Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-05-2024 10:37

General

  • Target

    174a7f3e94d62246e07217bf4bfc9737_JaffaCakes118.html

  • Size

    4KB

  • MD5

    174a7f3e94d62246e07217bf4bfc9737

  • SHA1

    ca40b5dcf85982c11e090aa33bff0bf3349295ae

  • SHA256

    2e4a785fcaac4a835a066dd58630d0c0fc49a9a6fb90f215d20a89609b73f83c

  • SHA512

    ff41c5673e63ad948cbd5d37ccae50887fff680ef06c061f626021d42859590f08044d803c39e449831494c867d7720fa2dc631fdd8e650d672653c447572e1a

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oH5fFdd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\174a7f3e94d62246e07217bf4bfc9737_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52ce060ac0bcbc540c2e2f830a662fe7

    SHA1

    9eb908414ca81871da059073f650a82ddab410c5

    SHA256

    68ae8550c15b87a16caf200172695b8b0afc744213a847167c85f06955da7057

    SHA512

    7041a45b6251e2a64661581ad22cadda84fe0ec81a6a77722a05a9165fcfbf70affb933bfc98c517d8c7ce7c40a08aaad7e87993e74319b7a5b326a23e7a4e27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e21d9f5d2d61be7920aeefa43e62b4e9

    SHA1

    6e9713c6c6717c79fb798a69d182570deea90de9

    SHA256

    c04ef79b34b652d673ad177db64bfe369eca8cb97af36de6c03f2c92e7f92f78

    SHA512

    cf7aa747093af9a268a0a198e2ef5a17e841d51cf71b7c08274cf47091cae21c956da4bcfca1a8dc43bba2455dc4a50ea9a292ae4125f698240ffbb66caf810c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65b928008d03dd5056c81dce3811cc87

    SHA1

    5e9d538010325b6ab856e33a04933ec450e4bcf9

    SHA256

    4733c2928a65412cf535f4fde41b202a5ad7c5aab8f055b9d82d732a222bdb59

    SHA512

    65e7bc5550494d4e25ce0fc0475e158accb22066b5088ab0f47a068c2aae000a093323c6d21a3afa1a3cb23a2cd118b4e0ff4950dfee9e7d27c9772bd1c52ef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49524140e632baccee0401299037f326

    SHA1

    401f25e543a13d029376d79c0ff1f363bac07baa

    SHA256

    99e7d2e07dbaa67108f951fffdf8d91b0d8b6b5239a140d434aacf18c60a1d54

    SHA512

    0867542240270bea8b4beafae38cb8db3022b5c481b6c85e7892feda514e5be4acb961c67aeb6528b8bfb91c42f2cc6dc6273108d602183ce7ed70b5aec57bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a9ab4aaf4b5cf47bbdc42caf0e636ca

    SHA1

    e9340200bdacff34b22a2ea917a38aa9e6d21938

    SHA256

    64b541972289f5e81bbe765cd80067a01aebc8c3e5cf03f459f27f96549d6a2c

    SHA512

    6a6f668e0ba0ff97d1814019e294c064548e747f66c2f98409d877ce16b16d9988b153d0c091bd3396a25cbc11da74867cec22fec936f695a83138c46dec7f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c2f3aa1125acd9dea2975e0b6727b95

    SHA1

    30b1ea76779f709dce07c523c84bac03281ecef2

    SHA256

    73dc949fa0904eeb754390ff4c6c500f997432a811617adca4658d9f5d8d61a2

    SHA512

    2b842683e2fce552d1e7ee4329086f219c9908594759cdbd0fa5895c77f04b8d14e2984f1ab18d8617539ad5a9a28e1938d3f94ab3630b163a278b2935b129c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02990060d34d1717394fbd6090e75da2

    SHA1

    dc4653a43526dd3c1e2e248a275e59f9c81f602f

    SHA256

    637b5669add9b5ee32671566fd4509929efa0d194215628390d0ad23f8095f00

    SHA512

    dc10298a6e58de9c98d88c1276642a0d3e4ff21ad367cf610f22b05151a9adf33bc17f7aaf2a93cc8b7264369d059289b9183e70d10b2c58d37a9ac5275c1eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59cd1e7e2a941c2da9bcb95a4ab67435

    SHA1

    7d9c20786df2cd0882f10611ba42ed8d3e30db29

    SHA256

    f2dae106bb5ec968ca852f0bbb7cd8e0be29fbe84e494dc1d63a32f8721efff2

    SHA512

    58ab8d19db3aa874fc1a3bd2458d377814732557ea6618555e681a227fb1ed2949c26d1ef977b80fe7e4b7590cd2fd5bddbe1d422bf55caf67cd417501311167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab10357f18ac238e89fdd18ff23f6e32

    SHA1

    de1a05ba441a707d04b5b33b8996fa27ee8dc5eb

    SHA256

    de7dbe1cfd69ef2e39181ed917c98474832b016bef1688940bcedc02c869501d

    SHA512

    8a1e2e837a8394363a85781957482a7a8d09bcf147a0b87724ed2ce1ea39ec69f894b0184db9b2ef92e7fb54ae42ad059b3a626de6dc440d63fbb3b44a3d987e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab6ead21c1c1e24e1002191262b51d56

    SHA1

    00bed3a49ab2b3407290c61c27bc55b7d7ff8928

    SHA256

    7327268d97aeb292a8d41597b0da451c0f07669ecead421b51fd9374f71fad05

    SHA512

    524fbc211dff9b48e83a5bd05b9a4d4ca473be76dbc9e46f415090fca0d10c519ffc2606c4b08cf9949f3c7a167fb4ef85ec17564192d63f40faaee8360e446b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16e8cad829cd94470087b4b06a2ff7d2

    SHA1

    d1ad3bfe1fc5b469c9d814c1341d147be1be7b51

    SHA256

    ae9f925f573fec3de70b116736d13df6045570646f3480401543c2de6e0046ed

    SHA512

    4451359460dc681f67432fa50db674a6585717a42c5067d4b3b1906ceb946d52245a3f66efa625c3b3eef67af5f3148c1d431616e8a6de44393f90ff6d68bae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39901395404466772610e018541e82a8

    SHA1

    baf2cb26f921c05f50f808c07ac182e6a5bda80d

    SHA256

    08eeb2988ff262421a6475d1c5ecc97a6d7b364df4ce5458a7fcfc7f97cab210

    SHA512

    e7b1fb1e0e9180a54d0cf0f92815a67b4c5efaf118b52bed812a55c2c330bfec33a96f3a1bc12ccb9c38ef1015b20a3ba2356359f33261615915e94df0fa3efd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b376b2bcd13c668556e3aa2cc5f645af

    SHA1

    8b8bd56f21e58ccd713bbae9811448a6cd2e0cb3

    SHA256

    da599cfecb7308912008ed38c0b0bba948764604b6dad33e4b31655bbfac2c9a

    SHA512

    5c816d2608a225fdcbafb132834fb0db272f2ccbef5f9abd072ca4bda7278b045268fc54a861074aa004f94b097987214a713e04ef74151f9b32a041a56503f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    701ce7c69885d4bcf306d06454e35e21

    SHA1

    357d5e9448801e0f1d9409b379f45214de6234c6

    SHA256

    02d36aac10a0be001e9cb85688d19fae3766e0783a16442e3d4ce2df7acfeb91

    SHA512

    7ac0864a626f9102e7d93812865a2dfa0398715628561b824b43f43d055fdab6a44ef52c06b74b7265ac8ca0bf6a5cc7e205453aa0e74048ee51cc9a571c08a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f817346b60d00f2148715208a3f5386

    SHA1

    6207e8036d17fe7c88c252a5733beb879f02c89c

    SHA256

    44771d6b26e5a496c14e74369858562b2fbd7452eb6c9da0c8463b20f4d6ea0c

    SHA512

    67496fded99842e36090ea7406d3613e612402b1c9ebcc35ec67f7594d2b1126c027e7b569c129a4cda804e276bbaa93f1fe7468f51afb7d2a272c997c071b48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db7dce1c05f0bc7157f44f7957dd0917

    SHA1

    9fc14538a9b7e33600e808c95d5f954078d94ac5

    SHA256

    96d8dbda4e800c14f5718ea08043debb84836ea16afbb1eb9627094f299ecab9

    SHA512

    287b4e0b080386d9aab47f656ed62f783dc3f978e4d0425c506c0775b915c90cb8f637463d1fe6e34a53af50da92a92834cb09a7559944ed159f13df0d9c807b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7e08ac2d734a51d5ef66a6e5a595203

    SHA1

    cd4e786c776793816c7ea512c32e18ba2eedd5ff

    SHA256

    0e3630db1a8ab4a623ad9d6dcf11975584d2042d4046e3a23279696db1918000

    SHA512

    49cdc8cc81f0b34d4f246119a31aefc51e61c87a6b667401381947f02577183768fedc15178162919fcb016250097a09150ba0c37766e3657d71fa3236548839

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7c8d99f91ae47237cbddc8f372b004e

    SHA1

    e35e447502a183d36a14e025c32e3902dfbdab0f

    SHA256

    332724911375202206c6ec274666963aee97e8e127d946c2d1acc8966237ced8

    SHA512

    ebff9c8558ad7cb67c63ac6c2a83e818a2930cac01d3f64b8cc6d70305b3af0614bd6fd11616fc658cbcd6a57164e289b2eb1730ecc6d38b37209a47884390d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93de4792faab0b22d137f4d11bd225cf

    SHA1

    c4cc204a60755482179e1a028a41c0013c8dada6

    SHA256

    b0b80177529ee328fcecc54facb6c26d96b4a67fb8f8345fcdefd31614200696

    SHA512

    a20bb9df353f891197c52a9eeed782cd786a3901e1ec0337e67c82bf95c52bc0e46b63c0a35afa2c21b00b1a73b0f26774caf4842d6bba1664850e1f355c96b3

  • C:\Users\Admin\AppData\Local\Temp\Cab2A10.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2ACF.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2AE2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a