Analysis

  • max time kernel
    121s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 14:21

General

  • Target

    639894bc1bbde2df2b5c8f335c9f0481_JaffaCakes118.html

  • Size

    134KB

  • MD5

    639894bc1bbde2df2b5c8f335c9f0481

  • SHA1

    8929aa7ce35508340444b49faf0b819e69f654c3

  • SHA256

    560439e9cdc5dbe5d7eae5e0e2cb16e3a229e8a4188a469010e46219369e730a

  • SHA512

    5cbe5c3514743686f0f3e26b71c4ac0e8de642d8c369fbd6b2cbad4eda367febda15f8386b7de97e2c5816234461a7c353d77d85d491748bc378778131cfa134

  • SSDEEP

    1536:SgKyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:S3yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\639894bc1bbde2df2b5c8f335c9f0481_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:856
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:856 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8eb5e10f4a0d3fc35a2531edbdc078d3

    SHA1

    668aeba8f537f0c4b42cb2984e4f93333ee3ee61

    SHA256

    80bc0c9ae9af1ae0d2d3e2ed59420a84fc4da011de338bfd779cf255aabfbac4

    SHA512

    b65ca278162e3060556312e06c257f7ef7188f7448f9e0334c08cb9ad1f674d20b5a3578bbd9104f2637c41bb0d2ff1bcb855a4f29e8e72c385a0f000b64512f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2ece3ddaed2b9cf1e83980352ea8c59

    SHA1

    8bfc90268a9e4741389dd9443807fd56ed4f7ba2

    SHA256

    d69c02ef26be9082de4951a890a820dd206441e71ed473f81ea8d18d6dea24d3

    SHA512

    be187620190a26bebae1c68b0613db61be44e3fbe63d888b7ff8b043c72771bebfd9303cdb9f8c42ac4f3c4f7d71d8ae20e5702bb37064dfcf99e950dd5dc04d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6486990b24cecf978130baa19ce293c3

    SHA1

    970be68f1c56f53565ae70777d2cdae6c5db1800

    SHA256

    93ba2dadc7811cbd2ccf215543d386adf5eda9b32831caf75ac62d4741080e3f

    SHA512

    725d17b54e8d2e7cc78544fb92a1dafea6918ad4fde9cbe9644bb583d7ebec975df4b785e441fd04f612b3f8861a09f55f229fb00f16bf3bd17b2a04f644acb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f6634505c5a72784ec776062d1586e2

    SHA1

    20c487f510ac27f5462bcf742c6915cf128367ed

    SHA256

    18ca6fa798f7df88b4a02c631dd3765fbfbe1ecdb732d57dca100bb94abb4c7a

    SHA512

    2a0ff84e6984c7de63352d3d63a04d8d8dbcc1f04d410cde7593d84925a4a8f028dac93d8fb83f3b66eb23cf6f43b05711b63cb74c6203f03f6d3e57a70e2367

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61a967dbd6b3c14ed05112426e560bea

    SHA1

    1abe43b66dd8da4a46c9fcd0495df85b6305e7b7

    SHA256

    e26f6ae1e3b8c504c2d08b7418e558767c5be955a53f2b88348b300bee99e702

    SHA512

    c93bc733323fd190180ff62b782d4973e2fc56f2862e5775e0c8e8301a0d9e05a3a2acf0fc020b80325eda9abbd90ccdbeb1d4cb44be8671ec656e26121556d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a05637dd45c11305cb882ab213e5d10

    SHA1

    439808d30b0ebf024324f8ac9f6fc6dcf984fc70

    SHA256

    7a193dec6e2aeb869d39581c17456a76673bae86b61c4f540dbfbfadbd5ba680

    SHA512

    1c049e9024d431af01c4b4fe32c8322d00d13d370ffdd5d772eebf1e4536193e498a163c37cf7ffcc042403cf0ccbe796624555ac79bfadb0210ac2c500d270d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6672267cc6ca808608cb2fc4afefa444

    SHA1

    fd852adcfcfaea99c8b2830f40ac8b8c2379357e

    SHA256

    72e8cbe4c0c0af01ab19a80160efb0c03f77035d7e7184001ba7dc784a7a3eb1

    SHA512

    e0af98586e3bb753f3b05d0eb70e3262b70334d054b0e73fed3f55b980972f06640f2ba89fc03205bf074e6bf0d3834ca88f57a58e2f00fd018a939378a26136

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4727fd917e581d394e308afe1aec3d56

    SHA1

    986b8d4f0d73eaeeef1d913280fbdee9ed4eaf12

    SHA256

    2c76da62b4d905e8455b84ec522ec4fa08f9fcc5197227fdac85a334bb4dc2e3

    SHA512

    c927d1dbbbda53bd1e9e5ccea976c90a71565f054d7c3a59d516bcc1d7bfab817efa9c05cb4fa6fc9ffad26d6e947c989f72aa60456be601935e98f3a9c58049

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d44f42520617826643cda2553ec290ae

    SHA1

    d68610cf0ae74d064560618f716a8d2f3ad20d57

    SHA256

    b36ee9ed298b6bb2044349a7becb00e20c0ad8ce5f3cb9631e7cabadfda2e338

    SHA512

    7fff3d5d9538d3e52969f363583d558030e2db2400dc62c987ee3c7599fb2f8cbcab9f231c9a291bd2fdeff313cb3346e3f4db558f4320241758d81e3021749a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8497ecd36527e8146a221ea7628951f

    SHA1

    8e5b81bb93db615389675a2b7c7cdd7f77c7184e

    SHA256

    b046c33b7b305c8fce54a529fd327eaf7b1cd69a12ff1a3e0faf49b5fb0bca6b

    SHA512

    8e75afcbb4702562c92bfa9652bb141cd9db9a18bd50657c5482a62a815d9aa3a57c3ed3aa53fe429fc7d9d4c63eb85a0b4033b2e0879593a5e8543ac7d0f898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    27106a1e042020ed3fcad1aa9ec3545d

    SHA1

    85022899d6b1867c165baa65c22bac9d02b657c5

    SHA256

    ad1e1971edbbb695cb4f52ed1758c9d2097a18b8d9e537bf095fd5d87c51b63a

    SHA512

    6282f2f4424995ce43c798fec2cfa823f51783d598fdd32dc78a7269dd8b07ac63e26367065d6d9cef935144448194ef2fecebfaf59c1f6eb1faa45e0ee204d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    18ce66a0bc1ee35644766f542ebb59d1

    SHA1

    24e38e5b422cf2111838cd54cd5efc64502c92d3

    SHA256

    bf021375955c7ac13ed5c11ea042da5f5ee42bd0797302b2dec7418d48df4499

    SHA512

    48954520cbb7cb8b91f864c0601007c699323dfa10026865dda101ea06617a57842b9733d555f57a76f59abdb37f8f52731212f20f76d4e5c5388f3396de39fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4daf2f1dab16712331de875e28d49df9

    SHA1

    7936ad10ef002622bf36cb33d609a1387c3bd29a

    SHA256

    e0212deba1820fe0d880382f2d986ee649e24ae09091ee21c890d0f452d46a21

    SHA512

    de9caa1e4dcddb966dea615dfd4228081c8341b75065980a4ff72884b081223b364d3281d69af97e3ba4b971995ae510f45e1588d6ab00e24080a982af21a81e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e708c8206ed563a1eececa46590c457

    SHA1

    1d891fc37c460c817f6e33a299e40b7c17631fcd

    SHA256

    6bc9289f5d91c438ac2333ea0829bbd757eec544e20f2aad1108395784b1b481

    SHA512

    eef14267528008f0dbf5ee01ca396b03958ed93af47c2091fd8f18a8d242c5c5e2846a3515a5deb594c9950240c6f0148f85ccf853207d0d2aa11417bf8f54fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5547cd2a4c46f0a26c7aec3498e8310d

    SHA1

    78cd7e45ba26cd9e6a236c3335b7a7ad372efa57

    SHA256

    2fcc91a2099704cf7c8cd5e27219d5c59a5f5c864d0183c5c205c60b14517be4

    SHA512

    4009a2e1f5e3e9d1e770298ae461eb235a2da9924195d5f042c5f6f692f00b598bcb42a87168a0ee7f2b94f35ceae6a5a40ab1ced6810daf508548894d89b245

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17b8131a64ffb6aae941bb992e3eaad1

    SHA1

    0643c0795da3b1d7957492a47e3cf22cfe5a3bc8

    SHA256

    fd8ac9ab69b308f120ee19a8847c38ee73b29ececf13e199714fbccf53608d7f

    SHA512

    4dae84dab7161af2d5c2aeb3ab086a4917fb32d3bf57c6dbdff76202ecc371cd606fa49b5e49ec836ae7ae5cccb1c1de5cbbafb6a8a8a5c87ef5962d2769917c

  • C:\Users\Admin\AppData\Local\Temp\Cab2B67.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2C58.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a