Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 16:22

General

  • Target

    42257fd34b93bf5a82066efb12c95511_JaffaCakes118.html

  • Size

    73KB

  • MD5

    42257fd34b93bf5a82066efb12c95511

  • SHA1

    6a2a94f5bf11a3b2a0a05ddd82d1fa4d40e4168b

  • SHA256

    ca97eb8e47b8d3e5a6abece804ba4fae938be10410986cc5a0987a10c98184a6

  • SHA512

    8c458c56ba11be96a2a4c854895225e9127799db687c11c9e62b376a61b0dd6c36c2bd0de026053d07e3407d8a03913eac40189c4c247a80fb0cfb78dd8a6b73

  • SSDEEP

    768:Ji7NgcMa0zZAx997SqzNzNQ2joT2UCZkoTnMdtbBnfBgN8/Yyq4gcRgQFVG8s//Q:JlA0zGh58Tgec0tbrgaWcVNn1fl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42257fd34b93bf5a82066efb12c95511_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2588

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d4d164096089541269e5ad5b38a2e6b2

          SHA1

          503fea54dc3c6eaa7ea705aaeb034ad83b367231

          SHA256

          8e7e67a8809422f2226c5ae3623edee4167168532e529723a21b29a8d229dee9

          SHA512

          94e0306ab86b139d3a42d07b5227cceee1156c910969212ea6abce94a4d73e8bd9a884988ce8624b03d6329dbfdd0612f0e6aed119abc22bb79eb8822d7d6206

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          85337038ef3d65737b180f7f37231d80

          SHA1

          c87a3daef5f6113985b707d693c8dbcb5ed86ca6

          SHA256

          485f135d79adf804a3354e823edae9d0d156e01b11f493d7654cabb631e13d2c

          SHA512

          8e403f8c37585b17643b7452ee8279deea9bc230adc3e109f000e1d75d713e91dc5a85778ee4b3814e535e89f4267f9a76a929b96d078f8a08ff20cd970de123

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f9e82e1d0aba8698793f0fea8dd309ff

          SHA1

          e02701d082e68b4a624c3a94ca336a911b713a35

          SHA256

          605ba85ecee7052a8691307a881a4962917667ef787c4c4c8479b96dd7754e77

          SHA512

          b73ecf0aa0462109e42dc8b10ef83166757a4879efdd11d69f9412ba2d4ebca9c56961ad40733b8df66a4cb948e78ce3ef5a3f1d61cb6a2116fd6ccb5d4e28b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9fa28884d3a6868d1cccfc75b41b78be

          SHA1

          99edd129a1d21deeb25c29df7db8d9c7671fecdb

          SHA256

          706c1f54f71a9459ba05715959033e0c849d41c42157bd9acc0f9f1536ec8f83

          SHA512

          3e097a28736b9fa0e7480f9ce1fcabe4b94b27abfd3f1b87b4257a669e54c0c2fed27e9a009f346384723c120799c57e4da3da5cbd466345f83a3189efe5fb4f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8804604720ab11819190df1e7872e7e0

          SHA1

          54371826f1ef054bf67e1359010f2ba295c08632

          SHA256

          fc10932566dfdce0ec152adc682531913176244bccf5b0379cb461396fc2c7a6

          SHA512

          3e900bf0af8a21f6f5db0cd70a1e1b24e3b791ac4f663c687ced7e05ab365b90e7d92567f8de86c57276849e5adb74b54823c2dab71719cd08aca095034a3ab1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a95dc7896b27ed4f52d775ea887157e3

          SHA1

          6a339eedc11ce7b5a8d227f83c2da664a9252a26

          SHA256

          a4eaf4e617fe3532ebfd869752f34423e8cfa24045155228b25f04568eedecfd

          SHA512

          2b77ca2e1175ffafc3470552badb45435886756045b38977ba2dea8d1dd5ffe2b0a2e4ede7de60e2a1afd399cf5c6ea704130280ee548a769072991dba650530

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b48949f0cd1b335895a8e9a274f036bb

          SHA1

          6942f22e6d17777a3cef847c3eed147d72d17762

          SHA256

          fb945ca8b3dd910a2780268808e5dbdc1ee565c85740702bca0cbac08ff1df97

          SHA512

          1cd2ee448e2ee56650c102d76ba174efb44cd8fd5147901e3cc18aceeffff3eceed3b7d193733268cf51677a45d1972bf0914f18428fd05de2b567b6271902a4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c406b068905b6a72569e75ac73b48197

          SHA1

          dc92187d715b2d6ef11f371d075bcb521aaa16b8

          SHA256

          61e2c7e84c1d1afacfbb77641e2ac796703270235e7d408d9b3ede57a44c4887

          SHA512

          afc759643ed9ceda7f51fb64c29eef7e63641d4f8abe43277b54da93fff5e65b72a900099c4abdb909dbf1e8b424a78c72af76ee2f4cecad5c7a9228cc8bbdc2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c02e551e42378f9beb45cbb7ad5bb50b

          SHA1

          797d2653adf1277e2a2f458806cfb91e3d6a3f4a

          SHA256

          5ac33d59626d540450d31f90ec2cdc99ec15bcf847daa39b9134d5b1902c9eb6

          SHA512

          e8309de5871a047cf4d925476d9275e948b279745ca4f9d8aaddbe09aca7a9d43a2f13503cc475b33762c467625c7e57d79629e6fab107dff43683909a665156

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          62da957093b02247f65bbc53c7d5086f

          SHA1

          32ad3e9bf25cd8803eca14732b2eec9d33790d3e

          SHA256

          f23da2257e608e24c68b13e6144c20d7880e115bf29a57200bf75a875afa7436

          SHA512

          2bd5e025b8799a21a812638af4a4c986896fcc4a0f08182470c8949a35902169ccbfdf9a3e4d12534590021c4ac41963b13acf50dc0ec3877810fe83f787d9a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4445db352989b6f0a176d21c61610808

          SHA1

          aafe055f3ee89a32b8f4c147fb483164056c9681

          SHA256

          95f26f4c14e86c1289b9112a717f13aa91a1538c08f78fba2e75b5fbc782207f

          SHA512

          699f6b6365ed3c837400c7fce0d3f6f067f44b043889d8f666a81a5feaa29a6e12edfa99c68ddcab3596df8119c280ba4ea0e462005c5e679f2fc99119825943

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c4fe645ece0e33cc89010e54f93d1939

          SHA1

          71c08fe5a3c56c769c5f7bf1671a7b4f53c1b0a9

          SHA256

          83ceecfe13c0d3b18dbf6d85dc67775c9418f2706f888a2700d711139765145e

          SHA512

          f2f341325c232b36d4ca649faf7cbafdf6bc005b10411bb0e1296ead5ecb50c7823c09c0ae515ea59274fd017582a49bc475f61bec1667fd4e39a47418b6dbb9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          97941b7b41ea2a2bb8f189885432c851

          SHA1

          dc08d5c54a3ec78e0849ba6fa6f15a3ac16a5be6

          SHA256

          daa1cade8ed221ad908b69dd82561de431eeb757c772c67681292c6fe1005449

          SHA512

          4a48ad7bec4efcc39ee3fd950156a147d048155ed67efd62c98dac090cb55d7ce6a061c0da5bf8821339d031b4845e890e4d7daeec1897db2b5a87c19486ffb2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c87ec03defae38c2a0625535437fa785

          SHA1

          76189d88bca5b4b21a9cfa61b829ea844d6dcb2d

          SHA256

          488794d915f27d93e652718b6c865ad9bc1d4c2ddaabcfdd0bd1b67fa9118553

          SHA512

          d19581354b76cf4c6ee276d29670914ea2754592f1707cb16f46e0c33b87bb1a78d923f99c914c006c57cecced1a115ad465d60b70d7bbd492ea3f1140726685

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d5464d98eb843b813aaaf662d65d894

          SHA1

          f4d6ce18069f2cc36157f31ff1369ab3e0258778

          SHA256

          de6966a9822a5148fb4024bc02eac48db67360f65cdcd626b72b2fecdc9b2803

          SHA512

          73bf2e0f0ce82e38a72acb59cdeea4196334b90ae6fbef41d099850eb8ddeff1c502272d378dc2faff5513935c04c14d0599397aa2f325f1dcc1b31b8aef0f2e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          046abbede4e32439eed5f65313e3580a

          SHA1

          1b8068acd59eb858395278280b54c6cf3af0a97e

          SHA256

          bcc974bb44e5adea91c1f2b19fe153a614413af42a6a55e3e1de715a3910b5c8

          SHA512

          3cacd1023810662d05a405df6c1eed0906b684da3ebb7c172b30d9cc8c7f117c612a69ad78cb489b30429a562c97f514b982408b0516ef8c7169ca1afc481b28

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d8239b6ee2b854ac4d1397d4188e4ec8

          SHA1

          0564edb1b9c67d05318719c84d089f6f6ba332d4

          SHA256

          9c606619363b3585d94c7fce21e6104c31a5a939b0b88eecf6e6b896306b6aa8

          SHA512

          b17e9260dd2de80bec6e955aaf62699bf23fd2d09dc9972273bee118e5c92c9245856a46457066747c14ae1f8ca99a2fa74bc1966cc662c1a16dac434bd8099c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cb4757c41b632a1e2b902522b5b3f3eb

          SHA1

          a4b29932740a37cdcc4c5fff987089a38c5151f0

          SHA256

          2f9cad10cbf7232fb263822812b2c09051365d6707ce6489f3b38e61579274d3

          SHA512

          68634bb3a6c05856f1840b0e3539c415acfa7e89d9a209510d558428dac83c5fe778e29707e9dd6ad34dcf5c5f15fea032dd9ff5e16766baef870c9ee573510b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca92bca326089a60d5f1aeaf14902b64

          SHA1

          8e844f2d6137af4b8e118b91aa76b0b2c3a9d64c

          SHA256

          cf2a13bfad4a4604385d6a7c43fe486e06cf01ca5295eee172a79041e0adb905

          SHA512

          9326201c8daf8eae9b913e77a2d227ca093265661d3fc12de63673a67d26caadf1c52a7b25c35e5ca7641c745f49afe240571a63969282aed58a4e3d9a530bd0

        • C:\Users\Admin\AppData\Local\Temp\CabB280.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarB371.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a