Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 23:11

General

  • Target

    14e6dd8f45fa9cf934cd565263c700c8_JaffaCakes118.html

  • Size

    6KB

  • MD5

    14e6dd8f45fa9cf934cd565263c700c8

  • SHA1

    cec9c5a122abf868f92d2f0efeaec1671c4a872a

  • SHA256

    959368f6c23191519dd6b0eafa3240f432fc0928e6a1d6458763f9a11e053d4d

  • SHA512

    ffc367af864754de1b0e734dfc5a4f3cdd0fce886dc15bab25a96fa712f43b64155f25f6b1d6ff0c689947e0fc9d8969c397844a8928f5dd1ef4c1d0d549e92e

  • SSDEEP

    96:qhM3sHfbaaBhdtxlxinAEQjpLdtVGYyWhWJxTsP:qhM32zaatGANd/GYyWo2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\14e6dd8f45fa9cf934cd565263c700c8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2304 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2180

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9ffaa5e11f407c7d4dfaa5360639fc5f

          SHA1

          b27ce20d9daa018c3928c652f8678e7ca1a47cc2

          SHA256

          e4adee2c58ec9deeeb1ddf0cbe4d9a5dbda49a14f7d1c89ceeec24e30a313eee

          SHA512

          ccaca38c9105155e8138fde761990a2e6db61437a228f932a09c33b992bd90ef8cf6bd826e81fb1d833af514fffb5a4273818c87f01088cf6b0c5b2da65e70f1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5fdd5f1a27884dad30abc26f1410a588

          SHA1

          cbe12d226b5d587e1c86318a1d1bb547841bd604

          SHA256

          5218d11cc09d05b732873f6b3f05b75ae1f25655ce573e54b6b62a0de5028354

          SHA512

          18ee09488512d05b03000671a5e2916158581796a99c6abb52b1343b0f47db70cd2109597e42d72a2cfb3a614bd86322238371524d3ab01b001e19bb54773be4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aea6dcf7a3649ed866512875cbc219f1

          SHA1

          ec4dd76e983178b911f642fb8cac5127853a7283

          SHA256

          2b2a1ebc72d0baee6308c7a1cf6575a0b52d8819eae30288042c18b7f23dffe6

          SHA512

          bbfcfd1ea7938ece2805b780572bb3c7496f3075a6b6a4e94dacce1706775fade646c9c4a942e8eb8cb4475f05f042be45450718b0ee41f7fb9d271ae4ac46cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f6dbcb74123ec0d5abe0b72c98fcd66f

          SHA1

          9eff291aae4bc36e66a178b6eef965a8e6086732

          SHA256

          4e1f756bc0bda8c80cd0aaa6f6dafea5015c9223e75a33e48df51e335e0a04f7

          SHA512

          b04b5e4624abc30763a577a065496063030477308d1202342e6bafd43a369e4040b678d17ed79ba5c0a0c28e08ab295be994905dc777c3eda283dae9ba4fbfaa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eb7c0fdc6d66bbc98f3f35c5be5e54cc

          SHA1

          4cd9d88d78361cc55a9116cbb74c9ab1c0a17c57

          SHA256

          0f55d45b8e9dcbf77a12f438477d7df65ce669ac06301640aab53665e0b7fcab

          SHA512

          9e531b041724d0dcc319721166808aa0ca1bd6020c8f6a410ee0575ab19abff272576e7e8197ce24b594ed1523d0b24a5108888034a87cfcd4df3429583c19b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d9e47a171ae9d69c1e9b4eade9f91447

          SHA1

          e98e719a393cb4426a589bc78f6fb4151de71f1c

          SHA256

          d2cd7a26e0f642b593301ffa46118e0c805cca1d4842b16be45671692ab0c26e

          SHA512

          75c1683b2be6d070f9f94af06542ccf840a8bde21e3f36a194cd27b84b34e2ba997b6eb5d86e52edc8ad4ce803a86ac86b2d088a52c53bbc6456e8810ef1e971

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c0a555ff8bc8f5832474db286b11c23d

          SHA1

          1a9260974a2adb31a6dbff32e737c53da2b32105

          SHA256

          405fa1dc763862a6e8a2331f8f0075d82c07d1ef7947524593e497605df3a948

          SHA512

          3c9730d26748fea152ef28ad1ce1082bd74fae55ee722dc5d76c08fd262862309b5e2e18e5afb4ced774bae09cf9d1606c537be5535410d9fef54208f766d0a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e1e750e906cb98764b1231544235c1e5

          SHA1

          f1efe35cfcca7e9622b2928b8fa4c8b724296003

          SHA256

          acd2debdf06b5be98df9eccbd47c9ee16465a00bd945b706cf0dfe9d0771c78d

          SHA512

          571cd63190e9077bdd06dba6f9e9771c6219e7a33f54e6c97826eadbcb611f4f6d0da50f32e49455ddb92cf50ecc9deb3ffda7e216a0c1ed8ee60eed178c36a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca606402b5a86cd00c59550729d79e7e

          SHA1

          716570b692edc8eaad43215a6fbc56e3d470fec9

          SHA256

          945c7e3c474997bb1c287bf26c2fbc53073842c7705b87fc47f0ece03f1f3aad

          SHA512

          78e13fff97d15efb33b263f0cbbf61f1c9b50c2e47a50a94538e5a0253f4950884152604c4edb00bab63653dd0cd296267b5328037fe7c5e7e0d994327c20788

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          51d26bf63b71d8a249ea688edc83952f

          SHA1

          80935c165b4ca6d854e2a1d0d4feddc3a8d69dd6

          SHA256

          ed56d06d4c06dfeb96ff0699cb73f812e7334047d2c7aa41b31efcd9a610b69d

          SHA512

          db7c3931d038227d7cf95c945d9543eb1637798c4c1068c8df8922adb8bb8dff6dfd82ce8b2b33b7a5f1cec1630921f9c1f098bd33fcba65fcc2d91b3639cb2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6d4626ebeda8b2d1c68503869f3a40cd

          SHA1

          9364c69cff81458ee58d690f420fc1909060851f

          SHA256

          5a06c157f44ce1da0d785bc18e421b17616bfb7f982c715418cd3fabc6347f0a

          SHA512

          6920fa251aec655f19b1a791eae47c63a25243ba4fb8ef473af7da8764dab4aa58f2e3c6648e2fe3047cde7ac50adde999131d00a3e71db8a719836f7f76c3a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2da3130dae0397ed5a52caf6c4f1404e

          SHA1

          ea14b3667bf19039b2ffc7c2c2f90beaf787e4d5

          SHA256

          232da56a74d24791181212568f996b39c8b8ed076049c8eac87fa6c92a63f8cd

          SHA512

          81d178dbbbc597c503390726538377200ee3a749eb992d3b5c8fbe16e80717539529136d5c5f0745657197df934a177348236efde1f81c39b6239a446f132400

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c025a6d9c8335e21eafbd0a25b3c6d3

          SHA1

          66e3802414dc093f69ab66f5bff5fd8b9ef03913

          SHA256

          b7a2eb83be0671264cf259d41e889bf27918e78976daad5ede57488b95deaa2b

          SHA512

          afa0601b3ad430b9226481eef9d8ab2748f6d44083b0484118eca81799cedae4cbb9a09477ae044478a9f7dd8798f10e14f87caa8675ed6195ea5fe34334922a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a996c83d2265d174bb57eff29878bed2

          SHA1

          072098417af41d9e6697efbe381186c630cadaec

          SHA256

          e1cb382ffff163a1b28fdaa322179e089d9b7fd340334172acef833388ba8378

          SHA512

          14522bcb2f402ad0bfb9fcfe2c6749ee7166329dd41a5fd1b90eed3f5255bbfee395194c7ff87ad0ceb9d580055a68976297f698a2f8e7f5f6900db6adc0f48e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e1b2eb235b674323248e1e0561ac4bb7

          SHA1

          cc67f1db5fe5f67d00211a64ad3036eaea73417e

          SHA256

          82a04c668670cc115bb7d61c03218dfd6bfb4ba50b6edda45581051683c97438

          SHA512

          1b7d728f4f396c4efb530f19442e8c9e1b025275d6264888e16ff887185666afceeb7c4576185f48cd024d6e2db6571c87f73b43bd1bf8cedd797efcd62397cc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6df7defaa0317ac5705c1a56c0918923

          SHA1

          c44e7cab97d2ca023421ca13518d5d20b7217b01

          SHA256

          90c663af522da109268a2e04589e5628a272da4922356c9714d11317dddfc1a4

          SHA512

          825a8d5ed3c0dc755ef3c8172664aa29034476a203a888cb6f3ba9b108f9331ace741fca8d16687bd1eab7463f00574ad913462b018e8602608bc2972cc09e3a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc0b2f0c7c4f6d0c8cf8d7f27eea550c

          SHA1

          939903429c12e1fc80113d152fceda87b3ba898a

          SHA256

          e2d78bd5b37cd4559bec23e111737968257dedf28270671a68f3b6b503b0e328

          SHA512

          ee9d20d0d6fce8fbcf60b0213920b9c3596a6a49fa222567c44f016a36a12c052139815e0cbf249452220abdab43e014c4abee34af866117c3a6bbd5ae3ecef7

        • C:\Users\Admin\AppData\Local\Temp\Cab38AE.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3991.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a