Analysis

  • max time kernel
    137s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 21:29

General

  • Target

    061b9d6cd3b5ae1220b7a9accb4f3246_JaffaCakes118.html

  • Size

    171KB

  • MD5

    061b9d6cd3b5ae1220b7a9accb4f3246

  • SHA1

    81b3f21b04c6f9b8632a1ff70703f1b471e2370a

  • SHA256

    1e1d57232b0d2704bdc022b13f61625ae16f907aad32f9bf53beb54ba2ca487a

  • SHA512

    7897a954529dcf8a125ac0dcd4b601331563f3fadfa369dd66c7b8aea286e1573ca9a99a1ddaf3cb5094f3240b186df9b064e0efcce266c69b0eb795acd3672c

  • SSDEEP

    1536:t9pN2SrG0vvi8SyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:5sSfHi5yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\061b9d6cd3b5ae1220b7a9accb4f3246_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5a9bcfa5d4a450791c74020608782c9

    SHA1

    07d7d6743fd4a29173bec525144836feda545273

    SHA256

    94b3220df749cf406d6e538811323ab35faf9ba57a530bd8ed98485db20ae2ce

    SHA512

    dc1dc15fb3ed6e1615f7591d48a8ff8cf889e4e4aac04aec3438f1c107e6d9854a5b6523569fddce507de1828285f09e7e441aac91cdc4281dc476c5b12da44c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78b11181eaf845472caf67ce3e27d85c

    SHA1

    0f901c93248b9cbbd468a5238cb9c201b2e820a2

    SHA256

    a3e873823ac599168dcf521f27b1edb150d8211b8d2b7214dce283d992634e6f

    SHA512

    bb5c53c274ae4021a650ad448de1f23df7c620873972f8505a25048efb8d278f7157c9fd2175f4b1169e176b157116694b10caf082dcbfe645ad26212e276109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2aa9463973372fe739e6dcd7500c5316

    SHA1

    f258592c433601b7d5c6e48a1bdfb8a6386d9992

    SHA256

    ceeba1f424a4fa39ee699a9bb8246424d9c07140f05b61fc1e59fa93703530d3

    SHA512

    b846a14e49d0073d9fbbd8551439422fdfacf02e45639428422578c15c7f734353a7523528859190cee0d0710b4f6ac17777302d343a143803ab777466aa3bca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53f5d8e74c67d694f801292b832b75ae

    SHA1

    47139a22f8699ceca3adf32658d22877b16c2feb

    SHA256

    d85d4db0544f3340fc6b452598fbbaf8e4151fab9e15a363f7132f22affc9fa3

    SHA512

    81c1b5b3fa9a0c6c8c2ead11c2fdfad26fa1d189a6b3b812277709abf58c002a0855dbf7e6cf8cfe7f9bcc1749e5967bccca810f93054b8cfad34ebaf0decc6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b30435efca41a77db52488dbe6262868

    SHA1

    9d756554b73261fa33dfdf57a3730b14bdffdc1d

    SHA256

    6be07699678d4e6d8250b3b3406f514199498b0d2f33bdbdd6f28c55262d1eb4

    SHA512

    21698b5f4addf06ea2669e8bc093bd8483abb1b7321f803cc9f2e3abda15867dc7ae6c9902bb65c2fce67d2d5b90976fe04a959c8686600416179b47da69a54f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    664c31403d51e68b27d18b7b6cfbbce1

    SHA1

    f143cdc125633e91f536441324de7e863314d933

    SHA256

    925402b3209d4af9aa2539cf2b784a5c47ba16c7a609075cb02e868649a2dc30

    SHA512

    0a72fbfac88123919d4f030bf639d726ab77cdb489cea7c3bfe6a28c89abfaaa7c5cab5de1ead54ef4928487b600e633a798609d5917b70e8d4fd37045fbbcb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9894f62e6e3cee56fbd4446550e77fc8

    SHA1

    a849878a1214b2c3fa0e2809fce6cf56ef88d23d

    SHA256

    17640d1277df6bcaa54a7e063a840890a35e4d7234e01e0af4978e8d6f5b5307

    SHA512

    2884110b7d4cf26428d9623a245b21878b8df9112ec8bceeb7bd6914f250dcfbec6ab72f29972b9b3b83e7f60f7ecaeaaad8f76bd775646db9b1233ff2f6c77c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8337df93eecd64c9362e46b701199ed

    SHA1

    de256ca761f30193a2f3ce20c31a00a32fa42a6c

    SHA256

    3768b56c83b3a78e994d29916de4b0c73928475867c07fbfa26e0684b253e9b2

    SHA512

    12f7f51b31d6b78263dfec811d609fc7f50efdcae537246ff82f05214dd877e0be806eeaf12a5f91d857553edc603d49da9541922c64aa651d293451faebb959

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ea38a7988056d39b32ca7cd23bdb106

    SHA1

    2ade4aa6adef0d5fb7340aee1b6d82a58f8238c0

    SHA256

    9a7bb93a34b04e7423a2ddb8d8c41128d07885286a379e54a2a09569fed3345e

    SHA512

    27a796986821f047afb970e2d228574dfe6d3d9828f788934b7b2680094f46d927cd39d8d56dd761444332de55ab2fc5a739aeaa16de2c92de8fd2388ec64ebb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d294a864d38957b4a46142825fbbc60d

    SHA1

    d411fee203c4dc5dd9f45e83e6c274ec51a2b798

    SHA256

    d4cb38760339731ac0eb9eaaaf39356600b5a089b19f466d2239b54893417772

    SHA512

    765416d8542e37c085ba5a6462fc3ea27738c3f569477a43f3d1c5f1d5738c770d3f9141112a7b0d4c55a0289576df8a37a22b1be13aa3b73281f8ca02bdf06e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b22bb09fe460f08ab1b738cd73cfa1c5

    SHA1

    58f95fbe858e70a817cb07997807e1a878b3f0a6

    SHA256

    18f57c09a3ef7f78f08ca62caad398746b37ad73ae3a03ba8e1f24c03a21aa9a

    SHA512

    6d07634db05f382351a85334db66e2af7047af9de170be5f3fd338fb7c7771c6e11e12fae1c6850d31af2c872c345b9e1e9e808f0726ae859ba24538dd1901b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1d4f21369ec8e1fb8b0aa587ca7b070

    SHA1

    1ff372e2a7159734b14037b526a409b58015146d

    SHA256

    7e28d3f7f5918fe81f23fb1605e3537d9cd2d8ceae8dd693d23d4592ef059897

    SHA512

    95119a6af3089723e20f110e7598946141d6ca807f090b19890c2284465a25fbb925d719f59b93d6e0d83510d0ddacfd22633cfda741b5693bf80ab76f8adf14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76a1e1e0be4962c2dbf43ef2b96654a5

    SHA1

    86f55416cc0783f85a1ba2db77090e561782eab1

    SHA256

    bb133e96c97b7459e2a8507b0d9c88e4796633a55f31f829eb4274a75ed344da

    SHA512

    bbcaf6abf45d653abbbc19d1d5322146e185a8861a1772f2f381f7cbe08eabf9197ef441cac4379bbc27f14341fc85b980743da4dc83291922ee7acdfd484d09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54159bf69c6a923aa274e0deab5cb4a6

    SHA1

    9d025c9485fe244623a0c1efc00f64c3cc947757

    SHA256

    8a56bc7cc447cc4720e6d2b86aba12e636bca488242507f173ef26c834528b34

    SHA512

    2f2c7ffc9e641bf701a48cc5ad14bec1bb3492e376d2eb7be51cb57942f650ac5e418d276f08bb28c1671ae4b7a6721a9e2baf7d661fbd9e193a6d3f4ffded39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7eb8c77fae24563bf19a329c146720ba

    SHA1

    9c5302224b370a1547305db3f17430b30a0f5db9

    SHA256

    9b7a4064558addc17a63ae12b4f3156fbec27c2bd97fd910537c60d56ee4fe28

    SHA512

    a3ded6e457a6a2cba37ed7e43c06176e015b75d96fb17a0efbb8ae9a0f943efaa0b8bfec67ae972fe5d9523df98e59f5e1733bfbbd8cf8cfa29a1de05703ba9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d063a34e9747ecb26416de79760c7f26

    SHA1

    e684334e062c1a36302e4ba929d0efa21944df7c

    SHA256

    1455e7a83a22479e8edb42eace2023ae9e432765f05c8587bb2231b9883c4cc0

    SHA512

    1fbc52a0116e9312e7f845f8c1b1ffa0fc4eedc7051b57790047c616934291fa54e78856267582b0625798fe30998c8624299df650a6e64f2f9229f9eec0452a

  • C:\Users\Admin\AppData\Local\Temp\Cab896C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8A7D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a