Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 07:16

General

  • Target

    6278df88869c4de8a556fc1f90d55061_JaffaCakes118.html

  • Size

    67KB

  • MD5

    6278df88869c4de8a556fc1f90d55061

  • SHA1

    aed7c68f00cb3278169b3911c8c349b018e8bc69

  • SHA256

    74ed606295c39135bbd1595f364790a5687cf3e7b1b39b65bc64282d66ba3c31

  • SHA512

    9e063efb73be3949fc3a7165fb75ca76ec359f52bf858f9afba5c4da9bb1ec11a1799050d242853718d0ad3322f2be92225a86906b20561791a03db1eb1577af

  • SSDEEP

    768:JizgcMsSZ8tN99OIsaI9jL6C0OoTyfQCZkoTnMdtbBnfBgN8/oygcR/QFVG8c//L:JHW216C0/TePec0tbrga6cuNnzIjv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6278df88869c4de8a556fc1f90d55061_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4e75329d928681340d3dba165a4222bd

          SHA1

          de46689fcd197196dc80e77b890b453ccf08a78f

          SHA256

          6a162888be8af3c4db2b20bdd9093a8a7dfb6b2707bf819de97141483f6ea56e

          SHA512

          15e2399822c5a6a19beebddcfdee4a7cfb859f1b3d1bc13071eca5c7fe722adc499d199026c38234984b6c3449b22f766f58969c29232009a5a578f64b09480a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ed666f3bb7a9474cfb8782e624c57e5a

          SHA1

          f0e38804ceefcc427c3234e4db833497a29c61ee

          SHA256

          1bbd66482e3ee632e7e033743b1db28e73ed1678d1aa931dec33c8635d4a1e81

          SHA512

          9b5c515d72002fb58e7bfd0ab0c5237aaa9e428ba8be82d0c5eb2afe463f26a94f47498ba7627173c9b30dd8fbae26237fb609dea2bca5818faf983bbca16246

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          74305e6c4ea562950f4ff76805b2c83b

          SHA1

          0bca126b93ed4f59fa1e25d7d5c2d71b090f9471

          SHA256

          e18c53e4b7b457bb985592ab921baa954b425766b7db78be1640b039826c350e

          SHA512

          307e8c947ec6e655be3463d37b8da72b41f1174fab2da6f00964c9b02d0b55c851641075f89763fc059976f9fbdf44a961fdb31142d2fa311ffbd218f4847400

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66f968a138158b02a6a91cdeef8a64a4

          SHA1

          c9d15327c888b9d7cec7601e8e96dd01d8c985be

          SHA256

          6e13cb0d34557a8f02037ff0a31403542f3f708e0289ac0badbce113a542b517

          SHA512

          cc76135a5577c0355eb1937122efe19613fbc6c91ef8075c1dacb32802a8ab10f12a96b6f70d7c60551d6f443e4e83f1ade2fac3b4d8ca2472d74b7b3d8e9d5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dab2db9d9b7a4b1abd77b1b7e5d0b004

          SHA1

          08d5e481a2cf17aa74f0e35e36ccea47caa3f822

          SHA256

          25e119242f9315875470d2fbeaf1ff99bb336c3773d242058bfc8c5011ad77c6

          SHA512

          dbdd92aa49dcc30b7ef93efb79fe803b23d8003388f97c3824890e1a944195a5fed12ecda75e37ec8ecd8286c1160760921aa13ddfb67a0e5533a6f13eee7a2d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1529b2cc0a2ec487d921d0de4cd069ff

          SHA1

          96a57f2551f025cbea8b4a17151e40329f403f5c

          SHA256

          e8e2e5d34478d10dba20bd93e08819df052b699bc2d54305c8e057038bbfb43d

          SHA512

          9448986b815ed9fb77e2fdb88abcba5f946236315ddfe513fb57906e144b4421139b88a79cf6e5a2a9b044515187fa5eab9cd7733ccf5e30c46333e7cd52b4fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3cc12b9260e41bf2da9bc199753e35e5

          SHA1

          7f5b556b73b15a173a8ffb3fa8024543824da288

          SHA256

          bf692fafccc0abccae3394aabe33e4d42401313194b04011063a3a0b1be41bbe

          SHA512

          55f5c1576aa7a903a33f26c89b912aeb4ccb1f7574cf052c51e9321377303e6bc73a447b0909c566dbed65827896cac1afc019fb3f0b86c85a2ad893219f4cce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          91e25cab73ff7489bb77a399e7bd3de0

          SHA1

          ac615add92d31ce44406b1653e8dcf32382bed48

          SHA256

          28c49a26e12d2d01cd1340032122a5808a527645884c68b4b2e7b39acc08b531

          SHA512

          6737af5c03963ef6780c7da8dc645a0c5bbc799e22e8aeccc8f7e29a57e91f1781e5ac00b7ac99b631e5dd357ba2adcdbcf951cfaaeb43b683c96fe7285a69b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ffc2d38557f4329aec69d6eb442668db

          SHA1

          7798063c4af5ff77991871041aacef3c79672890

          SHA256

          eddce84a9ac407fe5696e04d182ce5a5d39dc123f3ef46f55325c0d3344bb1d2

          SHA512

          be35351a65fe2300f492e8a975cfd66d06d7b4a0bec78d9e1f3abff9d209576e61960232c1b7aa79e76d61f611e580aed7abae28513364ed335a909b5c470462

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2e94d345e17bca7277f883447a62851e

          SHA1

          1ca81cdf180503f15141b2ffe817262a5b7e589b

          SHA256

          4bedf9f50c3b1f7f4f05745583e33941e0d91dbca53aecc30d73a63091ee5a5e

          SHA512

          d62271f729cf64bd874d165be5efc1eaced9c149048acef59aa6306aa1df465d750abe810a70fe412876c2bed941e56b0aea68304beb6d52503fc8bcc11c0c5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3e66cdc02a59e2e24f1daf4b2530d726

          SHA1

          20cf4ccb47ac493087842a90bd9af0b3cc2a4e67

          SHA256

          c95e3b481c76e2c8e39d9bec0bead458f389013c6378813a7f9364838f293a42

          SHA512

          77337cd61590244846d1510ffd946c73b81662d47ad20f269fcaa72cc3b409b5ca5693df8fb2a3ea09c89261fa0e07ac842220ac9f0ecd5da00ab5686cc88a8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          40d443597792e68d868fa77eef353fce

          SHA1

          14dbbf5998a4177ab86f35862234369f224e3b01

          SHA256

          448d655a198ed18cc78de28e5576141986638e60f25f4df8f453f3671f983498

          SHA512

          0909e395751cfc5c02fafc90f0a174eb38d2bb384f31559ec422dae65f2cac568280f32322a62e37bd19efe4f8b0ffc84dc8de7704848b2c610fd1c3ba678b61

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d344cb653642595b1228870d5badd2b4

          SHA1

          5e3ddac8fd6ff8217286ee320ed16aabe8f6ecfe

          SHA256

          7c9f575d6fc28d786c51e295cb50534978746f1f12c9838a3147fd54c66e9a0e

          SHA512

          3f36eb655072e63ea3c5f32401ab3c83afdf71d420b6a59630f69f43399fa574107e9f604a2e76259c1e336519f21c65c284a96f869837c9e7eeca2eed678854

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          505c44db3309b3ee3778e04fa7be403f

          SHA1

          dc01cff8d2ded53b17098f93a725e5141564008f

          SHA256

          1d3c21aeeaf078b2daf444b02de0c5f7fcdc2d03b925614240e2a2040610c6a3

          SHA512

          41f33c03d0f7da7a51b3d25c29dc5fab79d3d58e9734b2ae325cdb6027f5092005062c077e2ddfef275c40729e0f1b72a4f500863b03b282c20c8d2f3595bec8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9e924740d9d1bba3d5d6fa6e443d8bc5

          SHA1

          dbed607c7583febc5f0c0e11fa8f581c3a8bba87

          SHA256

          905c977e5a0660325f3cbc299763f91dc65abd8b4ef975011e46604ebcd11b7f

          SHA512

          1af934a67a50786d53afb6deafa3db071907e84eca9db7a67856b51ad71de5b8d83023c53bd7643a806ff06479e66bea015260276fc39f53f7ae95d32f93e17c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58f8ea36da87f65c353a1e95712fa194

          SHA1

          17085e59152149b3fbd3bd1a6351a3216c8a3ace

          SHA256

          a2cd31ff2e1a06ece996fda4f871c4f900d67e0f5022ef189424a4385098f54f

          SHA512

          413503d36008e062e14cf61a1edb998cea7222cd9949c5e203bf60d597fdc418f7b9cdac89300988967bd2de4fd4b7717e236f407c5c4b7944468b37b70ce2f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1aefb5056850a8d3a380e6efede7098a

          SHA1

          f77874b50632742923e1cd85788e8627708f0250

          SHA256

          2a0cc5728a50496f6f2b05aa00c931c71703ad70721049fa7f49ebd709072797

          SHA512

          f854d9d0567e063a83daff2827ce1a1ad33ddfc769b0974155fda308b4496c75e8d7b1505fed12cd6b590ab2921c575644ce88e8ac44bf1f77c2098592e81b38

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7380ad905f77b025cee66616f17cb617

          SHA1

          c182c6b2124a3a7ccc1e8330a2317b8f9441226f

          SHA256

          e3cd39234488f88c793ce9b5630472065734e4edad25df7574bda2e5ebfcd678

          SHA512

          cc90cb45391e0ecf7b91f2c3e8aff83038c425a6227c49bc064a74e3a74016d46aec791609c67e36dbffd69c78c2f3c6e7b0a23a48606219287969b0722fe141

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4dbd8c9b7b91b13f6c42011cad4abb4f

          SHA1

          edf82c79663c018847fcc40476985729f0807570

          SHA256

          adb1e7423243842a81957928bbf8a3a693f8219e7213430f7015c461fd061e23

          SHA512

          99144cb769df65fd33c4d7408a634e74c2b848f1d706ffd32b9cd55411649d1a28d9d43985480012a1d0f1d9ddf266fd4bd8873c8d987787cc616e3ed4a75cdf

        • C:\Users\Admin\AppData\Local\Temp\Cab2510.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar25F2.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a