Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    08-05-2024 15:03

General

  • Target

    2566463f1ec13c5238007f7074185283_JaffaCakes118.html

  • Size

    23KB

  • MD5

    2566463f1ec13c5238007f7074185283

  • SHA1

    06563ec95ea63d191984f6878bc0da74eff2e893

  • SHA256

    23e555c1cda5663ca8eb946b7c3fc818f7dd20c280fcd232984ac17744b32c91

  • SHA512

    d7dcc86d219c25c55202b96d656940897d9262ae0569841d0f28dffa62a10023452f4e17fbb85d6c9b7aa6444f47f989ab2815c12152a71995cc28069693a2cc

  • SSDEEP

    192:uWrwb5nPqnQjxn5Q/WnQielNn2nonQOkEnt6MnQTbnFnQrCnQtRwMBFqnYnQ7tnG:WQ/Unmz/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2566463f1ec13c5238007f7074185283_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2940
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2940 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7279e654162c8c3c392a3c48549bd1f5

    SHA1

    e51b815d1c46b946b30a882e49e342689c4d9f32

    SHA256

    0325332561954519fa90a1ddd664295fa25405dfcce41534dabca414287711a3

    SHA512

    217730b062a0c7ab2e34e6b34db04978bd5b37391034e741836163f80e72826ccb8f9394ab050fbf3c99b6f4b0b40143f1918bb2476127902c0ca4ca35c13d5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ceeb131027041bdc5317359abbcfe97

    SHA1

    a9e861dc7a3569b1a2eee56293be7a5256c52cd4

    SHA256

    04cb0dbb083f48da0bbf98e0fd6ac4e2005309367abc81cf3d65ac0833d27b2d

    SHA512

    9c7c7f67d4c71d9e130c02a4d41ef4cb034b26bd405c7d1e4f0faf190744d5b8c6609ca5392b22538c6de195c27878224a0ad9e768fac308977337d6b69ff3c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a9037fc2f3383e5a5fb3d4970c5ef22

    SHA1

    0a10bb9725ea2d32754d1930c4c5fc5e048dc284

    SHA256

    0ce41a305d54a9c33bc2bf8d87f87e58847075ffb5c13656cc34e4f13c12af0e

    SHA512

    6e28969afc30efcfa18f6a2d21e97a5811add6e08d5256a6a6b787827857e334797d4e608b602321a29b170013ce44e010772e2f8d973b6f527cfdf9a660499a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94e9763affb3ca83e91e218c58c10ff7

    SHA1

    016289e11f31e285d9c5929afbf9086a3df65bc9

    SHA256

    ea377def13db24d1413cb84077fde999484ab0b3add586e7b14c229d9a47d02b

    SHA512

    d147bc0d300377fb63f7506020c796a9efe2217ea2a5b89b2d8fa59889cee299e1a09b2083e2aa412fad6191c18cf8adf4ed8288985468559e9cb078a74616e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b8f5cffd088430069d038480f46f029

    SHA1

    40bcb2fce8bfa4da98bc6371a3f98801076922d5

    SHA256

    13d95352e9871b42d1887ebe18a7952ff44a52a69baf92ffc826945cebf39ee6

    SHA512

    ee1025d6de92fabbfeaee1babb7ac4e14d61d47e3f0a182b48f25a20d803565523dfc1da46002ef9324aa80f890f099e466ead10601600fa67b6bb716592c8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca5acd9b064725949e00658f5aeca845

    SHA1

    eb9988171abc33bb26eb08298e538fa1f25322c7

    SHA256

    481796db645fc82f8f3ad6bb3b8fef4a742fb1e2ed4b553fb685e6633f228fff

    SHA512

    c874c20dd30229c1136a52805452b8568f20d5947560d3823baf72eb6e43e960acfe914836e5d1e62f9ca5df16a62daaef95e07abce0a6ea2203f4f08f0b0bf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ac5138adb73cc1268e582f648bd5bc1

    SHA1

    c88098ff6cbea616b70efec8d13c83458d5503bf

    SHA256

    0c80131f506cbbb2506d7a786f1ee9104bc6d13a19f4db2e4ed143f01951dcd4

    SHA512

    6a62ebc74b0c0272f114e19daf1e4325b9b63ff4b0b823d9a2f85419571132ac643a8dee098377983a56dfcee68d92a607606225c9018c6d8d2ff43ec1820662

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4693ba193f29857f05a63300125feab

    SHA1

    ca0d15347285b8885bb71ccc09f523bebf41c6b3

    SHA256

    10c7ca978ff8b7abfad69da58d57e7eba82d31268e015e4130b54734999a76e3

    SHA512

    1e3d24be49d4df2f1292a16d964e38f0f866ec4c2007eb639e31e9cd216aee606b86ba6836b824453edb4661cb8ba1984b267c189e00abca0fb241703e466582

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    043ccbbaf9e99d04add22317bc4e1add

    SHA1

    b4d94232ba6a75311cb9b928a0b2ee866e51d250

    SHA256

    15e094e42ec199b2bed912de735d24b0541b24c0dfc405c317e68d071ca577db

    SHA512

    0cea249bd59661467393c73b922b2b4083e5ae96a28d760bee17d3077b0e7494ff61de62b799de82d4caaf2b2c4413252371da2eac51da5eaa0f3cce498543d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a73a8e74a59c062e4f6cd9ca413e4d3f

    SHA1

    0b2d61225a7dbae92ab17f6b5cb7cd2d9007986c

    SHA256

    62953fc64d825159851c4082ed1f6d757160de9ff351e75d5b9ef9b1b74764f6

    SHA512

    979aade77e1aad69a03df94dc5626820511d418218a8dd66944e632b064bf9b88c318cbd84694b8c9d00a2d2b704c023a7f41443ebba11ca7af8ef7af750dcc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    615351470708d4536846f169110283f2

    SHA1

    16a1d9fa2ec4af11c32d2b471fc1aebe1b6201c6

    SHA256

    132c4af35fd6925e5c117fcab76998973863b87358da6011d1c6b5780655029c

    SHA512

    fda4122332f063435eb575605566160ca2d953a80ebe0951ac315c6ae1c8d08c6e6bfa0b7ed08d180380657a7e2c3100affe24226dea4b6dc08289d461df9c1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8de948d7953941647c7cc4102aa3477b

    SHA1

    a9242e86945753e68e435cb09bc12d6020ffec00

    SHA256

    c622ca2acc46000c781d74a3c8f4588967473616879ae67778dce2062ba80517

    SHA512

    0ee4dd55ab937af28919e07e3067d3d978a3b311bd6177f5660bc68a139f35f8d0ff685e8de5127c4cec438356d1742c3a17074142d01d47f2623eebc32b6346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    201d93e399e68515cbb51aeeeb162096

    SHA1

    f04131fd4052568408897d4a45c97f89f39fc9c9

    SHA256

    260a04ee04b448ca8a2151da226fc7f036df28d598aabea03e596e93985338ba

    SHA512

    5e6bd37704ca929e6e7e6822819178ec812dd9b7a11572dcdc20c77fb115f5282a55b062a3a62a4fb739607400ad4b9222311a800f20d5e27941670fa0573970

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49867154c49b9074aed66249b9c4d14b

    SHA1

    492a63970dd9598ecb5bb0d3ec6fb2dcf1789d2b

    SHA256

    ef78ca2d0fc4866c27004d39a1d46f10046e3bbb3d6606c4d829c68fd0d0c654

    SHA512

    b82dc8fbc3a654202516d055a29d78e718398131c38ceb5570037b4ee8a8324a9ca2c28154aa2eefe48b89ceacec7478853d4f3fac721a1a909a49bc2147f565

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edf81ed8024ee4ca0a3006babe893fde

    SHA1

    62bd101e5eddc453be21290eed649b8f1d26c719

    SHA256

    8b5a96c48e829da030eb8df66d88c92b229f52419cf33adc374331b0afee2ca2

    SHA512

    e7afc1e60ac23d373d8f1e15ddd4758bcdd91aeba511b6222e93ce55c0407c6043e266bbe5bc858eef8aaabb518f06786d8b443a2726272ecb939d5caf153241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7e8794334bc75288c9bab87a0811f04

    SHA1

    bc22b67d5021c97f58028d220b3665c00e233650

    SHA256

    7dc9a0c49c8d1cbfdf94f9db144b65f1a560217c440a5632ee423dd7399ea9a3

    SHA512

    3b31214e5ad680efe6f85f15db9b8f7e1e0306230030a60249b24c28d0f48808c9dc3c82c6ad2de4fe06806690bb964da2e7a57bdaaa785ab1a1bbc388d9656d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61839688757a93b5b5947d0979b8c067

    SHA1

    d18b6a5cafa3822e1d37a7bd5d5b2176e772d663

    SHA256

    0b2581c70c6d7d056af727454b6e56084f319a0c6e22c320e7418a7a1ca465ed

    SHA512

    40eea87a4f84a96fadbd70fc3286f28142ccc8dff59396663de41a49616749fc5a63aa800623d79271996935e1138335bf828bfe7e82f0f6fc5df9f9f28c3499

  • C:\Users\Admin\AppData\Local\Temp\Cab3007.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar305A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a