Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 04:56

General

  • Target

    027906dc065003b9fe317d2350aa2865_JaffaCakes118.html

  • Size

    2KB

  • MD5

    027906dc065003b9fe317d2350aa2865

  • SHA1

    82a79e22cd8c17261a424873119635131d317845

  • SHA256

    054aba6019d1243acdf49f5db5d958878c2486df32293f545d749b77c00a6395

  • SHA512

    2815e3418ec854d108ea007dd7bf099aa46085aa43eee503a3d2ef0a1795105ef3048cdf0ecfb42d44387da371a5670995e3aa45e80819e21831d6384745a269

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\027906dc065003b9fe317d2350aa2865_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e3b4a057787abd0a77044be0f0c1569f

          SHA1

          942d5b02be56934246604cc0e96d01461e1e00c1

          SHA256

          26a41eb2bb99d9a3f9113558907f195abf4cbefcdadb258d595bb7e479bc4c39

          SHA512

          132a6fc73b58c92b08dfeded7752266e085491ac99975d07db99cde1079207f6dae13c7056ef5fee3bb5525ec72fdfba3117e795420b478e070a67ea0df8c888

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b7ef190a34f9583949284665c4d82b12

          SHA1

          eb6393c05ffd34f0def3a22337b702ecad2acbe2

          SHA256

          ce42826245340ee2e2f1747265ca905247f7fbfa34475c63e867aedbbad9f605

          SHA512

          4f462f7dc029ad6e07178abdb42ee829e0beca7bec4d9cbde00abb8577e6345f04c27cfcb555c29d2ecf7b95fa9ebd13e514e038f3a63873d17c4b0e6961efed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          09201e32a7960c354dd2f7c0c25429da

          SHA1

          4a420f07cd8efc39787f1975e254669d23e6a596

          SHA256

          f909f3bf373a35c21abdca49f65d768abfac2b43f0e818d25a9166accad0b726

          SHA512

          62168b52e29009e8cde86be8b29edad0cc14b712ba4c190a0b7d1820c5455794b7def42f9287c103176ae404d49674cd197b333ebd7a46bd490fa2cf0c788a63

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          35289a11985297066705620830ab6689

          SHA1

          529cb018d6ff8785fcd9684bc08aa98fa03af0e9

          SHA256

          9f4df0a54b5fee28221ab1ba80fb9c47c939f13c6666c84ded0531c13d4515f5

          SHA512

          d5820a30f483015dce82a4d66c918d04c2eb91188f66d2b502c81360905b9a27ab755acc8674766cadfe2f09b1402f07225d4529bf159cd06e3e299c1256f605

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03db075f5b7b65f50819aa8a2169ae2c

          SHA1

          bd87a8fab5687e7b394b9ce64aa9d93ce2c55730

          SHA256

          a98a07396523079b628e3fa1de6805db922f3492c3a08c834bd3592cff968662

          SHA512

          0891ca05a925418e7df26ed15f559b918ff9eaa1c26c520b81cb7b8dc8a7ef82f68aaeaf2e624227c9985cd6c719a943a7eeecaac4eac754b6a75f556ab66d79

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9561984158e8bafd8e1cdfb9a80334bc

          SHA1

          012aa61e5cb96d6f1aab91e7e96495f9136c8005

          SHA256

          fdf3fd95abb041976d55958d62f4d68a143300e6f542e9d2d298cbce2efc4141

          SHA512

          fa23e600d0ff03f0b321696db5b5949c4d2914465617ae060c314a9737100a2c73d2b15bae16519951e4d4ed9cd3c806796b3a8c49e53143db8bfeb3ca33f22b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0200fc6b3a0f74f6eff59e91ed419baf

          SHA1

          6e6d60f64130b4922672f98773ffa57e6d9afe30

          SHA256

          a6a9e4b293529f5a5286020e0324512c657560f771cc516f3caa3923d87158ba

          SHA512

          f27c031d0d6f6e9625fc045415bbebbc757013110f1aa858767a938ecca6988acf05971babf9f734e053efafbe4a83e3a15f62bba43be098c9b28e91b8421ca3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          485fc7dfc4a69b3933325ceb2f9ba5fa

          SHA1

          0f11f6c3a87ada3c8eb1efb03a7802d6d69bdca6

          SHA256

          e23b84d2bd7d210b4b641068400fe4fd57d332ea49af9079f8ac4cac864b3060

          SHA512

          c015383dbc26b199b07bde56bfe25782a1ed1697372f791036bdd88201b6d12cf79128e259def70c7b588a83d7c6d7d73a8da18f663f5f8ac8f7126fc49efe0a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6d09ce0636076ebbf5776975592bd775

          SHA1

          7b17f79cf4b6e945389f0caf3b92eddb8679883d

          SHA256

          1527524331979e518366405fa574c903a2a1e8bcb8ac2b5f436acc5b4a30d09b

          SHA512

          e5c0e3dd2c2d627accc4b8cc7275ec3fa29996b82573f2f811a64fb0257e57ab5a98b1d1731934094f61ac306850a7f797c617d56c919b2278c361271cbf927b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          100a2e1dfc549a549625b2f5f333d29a

          SHA1

          bc1f21a4294886ef8888921141906951febe03ce

          SHA256

          d1863ed4221d647c23d1f61ded989fd093d20f3df4ec7b1f3e0d1b7bdb76ecae

          SHA512

          d7e935b256cd58bc0c0d70eef033b437e4ff6c0cbcced06c98e9bb4eb68694583fa8292f2eb49a3d431600acb13ae3b295a11a3477d44ca7f908d3987c1124ce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cded6985c1df88472a27c8ee5e0944f5

          SHA1

          2f77debc4367872596492742b86581127c737537

          SHA256

          ac5a08bf865d54fe3155ddc08b2abb1539cf52ecb9a0f0ffc7e88910f1184cd2

          SHA512

          76099e4b1878700b8655f2a86601c461278ff0119991a6bb600a16c7caa0983003477e7948cc8d681d364f94417e275980692edccdd84271d16ebafef2938e47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2eecd13ed228f85a1a8b9427702c393e

          SHA1

          517b50913d942ba98ef19b83457b8a01ed26a475

          SHA256

          f81993c9e5ec40e1a7ee5932ff276ed516cd0394699a6fde4b3e33935d610206

          SHA512

          61ee7798371dec57166810b02b261b830341e144445bd8aba60a219ad820b6b1889c042b2296f24868f88e81ea7f0ef24aefeaa1dd3865082f7b3d889cfd8e1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4e5db9155eca661fdb8944987483cc35

          SHA1

          9787964dd3b3b8f710362ec1e0cd924354da1495

          SHA256

          692a44daf9e8b28cc0acf8009f34ea1e04777df919b674b3eff62792d4949061

          SHA512

          35ed4824398d7c3b2ccfad21fed13900f0e615df490ad365f2098e76556068adaa744c6dce06e1259a60aadf0181213f426a491513b9049faf9632d454de5cb3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1c278d8f7f3f1f8b40918a6934b5f080

          SHA1

          755305690578ac1927dde51e675f9d767da03957

          SHA256

          4822b0c69297f5dc1666b418805697d54656ce867da6adf61b52d985130cbdd6

          SHA512

          d0a7a865848f0385c044e4fca39d085181da76abc61112708bab8e5d6ec09a6272aa89133f560f45b3b1719740ab60cb9ccaf60b0e00e53f773e210f3b93f563

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cfbf9ebc4fc4ec0e6257daa74a3daba5

          SHA1

          a92e71f25349e5959d84bf3786adb319286690cb

          SHA256

          0d38c8b02149bc2dc22f11b8e23983b3c742aee7be22bea26b9a0a4570105d48

          SHA512

          10578c195ad8df4a832f3e1e003eecc457354396de96b4ab5aaf56def7eb9a61e229f66a3a455a02cb6c3a3ea1cecb34d112ea12795dc7ef3735140f8be17ec4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          84f5a8205d4f90b1bc9fbed2cfdf8f27

          SHA1

          57735e2090bf1704ad2b0fbb47a20ac995581a24

          SHA256

          869e42099cd8a11c79ee7f6e60ee55dc51770bc31311d503306f1ad073fc2ee4

          SHA512

          50004a1aef08c63b1d2363ea7914b6fd4485e61fea0feb9b8c79606e0d5913a47e8985d6af424b18c18070f381d9b8505a98321db051a707fb2fdd16aa135736

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          10ceafffabb6fc47ff0d90c0a6b6677c

          SHA1

          3abe6d39505605121b0ffd0f05c3f785c98aa1b4

          SHA256

          6f0249eea5637f0eda5e69af3a3961e11d20649acc8c9b5f2d1460a2d1641416

          SHA512

          6a97ea3855fdd3073ffb465cd5c99175717e26816507aafb253c142991a645c3fdf8c1f0d1949aca89fdda15608d52efc4ce5082e04d9b52f0d39505179bc403

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b5b520422323eb50a3fcd2fe6ff7261b

          SHA1

          66a26368d3ca7e755aecad8bd0f3dfe6ecb242da

          SHA256

          05ecd19c47200354c6e769915acc6f8bfa62c5cce7b3bb8332025ec03eb34a78

          SHA512

          27e3a1d0490b0038873fad28a7a8706a8aa2f9ef75e20150441048ffafef0bf8c91bd2899b4273b331932bb79c97bc6059834c4ce65617c9d840b947ad12c5a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64d709d3dfe4e8af2ad7c55ee68b80be

          SHA1

          0b62a3e08849c665b40c0e98f86a384b422e4d32

          SHA256

          df679440074d29c5fa198999d6d941fc9cc2f7ae449cdb344be811113d4ef3d2

          SHA512

          a2e80f45b9455878daf006e7c411f8875c11f53b34dfba64da52f9d60d142e3c8954edd2b749628d5645d1641655ab2f6371f2f7ed926afb7b7addb48a8ac7d9

        • C:\Users\Admin\AppData\Local\Temp\Cab30B2.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab3162.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar3176.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a