Analysis

  • max time kernel
    133s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 20:04

General

  • Target

    267fa81dc448d5063e855f1700299671_JaffaCakes118.html

  • Size

    23KB

  • MD5

    267fa81dc448d5063e855f1700299671

  • SHA1

    35bfdbeb636419a89c9c79241ee71a08096cdce5

  • SHA256

    c8bc759e8778973e2826a5f21f51a6124652fef6b384ff9c83a98cca45e5b9d9

  • SHA512

    b223bea8a1ed11e2df6191e425c666606d5e1a6f79ba4b972c61198c8e86f995b9ed479274bad6466d2e0d9b1fe40f6ab979f6bca35ee1efa66cc5197e3524ec

  • SSDEEP

    384:u9XgQJQivMhfhty/SONcwGQ/TSOe9QiFHA23MbnRUQugZwYLmQQd:v

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\267fa81dc448d5063e855f1700299671_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1084
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1084 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3040

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c965be914396b6b6513a7f1581e1e337

          SHA1

          5c59e0397a8eabca782be462385eb5dcf7040f02

          SHA256

          1a68c45369d401bb7f154158314fabbfed8682ea9de74ef8f925b2d5e5de1e99

          SHA512

          98bac21fc3701de47669fceb5f8d23d2a310d516a4b8eaea194742c385c326be6185d419e40ec3cb281cb6b2501d705bcc4a964c63b44e296b26446b0427733e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          361a465476a03f8550d3da89fccd8d16

          SHA1

          e35f4978aabb0a8ae860c239c1327d7991797294

          SHA256

          10b0f0475f5297133e7f80fd0e87a64bf3ddc1eb82295dfe9acf2881dbc00e9c

          SHA512

          00e8fe8d7dc3bb51c78940d8396dad8c7ddfc867b2179192c6dd8c71fb0153e127095e767cf5e9748fdf17dbc3e9f982bdd687d8a5cb13bf35380ba1aa7b5a01

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          123cbda0f74cc8773667a09d7d3876df

          SHA1

          e2c48962df454a16fac3d483f215f8e683f75ca5

          SHA256

          c4e24147457dbabce8339d8a2b4ca5a88829d30944ed70fd229304874fae2f33

          SHA512

          95e256d4d5e2fc8040363f32c253a44f8ed4854f3011eac32c9cb1d8f66ad8095d1a300b5fda7ff74e1387ce05de33d8570db247b20a78938680f80d698bbbad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c52962cd71d3191239e81c05ad428171

          SHA1

          46b8cf646224014035dce4477bcc1d3d5f7acdc3

          SHA256

          15d0077adfc07b0a6c72e30e067e9f40d54834c4d2c9b8aa6924a7a510058a45

          SHA512

          11def345c95d6c5a80fe0c728eed4f79a54a17bc05103e0bb0c755e6dbdb81a5d8bd0dd783136b93ef3670319007b6889053c027920677b91a528837cb313714

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7794d9a80cd44fcb7f5ec24f354214c2

          SHA1

          b1c9c1fef7aad72d434ce421e5246fa27f9423ba

          SHA256

          119ef2dbf586e28734dc50dd8285a37232c563478550742d47d93810d2053f6a

          SHA512

          c330bff0df7aadf5ca2237e7ee45a3aab00973121cacb8d0465a5e19c6273bfc66c760b937212f1aadbe05840eb7ba97d635a2b31b176686a2c926ff7598bb47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4feaf267e0153982f2947207cdfc74c3

          SHA1

          491b972f98dd8a0a75218f4ad81aa2af78955085

          SHA256

          08f340719579829b583b4bfe7ef9c90ff6110760549ac150bede2b9f83ef4e1f

          SHA512

          d355d6c291411dd4f5ed5e2037599aca0ba8eb822f75ca9d699327d1bfbef2fea11c8caaaedc75a8dc8ce43eadd5cb4af298399b742011077b034a16590be0c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fa7fe4d2a0e0f8a7d97cfb1a135db762

          SHA1

          942d15753a6bb9cfa30515a14746e621ed543abb

          SHA256

          dd1f6937d0b9c7af88eddf029278a1739b89abe6ccf696da11c3fe6b5f1ac5ed

          SHA512

          9b763dc25545d4d717d46e243c8a4c09df017f5dd780ad71f0b3678cf7b043b5a32a33dcae5f6c919381dd46c82a1aef007058f973bf3dccb424bb98bf58d704

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1a79e34f09f5e1bf5cafff610a40d633

          SHA1

          9295a4a5aa2925277f75bbcc0e4107dbdd8bc2c3

          SHA256

          b4a456c4eb37a2e5cc4c1083d1359cacbe521c827eb35ba5d27ef43069fb699b

          SHA512

          5c6493bf4e10e21049e32fa9398e317064877b0f002acb94075ddfc7d29db26657c49a6a333ca219914e2a0430b5db8f9a0b43824dde0ffa97aee17f7183bd00

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9085f909a7e4f13798a804d5637d6ef2

          SHA1

          05d3c3c168e48ed38d800334f24b027e00e3b336

          SHA256

          395d3bfa25309e0c36f3b2a3374afb6f3c4aaf6efd441ca2f3483a31588f53c4

          SHA512

          668801b6689938e5375b32ead6952774172c5d474134906c54bda823c3ee21ae1ad0f3860d77bc1c5b800f8a6eaf796e064e37785b9974926a87c94aceeb52ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9a58f436953bf9f5e032ce309a4dc98c

          SHA1

          a7d5e1797388c70a1e4061409f8e351610d7c0b3

          SHA256

          2afec2fb7d04cce3c52c9cac105602377de65bb2e2ee38b2646572bfe57e2a54

          SHA512

          5f3bc9b98bab34b9709ed570234a3922340dbd091c310e6d834a059de3893cc56be9e9b0a01bf3fe63d86750256528cc17badab19029a9a10c6a04ccd4838f19

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dd6435a03fdc7d28f21a0435af027a9a

          SHA1

          4a611a92e47621856c08a718d417e8cac1cc8bbb

          SHA256

          3727fd1a8177c93f5ce2c2172032b7a8890ecd0f9a71f2dcf5496e9edb84deda

          SHA512

          2aa9e9a941fa6e0edf8d46b51a8ee62359ae9b982d630a381fc2b85c388c1d32693f246b959034cc6ab9ea81649e499da9105c0bfb7c38cbc89f2311c3b49b11

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5dea9511e3fbdf62c7e309e42a28d70d

          SHA1

          208f7cbe428d4b69f4aaeac8cd2eb947c9e82101

          SHA256

          16d6e5e9b55be0345df12713f3315c8d811bea8cfa4a299ca73b3abb751cecc7

          SHA512

          f8d9dbde13a21d40c000d9c4af3c0616fa7bd36dfe692b1f5f500d93715dd50ebbb833d41d8cb569289edb2c13a372c5b62fae3ccf33de1fdeef197d047d8aae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          afe6a246787b0b08175218d0ea920231

          SHA1

          c6ef7a699ec365824c29edea3740139098784816

          SHA256

          e132e524b9afcedb14abf526c1765e84ab3829a92fd132465230b7b81f471d89

          SHA512

          0249fe687bd421b7f20f1703918c2154d662aa5950d63716252edee366b76edc54adde332badd1d60d4405722fa5d0bb58210a11ba70e15a755653ae9dd578c3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9842a67604eeb85b7c1a94cf87dcd6c2

          SHA1

          1c4983de8cdd80c154ecca69e4fc43c696ee36d9

          SHA256

          96ab5f473e7e1e3f163230595bab9fc3bd8b5bc5c581d47fd6d75d63c92e5dd5

          SHA512

          0e22d68958fb7b42c9a39b521f59d2e4178a1ba84f176153847bce913f9b025fa48ceb5cb8eff694812a88c7b0819eb0e7a6f1c5cb072e301ca5f07142ee1b44

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ff8db661b4c64a76e7ca08d7cb68c32a

          SHA1

          0d726c67475b52341b705c8d487c61924da8ea6d

          SHA256

          b2d72ba963056f2c9dc3c0845f9da92d39084eace6456226159ea55c85a21c28

          SHA512

          30ab8d868c8f3e5876b23a5a2c19cd5934dba75aa350a1353b6f7844b304cb9de13b1995e9b94d222c525ba8feb3434afb6c2698d548d246eab57d8e61ac0a93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          52a1f147b5038afd93f60f751cd9088d

          SHA1

          8b06842c4fbefdd6be29d321fc5d5dafcba594f3

          SHA256

          5acaba6c7e427a1f385a37ea0ab7dbd5204e7b8e9ba08170f8cb3d1180201ec5

          SHA512

          9a9f19b4fbe9f3ece4301674cbc3e09d9d2aadda791d66ab18b0a87b83cd1a5c20785f70da99ed8c6b107c719ba207b926547cc42cdc827ea27eb7189b2a6112

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fd31c00b658a66fb5d2042c702fc4219

          SHA1

          f2d9bc8fcb6433716399c9d4cc264a1a8dd362b7

          SHA256

          98eaa54600b74bf5e8700f13243d212ced58cd7bf9b129ca4b3ee974cb3627de

          SHA512

          b98c0754045406fedb93fa32966d8b90e029004f2fe71290163801e3bbd289b423799aa9945248cda6adf7d284ff65670b8247f1270446eeaa278e24def7a7e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          05807e43c0ae0442f7eb867e531a6a99

          SHA1

          70d26e7207953f97c2848a44ce84123056e12e2d

          SHA256

          c1b4e99fe7a22ed8800437feb7e1f4e2bc43385e415a5820acd7c25bcfbf4448

          SHA512

          f1a329617ea61bd43355fd6c1d564fc88a961c2ddec274b1a8af326eee15afe1a473b8c86fab428102b5f3c82430bd0c19bc3bb27968b01a1e4d3edce6a8366d

        • C:\Users\Admin\AppData\Local\Temp\Cab2733.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2784.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a