Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 15:30

General

  • Target

    4bc6e99587dd2ce0caf04040d9766724_JaffaCakes118.html

  • Size

    4KB

  • MD5

    4bc6e99587dd2ce0caf04040d9766724

  • SHA1

    3183451961fdcac705d78a30fd37e49adfdee2b0

  • SHA256

    7b555536a57018c9159103617fb78bee872222b23b73b3c41f193739ddf4309f

  • SHA512

    5d3f8355fc2c75d03dad6347d53ec8f660a4300712f3dd3e36c94397c56c170573c6c0c22c3a0d6dc9b5d97508106afeb12fd1ddbbd78bd852a4034d3aa0a16b

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oXl0Vd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4bc6e99587dd2ce0caf04040d9766724_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    294f5f8a7a22ee3fd152faf7a19ef62d

    SHA1

    ce89a11ffc6a5b99d52e107a19fa51df5e188888

    SHA256

    c5346dd04a437b29789f875318256f6a11039b8897f48b3c5e6bde954b94004b

    SHA512

    fd8eedbceeaca4e07c696218b1e24138616e503defa556cc3a24bf5449660cc14a2b2391ab5e038aacd2d081b89149504f6c87ddaa7bb994bab845a59c2d19f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff3fef8e3282173f325aacf7d9a5ff9c

    SHA1

    3c825dafbb7528b6c20e32842b61b03a71d79daa

    SHA256

    aa73ed21a86dad0b03c95112838e2efa1a6411408ff6e861a5d5d0a197d04c59

    SHA512

    60a0b12853fc0eae5b9766b1b5b79441682b327cee3acf1d74c37133212f863f13841dd55d25fd27f8909cf360940fa7a85ae42d1902574c0d4c5010628140a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f72e3949c9f4e289e3f4a9dcd9d415f

    SHA1

    ad50791540bf5a239ec568cddfe6b885fee79dde

    SHA256

    a7594b4eb6298ed4abe82ac5059c574cc8983b858ca45a4a17d7de7de45c1254

    SHA512

    8e63229de2be5628fd59f2835ede009339cced03818a92ea3c6543db1ed7d2c960d93a62948f77bc02b6f3d61efd35133a39460a24f976a1f7a08a3703928799

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b166e28ec3861cc0e76f4bf92809fbb

    SHA1

    05928245e925be5b0304112858dbd237a7884bce

    SHA256

    6f8471b81201602799ac5e6371cc89c17a14b9ec6e9b24d8905722706e081177

    SHA512

    3d57a531dd84acc74bf689b52fa0ec703184d244c493318a6e6ad0490a941fc872522587e77fb60e3dd78dc7d6ed3472b656f4cd2dae2ddcc59025540bd33cd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50084114828d90ee81dc93bf7eec68ba

    SHA1

    0f8804f8ec772b2ce6758967dd653332e5401086

    SHA256

    93f108e1eb01d58cc5f3afb875b9d42be9044cf379d50cc497de6fdfdec67a81

    SHA512

    0890397103315d430f447f639c1570438b07a2b462afbc4a7386f5246a655e68de8f28eb834a4d3437eebecf0ad98d5ae782e6801d34a03979fe40507671fee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f38534be37b7d5b9fba694e563403384

    SHA1

    64a41b5b8458f75de45fa10209260ca899c3ef93

    SHA256

    e9d0ab20274872ef93768d1b7d76083ee75413d99462c3e8eae46378c6212910

    SHA512

    00a1a95ecb3cdda5f1ab4b1d658485fc8eb395dcad982621d89d43ad12354bf9d0deb8f2490ff27cfacedc6b0cc38aa44405939e52ef28cabf30945ef51143cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8be71c1511f3a51fb0cf854269de804b

    SHA1

    854b11f260fe6c3d252754e871dea04488444669

    SHA256

    ae0f92fc4b73ba6578b0e1a7c2f475eea6318a791d1e3f68189e1cebeb01740a

    SHA512

    d775d67ed1088a9ef6ea6bf805ab5bc5e843d09728937691017707f58679c648e526d837ff7b4b432a1f19a80257f9ac69b0e3acea122eede894cd675dd32381

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e00dceb5c8e1b6e6391dbc790f52f91

    SHA1

    c3f023a55f5b4b729acb543f1cd054e119f374f4

    SHA256

    cfbe1671f38cb3b588b841f6f9ad0b0a0a20e5b6eed1852ee4f1597b8e61ef46

    SHA512

    d36d8cce66a830d79a84911b26ce39c210aa3fa95b10db4684f96a2e3145d4031b522f69a96b0f1ce056faa65b0c69c8c7a181908fd805166f76f84ab79ef74f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dba8a14f12bec00080459dffc6e77e96

    SHA1

    e4f9a0936185973bebee82d1c6d68b54dfa0dba7

    SHA256

    d23a0e7e86484857378bc4ca4e0e3858ec0ef1c9cbe367dc9857a92de88d7aa7

    SHA512

    f51ad278fde2ca10abd520af5909a1381ac30618d31deaf45e4f05c7bebfc13947fb408aacceca64d39873b1a4c95a38e0f27cb9c8815202acb96f5f366fa93c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b957efea002c65c9f3089c788e0e36d

    SHA1

    b4a60d0a096877e2d0ff7a166c05982ad3acbfb1

    SHA256

    0033a65eecfa70db52047994e62b0609a67f10f60bdad649c49026e0eb9fed2b

    SHA512

    2e2474692f3ca7774443be708d756070c7ce9af08e1324cd561d62abcbb73ce82af183948dcb0d591d9a5f1daefd66646b414163683cd5be618dad0987f40d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f5e3fddf958b48d4bc99bdaa8a1b0b7

    SHA1

    089794db457794c551bcafab9b5f64b6b997e458

    SHA256

    f9d484ae3152fde9293a345deea306bad50c614e2deb713b349bcda4251d5f4b

    SHA512

    3f8190656c54e6fc2548e02948559d4b812e969c97ed806b791bfb80949edb6442fad77275fca80434a52f1fec42f896fd7c604534b7ed57490c9ff531a325a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67f04b3e753b9f3f5524b0e5d8aaf19a

    SHA1

    1dffbbb3497287bc72ba5bc51e73270db8195158

    SHA256

    3a3566cfa30489b7b8c316b47ca9b0dd29dca2a21ba353982b06175a5c559122

    SHA512

    d8bdd4a7a9b95afaecd933b9dfd9af20ca7c19bfd23cb6bc1938306a9057e1c7d302b40929760dc284444f47e0e910f897bb8a68909451d46361b5b48fce7386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ddef5827ba70cdeb3891487ed6d9cfb

    SHA1

    209a499452086b8c8d659e430a18edbc93ae86fe

    SHA256

    94d6f9482e840fa443336c5638983bdb946aa7e197c7f80b22d1acf6778b84da

    SHA512

    caa354c971efce71a14b3adba0ec22fcfc586b9b820b74629c48d0804d0a49a6ee7ebcb7a5e7721594842812a0efd0933b2c74a11c8e06ce10f2b78ea92f738d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab2db6b37a5026ad60f905b91011419c

    SHA1

    7864867c24d8c55228f0c9c9df3370fcb1b01a5d

    SHA256

    6d926f2e7cf9ce2a543bd81d978993c4dc2396db7f5e6dd7000a87bd1d5f9f6f

    SHA512

    a61cf7a61db054d5b18422f396f5821bb40022e5b7cfeee02a6b1e5491c2e9cdf13b975039d7a1677f6384c37a3c3a86f981f4afc7f114498ddf9e4e59e91d80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a85ab350f7d832fdca06f02f54166877

    SHA1

    b7db25b9fb5d3bd357e229a20fbec20eaeb7da5c

    SHA256

    9d42bd1a3f01ba8cebe6e0a5f52977a6c26ebfd1ccbdf7e61a1aae8d2fe59fb0

    SHA512

    a2750d308910cc1032e26ab517e3982a49b21220af47e2a474d656b2093f455d9ea2f85a21a129d7b9b707672dbba30c118b7bb38895882598e0a284b6d7b620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f7110acbb68dcb2d603a7dadbde134f

    SHA1

    3cb2cde4c6c6b30dc37fba5f078e3f7785a76e63

    SHA256

    023d78a56df0f3e8687d0ace810da92261976b54e5f71f0932656a48bbd2ede7

    SHA512

    124ff1ec4e6f6ea6e3b3d5b7db8f3327d10b7dea8305daa8e34a7205442d2ad5c6410649e374340ca278cdb4b45f40ca904445cd46d774144a47208e546f8a09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6f85f2fcd0a5c1d31487e1dc748d3bb

    SHA1

    3f8a4187dc45939fc5fbf817f48a2c2ab554b220

    SHA256

    d65ac8f3c8ca964247f939ab215fb5e244f9b8cde41b902c27066c80d0cca894

    SHA512

    8fff4d55a3125837eedc3834862ab37b9ae5117aa6e99fff045597ec0e7b11493b21b76871d6fa3384d0b0530f3c114559ff2a55d51be5f207de7ae59db4deca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2426bcb36fb7ab6781184858779b0b34

    SHA1

    9d65af38e9fa6727cf6e782e0eca5963389c6250

    SHA256

    045554571524de7e4eb4841f576e91514312de74e402100f860badf99f33e086

    SHA512

    2a381b66614ed53fefdc25486e6d8fc40afcdec834ba42253160482693c1c0853a628d328ebe5bf3fe7be0ae72fbbf334945396eedd000cc6881558a43c00f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29c7c36b196b8d1a702b7cdf85ef005c

    SHA1

    0045a261b709c041dce222be4e3418081792b75f

    SHA256

    716e914649fa088ba2893e514e3de701f0e5b03a398d6cd29fff82ae6b1a5b0c

    SHA512

    d8e85d6cfce6a7fd5fdd4c589edc1a3805b72aee7b2506061374c4e5d8966ba430918c834a80c7ca58eaaaafae14d67052e801151cdb2a1e25b734d18f9b1d17

  • C:\Users\Admin\AppData\Local\Temp\Cab29B2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2AA3.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a