Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 22:25

General

  • Target

    611daa5a617b97423ce22f842c719418_JaffaCakes118.html

  • Size

    24KB

  • MD5

    611daa5a617b97423ce22f842c719418

  • SHA1

    a21f560e3db8df9212e92548410f913571bd8e34

  • SHA256

    be42af230cd0d1e885167d5c615b20f4721df3b64afda76e2d714e69154d0116

  • SHA512

    697502a8fef0098751cf65fc505301583effa771b5b61b05945c1ebd6c6740f6ec9c8eee8b70dfd8eaf941ee7b49aa5733e29d546c2d025adf83dbf34a473d69

  • SSDEEP

    192:uwP4b5na2nQjxn5Q/pnQie8NnCnQOkEnt3HnQTbn5nQTGLnLnQtKqMBcqnYnQ7ts:TQ/CG7GZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\611daa5a617b97423ce22f842c719418_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2260
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2260 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2976

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d08c557acc85799c8f027d4e7761545

    SHA1

    1bafeee5609269d4368258e21477f49d1d414e1c

    SHA256

    2fe3eb886bb4f5b449ba25f4b1e431157fbaebbab65cab7400af1c08ca340620

    SHA512

    4c68acc9d4ab1b6a62b46fc44e8ebf00b9e1000efb2e73ae5ef2c93478727340d9f8559e3146c8ed253981865649e8e436f68e22743769ec2f4a2f0d18e02b5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2742b0423c2b7baca01824ef554d60cc

    SHA1

    ae740d3eb73a9291f62826e6c069cc7fbd245c54

    SHA256

    43a1db912942a5081802e261b46f007b385b18681a2d507a0211279c1619dcbb

    SHA512

    f57cd571c3bba997587242ef2437d122e9f704fcb1e4457fe30ca9b70366147660e2629238e71c0562c4b14810457a7de4218244003d17f58580976d28cc38a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    940ce35be9fac0a2a86dc618128f7889

    SHA1

    5dbc936392f4d44a4fddebc0b0bf592a2e531fc5

    SHA256

    9e89c9d827def5cd245c48d4d6f5419dd3332afbb5844429c7d69fd06034392e

    SHA512

    3ffcc1afb8b4bc6a32fc6bc0197a85b793ebc80c5750aad15e09b45d083ec2af00ae030090be205448dd27732e64acfe541bf6198fcbb4aa1c2a123aec132644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfdfa89cf425f42e0618ea2f0e553720

    SHA1

    8fce03c25b1f0158c89f66f9c5089be0b4f05acc

    SHA256

    01386842c5055c6f6f541034a727db26ad9ddadc7537d570837ec44d420a9b06

    SHA512

    e970e5a3ff8d3e2bfb8e89fe900b9435e321d22fdf04cf4dc1d9351ba81f632c65eaa9235556c86046e32056f060b461697a74b70f03208f66f924ed745d347b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    125f69d3c7644f7be71385fcfb5da156

    SHA1

    6bc2e531159f3d707cf788c9dd3462d9403bef9a

    SHA256

    61f126d6d3c81e48ef426fcbe83b67a18c426af558ce7fcdc412aa24d74f444e

    SHA512

    bf7850b78c5bef06bb0aa8bb7f217f941c3e01a97430cd8a55c8a2e3a2371098adfcc5437d4dc8aee3c97d3d6378514f516905916042f816bad5263ea5c7d886

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8952c5018973c697f61d3fa47fbc1774

    SHA1

    33e7460e81d4f1cc470ab1983fea8efa58b5fd4a

    SHA256

    f88af94cd3e418f6f54faf8c7d691a9aab8e8011dc9670988acc9dfac702547c

    SHA512

    dd35e46ad30b6fd2c20e3db7f6c8d96e4ff68bd4b7b23a64db6816e36dd0588b40a4e3b08e89f014056fde6b9d20ef7f1503bf2bb1d955560d527f150dd66209

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5cea75b8d67dfdc5b869d13e018322f

    SHA1

    d06a705bbadb71765b0550dff7e032aca1e7d00a

    SHA256

    c1c0136f9232a639744827d20b2cf3afff38da2f4740c212d5ed26ff4b5e60d9

    SHA512

    b4d4b72e3a43bb6bef4d51f3f26caed816eb1e6666665c8b96b801b4ed73b53ea111cb9cd990dac7387e826186113fb68575034cb93a26de702fe0319a6cf150

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    871881e25a886d82b2ec75e1a37f5cf5

    SHA1

    4dfe734c2aa97156d9c9d376f4f1499caec1ae79

    SHA256

    d9ec36b2f7e2ab7865e8180b91e980b66f78b5fa742f0206e52013cb9bbdfde9

    SHA512

    5f1839ee89f5704aebbbc393559278ce99774fab90a62bf912c18c2319160b10ec971d53f038c6a58eb7d733f220d49f8ee697b7a7d2c73337115c15e261260b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e3ca402b823a71cb686f0609e4192b2

    SHA1

    79b716cc0f0e15f5942ab6490825d4b006414510

    SHA256

    af4e024ccfb9546bcffc14175b514bb530be412bcf210dc65649286a0c52774b

    SHA512

    7f49de44bb70a9eff7e60403b1437d31f99699a73260d25f1f323fa1945cf050b351238cf514c8b63189be87bad4e2645d80cce2e91dd01c4b46d2102c7e54a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c5838b5b748449f5c16c9bd15b66c91

    SHA1

    b312f7767e39bcad334bb933c3781084a057c73a

    SHA256

    ec162c6d024447381874be203f8a942cbc63768eed6d708a4a8e573f127a4c56

    SHA512

    de52c05254bfb25a92fcb18f2ede1d55cebe13c3125a7bf19c6a8e31cfa7eb8bc0e167039276c4951eed2ee0da8cfe6cea91c39f2c03a86837706e843fa17b7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0db8016883d335da534cce5262b10f76

    SHA1

    9431fa603bc9fde92e3fe4dfa40075b39bea8418

    SHA256

    a9376563eb4bd5f9660ebc08752e7761df7c2a5e706eeb491d7ef3842a851c2e

    SHA512

    a6ebc2ec4956d455cb51962ab618ed8624f13892f63696d0976a98be633c387490aa7787689b02a6a7df18658b471a0b99447ed18009e18db21a268cdbf3efbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f57ab52fb9bad169e9ddc263876e1be9

    SHA1

    0f2f4ec1a31ca5e8ef1e09bd33e46a2b94c5375a

    SHA256

    cdb6b7d7f4b560ac8d95e7a4f79135476b39d50a00d9ef425c8d88b106c62df3

    SHA512

    3de477604ae53b88c2498c1321f8bc435108be5c5b39f235591c6cf25aca21065492278b94b4285ea30384f4da634fa8b710d03cdb43593292fbd554ae9fab2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1c9dadfd4b52f57e4e36dd2ec9d786f

    SHA1

    2abf7d7a4b7fda40e00dc05a892ca56240f32adf

    SHA256

    5a095dac52f365cb5c30148cd970f2e50e3c92f6afca215674cfe16d94ed47c5

    SHA512

    1ebe0602b5b4f21db6a33d5e891f6c16f56c95d7338ffe365c82933a681e6506a6b12c5b0bf102b9cf4abbf3d75cbc7f098b170374ef1c99ad2aa67e9546c5d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cafd79d4a50513d913aff9cf7ffed3b5

    SHA1

    16fb62bb247119b8e2d8180e1ffe4e918edc4dbc

    SHA256

    902cf50f375d069c49644e68c60a7d394a887d88374979197b7c7db10a3a04bc

    SHA512

    185c56d783ad0fae9ac0d2b88cc6ddc7b4d2be1311c56bd8d39d5ea65f1fd6c7ebf9fa561391bc999472cbb7034124fedc67d7e0e18b68b3373bdb286b5fc18e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f20b6ee18219be0184bb43e108794f5d

    SHA1

    690b218a97f46bbf15b2ed4533e7f5a660ac4c40

    SHA256

    fbb96f22a8be1b8c27e4891116301e94847f0c3e022618fd3404273d396cc419

    SHA512

    3f08fe46ad9e63c05324fc47544e8136363c3bb1a7b5711c1cc8c3cff1676922d88d959b3ab73b65a1a8c7f6f078bb4f48c170a4d25a5c50e4b632fc1170414d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4d42ec3fa5be4278f0cd1f56b6e06ab

    SHA1

    558295337312f4425c83162620fb4adbdf2af874

    SHA256

    e8ba78719c9221a1ca78065d6b1f223449dc689a9501a497d13ac758747af92f

    SHA512

    74a5975b5d8f743f5225fda7d7ecd3ca86ade1b8fc13e651945f0d99e7dc5f24d8e24bfba8917584027d3f47769355120303acb723eb975381a643345337c82e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a447b23d4772548c9b808459268f28f9

    SHA1

    3317a03c469d49d483637e6268da2a2890f64749

    SHA256

    bd5c5efe46f8bbeacca91c6130b6a15c1e480957282936f8b7fd57d8a04e321f

    SHA512

    fd95410959d148f2e0fa5e00d4be1864e47d69d1a7bd8fa50732c3edfb8fccaf0b8979dc2c4cffe8a2ec9a58ca0a66ce1caf203a49c55465e2ee4fd2820d7911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad7fe3d265babdaa198e4cde4a61d442

    SHA1

    e46c19125dc532bd8d94bc17701d7a6d3449671e

    SHA256

    b17f01f6462061351fbb510d66e58c05daba0031f81de28ca3e28c96cacecaf4

    SHA512

    3b4a49febe51119323f0992d4b2d530cd806be318dfa9df7ed197f17a3f77d2ca58bec04d9bfe49f53c8db6f6108a781ca2e57e2201c03d36e8e46cbee507189

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b817c9d323d7d1809b1f6d5a1e894276

    SHA1

    4b0ca22fdad86f57b9c431d572017ff3559e65ff

    SHA256

    cd1a593ae30c1f1596ecc24ac67b9e5d36b82f9ca29dcadec2b3c3b76044fa6e

    SHA512

    ec7624504a91b980b0d69cebe0559846de18138c8c5ea6673175ca19a524f25329e8fab88ca3606f5ea3e8d9f4908607bd52db5c326b75d38d99352aeb76abba

  • C:\Users\Admin\AppData\Local\Temp\Cab2D99.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2E6A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a