbd2e

    SHA512

    5cb3767b82d4865b2fb9eb4d023caaffa1508b0878e0b77e89db5700ffb849006dda0f9b700c9f2d7328d59e1fa05c30b73bd17aef4d75408d2137f73564ebbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a470794b0e80250cf16b3b83619faae

    SHA1

    c3b21e253e3f53f4f8092e72b324c518f0ce2776

    SHA256

    3751b21330855812211e3f31debe31933f664776826e2fce08bac1b58a843038

    SHA512

    3d96a0da50c50aac39681d66c576ee23e76aec0848b88a55b3a26dd3ab9058dc6e848ee3a9e0c76530f27ef1212fe691074af66242f0232dea0216c9f7d37f51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b17ac0fbf4abc2c834d1434d662bcd6

    SHA1

    95525b19e6a07b7a561b6564214e47e6f62add69

    SHA256

    f7b4d562420904a1a72893fbc250d8f59d48b1600724baefed8a9405e5d7de7d

    SHA512

    fe2f7cb888e3936857f0f17e14ed7a49afc9deaa4a72047ffacbb45bb4819a3326a7029f8bb960d7c703afb259269608356c20dd286dc16902b856547ef72b4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    626cdff8c8eaffa02523e2b4bb81779e

    SHA1

    a372f7c7a2a3f8e2b4c1e003a9cc6f0ec3218326

    SHA256

    f82d127a240a036f0035922769ed55a52a49fcb21ebb09595e16f6964329d6fd

    SHA512

    8584436e2b05b8c0aece9a78079145dfe58f4c03d9858462ec0747afb4159508c4f33e243f5a6248b32afff69f96ff256e0e943a46e42d6cb9a8208b7014c6c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13ca73c97a1c203a6dda58d668db1caf

    SHA1

    e9c03c0d5cbb0d6ca6e2408a694c5d40c0f47ecb

    SHA256

    b54ebe8999c5931943857bcd28c9d86eb9555ab0f591903ee08ea8a56a239e57

    SHA512

    b89a92c43136f57b79a2e4677da39a2dde286b6b9ec4b414daa97e9f511503b6490f6ee0a13eb1dad974cf8457bf71eeb74f48b9a03d4df48e238f92a8cb7ab2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2434aa65c49eae8e782cb39453dbd609

    SHA1

    e7709abc9446add561115e4cc40abeb30d0c6c36

    SHA256

    f01115cb25375ae3891b366998d83edcbfaf071164304366cba359a9e909e495

    SHA512

    3a805e584f71fa6a366270c7c536b8dd620ae41db5910ae855232b26f09e18fdeabd8d35a84c07b87740a8b1b59beffd6b27dadc045c667686bb6dd06461139e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    559927ae4436aab42559107b41d85745

    SHA1

    887fe5fb1fa9e6fff183989e485a97b80c686279

    SHA256

    1115429515cb72bd6423be8686eae345761666798e2d419cbb2e6c01c10c864d

    SHA512

    b3dc0b64680ab99f2905d4937ab2fa07f7fc39e80899fac6796f13a62a3c46fbe85961fd5ad236e23f53ee3d07717516212b04f3b8dcef474aa31e82284120cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9a75c5fefa78a2ff56c863f058e4082

    SHA1

    943f42ebdfb9fef77a855cdd8753c0804a2b2cb4

    SHA256

    ac3ce61ffcdb86d57872f1edc29cb0d500a0c093bd15bc949f94e4e68e8af7f6

    SHA512

    b794b79ab34b65c7d5ebd2b4b0e7944c92d07ab3cdb8f3ac1a63cb9280ac63ae65b944731c091ef321622259fd97e409a9518e391b5803ebb1726c7a111aa69f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa5ed78187f9c8c12ed1d3b4c8c8b4d0

    SHA1

    e37aad196f8647149f95f363206819b8ab50f11a

    SHA256

    4c5a802ed1ca58ebce76315bbe541b98daf262f7a4ba9cc98cf5dc8a29d19cf5

    SHA512

    bc6d3968fe9d27aec91c99a98207a2a21631ec9e617e3d466f24ed6f41a33ac3c8ad91ab7228e050344da218bb8ead19b237b2d4791c87b167c3733f5d2d3515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4aca398fa2e446b3fa09a6a6aedfd1e

    SHA1

    bb820a45f5b1d493d0239fcc2f0d3ea1c1334847

    SHA256

    7100007fe4bb5773bb3714641cf356d1d528f09d3f130e9b6c7fb92671e96d72

    SHA512

    f9345fbe3f21bc9e7b882bbd69ecf601b679b96c583eb220a1a0bd0fd6d30c7bab318eab85bb556c46329c0fd2cedc41ba2597c72ce8550e6723e5b3146dfa40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fad411532e577dc2d0d0736164b771f

    SHA1

    ceb9f0441d71d98f79f25c5f6c51cfe02469c97b

    SHA256

    88ce0434bd25a3e85ea5e0b59df12d87068e342b5527b3fed28ce0ae0871bebf

    SHA512

    302db8ac8e2af037062090316332249415b467409400f5f006cef125e49be1d118c26fd074e1294bee084fd146fc0ab7d29629d4fed83408326d773aecb8a451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    862111a9877d2bedcfae57e149131671

    SHA1

    4586df33318d62aab3375bfb40cda7a9bbe89f7a

    SHA256

    076e56ab42ea0338b4b8cb8988c3a42afdcafee65bf2337b493d852391751be4

    SHA512

    e3e2b54d7e77c6a0c139730250f08abce4c29c79a1bcd26dfb2a8d5d2d7340e7da2aedcdac1bc9860eac58ccf74b248d354b7765eefda4aab8594a0dc616c4c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffda8b63fc5ead62bb27c5d892cb1a72

    SHA1

    9c1fc4780f73b0566f8371bb6f3b12161bdaf562

    SHA256

    eae3b09cf7a0586f126259afb79c88fb53b166f2027a0927979f4dc5a693ec01

    SHA512

    63d372dd4e2699b4734566140c4a1d92a061eceee14d9c2d06c100d32e9fa6d825eae99cbd9b8491bd524f6383ea602cbd53abb349119339b9d6eed38164a108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e49511b0d27dc2592e1652b1cc0532e

    SHA1

    df5c935d9aa63558881998e28e19d731898a6bdd

    SHA256

    5b440c400c405a89fc2f8270581ded18cea01dc2fdd888641202b122a493ccbf

    SHA512

    fb3b537765ba24aa9b7416e4d8fd1c3e555fcea90eb672c9e8480c57ce70be20dd94756da51ecafe11f4eed89555d0e87515797a1deb5ba6e07d7d22accf84df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f0653db55f6897c08c8d448409168ae

    SHA1

    1c8318614e39de7e24a3147b7ca46b5d39957593

    SHA256

    aa828508f0e6f44adcf109ba9415070a57055fd75900f457785b6b81e8d285d1

    SHA512

    8a1f92614207cba1536aa003a175f14977eb6bff80f8d547f973cd20771f9fb325d074508a3306b18bd2e6f86481e48cab003f294d75375bc8d03c98c14afdde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c64cf4ea8098ea9ff5571bd9f2b6371e

    SHA1

    ced9d10efe8fa749ed74dbc615e8d1ed611cb9c8

    SHA256

    6ef021f767d489cf3245cdd6cbf948d645a086644c068145f5913c39ba26654a

    SHA512

    1a3463445f3a359f28e05539dd6e2ec416068d7fa8f45df70ed83f05f32926cddf4426f18edba703ac3747a4bb10169c36da9ef8f299ed0265e15c00ef726df5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d43baa487cbb02649b1c369fa1d3fbd

    SHA1

    05a65e1b9dc6347e57fe16006d94731abb7b4dbc

    SHA256

    af553bdabcceeceb5c9b25a576bf6db87865475ada7a02873d887980a844294d

    SHA512

    277349185a65e3160dc02903fe698f6d28fa71db8e3f51135ffd53d6b0c18eaefd604e761edb334fc817357f4e99c7bf104b734570065f415e3f4c271a58b899

  • C:\Users\Admin\AppData\Local\Temp\Cab40F9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar41DB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b