Analysis

  • max time kernel
    119s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 21:36

General

  • Target

    061edefe4fb407431f3e8de048998c78_JaffaCakes118.html

  • Size

    38KB

  • MD5

    061edefe4fb407431f3e8de048998c78

  • SHA1

    ef433c89c7c5237533693bdb3917b88350c5397d

  • SHA256

    7feb699a54307d2c89980ba2e46ed8d191bc7ad2f6e608b224562d445f904f62

  • SHA512

    8ce8f01839a8e1b87dd8605e2f4f03c07608d0e2ce4ea4a64e4dd2a156751f4f579a2c4f4d376f467bc2ea0ac0283d88f739ff0a2f593c4603171cfb0a6d1cc7

  • SSDEEP

    768:sGUkMvDiChIkVA8eDe/ZIlNEtGu6LzSzu+KM5eLvcamPTDQAeoNleoDeEeKNTe1l:PMvDiCIoeDeBuru2wu+TWvcamLXe+eom

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\061edefe4fb407431f3e8de048998c78_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2856
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2856 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2392

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0ce32f6ad207b1b1b5e110ef73a63e58

          SHA1

          8bf636b1c498123f7a746ae30074155555020a5b

          SHA256

          7e64327acb4df886dfe58d261f1b734ec92abe7ef859ac45d9fff607977e1dbe

          SHA512

          95ba2dbbc1927c5d81320fab4cbd7a0174e9ba6d4e21568003acd1c2508bd8694ad91db44e0e2d29c4129786beecfc11fd2a94025b7ca813aff1605d9bc18641

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f5bbd6a28196e4f7f95626271942ea85

          SHA1

          2a0d9c893b153e91cec463192c50f5a4c4b57dd7

          SHA256

          a8f26761bb1edb69502503b42e37d2b7aeb595c9c4ac1ee4d932f223289106c3

          SHA512

          ee52a87ae400e6f053f3f9e009144bd6b9969f45dfedab158dfdf01ae9323649b4e2c800ec1ef99737dffe4ac65f9bc891e5daa70fb04910236dd80ce23d3db2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c8214430e90f6da1b1690f3e4f2ce207

          SHA1

          1d00655690a57ed2cec646a78756c08c17453a97

          SHA256

          9aefeda1d929b387a21c80231fdcdd4e3b71efac0d156548e10fe9bb7c4e56d0

          SHA512

          4a15c45d20858d27be35b49cdf838ecc7b718b985c1bdd6063bea6c9cc945b106f65066bdd7be81417fd7b083b8640a06b7ffdba696ccde53a6095e41a3641de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66eab58bb158a0122fe74eae2e0e9086

          SHA1

          3cd8c22471f5e0617569e8fd2355ca9541c98d88

          SHA256

          577e847981ba47a87589a75b687ff47bdc2eb09ab167a84add6652a0c0637320

          SHA512

          8ae88f5e9f6baed0775c2904ab8bb7f4c81565a3654402712c765dd7b44a219a4e8ff374a0f221567d6879e6c21b76549ee0b25817e7471bfe9123709104f298

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          356a9c85fd205433666a546b03494b7e

          SHA1

          b7e04bd8d3434056356fb8619f0343f02db23442

          SHA256

          8cccbe51504cfd89a3b942e68b7e77d9eacb6200b696b2f96283111aef904e85

          SHA512

          737a79c4ebb3a839214b4cf07f39d48c99bbbc7686640d1b76d6388c1c7ed2165b67e1901b66c5f88ebef12f42e001940d0655216504b552e2dfb4270ba1067b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          836232f4ae18ff79bf5aefbc8a495d86

          SHA1

          b1ec72712112bdc70433774c38be2341e3d9e13a

          SHA256

          9bb58a41a631bd24290c81e731d69e3613f0958842caa0f7961b8a088066b51c

          SHA512

          6b9ea5f441910670425ac565356ad35326b8d48e1600a47f943c6e1332a5d40396fbc9e005b0a5b3981f403f031763fe5c41f440f120c6f4fbac2b169a784542

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb099ba7647a96635e9363b7fa3487af

          SHA1

          9eaeff38243a69df4ecca94f896d05030735f24f

          SHA256

          4ddbdfe1abeb43db478e40f74841ffb7ed2546a0178e899f52150ca691be5030

          SHA512

          ec4df9fd6d0b7e03ea77f450f8d148d56272ded23e8f7c39061d8248d17c0cdbcd4008811b4c9f6ed4f07f9e31f5307d0fad714eb07d8fffa4638e0abcc2823f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b423f3bab246bb02d56992350ced75a1

          SHA1

          73e8660ebcfd6e10e60098d1b1b34ebe85462be5

          SHA256

          854b48ae8f4dbc9897a9da821132dc109c968b756d75f779300538c0335e1385

          SHA512

          f42590c05ea5581ba875ecd4cecdea282e53cce9e54bdada7dfd9566f8f46b4ac9605e8d38fe39b058a0598be514d9555d80abc0bc7465d7f5004368684071f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7f70f9b4391b940f71228dde31a887ec

          SHA1

          419b1c10a8701850fd0f853b3bc469ebd3f33360

          SHA256

          2fb1527541f45db5cb0731839bb683fc58fb846b74c3bb2d7e84db4011152e8a

          SHA512

          401d02e22e229033e322b5d8fe63b55dcd0f201780fe7267fca5be7c41850ab65772edf7f157d7a6673d3c174044242c0231e81257f40d447fef15131f869dde

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6cc44851f4e3f2603213af45819ab52c

          SHA1

          1bb727d94d287cc13f0437b82a5f528df7edbc97

          SHA256

          a3caf53cd881c2e4d37cc4ff6647041655607e2e9c886e6caa1cc28801f05fa1

          SHA512

          d666a2b89dcbca2d44d953500216ac8dc0bdad737c3c1e68336df60fa4284df298308792c19c666605513241c5515ff988746dbd521646395ecb1d0610c5c823

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bdb18eca1b01270e1c1b387ab2d466ac

          SHA1

          2cce6959d565b954a133f8293ac92083caa93ec1

          SHA256

          5ae559dd3d52e8dc82aca7574d3c477cbc80358b7f649bfaaeccd83f8f6c23f6

          SHA512

          60039bfaf8ec34be84c3b47a81432551b4bce45d49ba54cdf53826744d38a904d78f08dab291372004d1779acc7a3d7938a6ed0312041b70318a1a3e27b4dbc7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d4be04d6c53e7bae5d38496dc63728ca

          SHA1

          cc50a9b0b83c9741b448b3344a970b1533160cce

          SHA256

          b46083baa89a6320cecc133389445f9ceeb42515496deab7bdbc6c8c9f73d266

          SHA512

          d009f9e95a0dad0b707af422b56e4e6f91f4b6703409bb2de1ff64b06916a97f1c06e666d7c7a211c7a9b5c8fe2149aadd0295e17d826d43d9827e471ade5c11

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c4b144747aa528bb843a5a0cc4c356fa

          SHA1

          9b56aa00231f00161b06ef097609a25308d1fe0e

          SHA256

          5999b9b842c423c32f4a61f0994b61a091a281a39c87ea614fceb596febfa0e8

          SHA512

          12c7a098f097d658c5bd126498f92dfd195707e8563012f5d6748846818584783d2c856292f2512305e7616af01c834fd3196e359e9e84fd10ceb39767621410

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a1f9d0cebbb8a2f9dbb87f7e86cb173e

          SHA1

          1f3ff29a2eaa3808297b0f274d5f5fa70588678a

          SHA256

          d4293fe48ff6c487adb0b65b3fdf70bd003242ee5ca21c9c7d624ad688afd474

          SHA512

          c423c4d7db8682d60efcea81b454faaf50956e9a39d0f8919fa57e1dfa42ed8d9296c52407976e8e4c09a4c5dec52191e9418df5899f11d4330c35ff2b09f54a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e53bf2e2c2013fc9d204295cdc8ac038

          SHA1

          ef833b13ab392ab7e1b58ea26bfaf920bc806784

          SHA256

          2dd834c1cc9c129bf692bd9fffb7a40707e05788f90ec23e231bbd8e9a9ff9d1

          SHA512

          162176c89ce1245e363f6110836d1e04a394636e35b16d639152151ab21078ba5cd1c9434ee38300473b50808c7d4a222a90653b7cf3bfcdd8698740bdb010a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          af01fdfa16c1abc9c7742182e02d83b4

          SHA1

          6a8df77e380a52a5511b6b208686a658f6d69b52

          SHA256

          5d79566291e5e7d914d3073642c2c56d58d42f20b27d66a6ae3fbdf8bca4822d

          SHA512

          29263da7f835da5f43a1e0727ce234f77267dec4190cdc5afbf4820cf3f374ca71885d0f0b230b63272cc0fa4a27eb84233dd855e563389796d7fd449543b0a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          877ca341ed844553cc8519e2e8c12011

          SHA1

          ca306dbd9b43398a9c755a5b4e1d26aa842652c3

          SHA256

          79f7662305769595a41844073b3f9f7f5504d33f49822f70ac9ab589b89b06f8

          SHA512

          bebd4ab569914efb269c736ff2c7a0c8794532ad6757673391b717de1b8316f356ec1fdc1e510d68eb5e9da4f93535b840c347681b12e07948ab333d4af9663b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          04cd9168ba1ab1e2c78feff209c47943

          SHA1

          00461049ac70698638029ec9a413ec0302717b05

          SHA256

          b3e45eeb2146bf68fb2e62fd54f821a483a41e93e4f5908a793b73066e0d0785

          SHA512

          1f3cbacaf7b9c82738227a2ab396b92a1463aff428d6bd31965daf53df98e7ffb92cfbb375a73f84252abeb5091556a32abef350c0aab700fcec6d1a152a51b3

        • C:\Users\Admin\AppData\Local\Temp\Cab609.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar71B.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a