Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 09:27

General

  • Target

    29526e711b9a763872f22693df49fa37_JaffaCakes118.html

  • Size

    23KB

  • MD5

    29526e711b9a763872f22693df49fa37

  • SHA1

    56c63ed2d75a748e2d7a5aa05a9a7b4e56474eff

  • SHA256

    52f34c5ae30825b6f70f12f513859be47b5718a30136f4c7e9e3b4dccc429ba2

  • SHA512

    579b5e29aa5f0653f18bf5aba6cde6d4ffa3b93b89e5e095bc11df361bab60dbb59fbbb6733074802b457a8e2e201962c9e707b20fba4d38c7f37970126c03b6

  • SSDEEP

    192:uWbEb5nIM1nQjxn5Q/TnQieyNnvnQOkEntZ9nQTbnBnQ4CnQtwwMBSqnYnQ7tn63:KeQ//E3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29526e711b9a763872f22693df49fa37_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          56fb48ac6ad22f41f3858d9291902a91

          SHA1

          7d9438dd2d765bb828e8a3a77a6203755c3918d8

          SHA256

          e40fa21601b2925c9777313523261df83fca5d7ac947d504240cca168eca835b

          SHA512

          98bd40dbbb4f1707a4596388e4c04a9ae6bc77c914a04be730e31a7163272f47be50598036b189055d930d8f7adb4933673e72c2aac47ff8e086174b9b4aa6b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          348391cd7f14a449cf9edaa5c5636efe

          SHA1

          6cee4e41370a2ffac775b75cabe19055077cb780

          SHA256

          1cb458278d9b69690d974b963d6356a814e206810e229dfd070d96acc82d15e9

          SHA512

          00bacd11f68c698d4bc086f1a9a48d8d07fefb86724a728b232d24b74055ca921365ef979e3aec536eb0934484d398a38695b699ab3b4325c914022502eae6cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3b1a6ebf8b59be7fa4535984b0ba186f

          SHA1

          21f3f22cebcb2cdc461ffaf46f2a3061e16a93ef

          SHA256

          c6526ea27c2cd520348cea93fadb21e62b545a5e54eab8b55072419f94091a57

          SHA512

          3ef917b6dc448447386822c0883f8c026f00f193518f72e2c200a93d9efa308bd85fccf02f3625c2a7bf421ec69ed6ed944244b261a99090a04525a281bb94a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1bfc45ceced3ca5468173e4ed539d283

          SHA1

          4a6d2986a38212494d1821b9e62236df43ef170e

          SHA256

          ded917061f9746dc2000a0ee614b8adbb4a89db4e8dc804cf60cf430dae295e1

          SHA512

          74ed8952c5e5dd00222417da1a0c97b0f086adfa5ae6cdd28b78312d2733db700bd5013d6b34c6354c850bfdfcabaa8d9be514658ef7d639be66dbfec3ec81ed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca7083736d3cc61a36204f37710ca833

          SHA1

          82ac8337b45cad760e5a938a6121a506cde78171

          SHA256

          1e893f93926eec2cfb49faf7a5fed142e229ba2065ac20739881fcbbbc0c8948

          SHA512

          ef78bf83901c4e89a97cba8313681da3036cab81f7d1a1e0a2505c31ed67a6cbbb25bb39798c9b208f45438bbded4b5d1678dfd6a1d5edd2b6ef6227b4e94478

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          875e240b8df1b4c10fc49092b3a31a4d

          SHA1

          9cf5fcbfdc674f899f620e89e193e64ebea760aa

          SHA256

          7c9f9e817718ca771e162c5cf4f9a1250dd7d15a3584c269ed4f0f953c90c429

          SHA512

          1c27dd2e13594af4ccd7a383ccefac2d7d29d24798fa846155594656c65cb05f0130caa9a899498eb30520c0352835d92fcf1daff3aac7dd37cc5d6a81cf379f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8c666d7a7c350b951382bfcb5f0f760e

          SHA1

          59a59b3aec790ec88dbb89832523b92d73b3a453

          SHA256

          9df2368001bf913ee64a2bc927402666149d3403f820fc31ed8f9ce3474d3f47

          SHA512

          e0e3737d7faba52902b78db4d864b030138db8d2cc2e432edcee293ef0a15b0a7283ead73d817c739c74498612cd62d3eb9bbb9fa020f7cbabbc9fa4da65a01b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d9ac03b03071fa7ce2ab4f10696998a2

          SHA1

          9e3d9280f0a80077f919cffc48e0339159abbc55

          SHA256

          b0cfa2a140070edd11e66d123aadab12941f20baa5dbb817bc2a4f647117ff46

          SHA512

          c649554ff74316b00c56620fed44f04b74a8514991ffce6a5adc13037339469fd4a6baa8392f99edca842575651d6394b10b8685c9948e45e60747b2d7c7cc2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d42b9514098206c42fde64f1917ae40

          SHA1

          34b762cc7efc4f3182d6e78091e9bb28bc85f528

          SHA256

          daec43efefffc41a79c0c0b85f7f0da8888374d33dc00034eecbdf33943be96f

          SHA512

          f29841ba6bdfc16c21a8a3c0414af4473e3efb049d549e6bc2f9f63edd79a54c6befcb156c95e26577240d81bb38fe9373ba2c74fecf103e9540781288f04e5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1580018b6ebadecb5ffca905c8714290

          SHA1

          be264ba8947b0e0ec97ad97bd6ab1ad1230160e5

          SHA256

          918db155ba37c1fc284d48a05edd88ef17f06b3bc49c6f05e3997a5caba0e035

          SHA512

          918747b88c3969f5b5903a691c62db15cbdefd0c7c66b76accf7e1b380b51446301f919ba0230e1f3dea3ae9c07bf0bb8fa0f58e66e4844c80dca57e8bf5668d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          74f8c4b5ce51b43b5c2da38cc7499daf

          SHA1

          92f25acf985388ebf0f49a423c4a44b52861b9ec

          SHA256

          7c38b33aff00dbef382aea1e52c6e06261eeecb5ab77ffd15fbea214ee6eaa90

          SHA512

          d32b4707a90119b5fd6c4183fc813ec730be2635ca759a5ed878d42cd71936020fe60940dae4b40e29f03c4740bae4324e949ea7d84377a9add9aad95784a734

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e7312e44001c2a2200eca5926129c67f

          SHA1

          94ca40600ac09dae46f10c91c1c1cbdec32080b8

          SHA256

          02b8182dc74fac04a0f1d3f4323dcd66cf69285846d590d34221b49b878757f6

          SHA512

          87393667b16e40d5f7ec45bfcde321f6b0f17d0f3659c31fd8dfaa8745ffe4d8582c01d913f52cded81c3bb1ac40bdd243b9db62035c20b1fe7b99dcfe5dc9fa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          91c616a5f5c7773876c94367be2077b5

          SHA1

          1d7aeb8d41babaa59202c3811d3d244160dda66c

          SHA256

          8a57d42ff523cb58974a8d6836a8b4a655a080a8446345af4ad7561a4ce7fe72

          SHA512

          8ccc31fd99f9bb9cba1f60dbb86ed7c89e45e1496f9797392aebf28dd5afad4bababd990b8fff1317f3d5076dcdd6bd6f39a02a716087242756243b499a1d58e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          df86087335a6f6130c2047cff09197ca

          SHA1

          2a37be82b95af0d8d624f85950335bcdef0ffa6c

          SHA256

          52b01fe8136ed95cc1d4f8e6872067a5171695b780cbd913d36a6911d82df2a1

          SHA512

          6ceabe54f0474a0ad65fe854f16e971255cd04e27032de89dfa5c8194bcaaf861030499ba77e0b57ebc300d867f5e4c376a5567bb5b486be3b13997c3280709c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0a9df8b929bf20fdedbad423cc7ede7c

          SHA1

          2f835dd53d911b45917416bcac1ffeb9a62d6170

          SHA256

          32d77ec3821d038defc502a34c8b580449a1d9e798bf4dc57924ce11ec595ab6

          SHA512

          05295c8f72154f9a90156e7c3caeb602693312acd36cfca89b9302b73b43cef45bd32275de269155ab0998a605d8afcd3b140b4fbe1051eea3a87cb736a5f913

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e92c89e0a3ad34f77ce85e9677e3c6dd

          SHA1

          d2fd30bc8529cebfa8fdea18eff9263720f71668

          SHA256

          c40a152f63ac707f7e59fe94b222a4fede5d5f4ffbb532440d8e9d1717ec5054

          SHA512

          73f7cead43f3770c2b5c31ddc0c5b00ed49b211765965f150d463de6e15566b3b51aeb0615e57e124b284cc32e8098de112fa7006fb53fb739ce9fd6b25922d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          579edad43ef5a4ecb8ae1eb01c30c598

          SHA1

          ba5ab2a6b53e519e5b50b3aabace2630800825ff

          SHA256

          c08300e8783555b316d60d9787086c2d421107eb392b6367c6c1c52a2768eb78

          SHA512

          96a29f3c52ed4031c2aeb7fb45b3ae637f9183cfea147a9ae73a31cf603601d5d1f441c064010f945d291f0cb9c7f4cfec0c4dd63f95f64b4304c999633d05dd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d3ae9073fcf2b82cbc7105d8aba66963

          SHA1

          2e5a3c0db6d708ab3d9cea0bfec3c8b47caf6d85

          SHA256

          5759486bc0c0dc5f2b5aec42c75dd27be09cde92f457a7673773e5b81f11bd20

          SHA512

          adae5e385d84bbd0fa4087693c02689a98498ad3ead0fbeba1840e6cc1b4efccd70e2b990a145fa8a977953196e5f10d0209fb25ed3bcbdb1da1b123cf9e2fde

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bf7aff99ceddd193f103b1069eb79209

          SHA1

          0098ab1918960d75f80e1ffe05172dd73021011f

          SHA256

          a69371cb5c88e375936804578f7e82509e9f57526aa1abd49ba4fc4d346cf591

          SHA512

          e30e1d8d33570107e7989520627e433af1662372672fdea2437d36d0fdde553960c0c4bc88b5f08bf3a309b2df12a8b9d018e82cbb7dfb8a41f68b002feb9c1a

        • C:\Users\Admin\AppData\Local\Temp\Cab2BE4.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2CC5.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a