Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 04:12

General

  • Target

    4960fbeb1b442969eb7075b1619691ac_JaffaCakes118.html

  • Size

    356KB

  • MD5

    4960fbeb1b442969eb7075b1619691ac

  • SHA1

    bf61c4c5944054874196ac06e6fd2334a1cfe5b2

  • SHA256

    67824cf871cea09d84db23e99bab24dec8e239ef7d9f36f94c303fb555ce4f24

  • SHA512

    d1700b498b72dcbf73dc312c36fdae6e7bf8c97986ddb1d62711cc3e0187c53d57466180b8693603df0c748a63916c7aed65058b1d022ba8aa78d5d927003289

  • SSDEEP

    1536:JbEM9V6fY7OLEuZmIANFY0b/9KCkcSdccttUVNiLtBErW3Etddd7NLdt9cltdBF5:9EM9V6fY7OLEuZmIANSoQg4Opwt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4960fbeb1b442969eb7075b1619691ac_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2616

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dc31dac0fef574c63883c585b8c37908

          SHA1

          fec6670ae67ca9434d461749224eb0f1cfc91f7e

          SHA256

          426b83293bf84dcba393e7ffd981f35485b895b5bf8d1408589e6ee16e39f649

          SHA512

          250de780e92924a71eb7455bf7981ad2a63c5c642d2011dc738ad94745a4f787633a72495cbbfbd4d28ce17d2e34af010b06ed3cc537c9d8594149810977ee33

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3eb39ae9138534f376f20b910ce8c099

          SHA1

          fda48e2bc04bd46e25c82b198974e1d06b9fd5ef

          SHA256

          3f8bcc7b7efc4d11711a75568fb6bb92c9b23fa1e5be576080c03a5d25128a0c

          SHA512

          1638f465f41611652a2d38fcc716f07406665f01a0c6ed4478b7bb3f262fc5086958cb9cb0a29210c913ac3f364ddeea82550c9c93cc5cfbecaacc24752b91b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1c8a42f3e63f3145ca5d1fdb72eabaaa

          SHA1

          e5751563f7c27b53edd62b3b487b6c36e5ce0512

          SHA256

          9bb28bd65fe635796291dd5b2a541733d87cbe0fa6a40404c0a29542bd1b6baf

          SHA512

          8916877595f4b815315bbf51a41e630eb0fa08946ece0dc24d03a73bc910eca34a29e1130411b36029e09beda0338a7aa5ffcb9c0c0a5e8d79c65c4481c1274f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f7380c409d9294dbe7685ea19fe0401a

          SHA1

          6795a2ec8f5e986460674866a1b171e9548e3ae1

          SHA256

          95566dc2970e127ae02da31d0b9db18bcd3ade0eeb37af133c8a8281ae4970b7

          SHA512

          93e594be59206f0f2d094123825dc1b395c40c2ea5176ca1d66aa2e77ffe611d06e0ae9c804f99ff7b7caa5e49e78f89738e8aed48f013b8a9ff6d23e0999473

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          50eba73eafd4e38c256f6e8b14382fdb

          SHA1

          a911581b11b9b577dea23fc57f9fd0ce4363ccb5

          SHA256

          b7bf8e58152e64d0c0186fe32288636dd89dd4e2d11a03250df88c2b51c74ada

          SHA512

          ce539a17b513ff9451008775e545e141204264f88cabe46b3479869da5014f79153b9fb57cb1b547f2930f833ae1944319a7551c398d87bafbc278b75705dd94

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5d20a2df13e62c547fe0fdc81018657f

          SHA1

          f696d2ed514ea184ed9ceb19b0fe4addc1b5b354

          SHA256

          ff120a5684191bd7011867fc44f2103d4e7e98ea26ee92d0354f40603a9ba555

          SHA512

          7ee7d5cc92c59b98f63060271b549e8625009993f517191a3d5721949bfb0e101c42219e86503496779c0948a3686dd6fae41bbb63008682558ccdf825869156

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          74db55d535cdb3d8de1a3cdcde337bbe

          SHA1

          749bf5c6a1687e7dff0cc0b75e65e7efdfebbf07

          SHA256

          67dfdf571b3a135c1570b5cca24509919a678cfc3d1d185ec644510420f958da

          SHA512

          0a6c3150f536bc3d2ace6a9af3833c9c0cc4d9865bc75bce360763583327e80f92dd2272e09b5625c6f972589b3aa1a7373fc675325459310bd9b3f399100406

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          62e68d1436b3d91c794cb9c4c81096f8

          SHA1

          c2175f490493243b417a11ab8e0b219b28817ac9

          SHA256

          832d644874b0225c9610588f4fb55243033d9a45c832cf174498eddd03ddb5b9

          SHA512

          bcf38c09c051b8e0cda340d55f3a70b370af5798ed54893801b17866c3cc4ff0ec3d2b55183afb2720b41bf90837845b11f594fedf1a807d5df0651c9cf2014e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b1a7d40eb8b9a3ec5e5fc8778d210c5e

          SHA1

          1d9b441ab7a4f0ed2172f4aa5e9dd7d8bf519b75

          SHA256

          cdfff27e58d38ed1627d276fd8c53a5f82771b5dd72c0edccd4474dc1003d5c1

          SHA512

          f0e62ae4f64fa6d761bf63b24c183d05d7915df444a6d25ce1865fb627d838d4db2cd4342585d121ea9cec070428f132e50df6b07256d5b98eb54b71f8f9098a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          471bd33126db818b03a0cb601a478f76

          SHA1

          0e693607497c3ea2e2303d0322550eb6abcc51c3

          SHA256

          29692977d6cac4855bd8e01730e8883e5aefdaab186087814193c8e3837d9f1d

          SHA512

          57348eb58fc0c00502a00cf84faa81d90add1edf00aa63b7e8ba3f1de26fd12e25e0a952b98e30dfd5b889af849bad9d8cb2ca64f23727751268b33a0bfef41c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0cb8983bb740f129280f7af391e64c6c

          SHA1

          79c7a1b28deaa0e5b58b2e679ffa1b3709b38609

          SHA256

          4b05102499ffe155e893b1a7564784e639c476b98372d6c05a8d675f148b4905

          SHA512

          4382b94a3440ee58148c2e8524122133f044e9274b6ec8edbaf0aeeecba26047e12c84ac11a89318db007943fc1d9a3cfe2be88da967a423095601e43747271e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f80b594b2bf8fdff4def3ec46e000eae

          SHA1

          58174a37e254689ba2698c99afdc6734c50846d1

          SHA256

          b3d6cfe629390ae9afea11448810245b8e21b8cc39cf45833b2debc422412ba9

          SHA512

          51364cbc7838a64e2db15739d1294502bc3ab023002f066feb63266457db6a9a5e87b22289ff72b54f90a0fa3790cf0aaa767e2fe3d53fa17c473e6fcd3d164c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          413610f00e76c0d422b1c595cb1b6d0f

          SHA1

          049e338e27b5b671a1a7e9118a7b660d85bd4e6e

          SHA256

          c7f3f050a728e39211f552969f2d744dd6f8c1646ee9c817b879b1296d1e0712

          SHA512

          bc8e4f1cbb8584abefdbb5cf6abd21ba7760b6bc27b0a1daf6954bbd4dd8baecf1734a8974dac9700953dcd55335c313608a6d3762a5d501568f4bb62b04d25f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4f6434ca3ec2924c693b0ff093f91eee

          SHA1

          1e7bbbae5b098066cba1d571d6ba66e2ea80d013

          SHA256

          643419d227ccf5d07832444351da7274c4324471f0a6038b89c31ad3e4c82729

          SHA512

          696d3dce7757a117a2c38ec2e34e6dade7faf618cc5df2e950c2e2e62a0e3374809cb21bff30bdacb28cf3edc45f7e28a7b3005c56e080a84e6f41f85cc6d81e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          290473cb6d4abc91d3c9fbf8d44569e6

          SHA1

          3f49cccfe76e8ea3a0b9b903293155bef4d2ee97

          SHA256

          c2f6aa2cb3b4a31930718eb8a2f8f17ab33b1d4177877d3f6975d8cb7b2a03e4

          SHA512

          50f7a8f5b0c090dca2da5a2841f3270126f5b5b15fb7fe3cca235416f636e354bc9d91eedb18bdcbe00c415da7336c841faac63eb0a3e2fed7d84e3111caf877

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03bb74aeb219d4a50a73ac8931d42140

          SHA1

          f780862a4f149d84186e576b84a61c23c42eab67

          SHA256

          18ba36dfc10f6aa3e4b561be7402c243b592d570dcbbf5b8d4c3a7c9d6a436a2

          SHA512

          41c94bc467f5aae019e642784a5120c104c403e476a1379998902e06d5a45b71ce7752f62fd51f153f09771e282528b664892efcddc881346f66f1881a79a341

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0599f76f2ea8db0fe0caf439fb9d73f5

          SHA1

          432f39b92a4c6d955e67e293fd2dc205d49d99ac

          SHA256

          52a4cdce25ce9a7c40638b26c57516b42a16211f79317c0c40c2e02c27c46eb2

          SHA512

          e9611d364614ddd9e7d6fd5188adafb691ac89baefa763e80d34629997fa9304b9acf731e87de9ec90fde7ecb7b38bd7a8c7fd567a35bb39d35b444eb6ac3c32

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bfcd56979ffdaa77162f0732f96b0820

          SHA1

          cda134e52246b29f324cc8bc936c32c56e829af4

          SHA256

          18a2825e7a00e497e98422a3e5b2bb4660857e27858188db9cdb6fe005cbebc9

          SHA512

          7cdea8a47464f7f0af42a48ecd5dd991f6f5e006052872935f7aa8bd30e65a5d99ec5f0830590ce7e6df89319d7b65c9b593da0f265d87ccb4067cb34de65131

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6157832457dadf35619fbcb150dfd75f

          SHA1

          24379959d069fad450b35d197714df71535e54b1

          SHA256

          e4f5e99f7984db247113c4b4a9ea32b4d2067316c216f81cadec7307ce8cc34a

          SHA512

          640781a7aac97f38bebe9afafec70713f0f141fc38e4c469193909cd6244f2d0f390cfb374c55cd6ee45b1311c5b847388f7fd87868ed9faaffb14590f35d035

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7a02c4e65d7aa3255014df6a53434669

          SHA1

          7507cb7860b538fd273722b9dae252ca794a3c20

          SHA256

          3ad5f134ee2d9603cf1f617be2eb328d7b00fd93f19827e8071a26433caa4d68

          SHA512

          9075eb44565838cd016c8380f15885c107ed3c4ee43f0281629448ff07fc19b9210ab1818ecfa16361c8dd1fc58220984ba50ee60cdcd3e7da9d0ec463150577

        • C:\Users\Admin\AppData\Local\Temp\Cab29B1.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar29C4.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a