Analysis

  • max time kernel
    136s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 11:08

General

  • Target

    4145a07b10da8b418b183b4e5affd801_JaffaCakes118.html

  • Size

    6KB

  • MD5

    4145a07b10da8b418b183b4e5affd801

  • SHA1

    af912f09817342c35b18214e02f3c5b70e8ca359

  • SHA256

    4524c9d757b658830a4d553cca6bf66633b40ac04e3310af5366f8dea639d004

  • SHA512

    a92c7797aef8c8657f2f0e34178c82564658806ea016dd71f536c3af272b223a49d354e2ebec34ebf844a2eac0f8eeb9cf36569a331465e8f6130f28744e8ef6

  • SSDEEP

    192:quj17Z04FRw5OgmYEZtdX4CW5N9bG7MYVgjVQlnQa6aCEc6/V/s:7Z04FRwIgtEZtdXfWflG7MYVq6XtCEcL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4145a07b10da8b418b183b4e5affd801_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1948

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    beba4c356d58c9bc7c83872328ab6a2f

    SHA1

    1c6029975268b2f20acbc524169a86a0261c29ab

    SHA256

    43238fb2cb4555dc1be12b785229a3d181b2df366ec5a856bccebf67e3005c62

    SHA512

    41a6be73f26d1f79b77336206edee74c602e1a87b9474278962518cf9268412ba7b2b4febe1d8e88723087149f84e42701686d3273ac7679ede92481ddda0164

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77457e963f6ebe7fd1c9a8bb200f1494

    SHA1

    fa2ce32379f719a952d15f6a924a3f2a31a40f3f

    SHA256

    9571b9dce669b306914ed4a37541de4f249c0386ddcc6d552128e5cbf9ea810d

    SHA512

    f751a6784452d287ddb900f48f865c726f0ff2ffc5c36bf8f0891412ace35a94810b9b82a79e346b3543a680782f9870ad4a4e18ebbe582b4f9bd502704d5b8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    300501b8fb9c6bcb4d4340d30580fff7

    SHA1

    805df419562ea7cfa68c1f58664174e64f271b7d

    SHA256

    5a750a10a8599313f195f6d3806445266463717c010f08f540be3b8241497575

    SHA512

    9f44654fd6b3c9f0f47cf2ad46a82beaae1b9886213bf87ee7af2b1dc04d3ad7569b038d78d18608d42a699903e41f3eed29260940667b657d0a5f3064bd93e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07e50e47128e3efa3d359438bf5f27cd

    SHA1

    99762dc9819bcf81e153ae14de41d12b35ca0a5c

    SHA256

    164f3dd83091797e5b010698a08d96e826043d33423a1a6fa7bee8438ab7a07d

    SHA512

    05a1ec971473e37dc3c70783100378bd4871d1b9a5669076ef189ed29908faabae8903b97c37137792253d12e3a88589b13a61d506afd925b6d66b0515fb3ae3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3733582482fac622d9e51a7562ec3ad

    SHA1

    2df0c39606354416ffb719df847353a0f33954bf

    SHA256

    78c44fcda9e9655eb635a21709f91de61db846693289d189e85da297893df0d8

    SHA512

    caf1d65e818a3dcff1810b5e4ec09b7d96bb4499db4b75b36128929c99d157390218f032ced4748358a93a6aceaf7e72f88bfddaceaac05f427159ef1a575666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b297180fbffb6583be833576f79c2847

    SHA1

    e4d39d206f1c8a30407aa7699c69cb9b309ca003

    SHA256

    36e763062d1013099a037d71065f84400878086abc4e9247106b28b437317aab

    SHA512

    d9c3a027917a35120ddad66139911c18e196d7615ab90cd74321150e1d6489b4e82cd3a66509db5ba90e7a1fa2d55889f03f86c602a5aec2bfd06a83b49f0cb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a27e99fedd4ba18198b6df7dc5eb751b

    SHA1

    c7a251c45950de29ed997e1aef69c4816c72f725

    SHA256

    491356860812335f3d4494c7db35f3dcac0158ec19a161bba85fb25cf2ae3148

    SHA512

    bcbeb47ce04d53eb5ead834be7c232ebdf5449f36abd3bab83b567924ed2c5ab3a5b75f0ec6e1a64264d6ecd7749343660ddc7b459cda6ba52dc3f9e0cfd6b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    402c993fd94ca936dcb4847b4c896e6a

    SHA1

    f97e1929752f669dbffb7ba6cb27f1e51129df76

    SHA256

    a68096aa59a1789aba759376de41f9d23ca0bae99b6b08bac4bc9c68275a8347

    SHA512

    42b64a8d5ea0d7088feb4c39320c8ca054c1f9d82c2d7c3f2a07a0cc9b4d9e319e4c4923815410f95ba6cf889350056acfaaeeb7cf8af86c6812f45c61df77eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96e6fdc1bb1459fd6db691fda3571f37

    SHA1

    40351e10b779de59037f5cac23889a9d348509e9

    SHA256

    1c37cd2016e2e5f15ee4e6abc1185c0287696e29f6b72c91b756ab9b3277c780

    SHA512

    479165f7bc06ffbbcfd3ae6bea40445073b72a99ace0b752f4a70283eb2eb71b4613ec40fb027f6ec0754b01fefe86aa0011eb070440670271c38f7a8325f156

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    532a703a2f730c5877126c540e5a2736

    SHA1

    54a997cb2969660e8e9679331b1d9a9ac854a749

    SHA256

    18fcb16d37a6c9a9c035bd40417f46e0546adc1f754ff1c3f2904ec6751a0182

    SHA512

    b1d910bc143ccfc4eca4df4b585d638e93953bb770257eb9b4513e90b53d6582367dd6272c2d09cada9fff1e39cd9c97352b3622cb727767390646f5584cca6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f6dc4d25bec64d8467925198f1f460a

    SHA1

    c1efde1ee5840c391b45003b4e207a242ffd5713

    SHA256

    cca20b67e2085843837dbf587552d6324d068c4a1b7ab61eb7ca6ae8f3bb2820

    SHA512

    f3ecce9b100412bf80facf7205b615eb776945489e815c1e7716eaeb67cd46f32bc8e1feac3920ae93a199aa11dcac83b60adc9a78b51b8c0eb41b1b24713b42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    182d29ca5328a686d31423faf9cdb07f

    SHA1

    2d82b1295ed83f5be97b19ae29e7ab35136367c8

    SHA256

    909f97063b0f489a44c62ce41110b46e5a2ddc681585b41ba350b469c83a22c4

    SHA512

    2bbe28e22f5085806465ac798586f6219a272ebb025f56e8aaece87e2384e1145aee3a2a1ffdb4a5046680d13858759593ec15d5fbdb52cfed764eb746083d95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa6f2ee3b10e0375fbe744f8d91342b3

    SHA1

    d7ba6d65304b0c6b094d1de4267a84f2f9f59a32

    SHA256

    8eb814807e749f84f1b6639afc24e502e55628f2fd8cd67d9bf68ef227d544bf

    SHA512

    f84d1c993d71659c7a741d63498f263d6718745a02d60929758e7455256e55aa7114f00d5f5fcfc84739ee7ac00516a1343f7fc747a79e745fc094bf43f1321e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8517e48601f458d4212db69abf2a1325

    SHA1

    57a7bb3f0ce2028ab3f6a33f43a348d5217271b8

    SHA256

    27efec61cbaca99fcc1a7d7f45a7c200502a93327b38b6f0ee0f1b89eec12736

    SHA512

    d04d9316d5ba2c2b3b775bbf3c01f62f135fac80030e3b2af0bacb3b198498d6e82d7968c6883bca1bc1467625b3eef3886b3de0fb0969792f3d16169e147ddb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af2ea1e43c66bd3bacdd745f458ebe1f

    SHA1

    a116f5c0b4768e8343d966c11a20ce8e1b2b16f1

    SHA256

    5db7295d014b3e8478f83ce00df69a376110ce362ff7d3d6b627141b5df8bfb5

    SHA512

    fc1967860fb82d9b7b849e65294c590a7b37dbe559be7245024b00aacae084db533807fef60a9bf19c406c061e3ecde0e3856d0e4b278c998a4581029e1c6c95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14290303df1fad6a385a2156fe4ee87e

    SHA1

    6da3731f0d5a8892e80602869e6d3878dacaecb3

    SHA256

    4edbded02bf5d4c4fda10283d56f6107cce88fe4289711870006123baf2a5f46

    SHA512

    68859c1eee17ce082622a0dc086a9fcf99959c887e75802648a8d98736502156c4553baad68e7054bec6640665f48c18251142632f09904747e66faba9f4e54c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e74aad7ee995a735f34f4ef9c16cc52f

    SHA1

    cc298d352ee505cacbc67fb4871f42752353470f

    SHA256

    befa06b48953de926219603029ae4ee7908dca9819a29f836825659e71005dfd

    SHA512

    6a53b1a8d980f35f61c84757884a3b11241192007c45c3e5ea94e854969b200d48f86c2358874594bea27c0b5dde3a699a984f434123e23c4bc04fda90e0dca2

  • C:\Users\Admin\AppData\Local\Temp\Cab2520.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2611.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a