Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 06:46

General

  • Target

    7129dfe381a637a3b0a33a5f2a1e9765_JaffaCakes118.html

  • Size

    461KB

  • MD5

    7129dfe381a637a3b0a33a5f2a1e9765

  • SHA1

    4af4f136d346a296efea3ddf6d43dea2314f3601

  • SHA256

    0170305e5ba2c50e95ed24c6973f86fec87f27cc76a210744a0950faf863f36f

  • SHA512

    50bf9a79d68c15838e36bfccfbaaac033f75bd9ec77a916ba744bf498012a2300b71a6627f254169dc6fd946467eaa03e642ee5f0300503a9e6547fc5b416730

  • SSDEEP

    6144:SCsMYod+X3oI+YosMYod+X3oI+YPsMYod+X3oI+YLsMYod+X3oI+YQ:P5d+X385d+X3x5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7129dfe381a637a3b0a33a5f2a1e9765_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2956 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2620

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f7982884cb82ead83be89b8ad4a57745

          SHA1

          298a302485c2cb7d66ff1c48a9b6e66128a67566

          SHA256

          23f04d8f7a2b5e3ea7a74eca63aa3218593c133eadb6d72792dc1218b9fc97fc

          SHA512

          6e3f040a1a943b3113b80778935e1a41be3b7f1921e8bb93a1707858333cf4fdb9d24eb14a6e578ac5cfad0d20067c44e6f50864e5d24f42bc9851d34c1835ac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a3360f4ec679b58303f94a2bbdbeac90

          SHA1

          285a26e7412dfa14f229441a5f360a0cb7f96d69

          SHA256

          41c45e3603bd7a239c27b714efebd83c3d04a9d6b0fb793bf8a9363e9d6ad754

          SHA512

          d7383e1ace2105b7187aee0cfba9a2193468e00058597e1a12a9495e5d0918d17177b11c88038ccb74fb76d3e1b4c8ad2f0459f5164d1a48f7b9e10ae19cb43f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6c3c6f3e3e9bc2f7136e21ddb4f89995

          SHA1

          fca8f3140bf7251292bf807e16644d454e2fa050

          SHA256

          4ec34e5d144a4ece630ec9af16e928cb534f4f51dc7621c933e6c82cc22f2aed

          SHA512

          1683e2cf965d5dda430f4cfd69810e325c7db5795c9a799f42f0d3fa7633317ad9077b9675af7b541c059e9a7615a627f064a181d97dbf5a5fd91084e2ab8ca4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24b26a8158d6a64fe6b7848f4e770045

          SHA1

          b71e0c47911a887c12d2dd67c91a167e57be93ae

          SHA256

          593d5182a5ffa543ec8c1e4d23f7395e0a6c34dac495b30c4717bb889fde7852

          SHA512

          76badd12c68ee3b9bf9ca5fe9e5e90876ad0b12286b0026030b1a6c158184ecc9a2108db3c6ee767dfa275d8ee999b66494a8aed69915ede3d4c89d479ab8b18

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          feb8f81e52bce816a433bc2e99a497cd

          SHA1

          a3f898940833e8550ae03d628b9a82c976d90dc7

          SHA256

          e8c4c4ecffc1d419dbaa5240aeb8a808270d7f34fd45b934c23a36c445b21695

          SHA512

          a63ba61429a9d4aefb841336671871d0d360765232292e3dd2511d71538ddbbc40b3cbe47189af796b9edc43035d63c142ff7d8968e67711821d8dbccbb3ee00

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a349d075638c1085c13d44a93560a8cf

          SHA1

          d9dbb8991c0f261d4c660609942c27654edfb7dc

          SHA256

          89f7192d44116713bc66ab4deabcaebc9bda47f5d3f976abbdea9631de18a055

          SHA512

          d04ef68377811039573d279de8fc520c30994cb2adc8d60e1a0192ef23c33b3be587dcb5249fdbd5dae5cf7a0a13e92b38394b397dd42563bf26032675dd7a50

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          84408cf29bab8141630cbed8a79d0437

          SHA1

          28eaa3f4fc776d7f914eef16187e40fff962b565

          SHA256

          e573ce0c9ae903606a09b669f7403f408a88efe41578b9d7f477ec4b3b2b469a

          SHA512

          17086d645485d738499a701a0d3f3882833834417f6cb35edebbdeb275b9e30912a95f2c2bfdcdbeba62d3f6b45972820ba096c9f1a10c7756b09a911741489a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bf3ddb001f000b958ed42ef4830fde9e

          SHA1

          cd5410c81ca2bf4046f4a02a286e66ecb0194fb5

          SHA256

          964ee950e85742435e01e959694ef2c64622bbc47c7f7eecb71c949847785b3b

          SHA512

          573116f9193646d68a075d2031612372bbc5697bf0e46305429cb83bb76ce20725c89a2778ac8ab9309aa476eb159264ce1ab508cf929e5720707ffe15914083

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb04105a0d6576e22fa226f5999b56f6

          SHA1

          eb796899e5c5c42e48cdae77d652a500db61328f

          SHA256

          dc709786de56e3ac61d73347ab9d974e98d806cd84dee464f01ff7f4aa3e74d6

          SHA512

          c35ac4708954f43167bd73e12737431a03f8c92d971ebc6da25824f821a782eb1fe94fb3de77c03e41463c92fa652be4f728fb7fee22d45dc152a56d46f38693

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          454f4491933eaf86baa118f0cd2cbdd8

          SHA1

          cf6d8628dd8c6db36df5d963edb413383a7554cb

          SHA256

          255b1c1db7eb111f8262d826111ce506180979eebb2b9f03c04f2f98c1574cb9

          SHA512

          443d698f1c4a2d26ce7750781b42e8210a7428e2d1edbcfb56e7c99a7039e9f1143a662704c288a8ac5dba16975075a5a751fec03225261d9e0c6e124e60b326

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4fc97a5244cce84ffce13e2b6b50aef6

          SHA1

          2e68458bcc2735ea1e882b344a04fa572c1b77fb

          SHA256

          de31ac64864d9ec472d5b76851f5bb42d8409d389dab31371301926fd9970451

          SHA512

          46f4502170435f9f2f217cc77f34077ef3c64710aa26ce289549c667e8bc22a0f1b0a1957a7f66cf2c794423db6ca366eeae041d26e6a0c578de342be29ca7c8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3b7fa3d227e1dceeec9b795366126323

          SHA1

          60b9855bdd908eabfcb2aa3370941cd383f7a228

          SHA256

          3224f35bb550429f2a7048693e90f14fa6d7bb7c476b47676ba1b4dd10ad5259

          SHA512

          51cafcaedea240250654015dd2ac70617c0615edc49b82e0eaee0df0746a164dd5aae0ff82b76ea63c3b4f89db79b2f744132810e44dc78b6d4266f631a18331

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          40ecc5874c4163af221437bcbc92bc1c

          SHA1

          a2969aed8dabfa22efdedd5d098bbf906c9e72a0

          SHA256

          8e8e7c8c1939cdd04e293a5b04d265e9fef97e8743a0f51cb38cb507a5bf5cc2

          SHA512

          6d85cbf13c34be066321a8d2ac17496400b08673058ecce6c96aeee32f1e8360736c5d77268456a79f639163cf319751500619606f7ee79050a782c11c22be87

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2554324abe2da1b5e074a96a7b793f50

          SHA1

          316d864eead0da53e06cdc1894dc1ee9ba28a06e

          SHA256

          2f645eaa27ac89a824e439d06527767433ca421bb83b81a853c27d4c6c01da8a

          SHA512

          563107f2177e3bab276da3c137c4d70da0c65e27aa20a6aa72a8445bb6d1c82af595b1c7caf2a6db746bbe5931d6d13501374449c63e084d0f4a60926b37b868

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          de738964b38829f28eb3918e1b3c19ed

          SHA1

          a5981e1e43c4cc131ad61925ad1313afff926ad0

          SHA256

          283ce4121b01406a85b0a20f90ad4f19f22178703bb8ddddf34b672784feb527

          SHA512

          9b0db9b98089cf22c127713eb4e029dffb4c8a2a3854898984ce0d1939877db07f8150ebb8f2da6c2a720d12238051f404dc32598a3718323ef26ffc4cc8640a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c9a884e39c9c95e04c839500871829fe

          SHA1

          528cb3fe90d8bdf40f9da5e1c5ad348f02076f89

          SHA256

          9839c3d414cc81829834571e54f1ba5c5a1100c0fe7ea0ca23b951d1d827f493

          SHA512

          fdac38c7bf857ef2e53559e06955afa08d8da7ce07fafd262a41c8b9038931ec48d8a5d8ceec6b89b3a17251098fa4981deb5ce0b8303a457dbf71a21a47f19c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2dd605043d48191515c570ff629a03d1

          SHA1

          73b89339ec5682cdedf9199e652a1500a9449b18

          SHA256

          76886d47b988422aa85fdcdd692268709ddb1a99032e69eeed13357ff33f0e3d

          SHA512

          865463bf535dc7b6c9b3a6ecef0dd1088d54a69958596d1d4d34e6e8e80d0a04258931e70f9e8a430ef740b014afe626cefe27a11214440a431e4d6cc002b602

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4992c173ae234a8a342ce300884d3d6e

          SHA1

          605093fb6a773e94787e10e9dcd3e870175cf6e9

          SHA256

          afb0530cad02744adc7a8b7042e85d1fe86c8ff92d6040a3dc7908150da3be02

          SHA512

          7111637cef71ceab0fd5dc4808fa85b82bada83505d8db26dc0480715c8bc3bf7c827e4dcedf80dfce25476685e0bfbe10211412bd5dc33497160ac805f0f0bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          94b3fb6e9060f6d9f714425afd93d315

          SHA1

          33811b278bcaebf61f3b12eaaaa4e1c4b8383196

          SHA256

          e77e240538cdf900b25437bf50f0f56905a4ca0b0cac25e69842a714a71a8e1c

          SHA512

          94dd2721d6bd0e9899c92d916d93322724ef9cf76c8aa4b95ba6fe72a3c94e068b658d89eaca1f090e5c1746e151af1302f13f42974b50228b045c65d575b643

        • C:\Users\Admin\AppData\Local\Temp\Cab4DF4.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar4E74.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a