Analysis

  • max time kernel
    141s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 13:34

General

  • Target

    6377cd2ba79f58062e952c905de9edc8_JaffaCakes118.html

  • Size

    42KB

  • MD5

    6377cd2ba79f58062e952c905de9edc8

  • SHA1

    71abad43c9e30554d041953689362612ba96de29

  • SHA256

    d87e754ce093e74342c30d34334075463da46fc6374904d2191279d0a00f2048

  • SHA512

    d348daab828c51b0f310eb71bc791ad077034aa0b29be9c518f3de4dc943410e1e401b7f656951d0456a6afc883534546d47ed8017d3626e28c308bae3ce6b1e

  • SSDEEP

    768:GfC6zMWGyxYSR6rbSVo7EwILNPY2ABure2PYy+HeTOe2kyw:Sz1bxBR6CVo7ExPY2ABurVPY7sOtkyw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6377cd2ba79f58062e952c905de9edc8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2208

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f418e8272badec4c5b627537dd638f9d

          SHA1

          1f1db3cb1f91a79c8ecb3585d7b85657d10aa693

          SHA256

          b971f659842064cd6526145027304fa2845152e4d06f3ac569991bda095ec3fc

          SHA512

          b15c7e2f458b6e34b2f3a35a324ea6c4cf0702ac07fd87b2f60d717e4c17eef28b9824602a9d240c609c284826ea120745e3dd46a2ab4a4fbfbdf313b3ccdf55

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          92022d1612076e204bb26dc9c98c7788

          SHA1

          604e0eafb118cccf5760806fcd4fd2c05242cff7

          SHA256

          f0137c00abc4fa3200353b762b2a73fe3e7508e9648fb8a980ce2ccfdee7bb64

          SHA512

          6b0bdba298936acc54495883385749b0acaa86bfb43c373b54b95708a27a3e75721908493171eac7015aa0878b04df398a7ab1d6295de320ccbe519e288fb60c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4e53919e6e63d96b21a1a4a388c0eda7

          SHA1

          85ae19da47d3e35057256ba570b2e1eb0e884b7c

          SHA256

          933e7a6cae99ecb3c57c23977232d3b8ed7317d1907543ca016e329f12330ec1

          SHA512

          69ff612b930becaf4127fca2294551f9e87e97b99b0f291e606459e765be44e939d15bc8be3ca7a2f131615414993b1f7db74eeffd021042e898eedf9397a7fd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          588a7a88a6cc33244701fe2044a75e6e

          SHA1

          783e2fb3ee216517553b7089179538002400fba6

          SHA256

          9745522ff587de68d3dd921b4eda716a552a9200203d7188a9648d45385cd17e

          SHA512

          37f7a3161e115ecb53e49019fe48a6fc640b784a02d8501bd20110597f4898e54bbb523ce2a159686b34423d4a107c341c5b7de022e4bc7bfee6b7552805c18f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a00d9c36f0945dd750948d84460b84fc

          SHA1

          1211a360c54f16d99aa9d84f95faead3005b7333

          SHA256

          b9eadd827944e58343f752585ffa5ef3e66750096dd14f2901e92aca10fe2594

          SHA512

          80c324adb18d30517269e6e49c9a65a58d11ea111d04d4a4f96301eb02d7d05b6bce90805bf6be6472c229b9d0a2215d417e678111b9fba018996a411768c7a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fa7dbb39754bc7e93c4529ebfff35f2a

          SHA1

          0437b96ea5f6dd967a96a053dc83342491709571

          SHA256

          97e6f3ee3d009e03a694524413d2ef3461df5f3d2f66482a356fc6c4be31a9da

          SHA512

          bfc7658f8c32bf7d4b09140577faf32ec756e89b9562e3336b126211e2d32b93f8e1ce8e4b3a8e2f843c87e084b5b1652c48ae49cbee165ea4eab8021fedd697

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1924b8cb4cba711c5c8da24501225f9f

          SHA1

          11d2870226147232f39c28dd02c955a413fbf4d8

          SHA256

          d48009a8744b3e2ba55df917b6b980b76805de5974050c1ba8ff6ac665898b02

          SHA512

          ec2d506af231e9bcaebfb1eaadd9698bb23c8975ab86bc9963b1e5a7138e9459f29cff2edeb640e27a4c3657f5153dcf808be5fdf3d59648a74a85372ba4ac31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9a77c9565537829ef98138409f73c057

          SHA1

          9679620267fb241872d6e8860481ba01af08e7fa

          SHA256

          50bc5b5910d028b46fe5f59219c19835adfc072e82eeb8df3337144156c03bbf

          SHA512

          33901d34c9c5599cbc14708414b3fc8509fb7d03db6c1ba025c242f892f34210de19e6fd027e8092b1818e436657e32284dd533f8e691244a24cb9b473a21bcc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ff523c9b61ce9712a827b0ac71baa4c7

          SHA1

          0ca74450d4bcaa0876923e802d0317b04b8c23f6

          SHA256

          016e5d5d768b06cdda6e675178aa6d40cc3a84821a397ae94678dab5cbc4b826

          SHA512

          b9ec79ab95e3c1f1acfc881d0cd38999491a38dcd0ca3b2da28b047653add7f39cefab33d1d791b0c689d28fa698e3fd044a7f480261ead6bbb4d17ea82302ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6612f796a76351d6f51288dc6657aac4

          SHA1

          57d663d3a46bd074c3c825e7b591049e6188d447

          SHA256

          e85cee36fc4a3d94ba0883a40a07794833a901c97ada61aea7d22c3fc8e7241b

          SHA512

          54872fefae969de5129b07361bc23164724a2a248cca0574f495a7782e147347f0e56a49eff6853e8384e29f9c739cb5f843c12397a8f15104030c7deb5e9165

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cfefa3584444dee64cc5148ffb4dd85b

          SHA1

          386fb22a0852f50c87939c2ca3eb1f36a82d507a

          SHA256

          329b37104b291d871a605d5c04c0b2a97b60314feb9ca4e118804e81461ebc8e

          SHA512

          c7991bcace1985f6c4c3bf8f23f443edab0c668fea2589e32b478d67fba0e78fc04b8d44fa6036c8ee6d09a32e360ad57bcb9f8f61945cbde3e9e3e51bfb22b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d05fcdef11e889eb03d06e9bd11f8fde

          SHA1

          d6cfb70b4c50a6397d27f4ae0769cb3ecc4fbc23

          SHA256

          e9f7f8976c76b49eff08b5c7df8aac51c91d3d9f907e01cec84d2317fc575e34

          SHA512

          a601a25c0a230a2bb837298e55870bd037b70548871238b8bb95251b98c1d6609796a4c64ce28188c5f3344cae2d4c4361826064b245b50eae1227c0d3e71c06

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55249bc836a3db56b91a9a760642a220

          SHA1

          cf9b072d8ccdfa7c667dcd4277c859d8f065f7d7

          SHA256

          ae2ba89a108742e7afc429c7b8483d2f44c9eeb0d48fffbd7ec403bdc15450be

          SHA512

          f0b867f9f9531e1e0a6d13e12b3844c9203aab9090407de4b7da64775dcfb4e111f2e780a24e81bb60a8d6bc3be0173b134ca0ee49feb272c8746378b39fda31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1836d765b671a59addebc0adc7895611

          SHA1

          1daa7eded4f656d2bf1c6ea1b69be20ca62af02b

          SHA256

          a537c23685fcefd01f61cedb0ed0b8fbc0e2f94576fdc87b394c056100a4f8be

          SHA512

          0112c4e2c80c889257fe8c10b9388162a7497e2814aec61d26193d902e75e4a9193702e846664a3d0d02940ed0eb2108e7106528510a2cbe86b2ddb68e8cc74b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3fcd9ba14399397d784e03b4327acd22

          SHA1

          ab814c97b7b3d04c23d32d53c268d3e805fd3f02

          SHA256

          08f4e5a6f7f897a8f2aafc6db1178e915d0da3d40ff4294b4721fd564c8323a0

          SHA512

          8da3abe9599aed9bd5620546c5eba77ae4efd64a7ecdb8e9ac17ae72b61be090641f9edb7ac9bb8e3444680f4ceed9c0465adbf60a480c229e2796cddc6babf5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0b6bf79df99d507171926378c87c3ab6

          SHA1

          688a5dd1cd3f07049b637291124f5a8c72fb5c3a

          SHA256

          5d62b2785b48247640fe12a7b4ec526f55fbc1da3bcb0f4a894303eca14d665a

          SHA512

          7ad04809b1fe51c9686f2940f67c4322cfb32880e1b89172e773176924cf7ffc904716529ad3fe968e387cdebd0ce9fee0662572443086fede8f5aed6b71decf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          467be85f5f9d81789e90968387662008

          SHA1

          69291f655354d14ecc275c05d105f39e01859638

          SHA256

          f3db5879d3814dfd79eb759343dd46642ddba0f0d98710200c8b5ea330255431

          SHA512

          28718c9d5bc49cfe8a7743ace3888c83cf3b0ae9c4d6a783b33f9c0efb999adfcb978b283f22261a8ba13a4591b6dd79d055c004743b9229340cc01ab8cd6a02

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bd0941772bc51b3b3b7b05292675607e

          SHA1

          a0138c99d31ef21b69a3f63ea05871063113fb61

          SHA256

          97ca255cc7b71bc2ad8375e3428532a85652c22e2d5f9999233a7535fa980e13

          SHA512

          fe3c1bf45122f04304ade88ec3f5ea5d43a55f8ea19020dbf8fa562cbcab93f78d0d20382935c0cb9603116fb427b5c9a5e5b66aa9f9de1b0ffb2766ebc58a72

        • C:\Users\Admin\AppData\Local\Temp\Cab4AC9.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar4BAA.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a