Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 03:37

General

  • Target

    148b239b7163cfdc4ae8d32c1a909a45_JaffaCakes118.html

  • Size

    11KB

  • MD5

    148b239b7163cfdc4ae8d32c1a909a45

  • SHA1

    a54ffff1b50ab7de73a8f83464aaa1432b9399df

  • SHA256

    18a37c51fb1698a9b1abfcaf9d54de46e745473000e3bf5868d29bc3af4bd7af

  • SHA512

    ced6e9805524ebc239fc422c2fcc5a13d4daf6046dcc91ee0ee25b5f446d8ce2a4ca6dc571251f3b43506102faf4e3316829703c6147880c2f416ea331f5fc33

  • SSDEEP

    192:csz72WAYS/GC6eqJ1erQTeM1erQMeLeeSSCPHb76f:cxWAY8GCNHS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\148b239b7163cfdc4ae8d32c1a909a45_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2900
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2900 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d50cbcfdc7038db26a426b6310f4b3c

    SHA1

    bee38d7ff849df5927ce72c509ab6fe939e4613f

    SHA256

    9468f97ff168aa0e0c563495eef4c5f4a86dfd6701c1f9f72faf6d4047bb7fe7

    SHA512

    273ceeef97c2d103051867449f406a528ad7a541d8540522e7970d255be63562737db194fd6a2a39fc1151a9915a3f7a105295683648cac31784133308893940

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55494c1d6beb7f458245428448b269cd

    SHA1

    37fe35368d863cf337c4cfdad97069eb3fb490a0

    SHA256

    5b76834c66232212a8c167858a1c5bc87401a7fa193d04c3a26709ea22d1d0e9

    SHA512

    e849342a2bdba2307a4aa72668bc1f4eb84beca2d16a0d1aa8b4324e4abba13e04a24aca41da0fa8ecdc4f997f06656b1ea5b2a824d161d05db63f95985472fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a72da92ea98740b06ae2e7c2143fc0f2

    SHA1

    67dcba46bc3f5869365490babacb2dff91c1a741

    SHA256

    a713921a076d7cd8ae8214656e60d52c97edeeed6599cad337b0b6e2716544d4

    SHA512

    948544d36f777dff986707562d92b1f3c46784d2c075c2259648ec91a3d360e627e18c6b947a1e3cd3077049a3608e211929e6721cb759ae49ae53701effbf63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    377f58ffe801824f01d262442b3408a1

    SHA1

    a75c0095bc47ac5b680513708395d21249a1bf45

    SHA256

    e2a523e167e04b0b1911b7d7fd257176ab368129a460de573cd524c688e72df0

    SHA512

    4f94fd8d8c634f55c4802107419e86475ee337de58445e13092dbfe3a0399b24389700619421c29af5c708dd576dc6826889484b2bfe5ab6b784619f3d8c9dd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81786ce042955b66153989ac23644963

    SHA1

    fb18633dee5d8e3722c4067555dd39d57efafd97

    SHA256

    0ef9f1c557c8101b8d772ac01b8bc2691264fcacd50c91e7a97ee0d937b9da67

    SHA512

    6d79cbb40b87fad4ff6c1df8db886d5256e392a106d0b45e5b0af411136e7c5b50831345fe308463e506b2a74ce57a2fa32c4140d320e591ba77f5f888fb0ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fca554eec18618ae0f45a8714115102c

    SHA1

    9f3057fec7d6334b3c91ee1db0575ab613adb099

    SHA256

    edf09f7ba68d9d3b59017d492d62a2d2dbf54eb07e463f66ffda55e22145d4d6

    SHA512

    8b9e5fd5366d1124c758c7476259e6e1f750774e7edcb0711e95b6448f9ce8772b697c4351dbf24fa8ae1baae47cd08945208112bee55d9cfc5c12a6e78da09c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e54c033934d3ccaa62634c687599aada

    SHA1

    13cf5529e6feae8733e9c168344abebec91b79fd

    SHA256

    0c2b7c379c96ee2449e7d70b9f3bfee030ef5526386435c06e7078c2a5b941e8

    SHA512

    9848cee7b5c898a2f94b3272afed7d151174d8c657fa9e1ba6f749f7f4020998302cb6890358d74acdb34948c502ceaa8cff7cd83bfd6f94c6f491839f37feaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bbc8cbe19c70a3f17a0cb878933adeb

    SHA1

    89919b55a3edfb5027ef34269f9d651877dbeca3

    SHA256

    7e145d41ffad9846ea897d2530da0564030ba83e8ec3c01e19846626ec5e5a3f

    SHA512

    50822385c7c5955ecce8846d7599138d21cb80f9244a5b534ff7178fabfff38bbb345410cd94ce3e4255057428ca8dc20ad754825c21102efec27e029f9f65ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5219285b24ebdff63a287f584186209c

    SHA1

    77579f8371b4ad96473e26b5456d27e5caf1cb21

    SHA256

    7a9f48525dd9f51f9f7c38984b1aa48de681ba3e5a4bb015d2f03cb0fbc19289

    SHA512

    92b3e8df04b682b7291bf485436d36e743e5b9a4e5357b1f97aee6d9c5f291e70092397b5edaa26537b159ec9c0c5a437ddcc3424bc198810b886ffdb3d35290

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b8f6f47f0e28694c191fea00bdd8d75

    SHA1

    07acfff6a1383be3ed98f102b60f6524de4b15a3

    SHA256

    815efb5a86ea940b15d0b6f9b3ce4ad6ddb1afa79dc8c6c40eded53e9c3ef607

    SHA512

    52b740ec537c4668a14bf36f4ab765d011a3a9850c59ad06d6731c9fdd30cba8f980a4b6a1c4e1434a59ba98510f4d4f107453260a3d3f94869df3a485063418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9269e12e399c3bd82ce1a141e402bc7f

    SHA1

    add3b50e0afb90595e5e28a57772d60f9b13c9fc

    SHA256

    0804e27d93c3a8f2858a484eaf22c95a6eec8d1f474528f77fd41b1bc5f4b680

    SHA512

    1f605adedcc518ec78a8f9f4b377d75b998b484ab1dd987a396aff0fec4d29f4c4d7933bcfc6b9fc5de9c83a26db19f57d58297ee16fb27e98a1c5be5bcdaa66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2334226b3efb2020c82e480158fab989

    SHA1

    e55d30f8dd6856f135871bc2643a0528bc4fc69c

    SHA256

    c288dccf46221972e77eaf732a11bfe4f09035780e06a9fb2549d55c0dc97ff1

    SHA512

    e49cd6b99a768602201478b42824b7eb0cad593f5f324e88bfab655f775c6a453dc96f2f7a5e14e8929aff4567404b942c39f3757ce206f84677a296c5c7fd11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da50315766b67dbb3d1bec7df2746e05

    SHA1

    cf14563770fcb3d980a488a7fc5876a471700186

    SHA256

    8f84c0c78152d26ca4c5d3285985c2e696af2c94698a7d95eda379d7b10d19a0

    SHA512

    2de6dd8e2eaf4d3349baba270fbe66dc2b1beb62ab18930cb5d8d995520b7a0582220ddd8c9239a4db7ebe4db13ceec984df2bd785a6d27f8065a6cab91387ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b690d62a8dd2f78353924ee74491b5b

    SHA1

    300e1b3b13233a49426cdcfb3cf061c718f9bf24

    SHA256

    527cefd58872a3c6cfc078cceb14d7d1c7762a62f842d93d3253812e981187ae

    SHA512

    dd6df3089923e458bbaca31f7b56757754d72e286fe0e03c57a5c18f892b0ff6b6612f3916ce086c817ce6a69f9f3e48cd6af9264bd171b6ac19df8c0445d5fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77f374319394e0262f8c39d23ba9d1f2

    SHA1

    95b6422cfd772e0ffc843ac1931b5f055146a326

    SHA256

    acc9def747c8f16e9f225f1248647e8538f7bca0e76bc29b608767dd76a4a3d7

    SHA512

    1a1d1f50e398a5c3865eb6c5683b147186dba734e3007a3c8af5570f65c31af65edee85b66608a67e282cbdd24c4f45f493a48c93f0c28afb317d7092ba1da7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c993b20c5ea7b4e079fcbd52c7ca3be

    SHA1

    3d3d58ae04ed1b299106167dd22084d7362cf3fa

    SHA256

    be68df2433defad9b367624b10bf586740613b65e9c8c3120c5c2c4cacceeb5c

    SHA512

    69f93864e24c31f2f43d6bcd3c6b993a4d12ed58c40f701b59c581ee2341f4fdb47d94759f7c35727a3d47018116527616ed81f1d87727975d7ab50cc65da1c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93dce782a6cac54e3b0575bdcfc2d448

    SHA1

    5f9846b6497e6872a4873371edf5983fdf73c759

    SHA256

    263d76e007986359dccab038c7e47126cf2c71f75bd557d8b64cad1c5cf949ab

    SHA512

    836604b9a597bf3187cb0a9690d4b63a03d402baa9344a3b484a98e765c61674bddf16e809b8c213770246e8ab649f7aa6e885a16012590de19bd39d870b6e8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6d26b513db6856014dd99e209630a73

    SHA1

    6cdb894b8188653183a38d571fe6fae060ee9950

    SHA256

    8e8f45e09d51d6a942ee08b4c2a1a82efede49aaf868b411a975789dfa096641

    SHA512

    1062756437e1b1b3bed741ce56c25162f27026ed9442599161fec9a64de92144e450d2c82a7effe776f4a207e2d377f10e91743f7c582d327d988db9e78f729b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17711c2c1a36c9cfda6e7722999370bc

    SHA1

    e304872d31d2171fc9e178c37cea2ec8e51cd458

    SHA256

    984884acaf1ec1d09b19cd192b219530442dc8b2211be2af4f7099209e19d3a7

    SHA512

    0c995ee559e6505761b1ce88de56f3d1dc11f6108821d813f86134814c99ca644e92b198d5059a43255954996e96da06d1848666551e420c1d7db11610801755

  • C:\Users\Admin\AppData\Local\Temp\Cab3C87.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3D68.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b