Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 02:46

General

  • Target

    3d9ce90a65b36ddd1e7e1d44a851999a_JaffaCakes118.html

  • Size

    30KB

  • MD5

    3d9ce90a65b36ddd1e7e1d44a851999a

  • SHA1

    790c18deae929f0dfedf3f2d09b983d40a31ae50

  • SHA256

    246409d3cd10a52b7e8d76a5156a468e5a72ba1f3b74a660a08dd71fd22814d5

  • SHA512

    d1c504f37dc31646a9146ecd5a25c6b5836bbd68cda8e60b56709f482296f0916da4630c914c3c1594afb37cee53b01156365cbb3ef7c8d32fd4ae2382d78f68

  • SSDEEP

    768:QpUcMB7+wI/mWXFRNG5EyvHaCoxon7Y58T4:QpU/StR1KEyvVoxKF4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3d9ce90a65b36ddd1e7e1d44a851999a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1484
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1484 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2648

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f6ee9cea4c3986c225b64aaef9253610

          SHA1

          ad7dddf2a8036ed1888a3bdcd6f4aca6d79718b3

          SHA256

          16598b833ca63faec4d26bfe412e9975c368ee4eaef197c869b78a10270fd7a9

          SHA512

          d988e2b72d0c0ebbab778b839ed435dd92021cb615da2e90b70a98374b00bc2f9a528f50be7ae2129843f420cf5ae72629afe66783c541d77b2d45e09ae96910

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          28760c75a72bef36fa2baa444e73f643

          SHA1

          ad3756dba0d9065a0b303406386289369d51bf58

          SHA256

          77b3f779bbcee1f0a7d276197fe22b673a2f42dd7345f168fe8bdb962e3e67dd

          SHA512

          c35944dab1c0b9780b909d4d245b4aa625f1a4f46da434ac549b2a612d107736c4cf785c491b82b096124d371d4ca41eae53835c2869a07b5593d735628efbff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ab0d0b422d5a7f6be418153de308189b

          SHA1

          64e52ffc37622cad264bfaf47f71b9eb5ade926b

          SHA256

          2a91bdf7bfb64ed1c2c7cd6de46dbbb8de46af66b7d5380d79f280d21fc7d00a

          SHA512

          cd93e94c9590ba4bf0bf526abe213c80c04d924a5fdd4a1945db0fbee282027b3d7e1277af35465929513ca54bccb39d45d674f0d9890aaf94d50f1d83476629

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fc395af3df5a949799c197bddf1810d0

          SHA1

          66fcc1aed89a4bc6366d1999a77b8f914ecbe1ff

          SHA256

          06e1302d9a43bc7fe68019b02e6e8dc40d1d21d731e1aa3eb86f4d3cabfa7a4e

          SHA512

          62a2ba117dc27c4d07262a35afb1a855db36ca722d3cd6a33ddbe416a18e0ec7dd1d079a3aba2b295c73d37c4aaaab53a72c9f517fea5f5e2271a4280d631cde

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f62b5d518faa523e7e30f675bdd59245

          SHA1

          55447a64a9005bca85fdc620126fedc00f667990

          SHA256

          ff733faf643d52797b13231874bb9e4b74f22fb8cec80ba3e42ae0b1a1cd3f0c

          SHA512

          aa5566a95c599613c424bbb08ae9d20ee7fc69046e0e1d862bfa73d6e6c92442682fbccccaf80a9f28163e20fe5d20390db6905323055f12b4c33dd112769c89

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c17e8fe13ae8c4d3013e6e7d80579562

          SHA1

          268516554d6414a9254ae782357e9b5029466b34

          SHA256

          1cda94035255cebbb6ad59cfa9e65024e62911873ed0ea0d4624632121881ad4

          SHA512

          87292051acb397a0bafcc4a53896c58192c3b4a7b44ec309cb685993b2870aade2504f4b81f8d9a99088af27ada1d2ca2099e473659e97f919734d1a5bbd28a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          be7d78900379a9f5987342a1602c6032

          SHA1

          b11c3a506ba742e16f70d2c711738574f854742b

          SHA256

          1599ae7083c044f1033ad7159b9b6a8fc51d3b3e699c02dabeff88d4b3356635

          SHA512

          d8ed9144114760af88aa972220a08f1dff638339ae7847ec97706058fcb6206217145973575ad289899cdd933d18973db98346159f531735eb2f456a4609a197

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          924781d83724bc0828368fb5c9b9266f

          SHA1

          727674d3053a83df0397bde3fcc8cb9325cfd723

          SHA256

          f7d04b5cc3d1e8fb4bd339b938718af2fc210a71421fee5ac003e7512ba1113f

          SHA512

          2a36a55e2ee3df2b2376664f1439a4d882828df2c5c41ebbf06131c48673f6b6f898db014cc78d5cc5cda0ea39877e69ce049c184607a33fe2ea008f65f15cc7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d34cbb9002751b548c40a0d5aebd923f

          SHA1

          2e6b7c6cef689361dea134400a3bfe7a62dc144e

          SHA256

          3e5052d4e5aad1efaf44ef2cdc9a21e41bc6385ac62796524d4f5467d235ada8

          SHA512

          a293a6c5f8d11d984da6f4d9d1e49340703865c6526017caf276b94f048da98a4d6143a90114dc9523a03c954722c7e746c0ea4e2a38b27c028a6a59779c1bdc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4b8bd2a8a7e44438079726ff675e0dac

          SHA1

          88b8a42066be3c633a58539a54cada654c3820e3

          SHA256

          b175e45de5660c2af4e120446ce1b1dc832be6c4803d3981041dbd2996886073

          SHA512

          84fb11fa1a247803cf1d14fcb561db0c28caed2c55a68deaf90baf6fc1564824945add80c7f193f6d8c10367ac6f62a09ed69943cbf00b8e634115cb0b7cbe8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6429d26ff03f7a10cdebbf7fa176fed1

          SHA1

          d750013ee30dc86a02d26b793b531207a91c928a

          SHA256

          556282f3029943fb9c5965be332a706ef4cc2b8240ff6d27a1b3655447a1aaf3

          SHA512

          c618a78088b8671b55ae10123b9be2a97c64bec8b7ef3f8786e3b184c24219d5f4d910a43a1a8cb52ef5d735dc8134d8c3b4526d4574a05fa7a8c9ac07adf103

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3fe8896152789462ada52959ac682b95

          SHA1

          4c192cd7828dc170220349d874741fd485ab2f25

          SHA256

          29d062bf8d34aa2f11c021ebc09654044b2b5fd608f9b084ddce24c730c2cd66

          SHA512

          2649ebbe0aae32af2db0a7f1e06629746b23fd2f184be1efd47834252b017ed7ee0e6569e95dfe0231a167b586691ee2d05c1997922ee22744d4f8c05363afd0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d0d210b5d0095518234dfd829dea7d8

          SHA1

          9a1d09bf7261043bddc30a1ebf21a766adb447d8

          SHA256

          c5ac8586186d10cec522f27df207fa3e70cd14b1d82ad05f3dccc9ec66241869

          SHA512

          1393ec6e2f63d9f9622dbd867b1a017e01672c97cd82de09fd39c7811df02a4a9237885071ec6822ea77dca072240b81d191f242dc3e109037fe70026164c088

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca4fee866e1a07164d7cf4d1793af8e3

          SHA1

          45237f45b92699036dc371f7af82ee8c3b22740a

          SHA256

          66af0a36d03a4acfaf83c2bc6a25836e7de67ffbabef9af06572328f1016efc0

          SHA512

          82a650e86b5905d9803842d2e46afebdf90f3ace42f5f83486ec1a61f947f81400557dabcc36041d267a1cd404b286244a684d7efb8138a523e95016eebbbeb8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cee68d7ece396397bc1f79127bb37aa9

          SHA1

          501b6c79ab1ece212a351bfd2917348d35e4c138

          SHA256

          5096104411b43e220976c0bee63ddd59cea5a8387728ac8b3d3cd8c71ff1eeb8

          SHA512

          cf85b51493a182bfeb63390da2ecf51d8914fea781a06f49af8cdb332ed51b7609afa6d805f0781e4119d0ed870e8aa0697ede1cc1678824364f5c8276448f47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          72e8bd63658db8fa373d682d56f5369f

          SHA1

          3643135517bc8e5f252184aec117638119a0501a

          SHA256

          902a2eb20c01202317c8119ec61aa5f2177d0ca6b8682c718c219274fbd891c5

          SHA512

          6016f474527a7d0de4ec78bbddaa271eb455a79d64a8dfdfa28443d7061e59290b09ab85367b174e794660eb4f3f1472ad2cacb87dc3749eedb00894923df46f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0901f645e3432b0bad1e17a8aed992e6

          SHA1

          05d3c803ec70ecb6da7c7cec56e7c6b8bbbc30ed

          SHA256

          9d9e9de5c03c9b99c1f5e4d81cbf2060794d5c51d37bad087feb6ffb6ca04c82

          SHA512

          caffad0a17bab4efe5f73b21800990561ae12da06fb2d438804edb4963532cc077b4087b55e0e50dd37b68565d1b337bcd53414c2ac28316cdef2b578376e778

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec017476b57b6ca430c0aa2e47ac07dd

          SHA1

          8442cd236c4f9f2cb63cc4a348c611a780cb97eb

          SHA256

          419fa3401fd453e95638fe1960d759cff1c4f166801de9a9c60f247e269d4a09

          SHA512

          8a63edd03346f004d1c8334cce257067f1d749ca7000038ee6eaccdcdbe5175e77e80ab8c547a051108540dcbd785deafe19c1c78c85c89ba6101e9d72ec8252

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e33269b4ec8d34ff37f5e7d94ab3de5b

          SHA1

          dcbea8b23222762b5fcc5e461124cb489cc130e1

          SHA256

          2bcb8447ccf2f2efd1dd9d926a1bae56f32546bcc273b2c6928dfb65ff7f82b4

          SHA512

          7c52947536252747ac2e2255ed89b6d099a26fe5ff460925f76447c1c1dd5d7428eca259c22a8106aae16abc7c36a0f0a343c0b0068e213c40184c30cfa91448

        • C:\Users\Admin\AppData\Local\Temp\Cab396B.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar39CC.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a