Analysis

  • max time kernel
    133s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 04:56

General

  • Target

    497e8138aff2e28662d075aba1c5504b_JaffaCakes118.html

  • Size

    4KB

  • MD5

    497e8138aff2e28662d075aba1c5504b

  • SHA1

    e00db0327ada454cf1adb632a387b1d1a9b9d181

  • SHA256

    88e5f6dd095d46d45c16b65023524db9cbcda141b6e6e7c9f7b28ce4c1e256a4

  • SHA512

    4d6e436616a3216eaa3485667809de6fee3b4459cb0e50725291d2a027f9d590ee7eeae532374fa21bb48948cc4933f76576b26c49e30f519b6c1429fa5c1f51

  • SSDEEP

    96:Pk7hJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oLd:Pk7hY1aEFHVKtF37sNjtXATIQFM93pDO

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\497e8138aff2e28662d075aba1c5504b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2988

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b2b635b365b4f741543d3b27e3e0e132

          SHA1

          d86c6ee26cf95f55ee8eb0ff432cbd6040d04885

          SHA256

          3cd0d3f49c8e4748bba97859e3c399e5bedd022a364975597e6fc17a40f67f28

          SHA512

          d281d17c39f7c427a4ac08a8568c213846c81fa63a63c17d3ae7d863a0623b59a4fbbca4a8d80bbf3526236d609adef57c595c610c3b62fc4161d1db12f78a1f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46b3cf0e447a06b523612e2e49e4e3b2

          SHA1

          641988cde9ca7417fc695a85ba929116fe64e737

          SHA256

          061174f5285f41aba1e0bd5e949a5d04b94b3c25e67e943ca0b7c1388c049d66

          SHA512

          641acddea2dbe1f6003f68b31f978cb322ea882159c4db0e5d88924d42d2e3c156a92c6fa8f377d3c59a71c40b611901f1e9da6098166bd6de56f806b78459e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          63380bb33a9c017083884fc431d40dc5

          SHA1

          3f5214784d0d45035a613e8a9dc17791a64fde39

          SHA256

          94a205ecd6921a5eff73f27710fcda37cfa24d89f4f47c4ee1259d0dd431a3f1

          SHA512

          5cf3d44a14db06261129a88bf71d2fb10397f6728214d65409611915d450bfcf7bd8bdf477c107b9508ea529f90e21df93b560df199d31ceac18f66a6e6c336b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          07cda365731e1c01cdaec6d8523757ed

          SHA1

          6b0599f95ee12043b5ad4c7eeef3d2df516501e4

          SHA256

          01cc6c34eb9f5352d94cc14cfc5388341906ae1184d3f50beac6337e76d11513

          SHA512

          71424873ea409fc84b993b34675ece0c6de4102f61142cd0c10aabe43c8a4a2d7a212981a297c6eb9209f4ba7c1479f3547f1e717e590f8c40af2bf261c54765

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e4dbbc4074434f24c06f10b2dc026097

          SHA1

          91a8289426db9103b4cb2983bd1773e3c2c878cf

          SHA256

          f107374cb7678ebba7be71847d67580b156063a5c6b1a10ec85a12e2ff58a120

          SHA512

          a22cde0d5cce7e2d6dffa0d0fb18aaf0e7cdfa6a855c16cecd42af8c31f294cb3e61636df84d55804c7dd3145a37c79968e996d49441796c313679354e015aeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          970be7c6d98639920c3138c05eaa17aa

          SHA1

          d1f5ef054192dc93ec75c325959498b11ad3f8df

          SHA256

          f8c05b96d1ac012ea1116da05e9b6be0097ecdde0ed01062c9b443b85be50906

          SHA512

          9e347327b6ae08008440b573495aea7d2156f65b7605ef46ca95f5011ef9e8f999db15b37e2b48ca4c4ea456a032dbbc0857f6342e43d4b8e426e087799dd37a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bf92f8910d3435b011c86f411b8e8e7b

          SHA1

          9b82836eecb2a4da3d960a59107a357f60d071dc

          SHA256

          7378385b8f18fcc7763a7928f27afbbd64e474972a3ab96f733f6b23d12323d4

          SHA512

          2d571782f63deec77a356b7849ec12508b6e2aca5e6696e693c45c5287faebbb765d611c2e96f54246be884466ce900f0c5720ddd463d0662ee19e0954749358

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cff75dc2e72e5724cb034234a704cb26

          SHA1

          f7c6be86080ff60dd91d38d27f8de1b7ef4827a3

          SHA256

          ed978f7452c98197d4da616e11f9893214d51399de9b466c464d365270df952a

          SHA512

          f377beeacbba3c1bd15af960c5f6440d3800a7860b91cfbbb6ab6427fa6ee1979115f5a9d53f7eb41387cae16fde367d75fe921ffe39f209b252a54485b5e0ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          196b2c51615a1eb8058a9dfbddb56a3e

          SHA1

          199c3c4f6e9c78855f3838ba70e36d23cc85331b

          SHA256

          93a798f7d17251c9d3b14f184c157cec8bcf7100041f9545aa95d0e511b0fabd

          SHA512

          51f5454e88ea226cb797f5d2a968b5b777e9b4e126d049fc2c9a5246dbbb110773788fe1ebf57bfe0af89d96e1b91533777945450d496a5fb733cd88b98e0a73

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5c809f370c3151c1feaeb84bc6b76a6e

          SHA1

          e527ce7607357d37dd10522bc1bbb30e4c8be239

          SHA256

          4f7ca8598a47db2b5a94cdeae7ebacc30b9acee1b1a6e9995939619765fa8e70

          SHA512

          4d461ba8261fd67b6409a148effc733a04be27fcff2c1a1454bd5c0fd760b23d6f37cccb055924b1668dd185e0e1fffb23bc6b3747ae400d3074815b12b3435f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1e34756dca4a03d560dfd50557afce49

          SHA1

          3b4e7df4f352b5b57ff2609517a3a1bf79247fa7

          SHA256

          7ceb0e642e870baf5b34779f66671ac7589bbeaaedf6909d9a163bd0607fcbae

          SHA512

          65e634468785ed7c6f7a975e26ff8cdf3e96a3a5a70b8b1f6a0682c892d405b0fac80c1ba49b10c72da6af65b2de21d50672e311de98bf287d8f261e93f4e965

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cd0a1f91179306b52c17afc37efcce2a

          SHA1

          71a41b10b19c37a3beee14be38c0f19870f20f01

          SHA256

          636647bc413eb226d54bd949311e09cbd09186e172d458723bbc2e7b62ab1aeb

          SHA512

          85f7e3639d04e9679ac9b1d108e0a89545b9158442f222db38a5698c56b8654091fdb29c301a6a74fc9a284ae1f4edbaaef8111b96b02728edb8fcaff6b0c4e0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8e20a057a2d28f9a474b5b5119362ac0

          SHA1

          7a514711c87f202654d6c9a77b9cb64570cf4952

          SHA256

          2f71909a1ccc812c2f3868942d4733e51aafbce8226a3f370c7280a1df1e18c2

          SHA512

          3fe42cbb98dce16a4c81d999343e273766075dc50b28907a9c6d9aea72747260a3ff7a715992d90aa4ef553da0e5c674e309f14296f37559670161716c6aa507

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          32f804019a96b7aeb753039421b3b766

          SHA1

          64ddb952844e77617807382161dee8f0f2742b5c

          SHA256

          87b60b2782735ee34a9c112e2a2e39e5b515c66d0b22f9f152c539b064763c07

          SHA512

          61f7b3c5346664b6f6821135890df748d22c4dad1b15f27856a3178dd63c4f82d296cd54489a66fe67b1295a154e3b443ac2e75dc4fcc62edb7c926597a0a7ce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          45b785ff10605e425830dab11b28d681

          SHA1

          254d04019b3f876d45a6a1e5860a88cc2da32d29

          SHA256

          e64474a3e6726ac2af944dd4a4b67f70920d1c8a4bbe123a270ba5b035938c0e

          SHA512

          d2642f4ec1ea50875fb913898d743dcceaa53225c643493634180ee94ec2c3b329864d00b323388c0b58547a5a4cd98dc60dd1d9e36b3a9fe6f108eb69f9f710

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f01adeb4b005000cff59b0cf2ac92873

          SHA1

          eaa411c0003a7565864f5a252f9a56c293c0e52b

          SHA256

          185d8bf453ab3b4dd907a540f9daad87c89ece9a7a90856c27a25f31c03a4afc

          SHA512

          d4b81949194a86de821cfbff3a65b2f86ade749b0a4e9c6bab43ab4f85c4746769f1ff70b35e6889cb2ed5b207bbf450f3a190dd471a71254b09a2f6df066470

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8f6b8f8949490d19d29d37ae835fb326

          SHA1

          1e48a36361f898fcac0f7d9e066cd1fdbe043a25

          SHA256

          b0eb101fc9d45df2deb3e7874c8fcfbc7f0de6c771cb139ef051021a330029c5

          SHA512

          18227f7d5add54d941f3b0f5275dc6ce108f8d821a72d58b4aeb87bf67e16ef376480b7ea7dbd09258b2a456222e82e1f9df0a249380cbe7fa71ac95241b124b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          913798f162390b9b6bec7521271bc137

          SHA1

          a68411426097f97e3b9d87d133defca69a1f4aa1

          SHA256

          3a2ccfd55d454cc4a3067f4f67f5d1875e3fd7b6082c93b856ede74c80d14b7a

          SHA512

          0cb82f9eb2937b08b49692134d4122fd86ff5d1d3f04ec27c44a6e5f6c4fdeda194e8f4e37f2b9c02af5d6d8759ccb86b4951a9c02dcadaea54231052c3986df

        • C:\Users\Admin\AppData\Local\Temp\Cab36AC.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar378E.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a