Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 10:52

General

  • Target

    3f20bd8389261fb04e08cdd80e7596dc_JaffaCakes118.html

  • Size

    25KB

  • MD5

    3f20bd8389261fb04e08cdd80e7596dc

  • SHA1

    6000132697763d3d779beb93f3ece6091574e119

  • SHA256

    347653562b25d793b18d9071b997b8fd0171593c96871468ea11a8b0f82dd1b7

  • SHA512

    b8fa13a510144ea78519ba7009e4ee6421a5134148d05abfc7c39e12f5766d6ced129de3293dd26c55c25f55906167410da839b72fee5edc42cc3f32a92725de

  • SSDEEP

    192:N0dozZ2b5n2nQjLntQ/6nQieIndnQOkrnt8znQTbnAnQLMC7A4pdEkwuXMAnFnQP:SdolSQ/MKVBG

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f20bd8389261fb04e08cdd80e7596dc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2904

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ba5de859973eaf3beffae881e73c744e

          SHA1

          62fb1baff5ec6592261aa29227163b5d8c1b4b77

          SHA256

          7cd4a52eb41ecbf0039830d0ba643fe105b4963c7deac2bc5ef9c794142fb3b8

          SHA512

          f555718bf0a1c724daf6bd45486197f97155741e971c358116a2b0bf8f62fa65cf9996d0a18c53a61de7ea4a17a1e2b06bd1e26263162faf554e0efe220122d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a87703452e8524677037f6d8ad01c7ff

          SHA1

          44cfcc78074873289728335e8f82f8440877f73e

          SHA256

          4641781e4aeeb81af079f324d1cddd6791aebb9f1642fbd75af53ad8920ff8e7

          SHA512

          6becad232d3f59938e2aebb390ab110c045962851ae83b42d0d53a4ceae3cf8c77828d384cc2f738b82f7180d7de3dd5834d5636b345921f4d81a51d66b98448

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          061a736b3868f724edce0b314e60e000

          SHA1

          74544edda6987a3f64a1731352c4cf0208ff5f71

          SHA256

          1dcbef6d33ce12b13500205c125ababbcb35435096b1516e807bbe7101849648

          SHA512

          ccd5df81dcd66ecfaa577caba98501562256b2af29ac9be65e9a926be7d2394dc639e3168dfc87e14655631ca18b005f19e82ca705afe021db69fec57fcf5299

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f6d2889144fd2ca3342e819baa96fa1b

          SHA1

          7dc99b525f6954431cee9abeeb910893163e9559

          SHA256

          9aaaa19423efb0f15772f20e993ef576c46f4e7dbc8f3b15bbdc2f121d17d1e0

          SHA512

          84031737bb97c0aaa623be27fb30d4c906a6c72a7706f25d31ee731218462a6073967e9f283482438a68d04140cedfa87ea8d6b0ae1fa5bea49b6cb0c36e4f56

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          deee91c277aab19714dce0d502fa291e

          SHA1

          778a18578188e8ae434af3c507a160335cda732a

          SHA256

          e16407c838979af9509d7859a2bc821f6395f02f608e0c5b578320f5af0c9562

          SHA512

          5f696172c7aae27b9f093f68a88621a592fea9ebfa82dc2b9c8445ffcce4793abe0bd3e274d2d15fcdf8211aa33d3e32a0de1dbef2339ff30a108c8c475e2c4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b0b05366b598fecd8261fbab296e1650

          SHA1

          c4913068f6d8cbc94ac352fc393290646ad4118d

          SHA256

          bdf25e70c1cca382b311f31bdb4442f0df845abdadc48786b739dddc1e152717

          SHA512

          9be1b28fae6426e867daeb118b54c606fc71da5ca88d621d88efe6ca319370e6155cbdfb9f7ca71622160c64e6289cd7d1e5a438e22e862488f3309f3750dcb4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ce9d5f5c64d75da493c5b2f174f1217c

          SHA1

          75aed577bf695ab62e1e89122865706a349f0127

          SHA256

          0be143a01acd230de19f53e7ef73de93f99f6b8f2f49c3dc3f10476c7c8a256a

          SHA512

          126cdd175047ec519783c4b203df91a15c7bb2d31b2e18ea2459c0d3ecc136e8d0476d592417aee18a11f407f5d9e14a6b1208ee6bc068d08cf66aeee68b04a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee96eb6dad81fc114721bda18044b996

          SHA1

          4c576008ee2bfd10515f3aa27ac3f5224069a8dc

          SHA256

          9511b7e3dd08461ee3626db9545a88b15f57cd8f10f3830ada29d961a2b4b650

          SHA512

          d9f1f18d096b80dbc74487ef7cfe97b3ed2062edc12d98754d46a9182ff404a7a63d55fa25787c2768ae3c76d9d448d32eefbd0edc6430f53b84ae94f7f2751f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a3e3cf109d331f662df6bac0cf43736c

          SHA1

          2f27aca3b75d44111e9ef7e24639f6d13a411fa5

          SHA256

          a0403a6409c952d5d4eb0b89ce4e941a0bee942d85d248b15ddb08fa681667a1

          SHA512

          d8a2c4a7f4985717a0a2e32516620fea5c308f9ff0bac639d82e7c71c03a53b3c89b193a73d8eb0dda24c52e67d58508065d031c911edc5ec10936c6a89e2e41

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          22cfc6e192c8c71266878a2dcdc53583

          SHA1

          0ab0637378195c02246f4b99facc3e3dd80f34ac

          SHA256

          7f98f433ed6788423fa841d4a6d4c8d32898e315e4d8dd0ad02af1ed13e8bde3

          SHA512

          4382438ad22f11f7e52a2c5737178fd9e0d6e1c8737e0cc4f86bc3ecadb106eb193c9fb98fb9acf3c8194e64c7d7a6b8f2e45445e868a88c0897c865df347d7c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58acd15fb6b76e1605a64c365868fb6f

          SHA1

          4d6949fde2ebb05639deff020916161f4f5198e8

          SHA256

          d0ec0ee89fcc756256f7ae66f34187a3f4d56e78ea0a389c58630a137743d1ad

          SHA512

          1fd960b4dedc4cefb6a3bee3cfa63c1e5b1474922bf29123ac2ae5831613f47dcfdce41d6bddf0bb23a94a1a9e6af543c66740f3ddf2d91ed9a576e8066735d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          94d81c3bb06edb2c87238f0168c512f6

          SHA1

          e1de0b2c846647021ce50e9847f08805770b5d4f

          SHA256

          66bb48df47b367da8d99633ab23cbeecb34d139e41593f60760bd3b46f0fc1a0

          SHA512

          06d90cc578f00819d983871cdac87dbb99843d273aa5875a4008769350cd7b16b56844e9610d296bb0fe37fbe2e4eecc83684f3da04f2366661c321719cc3ab3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c0f993f726928c1a4138dab1bf6465c0

          SHA1

          19863316e8aeb1ef09311c63a4fee747c35b55bf

          SHA256

          d29c3267a7c7ad7bbcf51ef5ba5deae46123c4f10a4746b0515d90017309f87e

          SHA512

          bf611fcad94e41faa86170d7fef31bc68dfc033c34c8105771e3f1f359830bac1fc0c465e2fb58a08c7c51f4d5e60ae461ad6fec6684c23cdd35159c67e9d14d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71c211f4bd53e77bf900352753b547dc

          SHA1

          ffec504674929f55f268d89fa14e9a9d815f604a

          SHA256

          bc29db4e829812035998490e02d17c6b5d4fee5b1fbc7a14d857fe78d4c6ff20

          SHA512

          be05c1870f39bc1e3237ff512802801419f5ebad0c906863bfdb5c3f20e27b5cac36ba42d4b47fc9cd8ef67dd3b431db7af04815f386727aacdb767646f99ea7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2bb4e213cd8265262429b687301df071

          SHA1

          844d5d7ca9f596a125a45a75df6225e7e1d9e698

          SHA256

          cf6d6ec1f08fbe3356b20fd8fe7990f19cda62d3629dec8ee8027af0935b2857

          SHA512

          9db73b83f8faa8dafbef36591e693197a920f80e7ab4501aaee2752beedfd8c6a336d868a6e771897aa7f14ebef65324fdab99e0ac3c704403c1cdab3c30fc82

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          25346e5b537b3e4da12ab1de27c423d2

          SHA1

          436f80e622a4df737c7e5c444076ca4626675bbf

          SHA256

          7d274d47ec27d8169373555cc31479e9ef86c5f3a5b1ece1c644d9c75a51a331

          SHA512

          259d9fffb4772b9de0661102c2370389da4b180ad7a540aee0c94504fef3959be688df46c30b0e013a7eb49321c3b77ae5f8c14e6bd435cb3fb8ffd088fc1a1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc83d2f7adf5a117291e481ac4ac1ae3

          SHA1

          a9e3a9f5236f728ebc0dc85c75f26435f833bf7f

          SHA256

          972fb2207ba2ebb35289f27f053e12a494956633a766045d4fea8fdfd21e5fdd

          SHA512

          a00243e9d2c62560940d9361d7fc135f541a31fb5837de1748e8995005ae3ea7816e31fa11cdb406a3eb5c8911ee3ada57407118d788b08fa9e0062e44b2c0eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9bc9001b41af5a0678a3d890859b25ee

          SHA1

          a8329c4cd8b00418046f8d582fe38e2719415a24

          SHA256

          bda2e176d0d1b5ab3a6d294d0ceacd8e724e4dbf0f806b158b29540902861cb6

          SHA512

          884626ba46520ed46b15be819e928de2efc5f8be7c069a621d3cc2ca2c303ba38decba72045c501a5594cbaef4f4993c9f6eb92a4ea75dcaa8e82758ed0555cf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4f574f72a9bf50d00f547e68b22aa6ab

          SHA1

          c783c717a23ea192f086da3fc18d03855805b07f

          SHA256

          e11a7e8c14c3abbb10eebc47eb7989265b8b40b1775848583ecd28152610db2d

          SHA512

          ba2934e5f91d20d71194501c504d5e247fb873220c853e4f2e4229b9ca05d158fe880d9c6b9bd51b0875c269723184954d2fa3dd471a14713974181e5763a22b

        • C:\Users\Admin\AppData\Local\Temp\Cab1660.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar1742.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a