Analysis

  • max time kernel
    117s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 12:33

General

  • Target

    6747bab7fe79b128275383e5668233e0_JaffaCakes118.html

  • Size

    2KB

  • MD5

    6747bab7fe79b128275383e5668233e0

  • SHA1

    dcd873059b201d49ec1017d44eacf4373c4ac61c

  • SHA256

    3d5829c2866405bc3e89a6a487975e980b8a68aac38d6b6c6debafe97c879191

  • SHA512

    a25208d842ed26682a04508d6e69e6b3111d9e91cfa07b08a5d7519f6d1697210f2f654e068a0c2e1a60cfce69e042f89ca2ebf8d0a2c75628b4e67a87b15596

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6747bab7fe79b128275383e5668233e0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2392

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fb25e0b6ab022458c0c4b8a556c2b7e8

          SHA1

          32ed824337d2c006c99781d024b2ba265440f4a3

          SHA256

          0f2c31fb5d41b4c81715d97df80d70396441318ffa9b287cee1969d3cfe30fb0

          SHA512

          9df70562bd9ddb7bcdd512d3083f1e7372811aef942a9ffd5c8adfabbcaeaf2388e6995abb54358d330e5869a4116535c27bcc22e854e6201cb48119aa084f64

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          098475edd65cd65f5c30938b0a0d2592

          SHA1

          6e6d510fe13a157f14d90bd07757c351cd01326b

          SHA256

          262c46e8a4b70c4df05227b7c73130fb32a73b52909f5b8e031ce3713fcb471d

          SHA512

          5ea41db082a595d7871fbae7a16d0864b64f6b1a19871925561561e3b71239d12be3dec8dffa44dd48024e7f4b4a4d6175b5077466d80d84a7b70de7f597b571

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1e6610ffa373ff409a42a72e7a63e74

          SHA1

          bc15786c296bce31d2aa2e263fcca86add8dba60

          SHA256

          76e78f47a406e405a0eec9208efa29678a44b3bd4bafe8637bec2fb49c9858ce

          SHA512

          0ee79512e98948cd0be57aa9680f2cd6aaa1d2d7c49633b3d5716e5cea87cde3f906e26ae54edb149a1fe9aeca076de967ca36a4efdcf72452fa7181d85bb059

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9da57cac698143b3d87c728a59a831aa

          SHA1

          f2e6bc48c29fad34799f49fcfad226ba4c1f2df3

          SHA256

          4f983dd032bd996bc7fdd6f6d3f8161d7b90b4b0895826d320891104181f6c71

          SHA512

          e11305a5c39ebc19e4806cc4dba3ffc3ea7018f913f42c37a1bb4ceb9d9766a81c8a9c2e44513646d092eedc2fdd7fd11b2c4d426737d0cfcc22bb108d4133dc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e8303ed0b1d3f9e4a69050f22d61daaf

          SHA1

          2802a951549f79ce7b5ca6b041b0d3e4f1854ac8

          SHA256

          e373b7fd32cab84ac1b2ad7fc2fc38dfc0964ddf080a452e57ec6f3cf131e19a

          SHA512

          54d8757e940f1fb91ae5f4f0e055737df1ed6a8b144c71e7e359159560c34ce3c80f89c82c4edac36378377e4f4d4457aa2641a587d75ccccdfcb3f4cf3de8f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          51bb0e4812b85f1dbc0b0171b0778a94

          SHA1

          5e9ec736ba29597e9a885dafc88dd71e2b8ba574

          SHA256

          4a620288c12a9917ed0c88b65a3f58b0041bf23158bd374158d65690bccdf83b

          SHA512

          15e74e56f2d203e9fca2554e722f007b1c99c24e2c92857a620c2a17092324f5a610e5475162c47d11ea625a7a34d4267965a294679414d15bf7909e251edf12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0c8adcb93bbd5cfb50fa68ffeda09670

          SHA1

          370c9f988c1ac96026d2f6fbfeb802f77e043270

          SHA256

          56b2792c5a6e6c36a8fe830f84653eb613d159be3afd4a6b1a8516a41982c60c

          SHA512

          d24df6b59823c92413cacb9028bbde7af67433a588afa25e303b6c463d4c98a269e3116a9769134bdf8228490f8db580e8d7976b460a7f4b806e0a6087684dc6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          61ffdc99f3ee2ae141be83304489256c

          SHA1

          579937f5bebd1e84cdfff6e317403d8a5b6c2171

          SHA256

          807cb5ba79ec105567d27bda3db1598d5af4f0ff6d923549705587c459c5c102

          SHA512

          c23f2d2c0b8db0ea5ca563f48c960b43139ff8ef1784cea5a2024dfc10bd6ae6ae999ee07439655c11743fdce043b02f62d812828ac7c1d98c081c84419b623f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a9b2b6df3fb450484363f3e0b7df52dd

          SHA1

          1fd0df19925489f7cde8af606eed21a84dcd00e9

          SHA256

          eaebaf2863173666e65571af137efb70750e10791eceb82e85fed88d9434e254

          SHA512

          cf4530056b65e2fe689af1058bafdce5d55653513a7e4502505b10ddd4b34deca58a91af9a99e81a962c76ff089f72919b7b6bc2ff816f78aa0a4aef6308247f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b92af8973f3cd77e87c7cdd8d9849f0e

          SHA1

          6113565c197005fa27394c34054c6ea24856a048

          SHA256

          ef158f451578d3a39b17c0aad6224d3d0ac2d48359d4b8223afa0f95be48fc67

          SHA512

          52d2b2c7c9e2c8922f5e1bee51bd77c609b750038c530d3b99121543c621f64cd9ae1d78358c2a36a9c2d0c5ee32b1e42ea79dce41ca373750665c294e718f97

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ab73a7a6db8e410c0eeda7e16444b5bf

          SHA1

          16d2a517eff9024627025aab28bf05deea192b53

          SHA256

          a3d6b6e0a83064c3b493bf7a9e61c520fc0d240ca8a908c8cf55bf3df7b75ca7

          SHA512

          b59b930ebed8f609858c18399d43712b123074fe3e2901536512bc8f7a0c480cc8279eb1b2dc2fa299ee7f62c0b8b1b0fd892bb729cc49a330549b8a2394cc3c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          63a3451bb911ced41275e6cd47bfdc4f

          SHA1

          6e179eb3bfcbf0f8584423bb4956c58d581b10af

          SHA256

          a05d2d319bcf73d17c58f220337c725daf693b65e669babb5b8ff8a0fb081eef

          SHA512

          ecf61f168caa762136c36b7f8b116c088d6d4c4473d45281e0f9d2f7391a2277e796ade5956ebd42e33bca6059bf3fc007c594b56324b2425455322f03b36514

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f2fe070e5d19117b49c9d64830380299

          SHA1

          09f7e28545052efac8d2fea0f16832929bee5fc3

          SHA256

          7c33e7ba8efb75bb5a38fc40b0bde8f53a9f58c636de58e8655ec856a6d2fb6c

          SHA512

          eca161a68d711d47f3406482c82dbe2829e43b48dce05ce749ea40de3d8a92faf208972d2ec9f4b55ac2e8d411f3ba5b738497ccf0e31640c0d5c83afd198c55

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e1ecd5525283f4145a2c4be458a49859

          SHA1

          c08ca5582621490d1fc60def7ddafae5d7bdd924

          SHA256

          cde33b2e7aebc6e61ddb6e05701b2a0995d70928b0cf2312b9655a8c33cdfd93

          SHA512

          b4cb7571c30b2657c02e74a1e3c179c413de6c061ae8b58d65abf57f5e958faf8b7295e31ad88f54341297a180831d06aa42f543d6400e85b1d73f45eee75265

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f8a41dd9012b0ac53353b5e23353d5c3

          SHA1

          c860ea4c31d93dfba821ab04b8641a076748c016

          SHA256

          c65a1263a2e3628a1c65af238e57cb8e886450e03b77f722cd3f7ac2f54ae97a

          SHA512

          ae95b095edaba6a6b5f56ca0c6f281efe8423f8f8ccd64257f91ecdf0332ad5d11317a4fb28404f475811dda3a192b72bd18bbfb6d05b9bc102feedc45bfca6f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb9f2e8fe6bf58ce79954a223ba1eb7a

          SHA1

          e7e588263408c611ed7ca4d2beba0ce60deb0047

          SHA256

          d92a9861f5b07f7c9ae82085835adb6d35436b45b7ec8c597ab78ab43151496f

          SHA512

          0f575715e6ed42bab9a7870ac547ea2458fa2cd05460dd4c6903d8c6db3b1cedd0ef09665da0c6e222d670ee173d71efe2ed2ec55f34ee83c7b9ed79323b5e58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0e6c78442d6cddcd4a6539785b25d853

          SHA1

          13071624a9ae1c96ed234cf2911cdfa53e0d240b

          SHA256

          860389060625d09b80fa3ce3773749ac8e0237f184dc50b8781ad6d11603eeb8

          SHA512

          6df375811afb6eac1123e3047a68967492cb9790e2654ce9054af132c5abc89469354affe1e6e9d19a88a62e3f204c11842b4a6e24df289212b1609fcf340850

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          06e0145e5bfe73f369b073c5fb2bf3f6

          SHA1

          0533f302c1ac3c2d8035f9d1e0175fea7bcc1be1

          SHA256

          9e992dea8d5db62290de48803c52a2dcd7e19e341379cc9d5c7ee0ae6f1870c7

          SHA512

          e624d7d842e24afc24c8bf97c65510a9be83a2967e3c16dcbe6330ae9af1ac2451ffc25287c935f1169ddbaa9a0d2270fe1cc005ac0fd1561569cf3efa025124

        • C:\Users\Admin\AppData\Local\Temp\Cab366F.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3721.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a