Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15-05-2024 22:12

General

  • Target

    484501ff0a0da0b2ceef59f87b6e7c25_JaffaCakes118.html

  • Size

    4KB

  • MD5

    484501ff0a0da0b2ceef59f87b6e7c25

  • SHA1

    bee664c34cfa26e9393446de9fc19ea7f44cf400

  • SHA256

    aae1c6bc58646f328a54d54c3d9c19bd3723a990bf67762e2c6d77fb4846665a

  • SHA512

    11d878ab2109beec20f19e6c17c69153a8f4332b331b6c0571a67b0e0e9bc2e8421029623697fa84d471740aae50f473c610246cebca9253eefffc9fb550339e

  • SSDEEP

    96:JsrAqJzPtktRXTvEXsWkvLsK4F9Twk/d3tFaYkoaHjaa:oAqT+TAsWkvWrMk/dtFaY8+a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\484501ff0a0da0b2ceef59f87b6e7c25_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1668 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d0079faa53bccc6cde2d5f9982583be

    SHA1

    84aacc392e7818cc1bde484f90214780642a4533

    SHA256

    49d713b86cf551e40ef6b852bb115378768f6d72d9a78dd20bf0230804ccb305

    SHA512

    1ac34608c483ba54f588849da6000c8c30e8c5206ddb6725c00cd95fc541111c8ed9326198e6907a519102c4247fe2cf9d648e482b2a6bd7d1321fcc4fcb6a22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ce08449182d9335f228801ab1061420

    SHA1

    c13382f110404f6193ad16b406f84814660d0e9c

    SHA256

    6626027dbe839bd4ee0bf89c54b5bc484ace0fc8b55aee58e47bb5d82157b85a

    SHA512

    8541de0c528f7d2958102587eac0e8d1102f5a072ef813fdac18b0443bd962d49d889545ed8f138d9a21c2b3d7720a948789d6f5b9862accf285940a4d6922c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bd9de32f29b8d29b2268d641b672406

    SHA1

    5d8c7cb3d670307ae5475a132beee8499c433184

    SHA256

    f3a41fe74a64758639199eea08fd4d53fc55e2b2e29fa3a18dd224f4b9ce50ca

    SHA512

    8dc0f9ea8b6bf1244d16e5b1ee0a93c9a5731cf20e773c5461d6e60f620a57923d87eb5b4bf0a073409888cd4d86af9b63c1a09abc1dfdb0ce26fd7b19eecfcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b567ad1b536ddd213320cdb386de601d

    SHA1

    9f49aaf5d3a1fd7c4cc30b2446e282a9174fb179

    SHA256

    fe7adc1d2ceb8b816180f76a400018849c75dd65202acc55a7ec2420f5203bb1

    SHA512

    fec14e99fc83500f319bb2e8acc8024195c1957063e29d03d0a187c7bc99dbef567cffd1cb9564ca313c5d83fda092a67d625f57ec9f8f427df4cb512df8500d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    211db248829727a1aee043879afb1c8b

    SHA1

    45e3d538baffbaf4c175f29cad5792a35540c41c

    SHA256

    b4cb34d2a221975b9f64bb47d72f15be6984154270470f02b539c95b5bfe47e0

    SHA512

    b8071cefc8efa5b6e23c209f3a36efbb56c1d08c936908b54040ee8fef08dec1573f897731949f967369dbd0ea254c29df504b72f46598a3bdba95d873522f7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cf8af4b10cc6005dd24e9da48ea2816

    SHA1

    6e8caa2225c0426e8b9939c25bfcaefd787d2749

    SHA256

    ab818a65a8c20a0a278a398810d788b5204839dd810ad1338664ec2d88c64530

    SHA512

    ade192a5e0cde83180fc2bf07ade5264efedda7b71b66f95d1882cbe1e5b44747bf164fb6d351061ae1752130729a179e29d9dc11725c7fad4ea3a08dbdeeb6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d347c829aa4b8612f2f77fc9e82a277c

    SHA1

    793851fd9d0a1eeb46de0291d7f67ac136441535

    SHA256

    56b81bf92f5f742c46b5f4bc1003753f9fb55fe5d5bc6adde0f1c62b84bc7682

    SHA512

    a8fb403a928855a52a6a96340dfb1b27540534d48df1d37cf36956736e4328205d8bc370d0042df8173276bba7ac0bd6e48e8d80dec15c7df9a6a37d75fdbd19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    889403961961abb79e31409451f857ff

    SHA1

    1dc98bcdbdef1e5063c003a93138db103c5645e8

    SHA256

    84c5ace8eb4219bee7ade3d3a9524632761610a9effedac9c0557af232edf23c

    SHA512

    b030da1284199d9f1b95bdcf39ffedddd6efdea9cf11b565889469b027d89dd7f831de4b8a4724c1891dcae3c180904df8bb26519d42623da8a4787ec0e1669b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c7bd541a97b4f0d16b4029013ef27a5

    SHA1

    6cc2339b021f08b080d602186d49aead1c13571f

    SHA256

    b5aab4485b4c2049cd0a059e6ebbb78a1e264dd4b75e95fcf6c8059656fec4ad

    SHA512

    2a7ecc98aa00266ad8142e5de83072dc2dbd239439d73743f761391a163127bc4adee378594d30fb97bdb4d02460f87da33b5431d201ee35638d2aa5d7171394

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3d020a092aa5f603a9dd04f4aa56187

    SHA1

    24692a827e98ac7a6a6595f8078a051dcb5b3a44

    SHA256

    3ba66ed7f031144a8109ef8e5d2c8d9ca20f235553ca978abe67b09eee0f8ae0

    SHA512

    77a5d8947950515c517036c6553b9fb6075976caf2df401159f5ea6b1b290ce7052f49482bfc5df76fa846d3f256ee1a8c50508226b148d88ddd010adef8b7f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52491a819b1eee2c4aaa66aa8b472481

    SHA1

    33226b5b7547587772c97f0166073b10ab5ff5be

    SHA256

    7e7dbca83fa56d2fea73016ab7fbcdfbca8f492014b16be6d4626cc432b34daa

    SHA512

    5044734ece6a1e35dc1e32ee07f07b8852ae3cc81f9f89f453985780b3789900c3f9548155815f749f7450473b3126e40b17e979e4622104f010edab0f644edc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    478ae2f15a1e5cd97334091265cf327e

    SHA1

    062be5f0d2db2c6fbb3526a4586bfffbe64ee90a

    SHA256

    b9ab96a2d0a88ed473f4ce32fafb2b8210dd68413a2fbce683fb13c6dabbaa62

    SHA512

    97050744477561b209ec4d8a6f0b89096165595e2fb2ce7e7ab4cdc892fe9cd70dacffc519621855a18494396793e16b4113f36659150b42f2fec11aed38cf31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e31ef1379c77b32c5086ce8ff2ec716

    SHA1

    086918c0f038f936e4acc4ea1bd5849adedf64d9

    SHA256

    12431f5a10f31666c575c44462a27c9389171147073042b0c048f4d1078a4916

    SHA512

    1384d68ca3f9dd344595c567a582e651c3ddee084eb4a08c47d79053c5d9cb3dc477248918e5d4a3430902b20d85972d648c2f6e66b2e29cb265afcaf127772a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a6a4210d42e119ed3cbf94bf2fdc1db

    SHA1

    694f7a46e1dd58fbd51a7944c6b51e6593536bb2

    SHA256

    0d2245d16d5e8750d3f3f167fbd31e84c1980f618c648c52a980e5be86badf0d

    SHA512

    c162c0275680ddb12383b9ec8e1c8257608f37f71815e5366bf47509cf2a6c0651b6701ab56e5c1d5b136b4bf7f97b3889e3b1224c0d211a1e2296ef0656384d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c8774ba6f8250dea7f1f0d54a6a6779

    SHA1

    0278494e164df2587ccdb1b226e6861fa37835d4

    SHA256

    65234b8fa22986fab6675e847c15a8f7ceb412839943f75162eb79dc31fe037d

    SHA512

    352b0e80c6370f024224dc6d9c870e4a93722bb664c196d09555deb5ee14ad7f1849f4ca75146775c7e0efaf50b9904649b4c315775ad929e8edbda14d325d35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8765e40836945ae43e76cbe40fa8b94a

    SHA1

    f00b2e44837bf2b4dc3a0c0aa79fb8bbf1a7a5aa

    SHA256

    416fb59ecec7e6881aabde8615db9bb8937220892983031a8c7429e7d78128d4

    SHA512

    f0e187fa4549b168b75ca037ee2722105d5dd6a50f89f364cca0525bd1ea6ec073a6c96cf2ababcbece7971e1e0b0d6a1a53e814ceae3ef7446908b1f4dd4d8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1be4b18ce470d376579fc2d991d3fc4f

    SHA1

    269c4016186eb0766d7984dbe70ac51eba65181b

    SHA256

    379753f70c0ecfed694b9be51469dc26a554b0da33f95a06faf30aea2002ca28

    SHA512

    a706fabee42f28f07d3fab445cb4b830f79b2528bc03d5a4ef7ba8d81d9e5dfeebf0b1b1655696d88fcab00423dccf53dd7673e484127a9f6e152c1da4bc4878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85c24b1902bbff31d5a20792d636a63f

    SHA1

    8389cb892369ba3c1a8be6a2481fd256ef358bd1

    SHA256

    a4c271aa00f716534b226b9090b9ed28da30287d5fbfbd3519c2fcc14a684068

    SHA512

    2abbdb565778446e7a3220cc32ab9cd76453fddfd61b7fc4663ece0f2cf17b6d0bcbdb4c52451927fe61ccf6bb6ae6d31aea04c332fd66147300c0fd764cb290

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85b71fca15c93160c5afc8ed15b51288

    SHA1

    0a416d1e0961d87fc4737df5971fefe2d1c53ba7

    SHA256

    d7d23966c982636f0aebaaea242c3ee3e199958d538edaa496b456a9b6888074

    SHA512

    352eea23f342bc9a7672cd393ea0a0f2af4c4983001b9e8ff0bb13d4623616bbfb01145bd44fc656de69b4de0c2ca297ed94f0e8a7443e18fc7139248f06dbee

  • C:\Users\Admin\AppData\Local\Temp\Cab30E3.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3134.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a