Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 08:37

General

  • Target

    6a5c64a395ee9613f829f8be0936dcfc_JaffaCakes118.html

  • Size

    753B

  • MD5

    6a5c64a395ee9613f829f8be0936dcfc

  • SHA1

    313eb12cd1b4b85b3e141557b78bebb1a5df6174

  • SHA256

    4ccd7bbb75ca7a3d5f471567acde56ee016ccc994031207c35e7aacaed69d19d

  • SHA512

    827e34c32afac29d9c60e2605b2afa77d3fc9b04d84c16ecc92e12f0f44b5eebcb5d666c837a34f917fe0733190a6d3b540ac7b5f31ac6111c81e2e3bd72e1ff

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6a5c64a395ee9613f829f8be0936dcfc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2448

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          52291d2ae8300d10ac9484620bde44e6

          SHA1

          43823dd3c31fcae6a7c982bcf2639ea111e554d3

          SHA256

          d278af60121104c41e3d8bf9a88e57263036f568c7f19763ab322cb0e8ef1deb

          SHA512

          f4d512a89a88ef02059d177bbf084ba14761d28bb5804e656dd5337845e329cbf5259bcba681cc806b898c868c454d09ae8c0e8d979b5c21d27eb97c0f41ad30

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          707e5a423c1e62d1dab2054625050f1f

          SHA1

          debd7a0b0b8c381a18daccc1df757815c4d3090d

          SHA256

          f0176a40cc5b86b2a3bb2180e3ebf153f51bc6340474084e5d43ab4f772d27ca

          SHA512

          418b8850e711e01223760914da2115ef8615fcf41eeaade9187bee81f5229559735a396b3939d213d122791caf797851e85adab08959563a8753999b6f39033f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2a6ab157989eaaf1fd41097ad2a41302

          SHA1

          408dcea5b343d23ef48438fc9bd827d6af68991b

          SHA256

          d4a331bad663f6096cac1173b18b13604b8e103a8af464e7f7a213db14de6da2

          SHA512

          4ee91675a29a9e9edea7a715407d3647115286507a195fadd0ef2fa5b22fd034e7a6e83ed567caa0078a634f3f595f0495f5ce2c233aad57e1a607f3a23e6f2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          41ea70e3a1190dcd876b78579e348bad

          SHA1

          cb8c4f5681d3293426647cd4a1bb74a17a774ed1

          SHA256

          3bf388ced5abe36b126ce99121f67670a91bb126b33ee50b79ff0f13983259a5

          SHA512

          d123a24399eb788e58a2c4042fe78fb8ce5ef3cf9d255a42cb9c93af9ddfeb06b4e4cc9603e0fc3d6215659506f147acd9080c438e0b18929b01b39b44854d2f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7b15f7c5eac899bb7a332bf1de02b087

          SHA1

          8f382859fdf6bfacb344919a6de9d14963aad126

          SHA256

          7a530f35f672c08ae2c9cd0f1b359248108f5833b58b1b82853e8d2cb13e1cb4

          SHA512

          99db19196412aa436c8f4572d52a3cd85a6e46d4412a80301ed1456abf29812c1d98ccf441e4495da0a4956f7f54975d22c3460225b1fe6e26e8fd22ac00376b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6c5e13c466092ecfd0ee61aede5f1bd2

          SHA1

          9be887911a0d426b920bd3cbaa90a2b49306a386

          SHA256

          fa27ea2acb38c677c299b38a3dc62e4870a334aef2119d56b010503cd4eff776

          SHA512

          f9caa0b869809033befaa0b4bd246fff88a8b066a134b144a39423e36681b964ca6425ddb14dfa790ae5f8b60e7e1419ebe6270e2b418f7d12b59511622d5d3d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f4f4dce630118f71dfb2f1f7f1ef89fd

          SHA1

          2c528ee899664b12dfadd6415e0b383126ec59b7

          SHA256

          a0f95c1092aaea9c4bdbc4ac0b201cb9b560ca1e45ac666d3cae881eb3b09cd0

          SHA512

          f3a9168c5b8e9da3c6a871b565a5d71b7a10f45432bf5b6a579ef5f86fb18b3690c8cdc8ed0752fd73dca61e65e171e31da01adb07400d25f7bd0c39e67ec3e4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d6ed8abc5e75b744c83c9b77f429026e

          SHA1

          9cf93f1b72b2e21950282e77fb31f16595bd814e

          SHA256

          7692b0fcf85276172cce0cb68be4a8e88c3d17045163e240b73fdcd8fee7fa25

          SHA512

          388f68207de2b3cabe6a879ba6136b7ec505dce9f69e9ee7642e79c0ca3b73779792fbf846388efd97c8fb57ede9bdd1529d05274a226abf14ccec4e25df17c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          995b3a9a4ae2e0c707010d315e2a841a

          SHA1

          1ea9a01a995b0edddf2beb5792b4b6bb55ebf47f

          SHA256

          17e39c5e363aa93a21e7f2477b5df05c865337de6b942760e09562cc0c79b908

          SHA512

          4f1af21de6a00befd2eeb05e6c14e7c1939b61d728c7b9f8aaff218a0c5638c4a317c60ec2d17797a040b3bf9dcc9451f483604dc772a88114d3901dc06e0825

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9808d195026ec33ba3c695157ad6341f

          SHA1

          ad8b7a5db0aebeead90c070654384dc9c9960181

          SHA256

          3c14c158a405bb87c76785d4a274c4e4cd89cb44d4be0ea7edbab371609c1e01

          SHA512

          722c0d8c3b1c720e2ea09e8613546e51ef12bb4ebf265c3cc833440aef562837096ad695dba52dfe2a81f7c322e480487e04ad92b5b16712b6667715a9b95829

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a23f40c575e8f37f3a4ea462abc52ce1

          SHA1

          c6a697a666e1b1ecb8fbdd665d7a17a3ab229658

          SHA256

          03b0c23fb846438781d794911302ca500e505ebe732f7ec5a6242c60fa7537a2

          SHA512

          29dca18c6518b3c434d1fdda3fd2d78508f95a8e34faf7ba76949800d8163d4b04d4f60be2f64751a03f5cb91979c32d3f52040a4526eb69e83c63ac9b824613

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ba0ff1efe6796944d73e640e37377cc7

          SHA1

          4e6b4053dd625e6b4d34cca4cff4f9e557782f12

          SHA256

          8e23b39924150935a05a8e3632971980288696fa96643b17a608f50b0da1053f

          SHA512

          e90dc97eb5587e89e7e64fc00a05a0858b32c80a626b159ba787518fad692f96d7e8f335fbcec0fae5e5a6858e3ac5592ae1455538e7f2a5348af572f35edd12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          06c9446a29bba18639c2cf259ed8db09

          SHA1

          c750aa8e4166a24f790e817f67f3072ad455d3c6

          SHA256

          9c1b01415aa16f13408b9e8dedb782c088e078e9e6f0e4519968cc7c587ba480

          SHA512

          e90f17e469c094f5b41f6182977f5ad15904d31a3acef7cd80166789ef9ba26d3827dca7944b30de27450d9a413b4fd54dad8453b1e4bd24f2f6167998d84c7e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          60c3c280f7e0ca20e12801da322253d2

          SHA1

          d3054a2a0dba27b8738126724c538a6ec5173c48

          SHA256

          bd31dbdbb1c5628e1b155058b9c1cf4af78ccb0fc31aa437373fd65820165bb8

          SHA512

          0af6a68b3501b19a76bda25a4cdb0d85627e31782414b6eb0c737592515646ca006ea16394372569c7d620d5be5464125219d8051d63455f5c54b058e05335b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4488b96effc64eb6309b0dd41e4ed872

          SHA1

          be5f504c390f720bd8553c47b937d4a76c0dfeb3

          SHA256

          84d041058a91099d87afd08264dd583d50f8e3a81464e53177ef87d058fe3027

          SHA512

          bb6c66e9b6e6f4273aa4da28236af8cb886091198bc5409b33a0e34f801a5407c838744bed8710206158893912fa8673305e9a292190ee07f67c0f612b060099

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f5dfc480f5c20e78c3953bf8d091ada5

          SHA1

          c9653daf530355cf8fcad875b8dfc30f06cad838

          SHA256

          3a92191db0beefc4c1d7a8941a90d3037a7eedcfe95a7933a1680d3dd6f4abb8

          SHA512

          ff40d5bc42d7dfe9057442389e0611c5e7c37ac27b4ce1962d4935f9d820d800d4cc0a7f15877e4b2d99e227379c0e42a9d3f850e97212ac11fd335b45868e0a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64dd494cf218fb348275574ac94204bb

          SHA1

          e8b32e2e3aa66b4160e94377ab8ad96c60b19812

          SHA256

          4a22c4d14219bf1cf4fc1980b1491de94a0d856e3fd6bb21d1d16d76bfc2eeeb

          SHA512

          c2db40fb1fa766c68640404480f8628fe7bfdcf0840c71d9d594d232165e4b3d12136cb63cb045a5eac88f139e8c6288ec6aed0f29d7bc4da699d733202ff8a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          34743fc017b871e7963d7795ec466efd

          SHA1

          63597fa9b66a22ed786f132afc22a8be4928c59c

          SHA256

          42224b6fe196170cf11343ffae7b15273ff80dd498604711836f8c49c8986c2d

          SHA512

          22e0ddba2e48c244cfdd74d68906bc2aefdfe0de5748cc4587ea188a1281aabd938c92c616333339bdde487eb5643feff9349166851b58443de50a29ad5bebac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b5a0464ed6afe84ba43bd42b8210777b

          SHA1

          a1d34776819d3c0c9075079a955e4c60ef109209

          SHA256

          acf81ccdb7b3cb6cf2187a47c08546ef46fa94c8572b94e85c9f3267417c5173

          SHA512

          689e2403e482c659a5055439285053866d1e092eeebba961c567b868a1d15ebf0d337e9d3f721815d183a036df1bd22fedf3dce6734c1e514ae4a1934d88b75d

        • C:\Users\Admin\AppData\Local\Temp\Cab2F0F.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2F70.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a