Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 04:19

General

  • Target

    620110dcdfa0ab9a4e65dd958cc2c443_JaffaCakes118.html

  • Size

    68KB

  • MD5

    620110dcdfa0ab9a4e65dd958cc2c443

  • SHA1

    3ab2590191f71cf2b0c3db67e1f51e049f29ab85

  • SHA256

    a9b375ada619b65432d195ec1dfb836fc024b2327dc34a369bbf26f0ed2c8ede

  • SHA512

    cbd14feabf8bb6a0ac024535ff8c254f343e027adda03682dc9cc6786bae9a2eff1c9fc8e16a6ae41e8ded31c761fe5f32e0a5a7c5069434c4df8ba5232891f7

  • SSDEEP

    768:JixgcMWR3sI2PDDnd0g62n8CdHxzM8oTyZ1wCZkoTyMdtbBnfBgN8/lboiGhcRob:JvssH1MxTSNen0tbrga90hcJNnspv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\620110dcdfa0ab9a4e65dd958cc2c443_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f24391678da084ea50ae4dd08746aee5

    SHA1

    d60fee0684a59e2b0472b9d5bf98c84eeb6d8833

    SHA256

    53a691b08d472b36e68d7006c1ee1d9ea2250263d18ee83d26018b479306e85e

    SHA512

    3b9c410ba193d04554caf7189ab1ac5a17e930256d05349e91d63d1e26bc6624145ce5c63e6199fa51a9520f4992417f4f81ee39d273c62b3f5f1f02ce249315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    518a6fb3e91cc165e54826a47c739b05

    SHA1

    11671abade5025f04551b71bad4623bcdbe583bd

    SHA256

    eb19afa3912eeeea0011cd2a418ddbb68654f7da207aa80f1f3f7154f287c900

    SHA512

    38473a9e1125142324d96509772540d86d39b818ee247ac3409ea9cd719d051efd6d5a2d7bed183a7e72463c0c7ba5eb4bea5d486981c0706a02e9abf71af71c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2177cc35f6e1970c4387dd9f69bae7d3

    SHA1

    8b2a844e37dcac0b7f3808b010ba8eedab205e25

    SHA256

    58032f0688d49bf42fa04a0c557b6f1ef75d8b351aa0dcc5f13716b487ecb5c6

    SHA512

    b3ae184f7dee660226c5295debffdafd6ca580ab61dfb8ac3b85d5e6f96267f44e3a9e8bea6c2622acc97185cfb5b9f97107fade1f17b2006e4e74c39ccce736

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ebab250b02838edbfcbd14437e7542b

    SHA1

    775a4fc8561af6aed55939ca1265e67ffe094beb

    SHA256

    3a740811ac63f101021b90462d8cfb3591109220d35da5f038e6452a143d0da6

    SHA512

    9514fc819604abd23c30cd1521698a637b08d20cea37f3c989f391144fb1ee00efc391c012bc3e13b54414e16df926399d7926a0c04fda2a20548d369be8c86d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6df5fb991c0ce1b9e1724528b3f55547

    SHA1

    a4d46dd957fb12ed228dbae6f8bfdc4ac6818663

    SHA256

    7edcf37f2e6d4a7355156943ef4a8f2e8e1c0ab19623e0fd0c0cd7277191e254

    SHA512

    5a07d488b860548f2ac4e1ce5f749008c00358a923fe9e80e1e6606b6c1b8e8bed11f417f4bb60a31fb1cdfaf7ba4ad3e764107f8dac92f37f2c9917323ce744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04a93cf718bf78313e8e306e48958e94

    SHA1

    e5fd4c7c06029ffd2db9898e092467ed11e85cf3

    SHA256

    308bea1986fc47a9fa19138a5d795438919194b3899b59ffc0b674f596a2deba

    SHA512

    a3f4bbd55db7d8044736394dcf75f271da4fbf845321e1d71d28a444d8da74d014eadbd8beb8c9df737938f595999056565124b81056cea097af83d415aa57f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f86cca7f989fc440c6cf8eb4f3d006

    SHA1

    7d8092f2bba849c45c5217dd86a0a649fe416d67

    SHA256

    363604ac302a724c2ce26388552b01efcb9a906513ed34ba6fb04aaa3740f837

    SHA512

    5c30082f822af288f4d27c868c39ff641e4cd5d3964c7a7a5d4c58f7c6d53a10adeaae693ba2c9c6ed1b7c771a347bdbebf2ff9200d667103977948c37f3131e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6cb08551a4a276fac5133411122d3dc

    SHA1

    c7111938da00fd522b12a1ca98c8edd681d01304

    SHA256

    f265769611d7fe744889bfad12a8387e6f9be629094e8a5893d21b2f4409f004

    SHA512

    14f83b1ce3ba267e522b18f453e5985368fce50a9b8acaea9375c91c44394d4f798ba6794c68c7dc447a95f5d96250621aa19eb9def73d3a0d10ebe7ed618e66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b71b3a30f1298d50b87b9d217bbfd8db

    SHA1

    3f5e589d29ea74884b517dd81c51da6737f98ca8

    SHA256

    406ffc48e84f8573c207a65967417137bc8799b930a53c807a048e0b4e0d0fe8

    SHA512

    3fea9e73df764f2f34882abf504a8db6e8240bdd9210f521e5870aac8e819a0cfd633fb46b50bbb9769c4ee3924234071e9104b72dfae2b16cb8a8640c902c28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d25845b624e288765be105ac56e41a63

    SHA1

    543c1845994b03b521d1cdbc7e44be6dc31f890c

    SHA256

    17b1b2029de5455788bc29b99bd3051e9a12bc895fd69ed3122e92e70d1d38be

    SHA512

    b2ba188535c8f4ebf23dd177137372985ae1f97b119dfa82ada590a639b8cb77236eeededef16eac4b71a0170426203c105ba20eb9bb8535b41180a3c0250d0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f6a21b592775a4f8657ab854d9017db

    SHA1

    3b397ffbfe8f4e52e5abde61551d9cd9aa0a271c

    SHA256

    f3098d8cc7e246e7b135d9b66b4e8d1ae397d493337f878f2003ecbc54d0e313

    SHA512

    83f04f0cd416d239867bd9e99653d97cb54483d3529007d5d0205fc2042918a76dbb0799918cf185137125110e9966b2b43051482bdd3f4e87b7b5232008a28f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d97bb140f856f3c5800738c4defe2224

    SHA1

    34118059d5bf0e4e7ff4b80d861b7df7d2141295

    SHA256

    51d7c8ca8a34e49f20beb9ed944cae493a7ecbce54c84ba4a691fd20d9e95f38

    SHA512

    87ac706210e252d7480c39bb1ba5ca71bf3e491c7e2b5b897ec1697eaf79620a9c21f55825a92754cbe2c78f33d1f45ecc2a19a495eaf87bd37af1a5dad5c174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32d3aae83da2f54484816616e6d2a779

    SHA1

    8c4f891c7295b8317519dff46e27ee2e4004111f

    SHA256

    e79cbe0eec1447bc2e8f094f9820d7879c6952d44086012bee5aabae0fe0b466

    SHA512

    437b7d56b7561c2b417410e458bc104e3ef8a5f2bc54f63bd55076ceafea73e33cbbe1954a331bea2d4c65871dc46a3bd538c6a81bbff7535b0634f36574ec83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfd6ffc60cb4b05ee2042cc49cf61184

    SHA1

    8d9a7a1d0035dbae51ee1c59471cc48512196a05

    SHA256

    0e261e3410d778792167aa7b347d819adb81b633b011a7aab2f0dd488f991bc9

    SHA512

    8d77829ad9671e1209a7464f22bb8f47f6ef8b29f8998680294c0cb6f9f4cae37169f343ac9c5fcbd8a8524e991c92c5356c595c9d196157b894fc940d73fa12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fe4506a90e78bcc9ef44530b359452f

    SHA1

    d46c0a45fcc3e6c7a560598d8a7b773c527b3cbd

    SHA256

    b468eea425106996c864dce9b77e1e5c2f67c6f2d0ada2ae64888fe6bf1f33e2

    SHA512

    4d19e008537e19a019229a1977b27e3bad20072c01a7c358490103f62cd230be8c7816ed995d901058f27b0bbc42f7807bc8da5a8647647bb0ffd0190a8113e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43a588539727a1373a8b3f75b1139e02

    SHA1

    669eefe999525125dbb297ac9ade50dc9a8f741f

    SHA256

    b48e654cb794881307029d50db27e4b9c1045549e990f4bfdb1b54f46c29fe58

    SHA512

    b03bfa1211d86dd87aeac279e28d8f4effb6963d94175aa10d6aad4c1e0cd3b44d70c4cb49004ac9fc79dbd334725c165904c7dfa8debd2181b9e8733b167cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16071960d3ae58fe59de48076c9cd6e7

    SHA1

    0c9a1f1230d84f3603cb5e29f2cf4078fb404736

    SHA256

    ab1937004064662fd50685b53f5a201bb6962b9d552e5a15846480a7a97f5758

    SHA512

    01d1de91911328e56c9b64a12151e52d043da2a893a003af202a7e49100f03e48e28054c6a4fe09550d80ae03e274d17b6409faedda81fddf9ed727c06c70ddb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5bf0659e7379fe67df20c9c7838d026

    SHA1

    d84dfd5ec19a481b5552b8af4f61ef8b55ac2fae

    SHA256

    85ad375dccc0f1271a00df0975c7bb533e9b1b37e20439c7e10b2a89b13ecbcb

    SHA512

    19f880fada694921920b22164f2e592ed7637ddaf245d81e25f0f4234291a974a1dc9dfd483cf24ed31cb961cbc4a6c77d4d2748564a4ff965a7bac6a27f018f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9152d2a8ee9e4e0cffa0e9d1e9888707

    SHA1

    76b18793bbc2327cb67b04f3cd29ba2b80220398

    SHA256

    db95bb644e436b722c92ae1cd17d43186144ff0840db941e52617743b4c9e952

    SHA512

    c2117472ce0d3e096326effe79b468e3e2b7818ac7b876c699d5f56db8d09741b6f2ba58d57beb77ce4155bbd9a72c8b635be4a1ececb6e8d5068d05c7379ba4

  • C:\Users\Admin\AppData\Local\Temp\Cab2A10.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2A90.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a