Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 02:08

General

  • Target

    022ccfca58aebddfcd74017b909b9980_JaffaCakes118.html

  • Size

    460KB

  • MD5

    022ccfca58aebddfcd74017b909b9980

  • SHA1

    387609313617c3d78e9a744923382e1a3d41c073

  • SHA256

    d443ec9cbe0092c4e5bb68cf017bcb85a2896fb514010584a9cf92de7aabaee4

  • SHA512

    ad3bcf1bb6d9ef622ca00ee5726d9885b664e099cd34e5ff610be99826cd19fa1676a4f545b5be1285cbc2f2cc57bf120c821103fc023604330e673356533ebd

  • SSDEEP

    6144:SfsMYod+X3oI+YsksMYod+X3oI+YNsMYod+X3oI+YLsMYod+X3oI+YQ:45d+X3uy5d+X3X5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\022ccfca58aebddfcd74017b909b9980_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2756

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          62779f6b7e3a078725efe5608d53c3f1

          SHA1

          86ab45379893be83617f50addb5f225d26193674

          SHA256

          cdb1cf81e15153b9e2c6d14aebd3408a815a8df8383a8af5918fcaae1f14af06

          SHA512

          4d5e518a69307c71e4f4bfc4bec653dc76257a6602438ea82b658ac85e47af3c934e556a7880eb86604e33bfb048795fb0392e26aba7ac8bc8b01690cb55e257

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          be9294d2212eea01179d6802a688e293

          SHA1

          066cb5fe0a656ff1548a825194014ec306e5690f

          SHA256

          83d737a24b9332d12be75bdc8deee6cef7a744b3e6dcf4345101b037e5d390dc

          SHA512

          fb62e4e08dd46966f55e72fc3531ae025507a770609c74b4ac0a562c08ff6838e52f59651234dee85db9e054852349769050cde400bc29c5e09a4cbdbd26d637

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eff671f649341d3bda08d7939c312e5c

          SHA1

          bd334b0a7907b183dcf10d16a4c54060decb7fb3

          SHA256

          207630e468c4eb288590d1f5e64ac0ab4a598019095fa725416845aebfc2c83e

          SHA512

          eb6c12758180aa59d40a12582f29dc7710407b9059be329a14600ae64c6a5bdd9b764f977d1ed2b9e953df022beefe752778ec5f142c5eae482ec8483751b4dd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          49edc79cf1df4f0b4c4dbdc4d53fc299

          SHA1

          9916703477f0072ae30eea1ffe4442ef4047e147

          SHA256

          73f9b1f80f7fcd9b0527e57ca9013184230b15658f6b13bab549f67964813095

          SHA512

          3dc4ef3b13f2225c585823a013413b8e91d3b7d69681474452ad0658fa2203bbcc2a3e3d62d54046a7f31dda7f027df192e2eec2f647f887adcab675e37e48d5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64f31ef1660a06b11e9fb5fb84ae0efe

          SHA1

          6f1ede625bd87f2ea6c3ff3e1a5fe651d315102f

          SHA256

          a353017cc69c370f64c9c310567469b505e36fce8204cf785f834e8954b5208f

          SHA512

          e59de2b4b01704240b20396fc11e0635076b43809ce7fd152c610b8097b3001ffc7cc2166ac46435a63e558fe687c513709a65bdc46550086b88d521990cb0c8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24388f663430615efd8d2408defc2f1a

          SHA1

          83680bf1fad5d38dcb870714d51e2d9ffedb940f

          SHA256

          71eab3385985ccab8ca146b059b7f1629cee14ade941f2883233461771731474

          SHA512

          e14e5032c17513b3e9bdc45268ce452aaa71845b9a1f38616a74122f123d9191bef61b7b4396782f9c81452d5d61beedb95de8a3637f66fd499930567d1a0cc6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b04511921427113d875bfd33a14fa4a

          SHA1

          fede3f5edbe2438661adcc1d84a5954ade374e9d

          SHA256

          a419b2117ca6317c051a040404abacd59ca0c02a7742e428396b2d4d525dc4df

          SHA512

          48fe9924f865822f2b5845d1b9fbc8ad49127d426ee0c51d95f04d8722dc7f8bfc66b974b2935758ba3c15a3a94650767b58c1c8efdafc31c89e2e68023c061e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          08788932887ab5313b1142f8f583b4fa

          SHA1

          6a46f7fc560121cad36d92f00dff5712bafbd233

          SHA256

          fc145d049e4a53c5bbe5a0500d7a289ee209320338b8a9fd8c10470208511e5a

          SHA512

          78900096bff12c319e8427fa8d7edfd0df6ee8cbc5b1237a94e647c4af27fcd2b9229154f43c8e1e3cd327e3422d81b568993d13223b1bd228d9c053ed17953a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ced2927cff81d918b39c74d2f81c05d4

          SHA1

          199d09457d007e92030e2b695f8ecd5062b10867

          SHA256

          e08d2bd340bb894f8f515893841dfaab8122ffe983113d12d61e1d753dde1b12

          SHA512

          dbde1264af14e6e27a9038bea33ea5cc5c3e5c39f3a3faf6338a45f5b0719fd2a32bbbbea0a9688c66590270cd9604a0453bd2ccdf574369979645231210ed4d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4d7924b05bb0eef16a8aad7be8821740

          SHA1

          2d1ba0a797dd85226de9045623c60844e1d083ed

          SHA256

          df93320a7b6facd105a6e88d4df8b0b0f2577428fb4eeafd74601faa6f89e226

          SHA512

          8b901a48169c4750338b8fa81f78340b1be908e2859a53e2cc6f3e0cc8c697a9ac3d0a6fb2eafafba5d566eafb412c15ea06b1f6fea71d9204c3113105e0e2f2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1b2e97cb33cf99097a5dd49404ad216

          SHA1

          7d9b45c3bcb3e00788933239433413bf70eabca4

          SHA256

          46a49575e1760502cbff3858972287a82ede5d5f64005c84369269e568aca7ce

          SHA512

          700d11259be93edeab387f39ec507dc372266d06d3bb8a7d0a864ae6560412dba9134378241f950f2dbcf8d41474f54aae155f2200fc82c2274f4651c6a6263a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          743182c8b7cf1ed5e36a44a398169e1a

          SHA1

          42541657083a383c4bb8a8a9446233b1100f76e3

          SHA256

          1a0f091d9543196dd2061868c8a0523eec30eba6e3e63076d0c67fc29acc2f37

          SHA512

          d7d2e8ec8b1a7aa9868959c2fd01e1e845593d366229e800e6760ef30a10d9e70e0cb6d593358a46ad825842e4ce3a262c56d2c374455d82dc0d447cfcc86ff6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7980761d3c9cdc0a8ea9ae4d634b42c0

          SHA1

          d269d7bd1c36eefda9d1a95e861460d063a5694e

          SHA256

          7a20010972fecd22b2d66057547c06e27aa2585575fe8cfa438ede8ac4bbce6c

          SHA512

          707e272a015ab5b278050aa2a5e05736320b907339d64c674fbbbd675612a9b2faa8c702561b77479a1b4409fe6371aef234ec641977b0f33c1b3be206209c20

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9f158702ef5b302ca8819042650fc9dc

          SHA1

          851aea4798146065b5ab9dedf99fb9497aab7178

          SHA256

          ad6c45aab25251936e247607cfb6019aac8ea60072a759bc33daadaa92eebd50

          SHA512

          d174af833fc53e420551c57bde55c72c392164f157758ed703a4a60c8675f067a0bff14d89dd6767be98267a851835f7ba9e4ae05aeaa0b4e83a9010683c9842

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dab2c38b23b2f13b2c66bb1e30c1d848

          SHA1

          950816713e79c1ea159749ad1159cf1a24156e37

          SHA256

          d3ef09a34789aac1e98a8243151b1132264a14948da023dc54d894674b2e9d21

          SHA512

          dfe24e3d0922499677fd6ff4dbe7d08035b6ae6f6f217778e6a14f3ed6ee1425baf4916913cfd93c44913cd574fedbf179043d5269137520702e0da1f3315cb8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c9fe26f914781be0dba6e6cb5b47bd64

          SHA1

          01fa54d0d450e10de0a153b8fdcfc4d93e643dad

          SHA256

          35c0ad3e7de6011447561979135d7c9068dd60aacaf26ddfe232ed229c639a04

          SHA512

          e1f4adf1d95961da76176323cb8c446f52c29b4cd3f058931c15b8b5cb2c99b2d17eca02dd7d594d2dbf83239786ef57b6bdd4435f6f670736d7b51ffc4faa40

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1bdc38ba98d25445b6c9d5f49b1897f8

          SHA1

          f956a2514bfcdaee0d7d11f53fe45da9a99c2eb6

          SHA256

          c91b51b7a37a4a1c98f9cfa2fa5940bc3326398dc5be0d97fb99032815878d7e

          SHA512

          355fda5d79d743154d5c1258b01d539de78e503646900647d98c0a184369938c087328191137efc765395fbbc38069c059505e2dac89a4feedb82de12e9aa208

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1577e0dc635b32bd43ddd204d2cd4ca0

          SHA1

          336da3b149c012d47f164acf246936d0dba71e33

          SHA256

          6086c9639b7cba14db834ce76825652c382203b06fe63ce477df45c33d887b8c

          SHA512

          8a3ead9c56766597236235b4024208c4ab7efb12404075639028d2a3f2c7260edc9c267b2f47c697b2a46c764310c093f0f68e531b7d8c69955dcc28de5483ce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1e963e9247754621a00f917a8653fb8a

          SHA1

          c7730b6b221d18b60c1aaff13846a3f872468a92

          SHA256

          b472459de716add50329288fbbb6195edca123a2136c8ba8fa64aceea2afe3a7

          SHA512

          93b553b8ad11cfc0205d1df2e545443ed0db311ee70f3428dd1ad549f9726dc3a2c88dde78e31c58bc45f155327956f6d21b4fade87abbcb420621c601d2dd39

        • C:\Users\Admin\AppData\Local\Temp\Cab54A8.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar558A.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a