Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 18:37

General

  • Target

    76704b77fbca8ba7be68a5a877cb0904_JaffaCakes118.html

  • Size

    125KB

  • MD5

    76704b77fbca8ba7be68a5a877cb0904

  • SHA1

    c74424cd491f651e1169c75755f107dba68c62d9

  • SHA256

    2a2ed394bee8b062ad85f2bd2f09a52e21d9dfc971cbd858690644f692633fd8

  • SHA512

    f5eb708bcb51b579e93eddfda8fc7b79f87125c836e9ec4e7c5dbdfdeab8b1d56bb4a0be70ea7ba35d74748df63e72c41c250bdeee0262d62271dec9be69c41d

  • SSDEEP

    1536:TPdj1gCnecGs23LvsJfzRWDGmRWkPFv7BYCw1yOUrRV:Tp/U3LUp4zYki1yx9V

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76704b77fbca8ba7be68a5a877cb0904_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2032

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          08e2669c7379ec738569a2f9af6b9e07

          SHA1

          4b04953a5a9728f4f2be4a91ccfad4eef2d3b1be

          SHA256

          f466d76f867e927265a41a7bb6339c7c68207545376794c6b260424729c74608

          SHA512

          65b47c9b2aa5b2ab441374bdf82193634e6d610357cb923861a54aa785da19f49f55343b4e22d4868dcfab46750b6570eabd29847e9b018600e79a2fd44e3d36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8bf0e9ea75e281f19de103fe7bd1258a

          SHA1

          41d5fdbe77880e0d0441a8304b56af337dbac3e5

          SHA256

          277c5171c5647e2327245c612ca3fdf777e849026e63b1fedf71ac38ba42c5f7

          SHA512

          6fa9a4af527c7f5787e90eb8c994ebf6b4ebf42d0d50284ad34020a400ced2edce0d2cb2ad7bf6a6a0ff857fedac1eaf303aed9aa4824aefe0b70e0933afe221

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f68afe759ba2902de17acba7bb018831

          SHA1

          50d16b3ec81c18efc9e189c1a5c974f44fecefd5

          SHA256

          927879d737a9f2ea3fa76e9d256fafe2ce6fd95cfbb75acfbfafdf26790f5664

          SHA512

          2d2a64719ca1e68750b2abc0956df5b1b4da5b9a19d72293a4bbc80274b694b52dab30dbc00fa007cc4df845a9cbbefd57c0629848c70e455eb3f96c560b416d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c4c23a58a5a1256134803d34d81ccc83

          SHA1

          fe1329a382b6146aadc581421c510bb7821a0232

          SHA256

          db4382b50ab0417a959ae77dbc3b3c0c10c85a15c33d6d2a6e06f211a712e756

          SHA512

          8ec99257761f9362892fb6340e1b5a005404bd99c46b739150e648db46000668fb3a2370a1b2227338b3e18a3b1c897d32b1c0e429e180145188d5ce5439971c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          13651a67aabf1c7505e219f53599dad8

          SHA1

          facdda38e85abc40c4ba87ecaee63777f51c77a6

          SHA256

          6c3e6d0c820521969d561cb785405c06897e9c72370b4ea672122528162c67f6

          SHA512

          399a9b9df7cf777963b92f34ad390305c6ce510e7be1d16e70146a2de5a33b84aca1e36e31cce1ed2b94bb3c7bd778d13117bb61e815c0702b9427e11e255db6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b3af65a74d042a675fb3728b7fbd04c

          SHA1

          efa0440b2248194e34d86c6355c58b8d6280d83e

          SHA256

          9f5e1dba2549d285cb33f276a271e377f5b51a99c1d811b96de7f0f4c60eba6b

          SHA512

          bd7b2b269cad8dd235108900429c33280af0f47ec4bf08cf6050216b09d56ba4463dc4b9367e2b66ccf6c0dc73e65a72718cf0369cad6db5d89c80183a86f046

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78981a69947f5f5485ac9e3abf72b51f

          SHA1

          1c1383117fee28fe4cec5070106adf16a6afd916

          SHA256

          6036713799bb53f50a9f1bb3f6b18f371d7b20f08493f83d1bbde7356497dac7

          SHA512

          69edf772b5b0e934e5865e18e36bf2070afd7fffed997ca05786d9b01bf3bcc252208a2c6a8aa1b1aab10f86fee27ee52aa92d1b708bf34948f6dcbb67d55b47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6972dbc8d4fdc2dc8add78f6a15f23fd

          SHA1

          315ce80eb7058bb6711ca93a8839f4ff6d1d754c

          SHA256

          b1c680e5a71a302c9f07e3c34b5b23a60e0551a495efd7ce1ab8381146db9223

          SHA512

          6ad68b424b23cc37c472538b60b9515677522e44e305752a811d0f8c8afe713e8d13d11b085fcb27b6406bab74a4087ff9590969593c68e72e89c8bae8207094

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aa6316009406e05fb358ba113dc607c7

          SHA1

          76e39f428cae99eb44f955b6bb781d6780c8e37d

          SHA256

          7eb67a522faf645febf9b239470df4a490b003e30b60be191fc8fe72b8648f4d

          SHA512

          ee0509cc2a2c470664f31697ad3384b943209163c5a4fc3213130ffe255bcce8800cf7f0bb1957497f3fd283c0f7323a9e065ea4ac18b3f6076c0f41d4a91af9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6763e60d68a25a2ace780451cc147c15

          SHA1

          66dcb71d0d76688c57c733ea4dac887a338d28b0

          SHA256

          807faa2ea564e3fd5e2df8813a200cc4f0e795cde9b7eb6d53277cefd4a4060e

          SHA512

          6e2c0a1083a8962ddf2a315384e3f07879edd4ce5af7d8069bd243b0debb34773d6d5749c0adfd6fa0c788fd4cc778d800e8095cda76bf832155423c0a8c2d79

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          493a4d7d9bf48ed0562b632f85e8857b

          SHA1

          8af69eca8083e503952d07508c391df206fd0e39

          SHA256

          9300d87aa2c8673b21cbac7bc711026be6aa27df5bc89d3fc8402e1c30c08888

          SHA512

          6a3e25d55aa81b44acb9535906a8e86548d9a74e577c19163a73fff7c8c22ca3d0c9304637fe301cf7f2c58949ad357fee3ec25a7c0c7253322f4e7fcc9732b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55a1a4176811af6d47f439e54bbcf0ba

          SHA1

          5893653478b29cb7dba541059cc09ea31de22051

          SHA256

          fafecfbb3fd12b9e7c95d3482bd36c78cf591c84a80f3cfa7394434db6780060

          SHA512

          139b082cd21790b41d2cde6e79e8a398cbd2db9f486dbf9f18f27191df8a6ae28a4fceab8a61958deaef4068c76ef98c4cbe671395b80dac0903037878cb0cea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5824e9ad9e1fb8bdd8df23ee264f4ada

          SHA1

          645ca0aa994ba006e96d997e74f1fca542e1f7d3

          SHA256

          b922815a34ff600f19070e12c59af54e4c1690e03ba12cb6b2fc6188bb3b6226

          SHA512

          4214f804523d0eb40eba3e8b78f9ae1e4cace95dd7c4551321cbed25a89e8bbdbf544b3825d443df17df0047895d2443d54fe06c0f1ec3861e48cf471b3f2ca0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f07645f814f15a360e2be752c48736d5

          SHA1

          ae031199e7b1a4e6f19611d50ad002935538e410

          SHA256

          4ccaf612b8f0b7347eb978cbc22538193dc1953f0dfee00cd9edfab078628477

          SHA512

          78dfd041957dd1760ff75d9265f89748ade6bd489246f849455406874ea9b7b73abf59eb86c1969cfa34729c4dd2088f316c2b78fbc8c707b10ebccc4467d2fa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          85245fca2baba506ee1bd6c6e594379f

          SHA1

          6e3e9172e519e2ee528344e9a8c6be1ae10a63cc

          SHA256

          de14b137732fec5b62bb35c042d5f0c99ee0b009504268f94de83220b4b2ece5

          SHA512

          00c390feba99f8fa71576e4321fc5fb5ed4e2cf70fe12286d285a20d4fd4f9de2df062af7d6f902284e308badb592368a2ec8de0c82f6ff9c43ef581391ceb70

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          30a85293c383fe13d9fd9b3f90cf9418

          SHA1

          8957713d26126683a99152ffa4a42a1607a8e588

          SHA256

          5149f51b755bf2daa7f3dd319238d3a31997d8146c85426c785795845bddd9b9

          SHA512

          b19a625609eba8b19463f9af75c10ee3a0d941fcd5e98f4b5be41b7ed758ff36a19f3185af83b434d747024c49ae2988b9abfc0195270e46a48cc20c356ed1d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55cc561066a536d98c16bdc307ec3414

          SHA1

          d242ea89804fb4e05d29ff1a632c4295f9121472

          SHA256

          c44ed052752e612ad1e5216ba4bbddc43684ce3afaab787cea7b313a7e90055a

          SHA512

          b01dafa9c2b5aa21638192e3e03e09a69f47fa541c1a7328fa37e89cab86b5e199a766229a34c7c6d44adbea94b09af27033fe325025b0baaf516262d39e28ec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c9b05da61a84c3bf45aa34e04e6340c6

          SHA1

          e6fc175099841c7d0341b06abdc700451022f56b

          SHA256

          fdc803f1196f7f155c096c6949fafff0fa02b0cced154b0deb2cf6104691579d

          SHA512

          8ae7009e8b5db82ddf186e2c09d60e4ef4510ee274b77903fce6a455dae8fd8f5ed4e4fe801ad1730da9c64421532d4e4f22667f26545d6150024de5a3af6b64

        • C:\Users\Admin\AppData\Local\Temp\Cab17F6.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar1866.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a