Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 09:07

General

  • Target

    33d21d936cb9adc53356096824a98742_JaffaCakes118.html

  • Size

    4KB

  • MD5

    33d21d936cb9adc53356096824a98742

  • SHA1

    52ff8e1a8b772899ca097545b838ae3b6620dd8c

  • SHA256

    c5f701ebcea83a1348bd7b18755570883deac53d8c36414abb2d234375d96d32

  • SHA512

    82d7d4a24302b32909e71737ef17b32057876e714145904a78df0ef6df5da21f256a73dd2ba6ed4a4e1672cc98e4dad6c846000faa4b2ebf674cc62ba3a4a670

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oRgF6d:Pk7yY1aEFHVKtF37sNjtXATIQFM93pD0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\33d21d936cb9adc53356096824a98742_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2100
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2100 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          eca8ff51065c8c0abd5e328ab027b4c3

          SHA1

          912249295c593544af750336d67012b81c91eabb

          SHA256

          60e565a89fd8c7597a4158731fe4df2c7f69b1e2d044a4b0ad1dd93f0517d89a

          SHA512

          cab70e5111a9233bd01d09bf0efed587722d7a63602c78bf98a3832854a324a147fbe241d0ce07120a84754ae563d9ab5fec88d1ce7f09b1c57d686f91e5c327

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d625eb0677bf2612fde72c8ded5a66f4

          SHA1

          f3ba28d8f3cf7ac1f8c9a6d6ee31221bfa1a6865

          SHA256

          8fb2cae0c788bacdef20bec9e55c4fc4d6a17fee32494833d9aecfda04d52b0b

          SHA512

          609997c182def406620839eec7cebced48de8fbb0436a5a7ab7b4e62f86843290e7e74c954d6a783d52b1a081439a2ad5290de452160a8317813ffc4413a6ea8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          44dc7deba675ff517575aad4d2f3edb4

          SHA1

          815d1a852825a0ef89848ad40dab3b62d918bac5

          SHA256

          f72f1d2ccf11d8e34dde2c2559a0f2c0a71e3a524f0bdbcf72654d49c6b8fa51

          SHA512

          5320d93e04f5b5f5b18675fe91dd1cf3498413a7a1596c00f81d4085571b25d9f761b95594983d1040445c032ab0bb42c658937a073bcd0f95b19b6e5ab0ff93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          139400fc60a5da484198e697b8ea355f

          SHA1

          80d253d1ad7ffa631717f1a1a27910125796fb73

          SHA256

          48407dfda030e7b8e303c83aebea30c38e8ec63a271a8ce74d2b577b35795e75

          SHA512

          0bdf4b4de4403969bacd984e3c8e270922d85e1369b53068fd0a22966fb308ea84e2ede1c0588e10c85ccb586df81fc68fde292c08b9a55738c194315e74f580

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          97377624e9fdfa83153ca7a5b5182de5

          SHA1

          56d8175d7f8cef33862ee91530c704752cc29ac6

          SHA256

          96c074b0eda976027943f2d103ccfa0f3706caa121e43562d3484c81592f4796

          SHA512

          03f400fba99959de1dddadbaca3a34d782dd5a98af3f984c273e8231928bb5e28365143478be8c236adbc75e35e361e2b17766eec1d9e9ad721977d21ecd43f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5208707da3e5bb5eac37bf0b0895952f

          SHA1

          ace757a75172fab9bc53d6f61394ba53e656f3c4

          SHA256

          6f1661d7f0a852b084f480adf87638e18c4948272c26e241c5ed8df17055d25e

          SHA512

          bdbedaa35a97aba3e45fea99671dc1f82cf3c9bc57fc4a22ee70cce3d6e899470ae85849658dfef2a1f13d42c3c0969417e289a5754b8095a48581ca6002b871

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          54a0c8db37e1d43018b7d2b1a04cfd74

          SHA1

          f848d25a08a3a7e406d78f86bdcea98e005f69f8

          SHA256

          33a8d924f10906cbe9705ad98af8e203489eb978de311694c36187e40fe18174

          SHA512

          d02a78f16f988078603377688e2b68d16774cab1fc3fb8de42937f3ff3ec97a607a6945dc393a6ee74f21c9ae8ae3cbffb0a47a68161d272b24053c8cb9ad6d6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0f0fc02ccc542c1dd62499ed6286fa31

          SHA1

          8d7f11fd4da5312fef72a68d6d630c9a248f6290

          SHA256

          2798d238d83932286cfdf887f9b8b55ac34508deaa7b63e99ecf3e6d3f46d7b6

          SHA512

          c9faad9e18d5e3de82170a0e100a131a1dc09cb344102ad68a0a3de0dd8bc9eb4c69c4808ab4265911a07661a4f6094784477cf33681772263957db18ad8d84e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          170c323dd85a90aa2cec937040229f30

          SHA1

          63c10e5d6f5898b9388286d9bba9cb01ec98050e

          SHA256

          07b16c9a495664349f01bf05d8cde04f8ffb8e1567f0b35a4925cea74ca7b578

          SHA512

          5adeb56b6e0f255e7d8e325502ed44bc8d34531b0f8473f13e14c07a3e58968d39f1e19f19082788749458b91827c3da7ebc09a5c0e205326927fb86f58619f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          14a37eeed12cf5289f14946af98a2a1f

          SHA1

          b5846a577fbaee633d6f5f6ecb6321f7d11d3c8e

          SHA256

          8d7e30deefdf99309144e3de4c6b4b02ccac22a4ab3e9b8908c14bab0f3f636a

          SHA512

          178f8b082f0a4367b5beeb2c3260883652566d261d9c8ae5cbae6c0b0ad535afa86e84c199efd8a0c8696830315b4673e553ee664886a88f6af9902f444d0d34

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          70cce08115ee15e64dd683ea1d12749e

          SHA1

          6e6d51e1cb998748b5bc37ccace248c268405af5

          SHA256

          770562f69ca908e2c0d5744b2a1d3193f21be4a431f75e4bd4d7e2d64355c305

          SHA512

          b01b397a07f3c2f4e969a185510960f7cac6f0afd9acd4475662b3919566848bb5ad72a141d8291d710fc13c605f1da193ce89f6faafc9a3099c178928ea73ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          593f497db8504a8a20d9c3abc7a5a1e3

          SHA1

          e73f2ff873a2f156b03fc905c9c342b0b3177619

          SHA256

          aa957ee4add6e4986451d7c470347fbcfa0642a8494f0c0cb2aa787bf0eed4f7

          SHA512

          9449c8b3b710528e2a55e0322242ed4058ffe5605a354b673aae09e8c1ac32074d5951d7b2ce7685e33aa113c8347a210c4727222a72ddbaeb9a777a98a6c62b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          47cbe30e478021104f0dd41fafd10611

          SHA1

          d1feb78f4648901d20d938a041f4b573a2a966ac

          SHA256

          0a2d51381f4594e89e84fed7495c45c63a219535f74915a7e8b97db69bbe4897

          SHA512

          e487d70f1e295b28b8d8343392862d02a5f9b1f18ce680b27d1f85cd1f49a5facd9cc91bfb4df830ea287f9ebe241906c69ca0016e830913e9885eedcb95d610

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1f7aed4e12fb37b3e1c2d2871a9daffc

          SHA1

          afeb9c7896490ea96cdb2ef06321da12e042051f

          SHA256

          af9c77dc9b9fa6a59da3e4c8af7fff3fb77eda44dd8dc6882fe5a83aee011549

          SHA512

          a55c071f30ca7e42c79e9ccab06e12682a4b8554a3a019f490469da5b73702acfbe7190db42283142474c2c2cdd5d4719e4e8d0c005916530837867c5660d818

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3fbfdb56c4c639c90f60ef580b3cfb0d

          SHA1

          39a1dc13c7323a44ea540978e55b8f3f2716a791

          SHA256

          08310407d138fade9ee59f2a7769ecefb1e58885865c79c04e163a554573348e

          SHA512

          e3342d42e24ba5b5f29f0c82d742447840f58de34d7ef380526d4efa248d196243aac67436a3d57be95b713f043646191c6a98f5f111606928eb577315cff002

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6ea1106fc95a1aec13a4bb1c55b59a60

          SHA1

          27df97ec80f9397110904676eb67b79cb85a5ddb

          SHA256

          28aadf70515ca2a9e60bb6ca0ca20ffc05a1cdea7145596b0d9a72b6281502e9

          SHA512

          ce979ac31a35340e1f80be16fb3bcf001d8f47b162508e02fb1758776f8b8e8ca50b9a6d1868ff7d4563aac0e0ea7a979c99722157602bfc7f56fb5953c93ef3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          25df9d3e1da1288333fb3706d4785747

          SHA1

          617f0238caec3f2be0184643a6646c7ae5b252e4

          SHA256

          31663b60c7710bd3bffeb358c07d26faa8e26a83432349bcbcfe498b087c0fce

          SHA512

          7311150d71c4d0928e85a367c8b4c184fad3b860db1ba924f0e624323980004d908350aa6231751ccb64ccd4eb0718068157a57e7863a3950997c46fdef41970

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b8059d823110f88071c63a077039cea

          SHA1

          8fdbeac713491837879759d4165ccac49c8e07a6

          SHA256

          cae0da77a9aad98d39a6c5cd711a010c696b5befb28606c9dc9f03d5e6e0567a

          SHA512

          950059b3b5bfd071b0cc23432d5eec044f0ea671e1889ce4c715f183138db13625c6e81b1f7f11709e0cb83a8b5032db0b5763823741a9a13c807d0ee173c5e7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          18836626b6499bfb1f450ceb71819e37

          SHA1

          f324c4e78607ea2fa9325522a088f1c7c0789c6a

          SHA256

          f0f5b33e2bd352aa57905af86876410647f4cf709f9271be388122345cfced1c

          SHA512

          51e7413f58e719cde5ae291940877ea92db5285433a810f16c3b7b5c975ef9e1f99a083bef75062904392ff29fb13c0b1e40e34cbf833412274ba5baca5a14cc

        • C:\Users\Admin\AppData\Local\Temp\Cab1F08.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar1FEA.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a