Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 21:05

General

  • Target

    310ad8871cbde2dce9bbf272f1990435_JaffaCakes118.html

  • Size

    460KB

  • MD5

    310ad8871cbde2dce9bbf272f1990435

  • SHA1

    c538dc11fa8ed284343788decfc77341b05dbdd9

  • SHA256

    eaa827998069533eeac14704871042968a7f2f528196b57ee582639a3c845956

  • SHA512

    8a6f46ec5a27e5841a64fd265850e2e7bb68a732b5ab7969b3b55a878c2378336b8e3b0e19e6ad1bb73684f9f8d71893d329a046cbe9c89387d6ecaeb4967d95

  • SSDEEP

    6144:SzsMYod+X3oI+YDQhsMYod+X3oI+YUsMYod+X3oI+YLsMYod+X3oI+YQ:y5d+X3i5d+X3Y5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\310ad8871cbde2dce9bbf272f1990435_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1744
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1744 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ea08d3b8a0ec02a3a335d6e5126a898

          SHA1

          d3477f4e4f1771f41b007ed841d1ab9ad685a0cb

          SHA256

          4d2a70a0e834034e6fea0940d4f227108d423613d6db955e2e4bd2a1f4126315

          SHA512

          9ca2377d3a4ec3b5eb903790062f86dc04f6893e305b381d8ef422b89a5002984cb1e04534fe114d91c9047130760eca66d06e46fbc6ae576b9cf61889c98581

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a2219168dab613a4156f99517e527e84

          SHA1

          e542da21f856fb315a65b667d59d7136f8532a0c

          SHA256

          dfcf90a410805aaf121ad460fb76c8e90e0c3c961346e95b57fffeb4c8ecd1df

          SHA512

          7fa7f8dbff6a1afc3307cc9327cc980029cfd453367e300ba5c6e39fcedf35b50f28711937e423b06b3d2614f7b650d124ed01d9abe4d973d26c560dab9f25f6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f20b44b0c0276f9a0bf361e881e77a42

          SHA1

          2bede9ea7ab6cc87869f753dad4d87e981825f63

          SHA256

          849236f04934322f233d414beb5ac0406273c47069ac20ddb060253e784f7077

          SHA512

          5ff66aad339184adf4c74430eb0f89f52c87ed15fdab2c33e44d0f5bd12170c8a76693ad1abf4ef1c037a1f5a4622d9ac181372ca46ebe6f1618a70ad6d42b30

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          002df6bdea0d7fb12de7e1c0edda2d60

          SHA1

          38ba95bbd605dfa882e6f7a73206f611819faa21

          SHA256

          6952fc59ef33edb1a8cb49e3270f7dc57e3196a06f846760ba6dc47f824792a9

          SHA512

          7339d423a937e9dfb0fc10fe66cd0e4ea39cce21cb7728e66566455fe684a89037b28bb542b5287c597a9c3516a714f52aec45a19296dd44aecf3f96adefcd5d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bdf9f84eb5ac4644a6abb91dfbad1943

          SHA1

          1be1e59619b99273840667c9626c9ff8372a96a0

          SHA256

          7a54a536f8e8e2527d4fe4e50e7abe2743da63c5de419fb79bb26b285de89858

          SHA512

          194b89fb9a4ea00a3110a948d4471b49d61dc1d3d00a46ced8838bce6ac6e31ff15025f7adda44e5961ce8d2a24d136d0b61f477e69f89918bdc9c87a2cec421

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ac6b97fe732fbba9204f334cfd436b7f

          SHA1

          9cf1be32acdd9417dbe75c33670c53fc314cb7f5

          SHA256

          e2125e9e9bec3495a07fc2a6fdcaba03474d4e711f241e6c6eb04c63676a8a42

          SHA512

          5e91a23fadb1be6ca8dced83bc7ca41e729614c26b65f73f99e3bacbc2af68761506a715a72782cbc22d88a48567f25c7fa6e60697537f72e76b65ca871aae8d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          48249fa222fe69366e456537d44226b1

          SHA1

          95341b88519d94222e04aa32392cafb640912a71

          SHA256

          0c21e53d06a468cf380569133117370f1a26c3ef5fd5eaa7e67dee92807af1ca

          SHA512

          57a2a342f6402a86451dbb7c12e5da92c4ab1a921f9a497311b14fa5dcca187d1d8d6bc1c6925d7668765bee6716a33f9c361e8072185da510328b8e4e66ea50

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cc0bb58641012fbc3dc7cde7dad96cc3

          SHA1

          201f5b81b6fc502a32b4e7b1b41c6818296afe03

          SHA256

          0f2271b73dee03918da04717a1ec650252d6bc7286ea5e67c3ff1af2ca6cefcd

          SHA512

          179fae20d4284d43d130fa0c2834e237c47e480e5ad35e1a9485c892623faf3d80f0b7388280ef4810b222e63a8ecabbe860b1089b61766d5db9c846d8d20c51

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c2303bb137ec399328faaa75a2af96c7

          SHA1

          463d0ba1d899447167bbf422ddbb2637f5dcb66f

          SHA256

          000ae64403ea285908f7d13b8baff9fee724c46fdd2f092f80eeb5f8b378ecfa

          SHA512

          419a4b040e02fbb1f4a64e0e63e0d4a10841a734bad70331819758ace0808d293bc725b663d8402937b3b3f8db098934eda9498a52c79484eab5ed0083c7acbe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c43dace371f1253db025bcd537d1a27d

          SHA1

          b9bc9972c7fbf1da5a64507f623ebdf34a2dda0a

          SHA256

          75891f52e5476b3fbd7352480f2c5d625f7bc13dbca6b1b4c8d1446c9d82658e

          SHA512

          72d25bef4401a37d8f8df2ce47e6d0d547e5b944b2495d112a1f347a10649117a2b268bbcf85aae68521ea7e6d23576c191d18211ca2813b7b2395f8cf865d12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c532b0e90b27db3ce492cc5dd438a556

          SHA1

          72ff4ff5dfc1fd40c9991299fe756a9d25c3d999

          SHA256

          59d8d96d36b9d617233d02e75524e5400fb9e36725858a87c9fa1abdd92c6bf8

          SHA512

          bd9ce0184ba533c586d2c08ff4c1c9b597c65fc4da11973750f1b3019c8025207ce17e4458705bd3fcce8eff6e502990f567296aed7b1a899e6d69a37ced2c48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc92a6327576338db8948411086b9132

          SHA1

          9973075bb7dde3c22815320699a8ad05b8c3f797

          SHA256

          0dae08093079629b73a738e3868093a96d244d6a540cf4772a9606b290925de2

          SHA512

          b5a688c763100393b4fefab633e4e900a90f274950447e690158540c7e765aa5c31d55cbeb7e82975e85555e9482415fde0efbdfec62e6930c4d44ff8f511092

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d4dcf2c15637c0dad3fd60e758a3ff8f

          SHA1

          4593167527781e8c8674482772bbd093fd610b36

          SHA256

          2289aae9ab81c148f9b283c3d859294410258cebcd406db27552f1aab3dcc115

          SHA512

          551f9ada17bf825b2fd90b84334c2858e289df875a079785ae6ddd7f9248ca11deff59227b46685c8d44c0aa07e64bed30b794e63bf7c3998e0a8394caa02233

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fc783bd3f5b85edd848b9156ae204f97

          SHA1

          56cf838fee94aeb562dade1d968b0678de61edaf

          SHA256

          900ca52dc4b231fbd08ac47344a549aa05d446c25e36da75d3b0299bd9402335

          SHA512

          ab84e76dc39a46a22bb1cf1d73187a090dcf6df19ba383fe759b6ac2b8d2a6e4afa5d3a1dfb9d92847c40bab0f2777ff4e74ea620bdcfe92d5c3948544131e36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          72f5e0a9e7ef8ece1079827fb7f5f498

          SHA1

          c3fcb90bbadbfd32e189c13173d0d95e57b548a6

          SHA256

          766489a5803953cced712b4be1e1c431ce2462c519b23a06079b4228a6dfabcd

          SHA512

          2e71079553090c581630e72772503914a931ad1126f08c9987364939ebbc21b140f1ffc3f00f09433b30004ae749a963a38b245ca31a6ef4335dd68894c9f059

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f59cb489aa393bde0be3d38a184d1bcb

          SHA1

          9f00e33ad2fddb2f2f8087fbef14e9aea1f25e6a

          SHA256

          d52906b52d4825159b7a8d1d887cb61dc52299eb8c06594b7ecb38a4ae13ee84

          SHA512

          ec0f4b6838ce0951b987741118b561511d9566fcc1997babdac86d661745c27fbac5a0f9e7c819cee2828eb45fa5d02b31e206b3a6f4ff85de476125a6544e27

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a2729b73ab4d12fec57578c065ceba36

          SHA1

          155f094bd8a1fcfb9f5154da76fc53580c784a55

          SHA256

          ff36f9dca782f6b1b0c68f17fc17a54a169b66f8d9f90c37a07ab03b0ba88709

          SHA512

          09d1db479f1584db442e1cc64780348a884604da0849567faee11cb221ae286086cd0e0a71bba69e6a5a846e20a13257646fbb9ecbb542785e4938c50d18d96b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f3c37b2049b92ef03087d9c746a6e2ad

          SHA1

          35b78d567d31bf252c76f5ba0f6ea99a711514e7

          SHA256

          8789b6f7b182b98cfd36f61a45593e2a11b1c6a593f9210f2ce080bac224392e

          SHA512

          57a620c142bfa9247a72616402aaa5f59996ab17ca872ca38a38971bcc68aaaa6794891cf19a8a4cab7798b5d087ea90aa63691b2549d65d46a90716f40e1164

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b5f5ddfee53582a68be8209e7e9e9f51

          SHA1

          b159fccd1a64791a7ac42af53af6cc4939f1d69d

          SHA256

          b5dc1163f7500b47b11397c8ee0e621f3af22b1e452de5fa86e0b56e48d23717

          SHA512

          a5288e4f84940ab7caf0236d780de8c662ddcb2bae1d6323327149eb2e7c048ac9e15f6c93fd8650c288ad707541ad63e957a3da448f3db227db2eb2b9723c9e

        • C:\Users\Admin\AppData\Local\Temp\Cab49AF.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar4A01.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a