Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 21:53

General

  • Target

    433683c2bad269afd9e4bc7fe1208853_JaffaCakes118.html

  • Size

    4KB

  • MD5

    433683c2bad269afd9e4bc7fe1208853

  • SHA1

    0d99ec5384283c4ba2b64d29a72c1b0bfa62cc65

  • SHA256

    650622aab3a9d05e181df0148c1fe9d4de726de831eb57888c1be0369be70147

  • SHA512

    c54ddf6fc649d808ba9ea3e5147e087b62f878608de9918fab15680863f9aff55e150e5d3c09ad3112e669464d09f892e59797c8fbb1d486bc307170b9852a11

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8o5Er/LBd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\433683c2bad269afd9e4bc7fe1208853_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3052

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a2fa6c2a0478d269f0cadffea1e094ff

          SHA1

          4bd769fb8c9e478b360a499ea27a55824b71793d

          SHA256

          673c930204b51aac3cf61f227e828d963dc86deba32787dd08bf3553ffafbab1

          SHA512

          78e9572cfe1e11953a02706578fd3242ec5cb5d544b8541d35d1cf104b140a09b9e8b9f4412e43eec6950301ab4eb180bb10aec9f766aba8c64bdefa0f9d15c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4559b278a6c2f9e47668029383531291

          SHA1

          9d89406abce187b94fa67d8679ec2f105fb68408

          SHA256

          783ba393f64e939180813e9571be1a52a47dd0d12302d69e0ff506fca0b1ca0b

          SHA512

          68e463192b1421cf4e12f462da935c1678a91a4730a555691b8495c36f93c1ace63393dc7b987853fa8146577feec976c2fc65275528dbaf2c4eb0f20a909421

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c354b19a332f4a7a19809b536068abc5

          SHA1

          fc6a7fba83107d0d05acbd7ef35cfd0c290728c4

          SHA256

          1e8cbe6a29622cfe7fe81989f84f5d129131d68439689ff1fe45a2f4b36d6c6b

          SHA512

          e2a89e979e4546c35f4991a0a460e4a880dc07f2fe5327b9de1864a5c54a3fcfe74f8631dd7b6c8d30b6452b671d507ae77a1c049d6e6990938e1b9fa62dcd55

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e71b656ea7a92e23a956af864c0b90bc

          SHA1

          a682c1a1c516d6c26d70ca155b127c31d33064ec

          SHA256

          d2da7f80b4e6efe1a1df254cb5d144f89bbe8fc77a568705ead177a841f4f063

          SHA512

          58e2f6829fe31ad7c55d412cbf4caa401186d37f9b4a14aa352e220f01c1fd772b7c0843c545f03e8d648f75ef46835728216b45020272faf9bede22ddf17ad9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bcefa7a16d790e696277b6469d153ea9

          SHA1

          8c6f65098b15c514fef224ab8ad1423ffb428cab

          SHA256

          507188ab6694624aad8278dbcbb3a44c1cc5effb2e2f5e6d3c342dc565f7632a

          SHA512

          537ed7f36b68f4e411539baba80a6156120e551800f8a67f2afe1c2d07abc98789da3c9e3fcee3d97b6bb1ec51d72cd42dfef0a5e39dae2a592446d8e0ef1996

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          889e3477ba5da1d1b5c1c4ad3050b942

          SHA1

          c5d5f88e80d782779bf56b03f29bdc897e510967

          SHA256

          a68f1f894bfe3fccbc90fffb4fcf52b366e360846e8440af38c09136116fd72c

          SHA512

          a2aa261af9b73414f6ffe1f8351092e65b8206b48965c451c246c035645877cf18c098ade42dc9eca0956432163eaa64e5853d9f622e1de594ad762472b0cee5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4257a31583d4c9d505e3d545b989ab86

          SHA1

          1ed130b64ff1b5829046b30f2b75e260c9717027

          SHA256

          c2b2c4d521f36ef683631fa8bb8d9aae4f724fdc2a7f1f5ab59127fa349b33fd

          SHA512

          52bbca8daa31bc24c8fa915eea436815214718e70622d21850351c2e53f5a67fe285745ccfd6062867e996acbe34b0ced4c8a51193dcae0e362c8601793eec24

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc92a4c8acf679feed0d29c336436722

          SHA1

          803399fbde2248cb003a846cbedc68f319998cf1

          SHA256

          adb6458321e924e27af75a5511fd2031658ac886e91f6f75495b03a2aa421964

          SHA512

          f095bd3db66f79cf72cba2638ba0c641acb4fadcd0cacbe70f542cb5ce25d711287f0565b464102e1e691aca514821a38acacff6a1d8f5b2394e3b702e78e8e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c6d29a65cdb09a4a096b56a1225ee103

          SHA1

          5ce97e176c32fede66f57ec6264b1f39ff7f7951

          SHA256

          8afbee0454c2d8f33b15ab7857dd0cbfa118fb1416ca1f6dbc29ac148bcfcd44

          SHA512

          3e11718bc2cf86d7590a99ae5bdb7e8f47f2ced7509f785514d0bfcd68c45005ecd068a0449cc325d0c19e73f5281cae12f1e5fdf78ecbaa1daf45867e533257

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ecb59e09c61faca87f915483eee8a7f3

          SHA1

          ba9fca00ec082815e61722fce5797f2b6bc3fb51

          SHA256

          a031d11e11d13afcdea60de1d9db933efd8f7412ce558dd958a8694faaeac779

          SHA512

          e378a82bb8b8a4641cd154f64dc35ab1eba0558453f657f4c275f62f9d7a4f9e17ed216e9d0e52524216fbbf1eeec05ce4e9ba319833b41e25d1b9eb62f2677a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8449c350dcba416cce0ddfafa3deb092

          SHA1

          1ff161de1e94dd41ec907b132a902d19f879c12c

          SHA256

          e6a8b2c3a63b1e59e8c6f61cccbe20783420aa4da23f36dc34a3f5cf8bb2482d

          SHA512

          6fbb3965ab3567eea8106804ce790d25781bba4784f2e142e1c3134ad9b2f50183bb066e5279b1dfbaf5056fd6132ffffdf701ba068cb374acb5a05a895e45ed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f60ff504d361014a3d2b337902c37ec3

          SHA1

          dabbc426d3b193b2697a0d4f198f236172282d53

          SHA256

          97df437d3cd10064cce8123b846ead7d9a7fc0de174fb3209a6b2ed75fd36f1b

          SHA512

          88be88e659d17b75ee192273c884b6da1a0997016c7e10130afc34cb381dae3f2982ec21df0ab2251157ddb968078a983201a650da58521f66ef33eaeadb711f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1466a7d2fcbbe1aff17724d4b2f65c31

          SHA1

          d8f9d183c94aefd90f74b39725d13a8d00d91163

          SHA256

          450d965def86ff60dbe1a6aea184af355f8050f3a06b8a4ec7fffd1300681c2c

          SHA512

          f816ab21bbedd5c746d9de39658385e387aafb2cfbf3cd31a765e462e65999caffc2d8e0b888476a59960e2f259a4bd4ee3c957322054b3ec9402192b757869e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          790ed630e5a531c22fed1259ce9072c7

          SHA1

          657de8c319ce9bef86e29cd1ec2bc068d198ab09

          SHA256

          12204ebcd8bd5c3fb2e1f620694d3c0f7ff0d13f20dcbc7d217b6a597a6d15a8

          SHA512

          eac318da9d916629a8f95dee52a40a8d6623007a40ba4d8a422319d0ace68760a63e967ae5ddb4599fe2b3baf6937ba9a544a7c98359bfa532cd3008300b7de1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          83805facb9ad40de9dadd63bc027bf96

          SHA1

          4e3e5d748878748aa6266e9f7b75df9209a243c5

          SHA256

          aff6ed406ef256639189dc565ca44cd5c986caff94265024f2f768ff15292513

          SHA512

          6795c0ab939dfd02aab0da4c0787fe3ec1edcf951fdf61c3d6d4f5fc738ed0ec8a8365ea352d828a5d57e0b03f7d483816daf27701dbb65ffeaa705dcc416e2d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bded3b8ebacd400af3248277f2cb56e2

          SHA1

          7ff72ad6b029d52a46a26d5ab250ef4e184b18e7

          SHA256

          c360e682e42a6bbf855a43803c53c7e1eec84196e7123891570522fbdab475d3

          SHA512

          3bf06a635c8031b9d712794bdebd315ae5c7937262a25a7a941c966080903c7799561db62303f51f36ebfa673795b3c2a3e04162c41a78e7e1dbe18058593b25

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          11b87230561c9d7f9cf9afcb4932aaf1

          SHA1

          ce337f10730c3def74636daec4b96498625cd0c5

          SHA256

          c70c213f4029b6b2f295c6f5a73b277e2e98ca9d6fcc92c36a768e9f02dfe49b

          SHA512

          175eed684ccfee4bf6777d5543d0e609996b427276963f08a78935d62684a7f61d4dc385426403cab7b579965f54b55c12a0a9d2684bee557134c928451805cb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d7933feee3a0e19624ed69b11d4afb0

          SHA1

          6e7f6a8d29ae18603b7a1d5db81f89b660269905

          SHA256

          6e6f6c5920c793fe590315c1ee8ae1e17d6a609288f5a249220493f9483d9f00

          SHA512

          42daf52e193b08fbd592f52df12f46cae9df1d758048f7fa3c50e6625a33fc60d1a231aec8af8a31df9e29923b7d34cbb6a6f590280795d9ddff1ee2cefb49ef

        • C:\Users\Admin\AppData\Local\Temp\Cab33EE.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar345F.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a