Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 09:47

General

  • Target

    410ef45ee1e4c005f44e02d415e9942f_JaffaCakes118.html

  • Size

    31KB

  • MD5

    410ef45ee1e4c005f44e02d415e9942f

  • SHA1

    4c47324d2ccf523b1557bea6f2f5331208ef78dc

  • SHA256

    aedaf9a0e3a3c7bbc240f65918a995a2c06c477f009c4aafc186e299ef4c0086

  • SHA512

    1bbce8a3737f95b783f741d5c21acb03de3280f49ef8b474e530880fffdd82853cca2be7443c9788717f9171f22d913b8bbdf53f0d2589b91630b5bbd8158462

  • SSDEEP

    768:EUUb+T8yZ7AuEuC+kiuUzVXWei99qQ4NCPGui0ZFJ6fWnvZk/MbaL:EUu+T8yZ7AuEuC+kRUzVXWei99qQ4NCM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\410ef45ee1e4c005f44e02d415e9942f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2452
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2452 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbfe79a34301d797b8366d1153792e24

    SHA1

    83fe15d394ad4729a48d698983ee783b316ac1a1

    SHA256

    ad63546e0432896ba5bd66d7bdfe9d8e5daf2adde3325b75db42a87cdd57369e

    SHA512

    06f534b7f7c291d5c18837f8373841d9c6d9d644eb30e5af6a15cb9033127b38ac80dc3122635c2ef164e2904522f7024261ca7c70fd5c24c6855091e9480d81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbb0c0f9730a81e7da34085e062fed7d

    SHA1

    e6e594d7311c61e07e62d9c24957e72b9ca867e2

    SHA256

    de6790da2b757b3fa0494f944f30598685019f3b70439dc6e5c4c0dec7f4c25e

    SHA512

    a24d04fb883e8ed54437e44f177000b218f60b389bf27aedcedf02690cd28b71ce294ca5f2bf6474f24b3487e87413d535220c539a2455aba52cfe0d7af4737a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea93ce699cdd47996e32b09ed53f61e1

    SHA1

    bb0a7d04a326aab23e70e58e9b3120897c40cf1a

    SHA256

    04238c7fede1752b734ca22d4da3e5835eec7c1062308770fb4cda7eeadc4e3c

    SHA512

    5a37b179a84054f564a1f8c6c6087311a96e6ec75b102e4c298eb02f162d696eee11c0922184fd44f666e18c343aeb7f3712bc3e9a38b4e8edbf32f8c769a494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e80cc46b4b9c8f7bbe4ca70dc6ff6445

    SHA1

    637ef458cd2b4b4e9a01cd72aeef398abfb8f359

    SHA256

    de0dccc537fba6201c83a3995a915ac45eb51c7792f1ce000067381ebeddcb3f

    SHA512

    340e4634b17b54412bbf06a014e21414721fb6a95342309ae5e383e1ff2fe4ed19e85423c022e3d03b05ef9c0a148327b6f61da2b581f4af2085f44ab8e8e0f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    167278de53802d40b989336f55383d74

    SHA1

    a852b439c789aa1d7a98a91b40bea8e803e4204c

    SHA256

    41d9d378e153f932e8ce3f6a5ee867e294a2932802836c99e75795cb04867ebc

    SHA512

    7cacf752e0351e4b417c439f2cbb83b976a1ddac7ba8c27726149e43747b95f39a223e175b1f74391e41b8c13ff0e6adaac87ec189689404e0cc0c9920efaa6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7441585b42a775164e6a4d37325a94ec

    SHA1

    d3f5e682aa9733fcc65b86333dd8ab101a39a7ba

    SHA256

    ff33d96e19ddc784f64e203cbfa7492bb47127f0d7bd16304c74d55c74835300

    SHA512

    97e4eeb954adff28ba9248b97a20551972c34e73a99108e4e14550996f7c70acc832097af6221b540dcf572e0c434440a9a80a660a4be4b9fedce4f09efb8037

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34f87868cae399bdceb37a7d9566017d

    SHA1

    74ec1293f396670c35ae8aa8b60a2938ca7ad16d

    SHA256

    096e4ff2aff701d4076db85f6bb3b3acf3d3652c44fb3761625bb47e031d5b8f

    SHA512

    6eeb10ce0af62a9bd73f8525fa175ed26f6616863538fdd55b7926ba7c15b83a15fa71707d4e30573089c54d5062a78e649f950df0a86e1564e0e78baafbc815

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fcb0dffd11613476f1ab9f922ccdbed

    SHA1

    11ae9d936dd12f3ee9f97dc4424405ee3d7da528

    SHA256

    821e28be33c18fe083678d69b842ced486b4d6e9f3935c00228215b46ac35a6d

    SHA512

    349d73874833356f2ab8ad42d30cebf01d708230c4dc5f67593f66411583ac57ede36a7b5bd54d47c4bea2bb970a96d57fc9f8c0ef2c0228edcd6846552b462b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a31c39d972e0572628322fff337e6356

    SHA1

    a6756feb281de318ddf3100fad16431dbf062784

    SHA256

    abc2d7d94f7b4f098646be159d64f4c5e466949d3fae4c3ae134bdadfdde36ef

    SHA512

    a11bca2aa06282dc183f9eb38e38884a7b9215b924de530e56e2ad47eb0677cc622191fa592955284619faafa128daacb76c707769e28a0ee76fc2af0bb67ddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc8880e516027bfe65e2ff61bc05af5d

    SHA1

    f915325f7d7c3a5ba95b737fee723f0e5ede5934

    SHA256

    a13d713e14bf689c7bf39c907289ffde68e4e101a2f74d181fc91467a1c7e45c

    SHA512

    2254e70f74353e3731025a1dc135779c983fe3681587230e7b2fff666971e80d31a5c3ee02f5106ea2aa8303b7095d47e7aa99bc01eca8ad0bb7f070793d27ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6088b92e358de40b8d254f7dc954357d

    SHA1

    6209e21588c5aa76d3b3d7dc8817d3d0584c1278

    SHA256

    508535373bab62205ce8945fddf0136f793c79c993d57b9d3704de19f27cf33b

    SHA512

    e8f387ea169744c8afe2fdf2329f4147bd1a9f11ead4ab4c4a347217fbc70152729144def3ae93913b00990fe77cd056230af3b3eaab006ff097228188ccb367

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29c44bba72642761130fa55388975dc1

    SHA1

    ed8f74d77ff1c7bcad1e8966ef1624750aaeab9c

    SHA256

    3fe18dc2fcd4a7c2d0dc201a51e0daa2c3565c61060d2b0884c5d6269b1cc4ae

    SHA512

    ce91adbf8bf9c6842d0959778b0ccc2d5861f65185d4907c685ba21816c1ff2fcddc8bb87210551635b39b6a81a96fd0dc814effa0baa9312938b7363f179c57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7ac3472509fe9837971f9da0c15d097

    SHA1

    fbc4c2016cd46723a62d407b7f443846114d1d5b

    SHA256

    c18e966205d067f1ac445f7a239bf39ebd6e460c709eca4d9334bd74fc13d1bc

    SHA512

    5d1f96b0566e96da8a42ffee8fb445d558469a5b7e17fe435c9f4b2790b3bc80eb24160f556e75fe7e55abdcba874b90e429b6ba8a9b2f13ee38184c65d32f5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ca70aacaa7697ba6b345f84e9789740

    SHA1

    10a154f5f1454a210bc22f6e8e42b82eaa6b3c9b

    SHA256

    e54625d3686b0dc2bceef4264e5c01077be476a445659f528a8c4bb10a08cf72

    SHA512

    2fa2bb0ae8df220d72564dbee8fa4c978f0b877c6fe5609780e1c1d2d78a874a8f2e39d102ab7f2d041f5e478f9e0ca4b6118307fa2e6ea2ac9fe974f22195fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b1014379ab23b2b1d62318d410f03ed

    SHA1

    ab85becefb8f478c92d858cc02a6c57fd561c7c3

    SHA256

    fae43543325f81dec830746b05420eea23c0923bc48fefd875eee3157393a17e

    SHA512

    ba97bfce3e51508d9e564f510dc68285942e44c351cbda831116c1eb3afe5484d91d8364286ae3529682550fbf8b3576a961c51bd08fa5fc89c33e6ead2e251c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c49996aa1c8d5c641195d94512f2e14

    SHA1

    bcf3b7c415db854b85262bb23fd1222b2bbd0886

    SHA256

    c51f0969666961920e7ae1153edf471272863e86fc518e23073e62df7d6c3a6b

    SHA512

    f9c8a00113d5fb20cd836a93b1a7a179ba95aa977cc49d92e2fcac8591b47f291c7be512686ca586ccf4ecc3b43f30db24d9c10a72fe9db7fdae32004699eb35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0ef56d99a6108ec971780d5ab0854a9

    SHA1

    d2b316863f862e91449962c60dab3b636803bec6

    SHA256

    67e82cafe58dfdc983d08b54a8f022510edae7dc549c46c68f6a90b9d6669284

    SHA512

    fcc2b5a1ce179e6261447dbefa3d61a724a62c07f912049e7a7f769671ded40fb04811618924e43eab2d43c2ec2e88741e4a485a977277f4e203e5a47a887a40

  • C:\Users\Admin\AppData\Local\Temp\Cab2D88.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2ED8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a