Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 04:27

General

  • Target

    ecaab49a0e0bb16a2967cf36e670225f_JaffaCakes118.html

  • Size

    948B

  • MD5

    ecaab49a0e0bb16a2967cf36e670225f

  • SHA1

    023847efd78636eb7fc93c128ebfee15f96c3817

  • SHA256

    89d4292b89c6053d78bc994748a60b786e51b1b4692c346edcc2996e39d64f74

  • SHA512

    a4a8a9533920f40f2c81f51baaf53ff3d6a733f901215ae177c0829af27e59823a170bb2c6c74e691a066f65076a8382d52ffe27bf99c2657d4e82e7c7bd20d6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ecaab49a0e0bb16a2967cf36e670225f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1564

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b787400a73a64f1fc7d1ec0257a09bf7

          SHA1

          2943b5f85da351c91167e52727b208b0b8766f64

          SHA256

          68a39a80335dbe07df4d51f1f553cdb2ca63542bbe9e93c2e53dabba18164e24

          SHA512

          005285b7e5e1f87c7b08393158d37f165b4bc8116265e25a3f8e872cf8f509ddbdfefd2a2a7700197757f4389edf048e7877b8236d3bd5fb3013fbf808ba5001

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3b08b11b80ed6f0f69cae808998b9278

          SHA1

          0c2844fbf0d6081ee424f4761c20365f59c0d4e7

          SHA256

          ca789376aebf96d14f8051d4e14ab8989a093eda9f2bd4b07b292fb7b119bc6a

          SHA512

          e38ad08c041b11c54d27dbc9a1a498ae1f5ab0186a0c64aa4f538f082c38ea8190e96df52c57d28ce7b94b5a70209fc79da95093fc543352678673827ede1bd9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c878d1620fc1b92842a668e5e734ba05

          SHA1

          667f7532648694692e55f73d72166f39594d8924

          SHA256

          8fa765fcf887fbe2303501cb5755d45a8f889721daa296a6349c4df490ee4965

          SHA512

          04cbf859f1290d82ca1442b285deb3e9fd634dc466bf8ce66ea7d9ee9a9f5fb90e3809d1238164fc61c3ac3b1330b6b9d31de5ca7e82fb4351408ff0322b95ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dcfdc59052008835d8579056ff5cb7b0

          SHA1

          3bbd3923d83362104bfe87b2a70c1f14c99140c0

          SHA256

          ae3fb46b20867a1c30bdb9ba69a53759b7e1c48363b6a8526bd1a309bc4bd637

          SHA512

          628fbb4341fc38afda6f41ae0a69d377c50ec8c1bd8afb315769c63e04027f1938c323d8b6c1587437b02463f2839733114eaf54eacef81957f7618776078289

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b0f7db41fd2e192c96819fb9b2a8d22b

          SHA1

          4c94dcea2884fb75cd5a0ec228fc2c5219730487

          SHA256

          17ac499739228cbe945d52762358d81f835ec96fbe5046b5b82c10703d0d7a40

          SHA512

          8fc51f9a41789886a04feab3d71b6be01f5b07b4102e1c9b86c1f99c6182755d2bd2968e5e478589c36e74cef9bc3cdd5ca8e7be03dec80948ba78982ddd4ab5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c5de2df28dd88cca12cb50adae0bdca1

          SHA1

          f11846f92492f1846f4cec8a9a7bc54fa50ddc55

          SHA256

          652efa0fa32aadc67aae1f790e836a6a8bd54d89ab798cbc3edd3aebaba0c1eb

          SHA512

          953de6b4118d5cc67f9645c27f8dfeb07515b4c96b4a79f85a1f4ea1995a9e666259b5ced0b00d66b32d3c6dd9af1f729afe3716c5908f37ea1de87f188a2796

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          85b19b370618659131d9e1e95b39acab

          SHA1

          66ef09804df9d7ef15cbb5883e4baf1d3f30f7e3

          SHA256

          7f191f576d1e008df8a232bde5a1919db6440c3c52a4b12d81fdcb93211ea1ec

          SHA512

          8a567f78ede3afadbf36070e9ec104f34bd9eb571bb8296dec1329191b9dfed8449090f267185d5e8182933fef09e42f4dda192cc56592f1dfb9133ea7295a1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f487f906c418825d42c55944f9af7a75

          SHA1

          74424f92689b09dff355657bf0f1ce08dbde547c

          SHA256

          123d5dbcbed04b37966c6f2e79108ae8d3bf782c97a958d724072c0e0c38ccb6

          SHA512

          10cb5e491fbcdf523963fbe94c60407dcad3e088a2c0d478d2562e30198b7be65bf0ddf72c2a35f179dc7b27a2deb758b81d0cd785b4e26b540d0bed0177f036

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0891be8658f9b8a5a4d808a2b99e939b

          SHA1

          4d0934a8aba84d7c17b537cf4a4859259ea892b7

          SHA256

          d31159c3b75a33589ea722bae8fa464c90a91899b842645cfd1d0a4862c28dd8

          SHA512

          c2a5a272ccc19c9f9cbcc2b7255bf996716c8a16d8dad3cb8d38f8fa64107a2eab4510ec3d3a5465190d062e9484da83a3462309ef080347623ad86ed50c21b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5a8f912f2681aaead2000bcf8c4f352c

          SHA1

          a6149b07c2f771199e984250476f948e276ad863

          SHA256

          1067003dacf338f2a088e761849fef4ffeb3f8f05ea0d6a0c74e6e26d37eace5

          SHA512

          96d958c79ef81bb618ae29877ae3323491a88fde54fa80e90e6acb7d435cbead3ad07f7262e5a28b120399788516b7ca99604d23431caad72332968b456dfd7e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          68e8c935611d56db3ddbd8b0ddb8c301

          SHA1

          280124f63353f1540d338ebd105c159e342cb641

          SHA256

          7ee8a78c27bdc79529cc42a892072d194b9d495dc560e95ab62f1cc97c15f163

          SHA512

          2ddcaa693564a68ffd2763ea906502c157cd9d1cddd40618be1e1f27f91bfa6e188cfc91c034cebc76bbda6dad258a12646420827b8c515c75f5f9b7245edf10

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a3af623eeedf3c134050ea3dac9e2655

          SHA1

          c4e2c337eeff174767caf233d98d85bda1f9baed

          SHA256

          6e47dc9b216039714f1e78785d073631241308cd8ad41de8e938c7524069be17

          SHA512

          6b14cbe6e8f66cc4262e5a4a8b96aadf5877dfe2817d170c167495edc0d9dd3b4d357d69fcbf061f43e983970c69d58cbc0f2c9fff3fd387da312e496e02bfeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5d58a0a74cdf8e3fdea65ad0e56cff9c

          SHA1

          cddebef14e2c95710b1d2582ae60fd05402c748f

          SHA256

          d46c207c2144d4def29a68215cd809c791d945e241d8bab87749fcc588f30d16

          SHA512

          3e9fd2ab287dfcf9fe91d88875b3a6a058790eebc8c56aec21f980a80fa8918a93e1174cdd05466b713f19729d0b1e36adf12bcbd05ab24437fb8e215e6e47a7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          93139ef782b11a25acf6e90fd9c54415

          SHA1

          2fdbd3404aff22ee9b22fdc4ba75ce29e9197ee2

          SHA256

          230e0635f7f464f3b35c3ba716dc2987267bdbee9755d018f7d96c97d0d20939

          SHA512

          88c6890ea67cd34d51aa803c8164d3d38cffc87c14d700213efa07a6d47d92f46f3432d8e0ee58d5702f4be5bde66fc09d257c03545b65e41c6d0af9458b9bf4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a1dbf66df5e76b4e98f0da06f33a16e8

          SHA1

          d3b003620f3d34160da0678debc93e58846325d3

          SHA256

          9de0f71d1b4b07e03081d013eea3ddf6860875d15b3e8d6dccf6c73e853031ac

          SHA512

          da013b5471e9a1e752991f9da73a59dfa500d450ca819b18af30a1ae0e79373c8f235095f3e4b2ec96edbe3b1c029917132673d9b1dc12b7bfc595961becbc07

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3b1811e6770350e132e9663e5935f83a

          SHA1

          01218833691b576c8a9ed85e4b8aa8d5a3a432d2

          SHA256

          a4052c2f38ff43d02d961e4f991d54293d03dffd1a3ed884ca046707e39fc27c

          SHA512

          ef39b652a2dbeb812359a84d32ef55a016e67b6577b18c903ccaca7b94ad3b143cdba6cb8faa3426aa5b91827a7cc3c199e7d08781bb8286f72908f247fb0123

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          de4da2bcda2255e6ad4ab05d7ffcd6e2

          SHA1

          fff3aa977e180d21d6a8ca315f6ecf2ddfd7e811

          SHA256

          4131f4ecfe229c3c87174e1816ff3d7a1ff19947ea368f4a82e9120e9c1b6883

          SHA512

          3e1f07a21a7be47f6fe4e67dd063a08c450cde61ac3e6738e908109dfd7e40227071447d9cdf69e2bea52987c8f91677f16c4fee15d65b2716545ca97caca665

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f348a5ebd7e8fa2b3c433ed8587652fb

          SHA1

          83a3352bf90e79435ce706eb0200d95c24b88bd6

          SHA256

          2399e55418962f3fc1908d52846e2422baaa530b454110f6b429cd0162f54544

          SHA512

          b681be7f2d83c3ecbc28580582bf3d4823c5d0835e50e10cc3deb8771160febce99b992ee108a413da6f48c6f5f5c236b0247924fae5bf03e894aff175d21f54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          645ae29d24082233cf7d8fa92ae930c7

          SHA1

          8565f84f652486fe896760983caea9a43700eab4

          SHA256

          e4d3aa6cddee841930fc7183fbe3d7e2a8918eecff85f10993e64c8baeb6dbe9

          SHA512

          b0466060b970be8965e40554e8fdb9605e291b4cb8a199efbe1cdca679cd33cab5cef99d214637267148b5d451ae60b0055072f1784854e7328318b6aba97d00

        • C:\Users\Admin\AppData\Local\Temp\Cab2F9B.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar307D.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a