Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 22:29

General

  • Target

    6c7743465a74496977ab3687460af73e_JaffaCakes118.html

  • Size

    30KB

  • MD5

    6c7743465a74496977ab3687460af73e

  • SHA1

    3928d0af1dfdcfe5fcdae663ed697533b02f5b37

  • SHA256

    5ae5c09abefb12917692edce6e9305c11ed764da64b3c95cf910321e091d6be4

  • SHA512

    d1e19742dac767e97f4859f9b35cf17f8757ad6a1a02c69e9fd0fdf810ea1875b410e8935d6a4fe522377f50ba017473b4a8cd4e48830a7c97f9a6c213e2ecd8

  • SSDEEP

    384:rbzf/TCi7oRgLgyglN/jIBaBMbBMQBM0BMXBMWDQYrajf87Z+fvg3:rv58+EPTjIACbCQC0CXCkQYrajk+3g3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6c7743465a74496977ab3687460af73e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2424

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c5260a27584623f70a2a640677a9d37

          SHA1

          332f7951ae611dd5d13f67eea2f305477cb61494

          SHA256

          4f917eb4e6483ad5b02ac74e2c81c7e52820cf6aa55f7a64038c876ae64e26b8

          SHA512

          36cefc6e5b23d94ecac4f46d442dc51183fa189ed5a499da1ea9ef42f9ecdf42ee514c8b4517b6fa17adb041407bbf172ff4a3ba7ad17196e8364bc2e158fab9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          af6a1bd5d228632f03d7df2003a1a73d

          SHA1

          fb04b410b6d5325139d3ba23c6455d4a67ca109d

          SHA256

          c1d7b991e5ee6c5816f5c26df296a748ecdb88884bd0a42fc7bfe7d6edd41775

          SHA512

          43d5bc20ec7d120ac3e6c38b42421fb0cddcd373234fe448434ae69fba27ecbd21495211641e9731307a44d922d3a6f3090b64f4d562948c48bb92c4325ffd41

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3352ad7a76522ae498df4ba948cf6fb3

          SHA1

          af865ec39e4bfe15e98fcb8f8029774a43d6af60

          SHA256

          0f444d38ffc6ce00f5a3a87e672a157420b44d4cf8269c8896ec2d7acb678347

          SHA512

          8491510902f75dd56f428ddd8d6a3972d3ead9f030cb6b2a9fa25d9774c9f5b6ea64d146196d10657424e675f8d8e54e96acbfef8b76f9aee858997453c4ddee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a0583e9985dfb0fbdfe8871e88e89283

          SHA1

          2a3d0eba26ee8e39245e5463bef70c1c8f2e31f6

          SHA256

          3b38c6a9b9c05af39b349ba772ae9a4764e85d304f46fa628a35d66016039df3

          SHA512

          e6fd2ec0def909ffbc4055714a08361e4b399363b5597e54bfcea1438bb57fe246194ba252fb40f2e6a01735cb33e6c61f0106ba31f5b9d6ea460599e475521e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          218af3aa0e099a6bbdb9555da8d4f7a2

          SHA1

          02c4635ced1097bd68a8dc7674493dca0eb4759b

          SHA256

          a7d1a6888035c48a4036f5289a7eb92680dd804b1bdfde149e07b206702f6a37

          SHA512

          d00dacb126146d679d23018d60e0639e566e0fb25406f096bc9e16f48758c13d93baf5bb1c64a72d81c6da0c608b96a8d2967458a52f804df50a3402b1e1a8d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6fd102b6f996f348179e61b3b72c2dd8

          SHA1

          acd911c7f79f9302ea3fb680b35b5ea14a09a508

          SHA256

          8075deeada7528caa172f3c4d89ff589bb170d94fcf4c57c4dcfebbdf3e9623e

          SHA512

          d5f7de3d752a170b15532acf9544cc5279ed703536a0236a15d303e643392782969f47a4830529ebb98b9b614d2e11dca7710009743e58e365697cad449855c5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6c8324789bfaa4ab7b77f32e04c06701

          SHA1

          b74b68ac25efca2c5beec7a67b271d86ea5c5ce8

          SHA256

          4c0da3ae32cbad668cb841fba0dd7ed6956d470bd1f6eb2a7180d56aeff7d482

          SHA512

          329762a50e0e70b484690d54c342e41afc3a8e08f73606956796bc32675b4c6e8438491a9a43f9bb4b8d2bfd763d15de159f9a7de015c21a5cb346e04d9b02de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a93b0d20202e952693a66d2220eaa834

          SHA1

          65f5875237819a597a74ec820cb8a7ff83939cd9

          SHA256

          bc9e29ef90a64392bc69d09c6567fcd2de865843df95ba6844d08e2a5abdb3f3

          SHA512

          af917c4583508bc1be5fd12607846a64d35edbd7579c69fee2dc7ab21cc5f8f8f6a62d817fea7c9b7fe5de00dd91bcada8de084d56dd92c8b4e305f50b50db93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cd1f03a079ce0b3f549198181a0dd41c

          SHA1

          729088d4c6dfc6923c8718dde3eb6d59b9a0cf6d

          SHA256

          763f93ef1a7375fa681b3aef491b566d6162f84187077e75468a2d058737f8e4

          SHA512

          cd5d6c8a6bd3b54b15a5b14404b336d4b72594deeb3c99aec19e6b83cef79084bc2c3233acc23fa82290cf9616f9d3a99629ca13d38cca522433af8900d0ad57

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4c21b2ccb1e455d986db592dd2755257

          SHA1

          dde25ec5a829b6cfa417309f0b5f895728fba1c7

          SHA256

          c95b31bd075123109eafb393b8fde01cdcb6506e950bca36799cfeccfee14f76

          SHA512

          3327596758888ae2edc48f81877b653a1cca9f064918869d3aaab64632a6a8ac78e6d5124a6d132fdbdfc3848df64ae16153ebb0b9e324f9f7e3517ca33df226

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          07338c515e5c7595193bdbabac73e3b5

          SHA1

          c4404fc03a3c240ed744cec98b4f6d4ab7fa821e

          SHA256

          ec380d9e5f2e6cc0f5ed9b13616fca1e0b94e00864a7aa7daf42eb3914281ec9

          SHA512

          ea6644560c62003d67344ab621c26322bb69bfd2917756f62bb83dc9838beac8f4c95ddc693e06eb4c9d30c099a1e856c706a555838978398c5de155d5872f80

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          027338c0f7d5385e0773b0f537a8e375

          SHA1

          aa3c5d17cf01219051701298f1ab90930838409c

          SHA256

          0e39615852e736506e064055440d1b2a0bf3e7aad46b967d2d3d895d751cc628

          SHA512

          0d261b4dd7e76f6882bb927fab97d1ca679a6e11c52e45f3337995b183fe4f80e30ac00abfbaf7ad97d780b92c6af27b4461b112e02a310c75ff061863349067

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          46ffef000a9dd94344747893a8b4f599

          SHA1

          21171dcf6c074d20765a15f03c198e4f0e51f2a0

          SHA256

          7cd700d5168d45d72836d804ac10a6a776d7872cae45756adc745ac38b03075c

          SHA512

          2f543ddba1126a56b77125f28e5d6df531c62c4168a3d01f7e057aaf83f79798f8fe020c744be5a68370db445307eeca0bfde811ed57363b08de0bdf27f23b1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          39dc9fb3aaa031956b4bce7bbde7603c

          SHA1

          daf062bb4feb171b88d9d46413cd24a098f95099

          SHA256

          466e2f4d87d5e5f85e7031ecc18358382f49bf437a2182b3ee588160db2ac5d9

          SHA512

          01647c992500aae62c582a197a0c991571d2fd8e50f7300747747fe972e858951355d172c8eab77fe904749d4832820a5cb988d1f8a5ba53a4e29e7acc9c779a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f280b39a76f6668cfeac3ca28ac378c6

          SHA1

          315990a72c29a8ff7a24638e6a249000a7a95bb3

          SHA256

          34cc90a4088bd82865b4ed6925217123c612268efd01fb30bb78e43606101f12

          SHA512

          eb1b9638e4267a5892a8ff7d80e8f538cfe14575e7a309693ce14d96b1491a3e5ce97166916efcdff6bcb42970f63e3c292f28a675da5e4b3e43c245e7ee44ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fa27c913f5d769124ec59a3bd60cb770

          SHA1

          4b483e3bb63ff33ee89d257a66f450269d40c13b

          SHA256

          b116dc138d47bcc715d513edef1f6bd54e53383536d13cd011638b9bd297ecb1

          SHA512

          eaf3b5e2d2d0b4eaf7fcaa19218b42409024fa13e72fdee665ed9da967652018e9389fa8e8efa07b45543d9cd44c2037914f796e52b7ae77f6ac69ad3d1710f2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3954785b0bdabe998c02fb182a0b2342

          SHA1

          03d797688ffea1436f29999e5fda7fc14ebe3859

          SHA256

          3a3d4d822d9cb843e6ea776ad4c95c4a95694b25fea061412d801bd263de6fe1

          SHA512

          82fd4ad86ad42435c9dc0fef58a10991f6c39434a30173f272e53bb454d7bef357c4c6aff2c170bff86ec643aa66a66739fda149cd3d606748af890fd9f8f879

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a30c9f26ff89a22c67ab3bbe530bc5a1

          SHA1

          412f18e670c4f304ec17fa8cc895eb8498612098

          SHA256

          6f08c083a1113035d5ceb808ffc4aad153c950816727e9a8b332123431f482cf

          SHA512

          e20f04784b45b96a9cbc0ab4ddb24e8a58bb4e087ce5f9747560cf2df115f41590390ca7d676f55057a49642971ce0742e54f19fcbdb0bbec4c131a24cc3bd9e

        • C:\Users\Admin\AppData\Local\Temp\CabE1DA.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\TarE1FC.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a