Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 13:15

General

  • Target

    41a0b01541146a457adf8db5df560198_JaffaCakes118.html

  • Size

    12KB

  • MD5

    41a0b01541146a457adf8db5df560198

  • SHA1

    39fbd7ce3bdd95793b980c63b7d31dddcd58c434

  • SHA256

    1f801e7461fe55f997e6efd664ee788ef3d5bd5ab5207ce6bf8a8ca9cd287516

  • SHA512

    27fb1cc725f1b2a1dd534ea2678f369af04d3422804fa52c1860455651b406a26052c254ecd665eae4f9b2492611c537df2ebcc52fb15c589daf195e20aa3d50

  • SSDEEP

    384:KtI6vSr+kDxy60/eU6rK0tz6XX6+RxLZqn5f6:TQSr+kdH02exLZqn5f6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\41a0b01541146a457adf8db5df560198_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1712
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1388

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb37bcd0023a3fdb4ebe28e2bdcc19e8

    SHA1

    64c74c9b9482f8e943b628f0e323687f6ec5e5f7

    SHA256

    770f71db62f528c500d5a8329912d35f41922f15aafb9ac628e94ed001a974b5

    SHA512

    a19b132ce505a213e5fcd2eee2054a13e623b94a420f7e1b702a907a67a3add1bf8efde9ec7ce036b62b8660f8c63685ef2f1397fdd758a1179b83d2806827fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ced6ab5ddf13d6246ef63d2eeb79c0f

    SHA1

    803a7226a99510ba73b678a03aa35ee08bb79933

    SHA256

    fe20c026ea0969ff3e75d5450015c04ccd774c92df914e10a9f161b4cca5f114

    SHA512

    15f6cf572631d450a6c0cf788704bac6ce6cb5a6a2153a44f8e32b5a6a390a653bb613c2b55de724e100904e75413a519d1a50f518bdec2eff5f5ccd224304e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dbb8a01c57930b6f5acf8c612527667

    SHA1

    5af6264a848fb0e6926b7e596b2886cf4ea81ca8

    SHA256

    00dadbcbbb004b386ca1647000375c313e1555f12393714daf691f3596cb48f1

    SHA512

    c09266c552723b3f8458df91c30793300d7cf430b54c19869d094db625c992a987cb260cb8f325275bf66d27f1d429805872cd7fcac41dc17654c64d5af6eaaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbe11c107bcd02418be4b7bfb0a848cf

    SHA1

    b23dcedca6173867ea19563c19937bc20e48a633

    SHA256

    aa4dfe27270af64d0febfdd81542795c5da0426d81f2d94dc5cc881b18e539f2

    SHA512

    86685efe5ffd730357666083ff6ca2e35e14e8430560877624b122fe575cde4f2c4cb1665853da0931bd68927fc5fcd563e83c25a8d52f89951cdd3f4b50fd0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a04577720dfc38caae516a8c3fb381d8

    SHA1

    5ee4b8bed59247389ae7c1f9087a129b2d97a5c1

    SHA256

    90ef1be7a657e4104f01cf73ca7dbb7dc5798190b395163e85a8ba2510ae5d67

    SHA512

    66142c65b738b10e7917341e325b9c3aaa0fff09721d2e9c14db6285da8ab49ed5dbaebbb9b3b4ac16186d312c0b11f2527a63b72ee3611c336c0d16a4629652

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67f935852ccb138940d6b93755875928

    SHA1

    ab0986fc69dd8692411685db6fcd289ef8c87d28

    SHA256

    7911a30dff4a4f4d2fb917f75ebb636c718b95848f8d961c5dc1cd1c5cd200ed

    SHA512

    5b09c1dab7c8ee606ca907f61475588069616fe165633356125c5cdc1253b7d7d2fdaeb167766856989a26738576c1b9e11c10545c1d55ed50092de3ab46e584

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2643fd2b25d6826c8a7e547511188bec

    SHA1

    f3a1668b1c04f0dc6c9f92faf1c61f0eef279c6d

    SHA256

    7c680b635c237371e9ccd65d54227646d8add58b2d2ed479292f6ae621c46122

    SHA512

    975fbf2326ddd32a381d6b422997715f614df36cfe64be7b3d112750dee75350dc3af51e8729f47a96d0396e67d5c4578e3db7041a0d4a73231e59d89bd2ab4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84cfc15ee8a11c2f3a6d2a02e2bcabf1

    SHA1

    e083347399e507796b456a8dc31d8ff3589d879a

    SHA256

    6173ad12fadfc8a0846e7b1284daf5cde106185397a02cd86923f1886729e632

    SHA512

    91ab61ddec8f1eb0b1626b41dfa35773f5323b64b2fd23c6f99b045e20d01c0a96bde37275e104be5b90ff42a37ea00eff2af5b3a2ba9ff9100fda83e425aa91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8bfd6b42400d7fda6f63998f55a5104

    SHA1

    359441fae5f58433a16c65e7ef8fc3644f39f092

    SHA256

    3cf543a615edc465062d489216a21a47db64dd7db7bd0680f5276c63eaa1d9cf

    SHA512

    74478131583145ef0e9bc95ad79f74d13c2a62d9e7aeecb1a03e6d1623b5b7f40a1b4de6ec8b04b66df33230a0e9bf60915a79de698dc149c0caaa15625ed1b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29369cca8a1e45edbfbfec57c08973d4

    SHA1

    4d9c037e2dc2b21e76c0ea7b1c76f1e7504e045c

    SHA256

    6719208aa5eb9f02c77964a5a2e345c570a38018d24bec8ffef5fc363fa68e35

    SHA512

    18c97dd41c65a0e3131a118a2c6b56e161a45464c5f788caad5e56dae7f0b113e033862b8817094360dd5d94aa53f93a7b6b806a77692a57c72865c514e79ad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    928c1d98b23609c1c9d74032aa7527ed

    SHA1

    e1d84d15900419c68aefe78a183159d9727667cc

    SHA256

    a276d64de44e885123fc99493f79f2f305040a244cd42d4ae931286b77dd39f3

    SHA512

    d1991141c974868df8495d4b3fa86a000e7d299f5128d0ff5c55967f610fb31675c9fcf6b089e03e80826f0df25f75f0fce3287aa2b6166b9a2541e43892a5aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffe718a02fa0250f34e56f7e313689b5

    SHA1

    86e565517aeaaff458251844492f038bf995f544

    SHA256

    782d1318df3dfbdc2d7b42ef3f1a54362c611968ad247ee85be6c21054d6ac60

    SHA512

    3abfefa90e4f8639355deebaf6516fe06e674074b5ec2c40d6db9e4040b0c1d84dbaf613eb3e8cdea2558e7f626b1bfab22d0aa5ba31dd7f20e27f0d69c8cb53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cd2e328a7d423535b6b2eef37981cb5

    SHA1

    f913e00ea28a73fe41ade713ce7a698b23ad7842

    SHA256

    4f481a98f9349852fdea8805c78643c3f747c6f3ea2d767025f4152764fc448a

    SHA512

    11f4c8a4b64d5fa0f23d30f79ed96f779af7c1f8e927a40a8fd101df2ed655ee5afc73e82f3fa02ff509a0ca76a4ef2604bcd5e60593b57d11e952f81c5dadfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da2d91b194a0418d9784aac5c8f0a7ca

    SHA1

    64e9d6dba929ba8978387646501209010c92c16b

    SHA256

    da6730042e86edae9d1cd2c2407b6abe8994337923b7cdc1238bad4e401439f9

    SHA512

    a37cc43ae215ae303744a7c3c02d0de3d5c6dd8bfaeba65cbc857b57f045672179690a0d7461799891465007f378a7d9d4640efaf0242981cce59e71ebcaa52f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23b1d42bdd40a8b66a2864c7662125d4

    SHA1

    66db3dcf75b5f74b4ec1e13abd990847aa98806f

    SHA256

    8dbeb7014e4f9a1eccab4eff4a84f8d02e6fa6ef41582b52a45849650e59e92b

    SHA512

    1d54571502d2ba910cd566bad36680256bf7e110544ff00072dba95aef995a61ed6eb1d3c6f46bf3b9d66a70fc4bf37eafabc8836b18af0a8412d652d97bbb62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbef3c9b8ed6c8dbedc2a4e93fa24e1c

    SHA1

    d10a5ad771ace54a41e7131c48c04caad1ef4332

    SHA256

    b01cdacc8acde9e887ea4dfdf36f9ee1060e3acbcbb715e58437ed3391c356a2

    SHA512

    1368c212c481ed73153f1b9302422e564d50497353712a0c75a9c7ba28861232e80efd7e3c5cef7385e704f2302fe6c8a86eb24e769b1d1a73694cfa971e3aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19a5ef4f193f14b059cbcdeffba308b3

    SHA1

    234ad1589e9bfe222f008c78a0b7889250c4d8ca

    SHA256

    ca84d0b74fdc4034ffd6f69df165ce4c6892d4c30433d346f23442e5c53a8416

    SHA512

    2188938a039f808b0c707721f6a8c75e699276838ca69a1383d7662a68ed4f0bd575080296dd2fb2d03d456d12a26f3be32906531e81e5e20a948efb1851ef13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e0c46186c00c8dc5a0c26849369f28e

    SHA1

    68061fc097ef443c9f5418a052637432368d358d

    SHA256

    39438d893babd5ffcbe88222451d3b9a313106fefcf5b99893fb95d380c5a41d

    SHA512

    4b084473c1a261d1db95865e770d530609c5d69f590c9b104530aebf2d4f2eb83dff550f9f566f3d63ebbd973523c45131cea0e34c37b19c165b2d000d154294

  • C:\Users\Admin\AppData\Local\Temp\Cab5DBD.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar5E0E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a