Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 18:17

General

  • Target

    13e8accae570eadacf5e33916a7112ed_JaffaCakes118.html

  • Size

    4KB

  • MD5

    13e8accae570eadacf5e33916a7112ed

  • SHA1

    704282e92287c41aca15b01c2ec8a747003bfe08

  • SHA256

    237f10ffbd0efb54925bdc19d992374b7113cbe853e57a311efbbc8d52914931

  • SHA512

    a8852a0d94ab5e4431c2dcdc7d667f0acfe587c2885463ba35857ee748621c298218e0dcfb748acabc5244f33a8d90e5c8ad23d921306d2bf0a5733e3ffb4b9f

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oEbhjTd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13e8accae570eadacf5e33916a7112ed_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1940

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4b009ff7f283fb33143e9286be15da6e

          SHA1

          09c74f59f2564db699ab10f49a85ec70eebc457c

          SHA256

          839119f55db8626742134a6f1a71303cee6a6889fd141be5d30a9c70d02abec1

          SHA512

          1720cac427e12bdcd1096fbe8973e406c19e827fe1525f53b34cc77b260f980f2990014085d58779e1c31e53f452223a3128cae7e2553a5993c26d08aa949a89

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58dfa7554735aa53108100986f256e90

          SHA1

          348783ea58e34f7c490b791c43468b7ffd9b2f0b

          SHA256

          94dfb3e59bb043b74e7aa3357e47c1abd955d3b633735bdc2c445d56fb2bb14a

          SHA512

          752e281572143e27c3967abf0b2c19d5d24143045321bd525fb3d0683fb424605a17fc60f64a70babd1ce439a7c4bfeccd999301302e469b257548ff74cf733e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          982ecd0245a01199747b4834e2c0e479

          SHA1

          4696100c9f5e2a78b15f0bccacd3c45fba931513

          SHA256

          c80ba9d9706e5305e66297f8c5e5d7f80e053acff310260c7eb09708f4b09df3

          SHA512

          c9c9adfee4b84a0879bb476e6879979b2d7443925b4f0736c86cfc215dcf2fd9c29b14e627799a6ca688cf232bf358781be775db537c7eb4a17006e0bda39c97

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d5802d2a9b1825b259cb1122c6b9fb5b

          SHA1

          16f29ea6d203d6cd23a5aab5c2fb1f0770aa462d

          SHA256

          087421383fc6bdafa609e334067d6647fd9cf5790193689b307fa9134101d041

          SHA512

          7e0f52ac097de910913f3649f3ea0d7d8a96b5f799a74a296b0cf51ea0c8143b7bcf889f5b7423a0123dfeed9dad1af31e5e9ce021df98caa6a2d8947f836494

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f0f97c71c9d79f0915a864d8a31edc07

          SHA1

          eae50c0e2a0f39b02577fc4aec9d894aad314200

          SHA256

          ca6034623177831d8ecec2c0b7a6fb46dbe55900c88f181c4b011e48ea7e3e5b

          SHA512

          a528bfa917fb61d7c193af36d50f9137c4f065dac3e9af79c3fdc7df9082e7a3dcf2f2d3452205adce41c3c265f98daf1724501f04e176ce36eff6f6177c33ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4c0d5de87ec6653b9abff87e5e96452b

          SHA1

          66564f58f155dd4ea749e22479b72340fbd53e48

          SHA256

          434b71c279e13bdc7fb9cfb6f2f2f4524eb7b37a9b82e8124dd0f96ae352472d

          SHA512

          56370cf36aa420218a8c29d558dff20248bce124eac697e93b29ac04cb5bf617ed39798dfa55ec4d051bdf91d2eadb7683049fea44ff67ecd311719c54384ac5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          835a4bb5b607f6fbeeca51c7552e3691

          SHA1

          b3450ed5ed0b9eb1977cf15db1d84115a776ae6a

          SHA256

          15af222b6341be23836acd0d182be4316c3fafb057f92c0888b799b499c1261e

          SHA512

          ddd727b1b0b4f36076bfd7ace02ffbaaf9a622a187590e1cbaca9f1ef0febd91a70056e5319ae3c4358d8d1346a63caed4f69ccdbb122a5b3e251996b9842d37

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ae4fea940b55495c930bc55fcbad8a82

          SHA1

          bc9480f7b4e229b50e32b9213163af88f045e0db

          SHA256

          9fe514d219adc37feeac3650fd020dfca319844df20e2af19303199075ab310e

          SHA512

          b480708d363fbeeac601c6063198cf85893707f0b65eaa21c03462757a154b93965c657baf4a0d4d7af940fbe7bb79be9af8236521e11a8c4ff68b5578aa3790

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          45d3844964ee71a2e5ef275598b4f1af

          SHA1

          542e85688d06998a10f1ba8431096e8ea6a8abac

          SHA256

          883de4cee8649d3915d7ddce7a2ca8e19da322b65e447c730e8b496cc940216c

          SHA512

          1519ce1c9290fae5cc1df0523a3b45fe64da2c8a22ae17cd072e82ec69ac2f8dea8ffec925c003adeba4806e3a5eaa6b01a958fd0baf6fc52a87966dc7aa80a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8693ab5d9442faad3416cbc1161d1557

          SHA1

          02136547058d4afa3bee09ebd11624a1c0f0f94e

          SHA256

          6563dcfa3e1325aa5aa095f54fddfcf826cfee2dfdd7ada071a4a9b9c86f2a49

          SHA512

          88d2dd95407d2c6273ec0e19c0732b4b1a439dcb67198391da8e746a0d5c3b0e55c9c730e0521f6083ea15ec4ea98cddd8a3c594ddb72a35c29f7c8e0f06ccda

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ce3cae9ddbbd7df4546b99d33897a334

          SHA1

          7e2d8b1a2addc586703a2dfb4290b56b9b6be4e8

          SHA256

          b37a23dd85a100b27146f72303d6b6e064cf2ae419df00d87064d8ae1b43de5f

          SHA512

          2349f719d510cc644cf9626558194488f682426b5722ac47cfa44d330ad27711079a875446296c71f8dd2c24f3cebf0b707e9ad94ebd1fb4fd81472e1bceaec2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0e5d597579c3ac81eb11d29cc57e6fc7

          SHA1

          6bcd40fb0517ddc19b8c3cd36d0056c764911b98

          SHA256

          16ad5f05e4f849468a7113ecdcaf997b630a39dcf8156164893ca86c0d3a2199

          SHA512

          a501358e37a1d456d7719479c5a035c1a47b89711e84d72574b7de93edaa44bf64a058b54a84be7e8d8614048b42a1eddaac2f0309c0356a362fcd5ef4195193

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec9ebf4e3378e6bad70218f6c4ea14f5

          SHA1

          da2674bac13800c971beabe2c6a0ba3be38f4610

          SHA256

          7b8c01bb10123f5cd50b8e0ad5f0f4c10902ad99566ac6b4a26cc26871ada2a7

          SHA512

          cfd43e397d12002bbb767ee362fd5f4cf3255cb9ddcc7ad615cc84bd2412b92f4fcdc5480a6a8225a2c87e95212bf95fdb1912dc036f93a60c6cc01c48e6942a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          344fac249199ba397ce6c6122f6d0ef8

          SHA1

          aea0f06621e40df7c7b64be332e2ab6f2265da94

          SHA256

          28ff742855c2017e26a5307cc7303c1181530e77d48691d78f39f83b3fce87e3

          SHA512

          5b68af629a83a5804293e3d46baad7a90f749ab60eb9d6cc7d0eb20c162fb87190ee6ce38fb7d78ed39b6cb2ff00a8774e537df47a9ef1bb683a4a7c02caa50f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          43d7ea04ffd73cf21914a3b4f92e7731

          SHA1

          89c0b22a602644800b24d89e49a1b5685e091db6

          SHA256

          c72009b8f170f763cccd3182522582d959daddf0be7693b00cfae648cd705929

          SHA512

          3e434b37d5591290399b283f6382b01a91b62001ff49816d541e31211b2e24ea4095dd3258608dd3201f505556b1ad418eae3ab6001132ca14d7ad4eb12c78a7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1448f3fa391e42910f2b1458f9fafdd8

          SHA1

          e84a2781f88ddd037001e88cab5b16fb7d597622

          SHA256

          92381a4ad8c9fb529a521dbe931d33a4106ab6d28a5ab4b0ab3e083bf0d3b06e

          SHA512

          dd8fa9fc2b5e517d5e4d0569320d85252c98ac09e0e05d1fef79237a1427c9409b3f9eb82c5336682db2ceb30ae4b4f1888911543f01993b161372c3eae640ce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0ebf121d961c9727ca3eea4a57ff0f0e

          SHA1

          2bdae4470cf363947ef9d96bda4936d2d4a15499

          SHA256

          3933b944a9620599ddebe827179b6c541435dfc0cfb2646db9b6e9ef4bbb8f72

          SHA512

          3c228dabcedc526a1f4cd22ec55afa4d1967cdc135681fcad1ab9a43673765687067b5f66d03316386ff65ab2743c4ca5044b0b89de69c84d844f2ae87c3a48d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3bcc089bd7d8b8311e0efb58c529c554

          SHA1

          27aa9b8300d3ab838f5ca874a5559d9727090adf

          SHA256

          c1b12e9cbc3b8def25d68251a6567eed8f9ff9e7b4c508a3e95be7b576edda6d

          SHA512

          dc352c43027e339cf9eff7beb109991d9fb0e11e00602cf723e5960d531892810dd150b21c08c70ba60979cc0d002675cffff5c6d5584ba3dafc9087dc05ee99

        • C:\Users\Admin\AppData\Local\Temp\Cab9D59.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar9E5C.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a