Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 05:54

General

  • Target

    3e1d197480dd112ddee52fefdb919316_JaffaCakes118.html

  • Size

    169KB

  • MD5

    3e1d197480dd112ddee52fefdb919316

  • SHA1

    1263c36cc02582811dc812e1bbcf922c0a86372a

  • SHA256

    c75d9bc954dcda1857a8571773c2c852f297ee78196b4a29c50c73b7bbed3046

  • SHA512

    cce7e039fc5d4ef4d8d8f1ed300b60aec708d0329a5160bffcb5d51b43af205e9f6edc4ed07e09f2c5b0487bec7a92329a27b23d2a94583c09870a8c6d12b68d

  • SSDEEP

    3072:HyfkMY+BES09JXAnyrZalI+Yf9NgY4+zv:SsMYod+X3oI+YVKY4+zv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e1d197480dd112ddee52fefdb919316_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3060

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2d90a3671c09685f3973ce379109c2c9

          SHA1

          78dcf9915fcf7a90d27cf15fcfe911396c86104c

          SHA256

          d0f9c5f5078fe54f70cfbf1f9e29ffb9d1dd88a26c7e81eb625df026360aada9

          SHA512

          5d8f371a74893666ad6792616e4ccd65296cee0c36909d2f457733f220257e1a6d7d734169634c0f89788ed8ff1a1ef659fb94a05b5a8d8d6f685fb70c5b7359

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9e55d88109911a9177063a29091ca622

          SHA1

          39e5b41d7acecb4a8a9cab678cda428f6dc9aff1

          SHA256

          f485d92081d940370781bbe4287de412ffeb69e0c14afd84e3f05b31f4cc461c

          SHA512

          9523765af24ff348dd809ff24e5494c1f625f8761131c8f015da1aea458ddf4b5e09a4c1acb527a55573748cbfa82afadfeff229b6813a21ef897d00a0db8e11

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a6a62e050f22e41f0ab0591a7feeb724

          SHA1

          5456ad4e3e0465b65a14a69d714cff5f98406a49

          SHA256

          2c37595a62388502edbd6d9da9604b6ecd7be4beb9caebcf89486b72c6bb0090

          SHA512

          134365c106ab0b316375c8209ef5e15e0e1dca99483f748e8d9799d118ea6c7ae3ae406b775e758bf2775f5a792275022150a2e8e72ababa83f5d9fadb3b49a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          19611441647149ce147c9e92058c9bdc

          SHA1

          02a2922d60e26554f9a95d6b29a8cb3957c84ad6

          SHA256

          b94337eb7e30350e3022b545a1e3e15319514485eb4a0089d7210b240a0ecfaa

          SHA512

          e449fab89a8841f811c2ba326aa5141fe97ccd4f9e25584e6fae3b6041ee1252714d284cbf98346b1307df8ebb61177b77f7e931faf1d503dd32b498021d511c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9eba65c0a089b9ad269e615d723d1b30

          SHA1

          dadea6f478f88098a4c27591008ff6ce50a64509

          SHA256

          70b92e076b12b175db1af88feb3594e544a17d03ef286b9b15a22f08da73fbcb

          SHA512

          98ec0a46d4094c1c0200ceb2f14dc664d0bde16347bf7a33fbaad51052c264322e7ebd65b3c9267e03a00e5ff31af1e0e58f1c9197bde80aeb959e5b96c8a52a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          095ad2d94d5f238cf5474ae38a9f8545

          SHA1

          7328c14de6f1c7bbbc54488d997e30d6e9bed012

          SHA256

          623de8061d454244aff305f566468453d4cf70bbbf6e1e4749929f8f35b24fe7

          SHA512

          86f41db876a6e43c00eea667fda5adb0ea3cb04e6308de95ad4592d9103a8fb9262c4b7df5c73ae937c8f9d40068c73cf4d049b76e771e51b449cc42e7cb328b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ba125b7ac72d1a68dadde2e3b01bbfc4

          SHA1

          25d038222e499c4bb0a3d3f98af748e5da280f57

          SHA256

          75a41ff242735d41c6d32055c96dadcef162f343c4514926826888cf0a8f7f88

          SHA512

          f593a547ecedce1e3a2e87f0c8f992c80c2fce867254a46bcf8ea9d399ceada124369f4b1ce5bd45887cb869d179487a441efc603e80dca5459832f0093ee10d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b8af4ed59de7ddebccdedabe84ee872a

          SHA1

          2819bd838855233a5d808f7badddd771f82ee9ab

          SHA256

          96481fe7765b6559547d3eaabeb119a929e5a155f3fd99a82b1de8adc2ba3627

          SHA512

          0e6764ad9c652ca3651f663cddfe3dad21ba26796a758f032cbbd1450e8862dd18b3dd0f7974b481081e02f71ac8e7cdf628ac8092de0f95d466123f868db164

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2f79c97ebc6ca470cba0aee41022fc29

          SHA1

          726abde853ab3348ad24b0f14ce9bd8e43d661ba

          SHA256

          805ae5469f2a1abd3e062a83c34d96fcc99b4beb9f29128fad2930921478f4f7

          SHA512

          67592608af1034b8cd76d26b7ac0783a8a44708afb4d7b581a080193de4dc4683cd4b01fbae206abb3a46e6bf8c25fd5319ba2c4bcb3ee060d3110c445ec2312

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          22bd3463677debaa49e9f5ad30c5aa08

          SHA1

          cadf147dd3e3b59d9fbc04e232d1af1ee9da5674

          SHA256

          c0675fa388e731a777fa13a1f3c9d63408897e9260c3800da1e16c7d302a25bc

          SHA512

          bff657de41dbc72977f00c271a7b9e60ecc3a52935c4327d0396676c64bc984539d012b5ea571127a75a08bd6a4c2318e0434900b2054a90297cc375f9232577

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          70117a91ddda34673147aae9beb52b65

          SHA1

          45196ff4cb2a36fdd0d11214d6cbeeecdcee5f3c

          SHA256

          3907b618413477ddf675e4e9822055647cc6c7e777566af0b476ce31459cc233

          SHA512

          0ed9778e3a7e0ef374fd9ff835bbe1fc4086c7cce6b7784f69ec4e2f60e2c889ec67cf58a94eaf044b15e2aef56a78f73566dfe40a462ec5a23df52bc47fa95a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c1de703b806926d6c92ad4a6e0d036a2

          SHA1

          69de605d0f2c7afebb2db4a457b3ccaf8796ad0a

          SHA256

          16fe44ea0012ebf5d77f8fef073fab262e83a8d8427e04c20df73ae170240b2f

          SHA512

          59eac22d6b700f9b5f14548f3e2af9579f80a2992579f5e41211de00c01acae1da68ab20d4e5f9db47792453da8aa9e7dda6fbc969be0b0e5c223ef554be6174

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7dbfdd750512b9ed74144e351b9d4d85

          SHA1

          c5d6f78831b13b6363678b60cf9c417ec847b056

          SHA256

          79a99422dbad9a938bd02cee9228dfab6e7fa87d1b745526579a577a0d01924a

          SHA512

          9a642c1a43381b2fb686965ca5ce792efdf05a7b47638ace79ad2da724c2bbc5e2cff5e5ea0d14405ed5c9d14daf3de70e5c66497f14b1219bdc439499eaa3f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e19d0538da01c6a2f6a17d4465817c2f

          SHA1

          138c643c76e12608671e7cd732758e99da6053ce

          SHA256

          ae64361fd2a01e8767834564d5e29b114f92b679eb2b8695d64c93d7571e8f46

          SHA512

          8b2fe43d8c29faeca853585b1c40330d382a504653e2006d45f8f3c641afc2848e830cfc61aff2317958e0109a53030e55ba33799f9b979deb0644f6e0bbabc9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bc9a7a342eb075673e0218421a19cf91

          SHA1

          1ef44b87e4ff601c91f249d06817d3d71a259dfb

          SHA256

          5e3a62b25fd14e54e89ce36a5ddde21e5f711415d7de034f79978152fa4e2631

          SHA512

          a9c74f1297c93fbf3a69843315419c5ac19119169d05f5485ecfb767c964b4350e280e9695a13d708c2c2e48d0775170541da6fb69ebcd0806bbe50987003e32

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          680b030374c15893d39642d37acf0052

          SHA1

          152959fbbfe0d184c49f1c00e8b141a4b932793d

          SHA256

          a20247be310a8c005beb573a6dae1f2c080d20b1000cf63c79ef4df578f162da

          SHA512

          2bdd42257b57e3c5f49a2e2723c1dac53c9d39208bbcadaf6bd3b538099ead4d432975e7c9c58b7a5a8537e250e94944b84861610e870c8b4b8448573b0b9a3e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8a00b86ced7143c76c1c727fe6e9a009

          SHA1

          5cfcdcd05aaef36d6f98a25b5ffc369617553ced

          SHA256

          1ec4eb000bbdd7700e2cdd01f74ecf883e3774f92c6455f61caba3d541d7c036

          SHA512

          789ff968d6af54942fbf648482e4205248515533a0524e22cd1534970938a666142cebec48f56398bf3ea7d3054f947d820f86d6e731c3ff179e9d9996cdc7f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee583789aa04481c76fe9f12829e3935

          SHA1

          41e877baa96cad3c0ec24de5f8fe3867c78b2a76

          SHA256

          34fb7e6ce0d7f33dc878cb4567388f1a641cbb08be86cc6535c37c544eed3279

          SHA512

          5ddc3cc6c40f6dcde210b8977652c6d46019adf6632f20da13b2a4e59f5cc388de125bcfd0059576d947ce62371b4b51dfe10989e50a462669169d3fa5ac991d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6f1ce8f9641f031c535358124627ddc1

          SHA1

          bca9455066e986815fe6c959067af3edb3824245

          SHA256

          98fe5c675994a36afc8e3c657cc70d4b6f238ac8b81c14a9187ff48563a86131

          SHA512

          88a834e46584e7542b1fd1b346d6d52dc4fa248d216c4b71c706f275fd805f55c072dc56d121aa56ef651dd0136529e1ec2a4810a9428075fa30c32555ba63a6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          50ce04bfc6a615816818c91be01fab60

          SHA1

          d4146446872544ec95e598fb680f8f1c5a7d3abc

          SHA256

          996a9d6d7c256931aa6a77a0b72d0bbaba019d1cf15bbc8c293219af1d7ad296

          SHA512

          c47d363362554dd347c246b15a488dc87c4db0f18ef49e92311b54e130709c3f9e48969dbdd99ed71852f117037eb4e7ed46d03c0051c5e1bb373a1827924de0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3b8127861034a08a34de7c8f9f73a7b2

          SHA1

          57416ea8dbd40a39baa850b6ae5ac27f1df3cff4

          SHA256

          76bb51ac4eb7d1a80cd884c52c76ef5cfd85dfc7c508e41d6f7d264f65da35a4

          SHA512

          14977829b1229138947a09c97b244cbec82c9e45b2554e2add59455d362d27c64f329b23925b2c913961e38fcd643119308e6eda794c7c274c46ca359ff019ff

        • C:\Users\Admin\AppData\Local\Temp\Cab22C0.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2311.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a