Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 12:57

General

  • Target

    46467265b4977aa067ff1c2796c86128_JaffaCakes118.html

  • Size

    461KB

  • MD5

    46467265b4977aa067ff1c2796c86128

  • SHA1

    939208a0d0ed7c0b1c52b09e77f0570cc7f799bc

  • SHA256

    77b3b0da3f66ba78938d5d24352412f7bb61a9b00bf70fc14b1de572abb36d84

  • SHA512

    666f264beebd42a2ed4cea4bf11af04c25a8761072a8f823191b5a0c21f516a4eb6edcb72b5121360267d440692742f5b4f15247ee582d429a096c68b8c499f7

  • SSDEEP

    6144:SEsMYod+X3oI+Y5sMYod+X3oI+YBsMYod+X3oI+YLsMYod+X3oI+YQ:p5d+X375d+X3H5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\46467265b4977aa067ff1c2796c86128_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c37aacab6dc1b20da833a171343e13f

          SHA1

          9b7d08e8f3fc815318bd7c8d617d539fa2cbdfdf

          SHA256

          60792d73cd503b49ccf04bfedb5181bba5c7169b0a8ede6df201002aff893d59

          SHA512

          f095c714b235fb020a6257a76178588b1efc4337c12629b74ab25bde6fb319acbba8ecb7143ac9ead1c9c803d418d9566887cf91364e201d9bddca67bf5b2725

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9ed23e88ac0298c83a19564e3c51a3d1

          SHA1

          e0704dfbaf95b8fb7b6a25e9af11ba937d71f3ea

          SHA256

          04b8929eec0ec0d9bb17c94eace514cf54bca7b8aebed6f39845bfe13fb00fa9

          SHA512

          8ff1ec1d3de854294c3ce5bcb46ba11f630afee7f1b552833f0362adcc4212618f3ee268d11edcde888d7d92a2f3e7d12758d4e2063bacb5c5a8e901cbda41a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2837e212c5719726ebc8cf69000416a3

          SHA1

          8aaa555aae5b4826bfacf29b604c3d41b5b92a04

          SHA256

          a523415ecd6a1559f0be836693829598258f80d98cf46b899163f3e26363fa41

          SHA512

          3ebcc79dd11698fb78b496cf1b543f92d346cce54913ecb3f4aaf6986f1387039b8155050044104c7cd900117e9ca5572d00b478b90a65f3612be902d630c4d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          85ad81c79026569dba7974ce7757995c

          SHA1

          66dcba1d126c2fd1b2d1343a91c64d6db7bc891a

          SHA256

          ffb650b99d3c9c6af2893480c380cfa8f960f0ba57ea4fc7da5ea8956a227783

          SHA512

          3709e7ea135890ae28dc262fb7fd34fa1a9c00d97b147b79f2c6952e7b3336cbf9a58685f497ca82d13baad93556600f3bad9d75e42acd046d8cf1a34bdbcccd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1b93280ead4b97277e1f83c9cc7389fa

          SHA1

          77caccdf1962d15510be43ed6752be4e445b3421

          SHA256

          1fda580eedf32b8a8b8a740fc47ca62f969eb8e69753b04a676658a60c757063

          SHA512

          824d023cf9c32f0b9294e34b88f5a42e6f3dce27c12cf6f2d3cff5d579ed08e36c2be16e151ddd5584ad12fc9363fc32780bf10ce1c49a1ac4e2c6074f3f1313

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ff725ae6c67e44efed9cd4fd0b1ee87f

          SHA1

          b5f3a84e2b1acd45103e03d244b2b6d2f94b220d

          SHA256

          e36df51b22d9d7531c546a39dfe876c50839570a3701045c5cf0dfc7112f04df

          SHA512

          f09fabaddac56b177f3c563e2cff795773c9dc106f901b1f7a22445f0e672e8accd213e034439e9ca41ff5fe0b548e4c0b391bd1569f55a42d7609035c99ddf9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7e8723fd975afbb05acd2ba3657e3902

          SHA1

          397f9cd0ac13b7a95da8ecc089ebb5f05c3cf3ab

          SHA256

          878ea6a29b6837eb6504c21693a22710545c394735172da4288383b2f5cb1d98

          SHA512

          358d6bfab3866a05813ff3b0627d974c321883cd78028f7ad8691aa1b0d66fc18a0ebc6257c6452b8343ddf720976c095a426cc1aa926656d41d15fa692bb721

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          683a9b24e8c1a47f6acda6d9c7c25752

          SHA1

          385ec841e5e8520690d2b72766e47ac6ea14b517

          SHA256

          d6edc2535706039fd8a2a1d74972b82ac1ea7686da35e8c49f72d2263e1e9716

          SHA512

          559b49c36e2495a07653a632850042ceafc9bff6f3db82a1aeecbfc85008247cd2a74dab622ef4f30019c2166e712bd12a3349f82c5f02ad9275aa9916a9843a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b347380b3ed297f3a90a156b863bcc51

          SHA1

          2a9e222294feea70240e1ac9f59043105f3a2229

          SHA256

          1c5105ff21b3bd861bf3637bb81a515708bc5db3dbaafd82a8ea6092df1de97e

          SHA512

          e538581340b89a11c85941c1ca4c56517ad51dcceae564209b6cc847fd3b8dc5164fa57eea4c9c79dc40dfc609eeebd7d5dae92888a15dc2dd0c989f04f9fcc6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8e9b75b93b19400274ecbd634c0f338d

          SHA1

          36bd88b91066e434ab6e788a73f957038ada4be5

          SHA256

          6ac373a17be6318dcdce9a9babce5de483a4f52b4ce5d8aeb4d364d05f0d62b6

          SHA512

          586ae3c89ff4ce194f7e0a5d3a73fe5714e761a5b51bb07c88264f1407c2cb50a3133cdef826a4ff76341e0fa1952b212f862450dda82ff0cd6b875c011429e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e0bfe264ec32b3ec0e2dec905e137b7a

          SHA1

          21d519dfcd4d4d54365bcd5319b99389470d68d1

          SHA256

          bc04cba7c18bf91de6b69de1b9cdc370209276cf43398dbbd0412fe3fd25b717

          SHA512

          d6a78fdd10230a32d69e7638e1e8f07c15ba4c9d454b075fa922b57cfbe7c0139b9dd8f62abb6259e9f28ec6463aaced80416c201866e9e14ab993317a578aaf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a5e03f2b2912e4c087c88de67a1d1103

          SHA1

          3472d360a1b0f61124ee88e8282fef3179fcef05

          SHA256

          47e0c5251ba71591c24b8b1a3d338afc68add8cce3536f22ab5f76547ab14737

          SHA512

          98f861973cf451cb7ceed3e8eabd6efa7beae78501a1c57627c89d73aeffc9d0d05c9afacf40091bc06ef8e772163ec337cbb89ba8f511531f295686eb5f2624

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2ab7595d028c705f60cea068b389a96c

          SHA1

          658e0517dc372abdb1358c3d6b978705750e4231

          SHA256

          fb2b8e408e0c7b1f4bdf0e84dc3ec4b6163c9eb252128f5e12555977ac58f3bd

          SHA512

          604b5355a42c375ecf94c002dd203cf2f7ec54f7895d75b7973e321e132d16420da9b76b9b83956d43f667f4818925ee6dcf9db9aa4775b7c8a204aa7f1a2f07

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          37fd214b127823636bb186f53ad43efb

          SHA1

          3ac27690bd9a324f751e628d4671e37ec062897e

          SHA256

          fe5312b2d7ca10550c8007a98fffd1fd80d45c794f0948ea79b404220262214d

          SHA512

          9517a33d22c5e31a0b996de14f8fbc502957412f12c5f25294992abf814a6d8ce05ac680b6490289cbb59efd9ceef53d23dd0f50eeb8870a7eb6e3eaf0525f58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7bf40506ce633de3cc017995ffbd9ccb

          SHA1

          d67955aff6ae97a853ea9bc1e047a6e6aa9f189b

          SHA256

          0afbd0d6486ab9226b954d89614cc02ec52e328e54cebeed9baad26ba1ac6226

          SHA512

          5e62469dd0b6dedd1eb74d64475d10829a3d4005bfeb0921dc901851c08c2c152af52dced4b12caecbd1ed26e9487efa72418e344e62c6ac754ca36e1b31a521

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4978a40205bcce2dbf1fc417b9f8b9b1

          SHA1

          7fa4a174ff2e3f0445f362e25d39277dfd1f442d

          SHA256

          28336dbcf6a4fa3f3d97601659671cec06bfd4fac9ef80eaf2b4c74c008cb46a

          SHA512

          48260204ad79f93773543da2ecd5001fa5750d17aa8586d0a5baf7082c37835fb9419b7fedae7fcee66d958a509a204d753556047593e0907ff79f195a2e2f42

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1b0630e176be4392a65f893c733127c

          SHA1

          a64c4b7e34c16693011a36ea75a9377a7b4dba05

          SHA256

          40098b0930d4d7d09cec0ace76f2ed47d6055897a2346bcb2a3bb62ceb63239e

          SHA512

          d41a44945ae1f99194365cce666a853405f4ac532e0db6cf8c0c4bd08abd5eddd6c4a155993ce141753189937bffd73906a7963ec5304219c275fb7208b3789b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5951a3b50dc19230c76cb87a9f73dbd8

          SHA1

          da8cb0a7ddb276142c50e257a3e3b2d6b9d9abd8

          SHA256

          46c8abfa70b0aeb359766d8713e639b10cbc4742003a054cbe8bd8e66ce56e34

          SHA512

          b7bb3a578caa699569e7b3d71dd6e639fb1f2be79d7c3d050e429f3ba3487820f3ba017384744380161d292091fbaf2e01ee5dbb534d826410aa60657a4c6838

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0fb92f41dc9143b380744caa41db7997

          SHA1

          9a212e698e80e1294dec4cac3246679943524f2c

          SHA256

          ac4442d7ccd849d26bcb6783cec9bc4a538adaad529d18b76c4c6cf978caea29

          SHA512

          055ccb2c68be68f0e07d0d2866cef2fce699747261fbf73e9bd4f1a094dbf6273b228750e17212f01164a7ee8ad770de51726c93083fffe5784e8d54c6abdb53

        • C:\Users\Admin\AppData\Local\Temp\Cab4E42.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab4F0F.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar4F24.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a