Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 21:50

General

  • Target

    21dce065080e691a06dc91ebdb5d1489_JaffaCakes118.html

  • Size

    4KB

  • MD5

    21dce065080e691a06dc91ebdb5d1489

  • SHA1

    128a999fd3a24c2dbcbcb36f64cbaf0d95984432

  • SHA256

    de2cbff6aadc9a8b5d6af14bec12838cd4411b6c99c7e732cf5777b612b6baee

  • SHA512

    251a623e371640f06913419dce659534ac7c289f8086085cb3d9be72583be94dd2a0a300d4c7456ef50b34cf4abf9ef71cb9c87ced9079700dc27c06e9e0e831

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oWyl3Qqd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\21dce065080e691a06dc91ebdb5d1489_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2380
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2380 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7552447cf9617b2abfa400fa06b4664

    SHA1

    f360005b6e0944560ccc1809d86ad9b7ac1a2a24

    SHA256

    7972f06430bd66ecc07b78f00533402e0bd25c536a68651566ca5682b54ac343

    SHA512

    75ae6c1dd1c5b19c9d2b0099ca32ac43d3f0197e6f25c991bb36d4d863f4101133b83e290f4e5fa2ada6898e753d2ac775e1a26b93ccc781e14a809d131f60c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d72c41324b20c7b3a2da62b0f947b47f

    SHA1

    4fc4d4b3e028b1dd670c79fcc251879610b1ac73

    SHA256

    696bed1b09a31d97aa94e27b6069bf7c53e71b8915f0355007a30dd7fab4a9fd

    SHA512

    a3c7279391fb6e5aa2c783cfec95497cd14fd1cdfc307a9b60aa47dde62c80e39aa61c22f4d768feef0ad4f73f94bb1ba6ae18f7e77e0fe3b356be2dac123619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ec044f81b90dd705c798e80e5c1db8f

    SHA1

    35aaab74104b8823c620b1a66e218a04893a1a6d

    SHA256

    9fb448d0b0fa98197e0ac014dfc0de5329167f811c2b76ef95bdc5720ab4de5e

    SHA512

    6a0b2b7921b46aa9fb13c3eead9dacd621e16ef23f199da98880d1c2480add86a5628e64c1ba39b898dde89efeccc9c55dc97c5f92c59c98ccd613c3077f4787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    222287ce343ba45986ece9d31bf4907f

    SHA1

    1fe0c1a27fc6e0f1b639d52621fe68061378c3b2

    SHA256

    f9217073db729ad0fcd1bd2df07bfa961b3d510a004873945f63d87507aeff90

    SHA512

    73b80fd98f89b602d450616bcaf3549b76c63d347a5b90ee4f413995330303a17802271324df58ade8cd499ae3e13ecd394c2044343625ea11176a498bb421a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    645a9ae5fcb144aed450ed3090b25e68

    SHA1

    b8c7aaf6832d91647f296226f232068de1d73b3a

    SHA256

    b5721900d76baf8dc02c6173290e3c7e98997a3f5062b27483a96cb4f7079a02

    SHA512

    de314cbb470f8d56538ce10720979f7f9ea801ceac0d58196b26c9fdff1eaa919ad71f485fcacdf4e5195edde10f0ac96c454bf79af1ad6d1dd1da2985d98c90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bcdada5c64b5f3208d074e111a4dc70

    SHA1

    4896f098e199fdb182b651ea5c39c4824cf5fb19

    SHA256

    9b1cab3ec952c89a2d543353c73aa311b22671032d1b980f5fe5cf8cf643d983

    SHA512

    5bc21b6a041d8b084386cfbd360e0ce6bce82457956f88ae9d86a3862127cda63867c196ffffd95d6d833c5ef719769f4c27d299616e6d3153623660b96a1157

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    260332cc857b4b4e705fe3a78e4bb3bc

    SHA1

    3df25ab97a1969a42a365a29cd1cb5c96de11f82

    SHA256

    92e9ec937b992f5589edb4fb8dc53e8f998841a18deae44ca819d50b5c4f9574

    SHA512

    9207284d40f6a721fb7bfeae516f8c40b78f965c5cf3356af4efb6bdb59beeec49c313845c57b276b7ba456a6465c1e47f2e87f41401d05f1ba57602cb8642af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25723e5f307fcb0a5c7274c9c6659819

    SHA1

    2f1e720892f7513d0979e8a84126183d8e22556e

    SHA256

    df195ebf140d6b68e1765bd387d21875f130c2cbdebf8d47d467611be4feea8b

    SHA512

    bac06fcc86b70db3eb708c99d9f7f3546ca82c004a2f342e1d4602f443e007831bec61fbe616561b9023bd18fb024a1903800a928057800beadda39c02c69502

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8273ea83e912c18ad0509bd90c814a2a

    SHA1

    b6460e4be54afbc908409d84a8b8443be5987773

    SHA256

    b0f40de090ac01fd496f725cc6bc49f9fd4fd7971959a92a46191741992b93f6

    SHA512

    01a738b4c733376637958eacc238713d35b0c94ccd2daf68e74e022690f3d343987536ff82cc5e8d4e6080e416f7914191644e46c29a7d54fe4bb26b315ab866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ee0e80a28c5980738973d130dfec8fb

    SHA1

    bf3e8dbef14b67c4740eb7f1864acbbab54def0e

    SHA256

    df75190ec73d98c9d227881843367d2abd81c551d9709923b04b4c1c977562c6

    SHA512

    70b0eb5806c28fb7f11a4f6d478e3fa26413c2ffee88e32e34b217c47e486a6749c79153227f63e617593f6180d8d1040d8d71fb31515d3565052d434c42cb4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acedab298d70187c9ca888f1d9235e71

    SHA1

    593b77b8eac49dd5d03de5335fb3e52c5330b7f1

    SHA256

    acebd0a50ce6977cd100d7ab077eb1256f037b229a2a5590699553560256692a

    SHA512

    3d1755dbfcd22194daa04f0268ffda23080a30ec5df6f5cf7f85576db94575d56c84c29f22be828357a2567e99df921d9bca58cbca9f828c1fb3577791111de9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c06461f5c4e024b9f0e21476a14db57

    SHA1

    49df3dfaab8728016c8829bee9673343c9fa9fb9

    SHA256

    46d87a8e3c650f81dbc14026c2ee90bc4d3892eaf9bcf7cbe0cd24bd81eb3dd3

    SHA512

    6b921ed1439af3f92d5b25bfb73899f8cbbf874d93a3411e65a7687c4564744a8c8cb6a63f548401f77340a5c3f1fe676b0655c36dc6cd4d57b6e03f55ea2f66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40db33b34cd8e7981fbfb13491506978

    SHA1

    4dd825b8c76ff4b01b8100678589c57466717270

    SHA256

    73cf8cf2385b48738c39a878129bbad5fefb1f4f532a51a67e29bf9008358997

    SHA512

    a42946db1e3f71781c7aac77d78189091c31a9b066724f221c2eb8f4d34a0f85b6cdbae1fb5434136b68c003be6fd268a34bc073909c9e8ea94a4f18980c56a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a03ca5af5f278dd3b2c9e7d95bcbdf5

    SHA1

    6fe3a035dc1e8e03d299f649cbdf6ab336be998b

    SHA256

    6927803c4e7cbc812aa4f7e15796f21419453384a0f932edb40b4fef2ba33574

    SHA512

    6a3d47ed0ffa608d91b273bb0655950c734778d9667912079f7ba99d53243931aa61d7effa246cc9299eec8a3ac17cef86628f1ae6fa885455ff349a6245fcb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b39964846b6b254fe6cfa9e24ac5942e

    SHA1

    fd90d9feb43d667e163bdea9c35b04acb0eb66ae

    SHA256

    152e64cc972e00f65518cffe63214c1c988fa210114ab63f4f409c99dd06d300

    SHA512

    44ee91f84f2cd2cd807771b4d9da57e5ae9c06d3571494d9a1aca4b4a538407aa166325e16f6db8c237549a35653f8d3cacc3bdee6946c7ab3c8d1f7f51566d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    265a5460b2ef4147928203a68e609bc4

    SHA1

    80b6d6fc7d2e9cc973f66714f7810e5617ccfb98

    SHA256

    97f4751925183e8b98eef57dbae572667e4be299a546e6c26f6f32bf86da36ef

    SHA512

    3f8af6e44d2c860f39ee88bb631f4c1c8e838707efb625132e8169d3d457e90d6a52a5319f1a925654be1e1d06cb63c8349b81331bb992fd2f5cd4f9062bfe9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    545d50968b058e407c5cd6b6435dc1f2

    SHA1

    1211268ddfa154ab76336d0030e913e42e9f6429

    SHA256

    302c36df4eac63086cfc7b48865d97cb65c778e5ef27fca4a1b96cf2945f3398

    SHA512

    d51a3242d71bce920222ef0b41a07e62cc2423e86ae30bf13cff12dd74e1838cfe318b80810e495e6623aef74b9fb2ac651a34d005a4d1bd14a4f888a1fbd8f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07bd97a01ede91385311b2d36827c80a

    SHA1

    43c7024d86547ed25b95e960e258983dba52b98b

    SHA256

    6319a42acae301304774f43ea762952a718bbb8a48a18abb0d37873b24aff1a4

    SHA512

    49abbdec9323573c4ca79531a1c5e6bbf54759f09d06570b2b84939affef240551ad4508a08c143d1c05cfbbeef4dc2efc3398398ed445f96a9d64d084393564

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d84b3ae1f725e7eccec1a3c8d5aeced8

    SHA1

    22b0a8199fd09b50b1f46bdcdf4e3fedef741831

    SHA256

    c7720590647e8bb89a2814491a355ff60504d46a535f0f28d46bfdfa90fa16b9

    SHA512

    b8a201cc67638593b50d31389e913c8f997749c75aae7c04a3be54e8fbb3a206e8c97e4b7a8b1125893540e4858b474c0729a1e8a5faca7a45c2d397503d1a18

  • C:\Users\Admin\AppData\Local\Temp\Cab2B76.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2C6A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a