Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 14:30

General

  • Target

    10bd75e3b7a86c3d1ee60afb18b83820_JaffaCakes118.html

  • Size

    23KB

  • MD5

    10bd75e3b7a86c3d1ee60afb18b83820

  • SHA1

    d4406d4d4d109fb96a997ae69e27f20e2902bc1e

  • SHA256

    5560bcbc5a59c771df9b1cc1b906a430c7556b3c6b83593a57e37e14b35d1550

  • SHA512

    c0ba1a3e3f3022c874e268c410746f00dff1fad5526fc70e7307cfb9a37769a3f014bc9a00d70147a46576cf018437e5214a555d5355054ae9fe145ac504a08c

  • SSDEEP

    192:uWbMb5nCunQjxn5Q/9nQieYNnDnQOkEntrPvnQTbn5nQyCnQtywMB4qnYnQ7tnuN:DQ/PCN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10bd75e3b7a86c3d1ee60afb18b83820_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1994d7e91eeaa85253c18a156d9480c5

    SHA1

    483d242df76d99dad375a515e93aa2abe95c1679

    SHA256

    4282da271c88ceefd691422af266a92ec9981c1e331ade0ff3aa82a2fe7745db

    SHA512

    4be3cfe13c9d761b63fe64906deaf9e29dc6bcde26a35e0ed520d6c2a978356f4189c75b56a22027f8bfb3a81f1c7d3ce3a62ab592fbbadf0984e7b25498f26e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8b8357df9400e881227b52735b76cb0

    SHA1

    d291e58b187f20c8a9865accb8e2bf09bb7bbb8e

    SHA256

    697c23f85f7bae5c14260722a9c490c935f613e9bbab6ce14eda4b5899cc88f1

    SHA512

    7fa1b21b2cf1dc5dce3af3cec7d589c780327906e340a9d07f044a6e9e426e45973717e4571d1b0def995aae0b6bf7f14dea282899e24c12a9c7517ceee1c154

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c6aec03f6e300dc33b73fa150f9401c

    SHA1

    3419620a02d5a2134f3892e7c84134d5087150f0

    SHA256

    dc0b122f219f5228832b5b5437ea94d067edcdf8e2e9d0b992f4d06bf0af789e

    SHA512

    cd402ebd8ab9f38b81cc4b5991df580121d5c7b8d1f4ba7f9153b80f5a297b98fb9b59498c3f602da2036811515c03d4a652b68f3c240e62b4b61d3bad63de49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce213f4dca09b6dc1b0a1b74f4e32585

    SHA1

    4c4ab117018a5f7f719599629218bfa0eab5c680

    SHA256

    2a953e37466c4e104cde530279555010d4e14d0f7e8260d0348794260fdbbc2c

    SHA512

    e467aae09809510eddfed049e48202c8b252603586d0c3ef9c6fc6efefff41af23139d9ef46fedb2751505a5de44b49bf4859c9f003e3727f99e3dae4a58508d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ec4138695512ee88b1a2608fa706e60

    SHA1

    05c36f768d5256fef9d3c7808d3dc86516bebd49

    SHA256

    f270dbd131e4d0cac5c1b4c76e8ebdf3790a609c4d62689a1a7ff6e3731742f3

    SHA512

    03d5434a72b5ce95465635d50d5af4cd887fa66d2d5ba484f246837cdce4404957a2804656ee1bda8019d6156b9779f8bf1e5925ee3d44df9745cde0abc38ddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92b5510cdc82f285200ea442a539dfe3

    SHA1

    2e9d61fe7938b44e26a9f349992e2c81fac70db6

    SHA256

    87005bd2a739e99dbb43bf3e580cb1ada5a2b9d4800c27d3a945b7ddeebca51f

    SHA512

    fdd0dfd99ad1b020a615083c85bc30c954a8eac71b1c1d2cd19220f9cbb21fd885c67f9201d34d460e0eba78ef7d837f8c3f3600795e5015858244a420f6fca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90ebca86ae73d3d0c03da97be4063f41

    SHA1

    22cfb6166a3520094bd82e98d82efbe0dde2a911

    SHA256

    ac25f116b8b98d0030a2ec377cf526fcd30a0e2c3ddec0e2a8fa79be52aa6f4b

    SHA512

    b2672fa777f7c4c46961611972417c56a8de511f16fc319789145810ea3e6ecb7808c93ed42d6eb4e0679d4d78005bdef97bccfeaa7222966c6d5ca1ad367c0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c9c1e81effdf233f1d426f60494e342

    SHA1

    9a0ce09ed71fcb5a666f8f8e6a84d919b390ed2e

    SHA256

    2d8f182b44f34a93772b8dd1ec090aeb29201a369826db49796434d30756c5cb

    SHA512

    7b81f5570a57fc134dce472acdd748674fe9ad1d372c2043c9aca2a386d9f30251ecd67b6967584543f2af3d207a6b1d07f6b63fb7dffe9dd837e90c5cd26064

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be2815f819ebb1072b355b680183b68b

    SHA1

    107e1498a09fac8ae51d19d089791564228b6c58

    SHA256

    7a3190d8bce8cb8f259c71ce76464501133277ff28657ed26f4137d23158fae6

    SHA512

    6a4821cea2a38dd2d5c5a3863079a62e263affb0120c5946f94ba80048533a31df91eb2d6f17965c113a00071d49e862ba78977d8efec0e9abe9dff9a8fbf4de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    078e3b7a9f6964fa7afd02d27208f8fb

    SHA1

    4498979ce24585df723b8665fdd70fae63c2644f

    SHA256

    3bf66e6a54c8926effbe56c66db0f3283f90ee45e838ba22052968524a86e3ff

    SHA512

    b327712ec9b8c3bc8b66937786b467af3f2384eeed158bab5ae90bda03c790f87acf94a63876f2ed07542ec23d31efde3514b8009f746cb886266ec07dc42cb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    339571baed2ac6b2c6d41e5d08ba1369

    SHA1

    1fd5f74f721ab46f882a614df3279a13c201bc73

    SHA256

    49322feee165a6f5a1470f8b9b5f8151222b71cbfcd19c805d97fdb40a327db4

    SHA512

    7aaeb079c9ed0940be0984632275b1aac1288ce0515f62bde10eddb2594e4ca2f2856624409cac1240b018a998e02fd5cc39a9046f51000ddc878a0cfa0ba6e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5066611780390a9cc2ab9495acb29462

    SHA1

    d46e7449535cf03e69c856531494e75094fc250e

    SHA256

    4e87cef14b592618374cc2fc44ba5e797aee13835e4c98dd812e2276bb087691

    SHA512

    5f2e10385195d2903492bf4b907364c826a7d51d63bd934c753e2ecc7a2afa34ccb0517029bd29922d780901e64afd46bdb5b50f0574c964fe1e1297a2da59eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a3c692b183e6be14f776c3165fb5ebb

    SHA1

    0e123d23727378855c51f402e5f5b62d895e6631

    SHA256

    51cc18474862def0a96579a246cdda9e1203f8bf495be159afb2dd93acef7e6c

    SHA512

    cfd44bf1824139e24eecb18f5d8260334110a5eef55c45cc901f5b4c81298d4d5ac3c3489a375682744bc71887e2ba6b5c5f9da1d23136b3323b7ee9cbb0e867

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35b648ca374fdb97eed2d785307a8801

    SHA1

    55c6389748f9ce05c00e58a3b2815d00d6a7186f

    SHA256

    6c2d0a0d2047d193d13c1d3c1edf42fe22746099a2395e073f214826bc616e34

    SHA512

    01a337294bd748d90f63927ed7507419b0f3c0e003eaf1d3b920b4761ef4f4364b10eda7604ee9ccbc4269d5285d81ef81def33bca7618382c940fac5c5839f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a78bbfa4d9dbf589acdfea491934ad73

    SHA1

    cf8e951417c1fa65d7be32cf5101cded0df35ec0

    SHA256

    ce281fe50535430fcf87fc15a1e8b725f8f0db403c86e56f0c1dcbeb351470fb

    SHA512

    ab76ea47e6a3ec6156c83add106b65985c06e95a6f57e5fc9d9ecaf3a30013a362c35de4fceac2cbed02034a398de23de626e2e3c0bad7e3935f5e2b10a03473

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4ec5400b604eafcc100dba08f598a3d

    SHA1

    7fcdfdd548372120fe50b1c8d406b59fafd994c2

    SHA256

    6d0beaaaef62c0c3629ab3a40653caae50f89b44dc02f653582b58bea75ee081

    SHA512

    4f54683c6d4486cf98630ad4dc96cfe7320cd842c766588919afaae558f85231ff3e0da69d6745175364f9087d8401f0a86a51abc8b35ef5fd04765102b4854c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2415499b0676e9c07a956a49d6aebe34

    SHA1

    f7d7d129aa07060409c98df493b9f67be6eec3ab

    SHA256

    ea8f687bccde0197b909af82bdf9872463f81910bcb6f04b2bbb5dc4eb1abaae

    SHA512

    9431cf298b0bc1469417abcaec93328a9d4f28570031b91af2b9c1e792c487ec3454112bb1835808a070e3268054079bfeb6061f2f2704ddb1ba522d548dc193

  • C:\Users\Admin\AppData\Local\Temp\Cab9F4E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA05F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a