Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 08:34

General

  • Target

    5e20c307e6fa99f9b6a87864be38c61f_JaffaCakes118.html

  • Size

    4KB

  • MD5

    5e20c307e6fa99f9b6a87864be38c61f

  • SHA1

    415f5b7146e394f4566d264c078b93ce1109fe42

  • SHA256

    2db10ebcd42900a00882c093cec52065698865f75af1def09ff6a96bc4321111

  • SHA512

    b79620e9c2f14ba353f7bf2aaecebc22d986147499b6a1bfb66950e3b3fbb4d3b95c88a13c53fcd4ffadc1c52ccbca57fe8ef84d0ed810c8985ff8f209473250

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8o+Earjd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5e20c307e6fa99f9b6a87864be38c61f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2256

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c84888279c915d9305f69708f0dc8e6c

          SHA1

          4a13ffa88b24f28d819c83b959319e0d7f3abc74

          SHA256

          b81187eda1829ced21836d44cf2adf26ebfd699499268d6a82eb5b015257a90e

          SHA512

          b4afdf5aab07ce4732a20bc6b023d7438441b8745bf74d1a70dcd92a07b55936e8ed2a9d38a89448cd685acafee6479f5286327b52bdba60781749d4abd5d3b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          955f2bc012cd1920c50e890a037f4825

          SHA1

          e1c20ee49656f9457471cbb6c5941caf385f4e13

          SHA256

          dfe98163b5f8841903d8c9b53fe3a3cb66876ac0aa4da29f7d137cb3b966b3d1

          SHA512

          a7fbb3c72845c3bee8248f40c81d77b98a656a1b9548620aecc81f0e6a918f4e9c02fee221e505a5b9b3839aff1e45e6d0e0601cfc5cd5eee554aba30fed000e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8f19f6cfdd6dd782041dd76af99a4179

          SHA1

          dee42db4071074d1b4c22af6e61a499402633777

          SHA256

          15202562b4937075a7ca605d98626d05a509577236105b900dffc177dafd8899

          SHA512

          a2de24e59ce55b72c4fb3f7547ba53bc73fdc5f7c5a154a539d2e2a8514e1dccaeb0941501b103164b19a2a7c06ef8d78244d87860ac64054c1a0aa3a711ab61

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6935027b799273a5a73857e9368a894c

          SHA1

          d1a9bf54b9a1874ea1ea0bcc0632215bbcadb068

          SHA256

          dd391f3ab0d9e6bd6847e9bbefffa9d1cd735ceeb9d972796274f6f08b6d0209

          SHA512

          c76d21bd236704294f96e52d23637781426e3b8808ba8f61e76ee2f2ccd6045734fd91be2bb976c955d80bf86c6a7f10331ed78b57368c8c6a247ae80e398fc3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9d6ca3edbe2154a6395ef0b27d1f1206

          SHA1

          c9ec3184e714569f2bd93125fac125244d345af1

          SHA256

          9bf546ba414ad302e7e57c8bd5955aa0b80d0c80a4cbe50204284a2d7206b541

          SHA512

          09aa5e0cf1600bc30b8b7a761e952d40abffdccb61d4a02a5e263a5748a3a78c560380fbe37313c44a4c869b578d317ccfd4344151eb71ff486c64ecd5090299

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a5567bb83ba5c17a77623f07317fc5a8

          SHA1

          9859bf4747a2aae598b0e7a9e955787cecd12400

          SHA256

          cbee091f930569ca715ed34eb17c530067c36c0b54e63d4ef094331a4faa85a9

          SHA512

          68697949485ca73bd60586230ad2cc92489bb5413559ae25834f803e805a02452b59ddb3d0342076120913e98e448d31477b07763a06cf950469bdbbd77f092b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          245286421e9a0294eeb0ac29a5513e9d

          SHA1

          6dea3d06f8b607be0d47ac9e9f338e04e9739506

          SHA256

          0c6ba0e5b2e56ab86ab4650f0428c92e6f839dd89564dfc524c8cee138cfdd30

          SHA512

          2b27ba22190b9c3595c71b1b96bf1046915da89acb488f06bc88ea6f2f3df3b02deec65132a5961c751cd046215209264185478b385cd02d08eccaccf6d43d90

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1f2afbe7b380ecd9d8a01fb67bfb58e5

          SHA1

          767e21a446a2efa21ee5b30aa0f82d1fa6b91e06

          SHA256

          18b236274f88a245ae82a5b3547b2172b18f05f6554f81e2e244d8cb61d1e81d

          SHA512

          b62771bc777b5d1237c7a95d6eb513daef3baf489a2ede9ad8be490120a5ee3fc06185aba022a8f3c24c5583091948908ec8892043105d60cd0ba9a0d83627de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          20f18d6ff1770bda4dafb11576142681

          SHA1

          a131cabf22387b5d9923307241aee89a86f54318

          SHA256

          90761e1dbbd4a4e9042497efef94494ed0a488e098b3ab1b5f822f344bd0c0b8

          SHA512

          f8e628a3eccc02951b231076155f88eb6ebf61530f62fbc577e2ca891e8fdc0b843be6e5dbd6f3554b51b5c002ead5f1a6c3b2ea6d96d463c4d94f68b45956b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          74c28a2c738f47e1f141db6d4f5cc697

          SHA1

          593dff8abb941d537e6c8e0f59489bff99ef5b60

          SHA256

          22bc9832666ea1da2f5b62d9f0840ea3ab2f868c70ce995ddf50d4f95f6c03a1

          SHA512

          7c93384a36a32a4b91376d20e9ae9a7b53f3c8cbf66e5e40f43bf358b02f1377b05c829cfa2a9c581d75f96c3ba117f2ae580910e8899be8c4d843e259f6190e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24913efc783b8b8a614e78db4fbfd663

          SHA1

          db81daa4f96669f93764185630133e836331726d

          SHA256

          973bef194248b29b84b8da517b61967b4fa47fd116bece344c31c8f43091d116

          SHA512

          baa6ad9abeea6f9bdb872643c92a61efd8f861c9c1e7a83f61f117554ef9be156dfc98646b58d220ec4005594a13471a0d53cbadbc0e703c869da13b8018ddeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          53cfaf359d6043bf1e884969619e56f2

          SHA1

          4c9c4eefd8ed196987403b33ab7f74650417c0d1

          SHA256

          20ac7efa21dbb4a205e1fb3ad0e38755f7e5373f855b30ffe903f2a3401a9105

          SHA512

          2033d2b29bcc7eb999d80e337c566c30f09f8707833ef0bc1b0c86bb2f1a914f178a38d4e5c0e0fedc3750a1fb5d0a2f3ec796c56d83a590c5e03bd3ad3a750e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9a5c9ff8601c7955473646b9fed65e40

          SHA1

          1821db1480c6de14e6b605c800421b62defa7617

          SHA256

          3cc373ba50da5a20bfde3d25dc6a64830267d9e83b3a9af3c3cfd88fa4aa2c48

          SHA512

          737ae686df6f1bbf69cfd242868ffeb8b8329ba1c9e1a0de0b1ffe8f5d53ae12f3b9d4a110f70472e7c0f313f771aeb1ef8c2e9cede1ff87af8aee7809401ad3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3972a41ef295ab97841019522a54da9d

          SHA1

          071ad3428154e250e3c6b46004b5d922f4dfafc0

          SHA256

          9bfcdab0d0d475b7bd7780b99d7bd6f9b581a11cf1b42ba0cd8c657f27ba2828

          SHA512

          b32afca43b5bb0532e1aa80c796179cb9d910e862bd5a35b8292b563f26da254723e0ae1bf0faf43a937622d46514951f3069e68b5df9d4e04e20914c95870e8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78c0aff76b0acbf2fab5fc29712cea0c

          SHA1

          641987ee8998bb6f164ece5b91a6b1d26925efaa

          SHA256

          e1172b9d074d6c76a71bbfa2ee219326cc41db6e21fb95e41daff6b2262ed7fc

          SHA512

          afe9c1e2c3553c0e60715f65c7875fc9707a308e9458a35a2bde93bdc5f43639fe0c7a34307b28616198dffabe54baf7ac6c102113a804cdb097e86bb97d6ba6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          91b980ee18a416c470c24a95781b74b6

          SHA1

          8016af4892f47b1e330f2557592a50395efac148

          SHA256

          64a1a9277bd7064eaa6785906815c4e85bb7dfdd3b8b4104014d96c5d1c4d47c

          SHA512

          4219ceebc03642e589eaaf438aae2b4117d8fc1a98e8f73b8be6d40e396f2896da802804fee58a6e6ad6ae40006da8d9ffcbf189d35217637041c47a44f24b00

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c2a0e64ad26120811ea9ea33c78beb8f

          SHA1

          cbf4a14bed74e6a8bcad4c4e9886c5e6030518c9

          SHA256

          929acf66aa97d161e6993a8a85e2f2a80674809a37feaf7cc9b847da513b3408

          SHA512

          2dea034220d6f3aecc6bd1a9bd728f58c607bf194df53126e86533ae1ee1faadf5ee03a540bde64abd52e48c2e90dad9ef371560b0fdea1c320e36222c837a50

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e9102833885bf5ef8e43102d3d4f7d00

          SHA1

          4e5a13633411e5666bf8f6bed7039a017fe8167e

          SHA256

          95b655733fb2fdbb2c91682b2dfaf1051d59cf8bcd366579d87aafd540b435c8

          SHA512

          3d46a1950ab5dbb7979d47f6d61443f8c2eaca1bd002515a73bf6e3d1d26b0fb5634dfaa0afe6af6c8bc6a572bebf33c3863cbd581b27004a4b911e40cb0fa96

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3e04c127f5589ef56b96bf7d3ae94287

          SHA1

          564c8a8085cf3b4c1fdd7373e720e87c4c419038

          SHA256

          af2c17872c5e6215e0d4028b9c122a53256714e95d3e4519def9c217d1263b12

          SHA512

          869bb27429c68200cc14d53b91c7d687f8444abfbd9000b9dbc3bcad83a1a4998121562527968cd19b2c7b90edd675a86e9c2c632153faf11850450ba188646f

        • C:\Users\Admin\AppData\Local\Temp\CabAB0F.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarAC22.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a