Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 14:38

General

  • Target

    18242c8983ff2a6160fd5cd3d5997e32_JaffaCakes118.html

  • Size

    13KB

  • MD5

    18242c8983ff2a6160fd5cd3d5997e32

  • SHA1

    7ca3bc60c65f6b3bdb1f0adebd76a6a39e3ef53e

  • SHA256

    8de18717dcb6598e29bec2c2ecce0ee8f6d97481faa52e11f1e34b959c383461

  • SHA512

    6d80af6c0052c678f9d06979c9096d1205c52427ed8f797bfc5f6bdf8db97f9a6b0113ec076eb8dbcb24a3cbcbe4d26c6cd42c8bce514311833212a4b00dc4f2

  • SSDEEP

    384:7bnfBEWYDdai0W/AxCAwHitISh3nGKtg3sZ1rMFQozmle/DBag:7bnfBEWYmW/ACVC6S8Kwsrr4QoCg/DT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\18242c8983ff2a6160fd5cd3d5997e32_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5bcc106c73a73ef8a63327c55d49996b

          SHA1

          623759eb78f067d894ac9ef88bc090df31a68ae1

          SHA256

          ee1619cafbc5ded78ae156f18df8d693739dd77c8fa65a63ae35d8ef1450c541

          SHA512

          f7776fc79c8bfcafc2aed09c3bca88c61d86fd83ea3522dff252bc4da897a90ada04aa5ef5c4f07c1ef65a1609b41b7d3f521a851c5f369f23a75fb358319a73

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aaefef7fc222f954781e744f747d27e8

          SHA1

          c93316ad28ee9f282d8c49483910a68164124c7a

          SHA256

          1b10d69dca37219dd48887c9f30666a40c10e46d2a23ceefd8869c0b406a7d9b

          SHA512

          77be46b26f97d40f1be7cc155fd46f5202cb5584fee546a0355a2d96ae386f21afe39345613c4c2c49afa9697ee5247e5c5750f391108e4bd27a4e203b7c0ecb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          68cc8d4e285aa25ba0bf9adebeb3817a

          SHA1

          1b6b4feb14a9d59118bbfb3a082ca6deb16dee3a

          SHA256

          9fde765b687286996d9573e0473555073f43e09dc04048b9e2d1ed1e117737cc

          SHA512

          38e97b68ee30250ac7087161451b8f7ee94e454fe1cb041dec6f0f4cd75e130be9aba509da45fd7f4138a39cd42cc40cec6154cfbc26d80109f80f2d526eab1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          87a522fafa57af4561cbcd0e3486b33c

          SHA1

          15490eeda11479fd6b552976aa351e07fd426b63

          SHA256

          4b55cb2f88bfd390c07f8d3d54372f42e2b9d13ad3ad74f99c3acf162e6ea1d8

          SHA512

          6c5396e5519e34e248c352ac74c9ab0551a70087ba4eae542317e07aea902ce3581cdf67737b270051fc0dab65c2602b9eeb1e995a84b491523cfc296e9f31ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          77a4d0ab6af8636cc6f10e209f57611c

          SHA1

          732efe5f5cc6d0e1cabb542bc80393d42fd4acdf

          SHA256

          ecf974a7da9e1582e6b68de757dac7e68b81b6c5ecf75404916dbef433973975

          SHA512

          33ac13de6d564d8eca781da7e9bd1ec4a8641434238f6147e8a3d025ef500290b2d204a8f1d379e0f5acbd390de957c7b404d693536469fe6ff499ec346cb3fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a1492910dcd142ccd017e0ba8c28ea7b

          SHA1

          89a269fba4744952a552df9bb7efd953e7352d26

          SHA256

          b980220ddfb7b1203e183b28a8932723dfd37ce45b6a1be758638a9dd92b7de4

          SHA512

          0b5b3e8ae0a53f8a2cb78c610b664e8e6b204c78d950d4aa3c04f9bc8733513dac45a367f69e57fb15f62b1cc702d5324bf21586c7c7607eb1c82cc9e70de85e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5c866e139d93e121add3c2e9c803cb65

          SHA1

          616de5fe96869e8758e2fd5234638cadb0ef3e2d

          SHA256

          a4a8730e30a1981c3103f19bef985a4b745c20cff3384bbb64b4dbc94c117d91

          SHA512

          b6ca1665bfc5e14c46b13e7d868029214fd55c7a722418db6d27eecf5a6910602ef8cb965703387b66341474737e68d445871fa213ca5c1c189816a353e1dbdb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          42e2b0aa2714a21df52da4d87e142541

          SHA1

          d846eee3e49539d53e0fb11fc73b0d7f922557a2

          SHA256

          7c93956836ed471f424cfa8504e35c8a697ad9ed6701b09428d418d56c45bd6a

          SHA512

          cef4320146b10d6d675f52d14724475d75e054b7e46d2b4c5c8e9c80631c7428ebd1322523adc2191025b09e8becf1f3f7c0ba02739583f2d526294481b62f12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ba033f86ff32774bfd50e54178ad1a9a

          SHA1

          a7cca5f989e5c6e7e6dd1f3bb3292768102a1e0c

          SHA256

          5025cac95ce89a2f342309f95c999f727be9f350e4020ee132bff1e122ac73e8

          SHA512

          c6110d69d9fb1488e271e865592a7cbc4fb0789c658f538744f69d5df8361a2311b217a291779c6d414fedb2ca62b516336320dc3242a679ef30e893fd3056fb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6032ed2a7a74265c8fbfa136019b9e30

          SHA1

          4874dff5f26898269c855d47d77b9696abb4de8a

          SHA256

          6561dcd5a89e4596f97ce99b0de4e5ba839f2f44426b9584c37ee37595d22f3c

          SHA512

          4b9b0950b1393128f3ee5aff78eb477b30865282283b6aee5cd604cbc8bf615704b8d79f42d4f751bcd667a83a229dc2b983ae01b8c354bf52881ad27b5d9664

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1d80f8e0be1bd892f0abd85ddf011eb0

          SHA1

          67b70536276af5247359e59fdad02a6f964b023b

          SHA256

          5dbb38f5e9b2b3d942ccf1d2136917d8e387052ce6c45045b283883062113ae9

          SHA512

          cb684cfbe8b6c37c2b9c56b40c8bf7dc9e30fd6162929036ec204fceb4e7c8cf7ae67726d31376ffa925cc297057aeb16393b2d2ee7f5f2f9f79afb0888370c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f9045be91461bb593793a9ea829776e9

          SHA1

          775f5a686390581f925b220c3f9a727845aa88ca

          SHA256

          bb3ca1135e851cd6ac8c2de2c8182bdc571227ab2e97f1a673ff2234f89a623a

          SHA512

          61126403f7bedc2bc23cebac43420f5a524a0e751b25b0042eaa4b1c3d82f58defd2539adc9cd87cc056c612fbd0a6dcadfbd612e7d4eeb62b3adf5f6fede938

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1374edc26dc24465133e3b585ab40fcd

          SHA1

          a97f9847d0ec7f6606ea00a3a782c0323e46a7dc

          SHA256

          0273a22fb75bf166e95a9ba6c160a308281a53fce0526b4e7a32a8f98bbbfe2f

          SHA512

          cd7c4b8a84ee0577dbd636dc2e21fffd056aab157f2334e62a5e3e4af9ab0ec47df456619a6f372485fce4ed2b5311d53846896fdf86b60e18c274cac81ea8b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3fd170db02d79e023cfced4cb75222ea

          SHA1

          4885fb061b609023138f228ec14c3d4a22ed79f4

          SHA256

          fb7973ebfea2fb4943dc6f92efb1ed4066f73f6f59f717281205bab64d7d815c

          SHA512

          d47a339320e715733342c4645b0eb6a4ccd998bfd358389309bf1a7f9fa2ded61f8521ef278c90d44c65bed12e05d7f720bcf9af45b2cf20439265dbe0799fd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          45a45d168241fb3d60fa8774dee23f1e

          SHA1

          15072dbf700b20b4c466cc318c9c79dd1331b9c9

          SHA256

          26c392145f890c2e9c2ccd2956d2e2fe7ce5f39e4493be974b9706f49bafe724

          SHA512

          948895cefe303e81aef739adf5033125724de9922e071f94b344928461ba419ef5146f6de8519bddb2489e05933aa2330e3d016da096b83c18f3096a411a3125

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          18b603e65e7e905b49101a8c451bc529

          SHA1

          fe1f24332535b1067e239b042c14d6c4f0d93988

          SHA256

          1bd91984a734a9b860ae799f470991b6eb3232e5cc75d5712a5fc847279e3e43

          SHA512

          785ca3c0a97c3266c6200aa0b2150d344f32c29512e909481132a8258112284d8c3a69146f0f801ee5dff9cf7d3695c9fe58da8186fc7764c5b2b1ca5d880b6d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1240c0952986a3e4c7f7b3f4192bc579

          SHA1

          ba5dfe34107b52e89357bca9fa08ef33135941ea

          SHA256

          0074dd45b1495932ae0679f45fd747ec4b40b1505f2be64cdd4794f1c1fb235a

          SHA512

          dbd1952a1b33aa7d23678ae557bfa639a0e7ac3da716d33a62f913af0689672360cfe6a414fadef7a467ec0f7f22a4d91e1e00e1b9439aa46e99a2c8ef6b5bd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c8d1ab9e19c773355dd96e37cd52a499

          SHA1

          f2fbe7e18a26aee38900fad6074a762abeff48f6

          SHA256

          6d15218a8cddd37e400ed46b46de7b296449cb4e27a9ea141f02236ebd268f4b

          SHA512

          f54a285e5ce6b043412d7dea401b613b6bced8c6ae213ed3313d090ca2df4f805c07a37253fcf78add2ab4e2f3f9f8944d9a88c4fbe3eed9010575060e6b9b42

        • C:\Users\Admin\AppData\Local\Temp\CabC591.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarC73F.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a