Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 11:05

General

  • Target

    71befe7bb7786a88614df0357a1c58b6_JaffaCakes118.html

  • Size

    3KB

  • MD5

    71befe7bb7786a88614df0357a1c58b6

  • SHA1

    ca24f636de21f32de388a2e10196df1cbfc347cc

  • SHA256

    0c1fe320b9dc275f02eaae7467d8f270a1c4a746faf72518404eea26d8081100

  • SHA512

    6b314a1eee0df02691b6169883b5f2fe16cad25edc397dc3063e4154299bd4daba1cc2b4a7a157db955e2c174e6afb9308a8c403b37f79335dfe009017370d0a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\71befe7bb7786a88614df0357a1c58b6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7ef129ee6816888ac02af8707a8c8629

          SHA1

          fe1c9ca37ea8fdfb372c9b287ca415448666f388

          SHA256

          36c928309fcd1e6cf4db36d2dbbea04f028a33f01e96833e93d5ad602c20aee0

          SHA512

          bf0e2f0d8b300c52b71ab14ddcbf1f4eb6f4ffb4c67d3833d6178c6d8af78e8bebf596b55a5ca46637cd7df7f19aac98127ef02583812bffa8728ffe7be1ff1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1b321cfa31c61ad354c134d9026c0cd0

          SHA1

          909d3067eb9ec3e8dcb1f5ee162081092ab6b8ec

          SHA256

          2d4167d86ee49b5820550373b64f87944f94ae35781bb6eecf2d1d779b2ea158

          SHA512

          51ee86b80f6680220c94cc68c5bd378f1e6f7429c501fca4781c529d3c0c4f1b2d687e66dc84fd73edd611f5eb5f4162b6dec07d58a608147c9bc56690500bb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          903f23a96a407689707e7b269fe9211d

          SHA1

          be3e30e6866af0a1d6c9f97e241fbd583d58fcd1

          SHA256

          480415906185087638f6f1f0e04132687c67d6a72f9e4f180519296233ada855

          SHA512

          8640441dd3e4fae33d1f5be0b08ab1a15275f19b4d5a0c6d4b4964f717c389ab7f76aaf7b8dc7cd325188e3b8312acd7aa6287ec85f7f0f13042a27e014828f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          269427895a67c29b066f42980cf6fc6b

          SHA1

          8c6d9dc2aa1e8ca0304e16ba08714b8ee6ab2de5

          SHA256

          b7096ee3995d51635372248bf338be059246efb7dc9b13d0384b45ff21384740

          SHA512

          f7c72dd48da6750143f0a7cbdc19e8afa6f4aa8cdeb9279d09a0e0b4643a0cb87aeb09bdbee201bd820941a0bbd9b38b931586d5b087d6c2a0682965d73d1c06

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          626ccf7b972fd94ece7570f5be285ae2

          SHA1

          c44ec901c865e68df081bbdd157682db09f87caf

          SHA256

          90f7a4332f498481352cdec20d8108e8d3ca942461053448645b94c22a1b47f5

          SHA512

          7cd2a20d0b7ce898bc545e22b8eb0874e79032549134195435011a704ae3b981ec552108b8f65f48602620d23900fe0743ffcac8f62b93599a6880a9195699b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          da0518097afcd3e331b97842669fb590

          SHA1

          0ae569b52b4f4e066f7b7856db818751b1091541

          SHA256

          125890aa86c1fb9fee4582fe12bbbb6d0f2c04c90355435bbeb25ece9e030c1c

          SHA512

          133cb00b4feea64199554e6f6466cee9ea128ed15dd8132e1eca3bdf85e6a7b85d2939ccbad17211a7c79ec58834e3f2f9e1c3a8f8495056d82f9180cde4a730

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e51c5ac2a3e654d70b14c54b6078c3bb

          SHA1

          f442e2fa38decc713a15854aa23effbfcee048d3

          SHA256

          cf227ab9c5112216a29ba2434ee8995d81ebdad4da4d157b4dc42e3ae5bef14c

          SHA512

          83591606bd5a32330387f147e2d8f21bf965f7f40c55524a7af1795a657748e4b8ba12a86dba64cecc6e422186e2e2097785953f7029fdd405aecc055c1931b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b6cce3e44bd52c59553c280041071f76

          SHA1

          aed21474f372a46fb89305d541ae9851d9cfae1f

          SHA256

          57a48275f607277d2553b6a062eee6ac714d2fcae07b23321a5d7dafc79cdb2a

          SHA512

          bd99e4c32fda5cf85a41db61dd44304a2ddd40bed7871db1c363772a1d6a80fc58bada18ca8a780a32a9f70ca566983bf91b06276425b19e789aa9b0055228f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aa71561c062ee14c16d5e625f29bdce1

          SHA1

          c54f725b22b1b689fe80dff7549a8088f18cfb3a

          SHA256

          3efc7679f02d7e1dc306a29f4bf940422806db4dcd07decfa93be4b68cf865f4

          SHA512

          8a3360926583cf419923b248298e98b78058ae53fa480cb33cd569d8fa41b695f24a85aa300e6972c502f323ce3ae86e35386e3cd2f93c9c46bdf58edf07c9a4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6aacedd90514671f2b06900dfe6b2eca

          SHA1

          de8fdec8f252e6ae2d7eb6fbfbaa2cd05f4c7690

          SHA256

          5d86c80f29f32cb4789a3013c572725f29c86d82070df83cfa61ff69fae6cf27

          SHA512

          a1ebae457836fba41aa369f7ee67110c1574a3479fb48c4912f6dcee7c893dec7cdf86c8827fb6b5d1d7395cd54c9294e31b08bea0e244230451b06dce54c325

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4673f4e0af86a009912888d066db4222

          SHA1

          aea69e2f2f8d041a89a5de4378c6c0fc4b5089d5

          SHA256

          21de94f72da3844d0ba1c3c39541c5b5124be18a54410df1a6d5699ea8c6d942

          SHA512

          30abf7c75035b92158624806ae33a99b035af3cf5987da1a944c118958f008dffa8f35d7352a07ec3c50fa8c52be2f06cc3d71f2f7cb51ca42f9466c134b6aa2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a688a1bcbf5a56a9b360bf0f0f74aaae

          SHA1

          a116263d1a5aed1c6e8f753a2627f8a4beea46cd

          SHA256

          469b95e3e6c0df3de6354625bad959ffcd894911e6f5c0369ffc4646fb6d3cce

          SHA512

          cea3889afba9ed55a0273687d883e0ade3881b1f8760801d2b2f20417015e313ba3881b4b017ceab2e3e918279da51d39c7e41f8a601f28ef8ba2081cd93c431

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          045c00e62b3ec9b467a28268359bf0a1

          SHA1

          9189b5e660e1fc06f1dca047648c5f7c3711cb70

          SHA256

          5dacd9872b715b0aeb8106b3f3e7e10ea3580320069344e8a2c9862ead0aaf8a

          SHA512

          fd84e288a12c6a0f90666e5bfb214a7d4e068ae1987cd061a4f066a1ec89f1c75f73b247c60c5f7aba2a560875a66956a138d19c9afca15f73cbaad95895a355

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c487144f423c9c5f130da6be7eb45c16

          SHA1

          0044fcab55d69777a52c9a75765da50caef7f132

          SHA256

          162d397faba25bc3e0ed746ba46bf62db80a1db7e2562844910a000880fed86f

          SHA512

          3af7eb124fbbfa28925ea05f627d49740b8fb5493c50981a98cee1cbf88b0a2c8c032a0e09086869d6053ed0b554ec7e926610dea972dd7fbf89fe05c9a9f6e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7aae52e03a0979b40c14da280d5d4301

          SHA1

          930fdd401a65e0d173e8b4edd64e21882203d8ec

          SHA256

          a5272430ab875ff605eeb95a4e165fde591dd0d23c72bf670c550df39a303a9a

          SHA512

          afb974a83a37ba701e0eb60f46b98768a92ea9039b4c70b3247f1665272eb039024a355f573392082bdddb82a025d3fe0a03de0e152185f845cb24de289c8da7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e3f0f0d7e396be26b1b7ec668e0f6c1f

          SHA1

          9772217c1c951efb1ea6ddd655fa0f771463a2e5

          SHA256

          3187d73eaa8eaf61bc325e0f25d67f6873b93b9ac71cf9e69b6d1d03bc7c3fbd

          SHA512

          880c0b852159aef49333e8af409823a977b44278bfa4c756d7520b3f7e68d98d282ec6e66055969800f556975b1329a659d11bf68468b942c13ba8135dba85ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d5331bedd83ed352d79552618f0fdcea

          SHA1

          6fe18ff5d4bba775c3d465affcbf64d5699dc47c

          SHA256

          0f56605a1595e0fab28c597ff7bdb06b43c7a627222a60ca41700538a0d7495c

          SHA512

          208589eca7a25cd2934734f01cb2541afbfae62ef067b978f2dfaf52fd590fad980e9f1faac8780cf2725604c7f6cb4591d37a411c63b4fb7dd3c2745fa759a5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          452da1372eefb4ad02b1bd1d9ea789a7

          SHA1

          784b0ce207687c6dbf597f3ad6b8633f2a0324fe

          SHA256

          cf3b44ace87516419b107f3f620801b64ee331012f82ceec80072a1afa8b007f

          SHA512

          6149830474144ea9e34778a003c4feb50a79400de453e0165a2a3413342b3f62008d91e0e7a624b739bae67409006581cdc9e129b4599e689116e1b00be386b6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          86d116f948895be4e4ab268aeefc6bd9

          SHA1

          5a754bc46e21cf4365b6f46c19616cda2bd6e198

          SHA256

          fb7c22ebf2160f5eb30b64c4d175f69cf85f630726139996d3b8a6e93502b7be

          SHA512

          b2c5a9b7055bfb978153af796fc887cd84acb82eb46c9c14d7e929b29e4440596de44a0648b91873ceab5851260e8c4784590ec1ae5b04173d202082a1de2d9e

        • C:\Users\Admin\AppData\Local\Temp\Cab42BE.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar430F.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a