Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 17:51

General

  • Target

    0c729f13c316f489fa6de4aa00c6c8c3_JaffaCakes118.html

  • Size

    29KB

  • MD5

    0c729f13c316f489fa6de4aa00c6c8c3

  • SHA1

    905a1681039065499a827dd76a663015a73f3512

  • SHA256

    12fde2b817ac134328a3f395c3e568b810902f384ddced92e446200e70279eb4

  • SHA512

    5fd3de9fb6c0267137a9050d8a18e9b84366c7214f0323545dc9025ee53c0f2c1ef9e5e42510c83cd9a0e6591e587dd06b52c45121e1cdaa46ee999dd77a6adf

  • SSDEEP

    192:uWLKb5ndZnQjxn5Q/wnQieDNnGnQOkEntkunQTbnRnQ/7YEMC1GRASGKTYvkkkkn:NQ/gJ4DtLqv8m

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c729f13c316f489fa6de4aa00c6c8c3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1976

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e27b6f774d5f24d7ec02f97a66640dde

          SHA1

          1bf76aee0cd42b6af88de3480ad7fb2fdb3e3db1

          SHA256

          802587cadc47988981692c7867546632e34dd9cd21be09e405c4937c40d2946b

          SHA512

          d06955ae71ff339b389277ddedc1c78f581a5622a255fccd2f79fe61eebe6f85f20d8c97366874e3e61468864eeca0bc5bc2a350c7046c507f33dbd280d18c9d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2dfc470ca7e9899816a9656bfdc3da19

          SHA1

          68c0d9ce8cca17d87d59747753f6f512e2fbbb70

          SHA256

          f1106bd3b9d389ecb20fa68177ac13edfb9ed2d954691ac118d3295c3af0e2f5

          SHA512

          7e4feee1254825067d95a85e071af5ace59e629def3bd7190b14fc317ddedfcb52c64ba085d4f75ebe72c1ec66cb875dc4732155caff9cc579e2bbc5ecf21736

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6593c6c3f9e2b0f7cd98f44c0f3e691e

          SHA1

          d56434f88cffe434b6999e4d79ca6ecb65f94514

          SHA256

          94de04e58d4959e9c470ca21de98bc0f496d048332473716eae8f90e748e6c3a

          SHA512

          3911a3dd70684292478237be97dcfbe39a66c66f3989019febd16a93bbd7f4a64de15c2cdb443b61548b983fa4cf57754f12a01463768f51f1a06630145e3bf7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58fb6c3c2e9481200cd26cc9aafd51ec

          SHA1

          7faa546fa3a3be92810b1e2cc99a36d9a775cd87

          SHA256

          cc67506898927d69cb378cf95534a353a613f586d1d3c8742887b9fc5c0bd2fd

          SHA512

          ad521335c2d790355de66165653c214c884ca0ecbb0e894851dbcb0fd21ee9cae5066d3d3c6bf3affdc9fb7dc23190785f06ebf5a37b68258adc613cc8a1ee76

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8d9b7b07015a45fb6a4c4e29ee8c2223

          SHA1

          25a0540024c43d396e42b928c54088678dae9933

          SHA256

          ed356de2e6a585883f15c74d76d838bce76dd59ced22219b22da97e3dcece7e6

          SHA512

          f7e01afc6512ac82855215ce1846e0f8aae306bd0cc1ae526e86d1c6476d7927d32669e7586a5d9fb169d5994593ce2aab38d0ba0ea12ec3599a9960e74aff6a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0cd1b5fba95f8edf0031ce52776244ba

          SHA1

          273ff54d5e2575cc0924fb0f3ff36f5ab571f998

          SHA256

          f8abac7d3c1e782975d5c4e7b53d61577f75db6514ba53cd664f501e3eb69316

          SHA512

          c094c5e63156dead41bcf4ffaa09d7a361ad43017f923a1aa6b85bd3a86c44c89d1a76e1f2594b0d0f3c0666abd6216a3ed5b3146b1b155b2c1e3e723b8337aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ef40b905b7f0f49d6aa50a071e10b59b

          SHA1

          3667042209a3c140485b271b2c90906a882cd133

          SHA256

          f156c4d8649197f2bc9875dab56dc5bb25c4e6e25a9e20dd1a73149386ce44cf

          SHA512

          22c64172f21cc3976753d52fff4575dbd8ce476dd486d31f5b375c9cb4709e2e1d634343a7a8034f2e831431af4b32b1c65afac1c80d8e308e21cd541292012d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          16419b4a96992ba74ed559458cd3ec94

          SHA1

          ed4bc9824de457269ccf1352ee2369f92c9476fb

          SHA256

          c54e201362d01e8a18c1e378f63e5458c2b615784f5e469ab91451035aaec58a

          SHA512

          b0dd6a2cf899e4148368dd827790725372146e1bbf2a87d22a17397613b056ce4162a21a2cb94b005e77e0998617a1e962a52d01897e778eb525432db55578f0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e51a60ccc294bae76b6759e36ab0b11f

          SHA1

          3eab063e68a26bb3b763147dd83372c799c0e194

          SHA256

          637e95c9b621e5a2f5e498aadfc53ea83da090324d1d69efa678e352f74fc13b

          SHA512

          21fac64e25667ad5b2bbc4f111428f9baebf282de23e74c46aabd5edc36dbf790ebdd231b36877440d0549d0462621fa00851cf5da46b5a04cdfc3a89f3c3e37

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03efe02654180b712171c424b22a3882

          SHA1

          88c49292cb706b43e1a39e4cf4da17958c868e26

          SHA256

          8c7d674f2a40f4eedd224a02bd0ff7aad3b642b3ab9bcb62683c89a31ce46209

          SHA512

          ee82430503ccacec08923e3aeed2a2ec50c41d793596c2917de0e34a356eee607aabef7f97cf26f5b136c4cf4e021df3d6ec9bc4d69384b43146e56aae2f2592

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d1cec7aa97bf9885b59e32346b2d208

          SHA1

          c233b31feb47603dfc2abe6841c62066f342c3f9

          SHA256

          da38bf0e6ed12c63e005034a6488b944e14542ed83786dc4f94622e67ac24032

          SHA512

          c19aad6674caa5e4d5f585b3759b265d821d7c3867fccf723b043714d28f6c6875d9efc1705053e75bab02746ec55434b376b7723269e9bf5966ba9b596229e2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f6fad7ad8475165c1418c5a872160942

          SHA1

          8d927e90c4cd0e2a98e1c1d662a20582f67bb985

          SHA256

          2771181406c9d5909f9f4eb55d0afefc9a9155f6cacbcc71c14b2bcd50f60d2b

          SHA512

          db9a376eb5447fefc2df40cd83d47fd5cfeb1e7c9a294a479ef21d85eecc80df8d63bd84e3f0b732343c3b74693e02c7c905d4a1c156ab6a1ead4bdd6f0e5dea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          84b24cef078b884a32c2896f4ad50504

          SHA1

          0df8a44140379e507abf4a8b30ac7e3f23c88f78

          SHA256

          2163778229871858fa96403d50b703c3383dcc2eb4181255a13d81c0b45e5689

          SHA512

          a55abc9f0860f5385eb2a8a5382ad2bb8015a438c018a042412b36f41384cd8bb30c5e3a18ab9898aa3e24cdc6dce77de0ed5086edd9ca73cce80212297bb5fd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e93b85c1c97f33dd69f97d3e7340a5af

          SHA1

          65d2cb87bf3a81493b62a66d4c9ce4b0ce2572e3

          SHA256

          df17337a0a9064f1502b8ec9c7dfd277ed783d72d0a77f038a6bce83cddc63bc

          SHA512

          ced1cb5f6e3910032e8e8692f8a8aaafa3654ef2a5dc53f7737d0c53b417d526b85fd4da4934c4275c4a41042b72ca8f0b8e6048edec9595709679ca9eb77db8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          881a2e83b36f728d321597084b020bdd

          SHA1

          e2c0b5d84b1a2d5441bf74ea79434a9a1336e352

          SHA256

          2031c3351d82afc4721ce46fb2c357c603355e7ffb9d400e0f9af7f0894f2f96

          SHA512

          6ee96a94619543f0d9cf468efabe2f6314bc80e0081689af6abc6cb76f9fecb79d82fc7d59870e41bcf77432dd9cfe981a727b36f6e90433f72eaa0ecde5debc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2cf673ac9f22c8df7cbcba31ee2312fe

          SHA1

          669b6d4fd083fa76efda870e2a6858e4f726a39b

          SHA256

          efd416a5e76b1eabe2aa786053f1b9dfc09e57ef20190aaa5b5cc3d8544d9cf4

          SHA512

          19a1bf2ec103e575d76182f65cdbc9532bed9ed0a184272f544d09b41683a4f3f8364964fbdca80498eedd6b54bcef9f4c28402f482d7fb8a51d31770c10dda2

        • C:\Users\Admin\AppData\Local\Temp\Cab4DA5.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4EA7.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a