Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 15:13

General

  • Target

    7987b1de788ceb960ca44419ba61748d_JaffaCakes118.html

  • Size

    4KB

  • MD5

    7987b1de788ceb960ca44419ba61748d

  • SHA1

    c7f67e4b0f72e836c8d6740c4fc791b452e07acc

  • SHA256

    c10558db44cd2a8833ae5cb594e3ec88499594fb3b4a2144e4ed392994f9e34d

  • SHA512

    c4b81d524a4c8644dfdb20d7f1a943ea5a468a46e17f7a125a9144996b86dffd183061164d78ea7159e8fa420b2bb94106de2802c83a75cdffca339fa4a073a0

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oNiZzIjh:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7987b1de788ceb960ca44419ba61748d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52f992fae1a038ae396e7f8aa8577bff

    SHA1

    35b60a8f38b52678fe7ff6b1a27021cb05bac083

    SHA256

    ea2d27b9a68984efa58a58e2d0d70100a530aeb159593a7adb3b331cd61a20c7

    SHA512

    dd12c6f42c7df4f2d031e1f2d4b00974f1479a0d7e32fb51a64d98cd9d18011263e68e7a38ff181acaeed20d9fd272ba47e9f40ce763f631830dd588c0c9b8d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    266944b8c775d0ecd2a80240cdc65763

    SHA1

    5ca57f76639ad67128205f0b20ac3c4bd01ca30c

    SHA256

    0d6fe13afbccebf043821624d1fe6113827ab8bf5e293d513dbc49dc3d1043fa

    SHA512

    5124fafc95ac1b9d9bf0499dbb00cba2a4f5b6dadc5a746ab0d5b20d95d4c5b24aed147764a4e7ebb53a75a4f3190c50f95c057f68cdc3cbc6c74bd702c3df41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f04309324f2af70afacdaca4fbe17a44

    SHA1

    347f04f602360479079c294ad5ad5c0553de65d2

    SHA256

    a16a793f5529de18b9ca33c776c37331d79211db41c60f1bf7f7ef364e18b447

    SHA512

    0a5c8163a0d65e7f331dcae365818486edd264958437710f7fab0fe17779437939926972c3c6150332499f34739db4f93e1f367c26a9947dbe82f083991713b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80308767b5b73f6e90b66997fcf2ae77

    SHA1

    4c033d59f9b9a7b0972792017e602ad2872c6c9a

    SHA256

    d097600717450389efb73b12720a4ae232ddcae7f2a42a17bfb26f15af5cfa43

    SHA512

    73de2be9e0c0380e2a7e619f0f2fe3a958790a1bdddd628ba34b24a0fb642ebfa1b9a9c4e7a605b005c8f44b8c3a1e731436b61261bf6006af58675cb8596831

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7ee715e907f73a63d751de8f6032218

    SHA1

    bc23d89350a52980494b94eea7c42f20e6a8e0b7

    SHA256

    239ee1b5b6ce19a6edade8d388ead9b915d04f6133262583db0b7a234b3bec7b

    SHA512

    1e408a811f1f79b77d89a82e22f501f08e2a75894a8fd921e277df8f47ca4042885f1f803c38046ba4018997d644efddb6c4b2be0ecea12f8a359e305b4ef912

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91684b60fad0b97c2b908f4389f16424

    SHA1

    2a084069cba81c3da39d64fe33244164a855d273

    SHA256

    94a1c4295504873eaaf33f3dc4fb02673becec2c279b6461bba7974cd7e84c64

    SHA512

    e014a851f05e181bfb5235e7cb007a75173e9433a78e54847f08764f8fe40e2181edbe27b1df8c34465b7938895479b11883c9b052f2118a67b1a48f94803b3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60650c3254f2e45f77e7bd4f353374bd

    SHA1

    9869cf38562dc673ef06e23f76f827f666913fa6

    SHA256

    ef9af77f794c13dbf72e0900166d9eddeacebc5f39acf7d542bacc7d56cd5570

    SHA512

    b9127ecb306c2a8b7073c882bd60e1be87c7e831299863d937ef4935d87295a29adc3bec8d24ef8f043dc67fb4b11cf08d34bb240d440c902fe8b2fa0818f335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2090ed5a23c117f5d104f2c8490a76e2

    SHA1

    793b266d61bcfb81f813af50c6a8f2df58737848

    SHA256

    7197975bde5f5e281b34cf2e90b5086f444088aaf0411b145b175eef566726c4

    SHA512

    532107547e1b444fce074b2279d7833babfc8287cf1e54f481e3401cdce0d69eafe30fc3383f82574675d035d3caf910f7392b3d085a671bbddd930fd9f830ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f507ca5d3f3198218b90b4079e8387f

    SHA1

    aecfbc4903bbc0aea14d3329778837818fc319dc

    SHA256

    39092c7ad31467fc3a48ec67306432c0a37e82ce208ebf67562f41bb814224e0

    SHA512

    c73d1dd16871149fdd7300640e6569fafe8978a10678012a360944ec235c04238b0a19cca8ce4e3e57119039c0aebec6296106df76ea9936309706fdc194ce09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44bb6fc4c7d92951016e58e99b265321

    SHA1

    7497edf7c4dceee154998fe4d87d0f272535f801

    SHA256

    e3d42c0c009544887e9961ef1d10d14e946deed584a21355518e0b32512851ac

    SHA512

    45e0dd3b1fd70e464e2fde3088f85f23f16e789d30830f66c12ce406a11f1580ffb54b4156670a30f0c038138d6f5e05a77abe04650dfdefd9076e2308311138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3516586c73852a7a355171e9be15e4c

    SHA1

    eabbde6bcfa7c7a123e7d6c6bd60f6474e8a7a19

    SHA256

    a2d6c3882b7fb4bbc490f7b8c1e9a9f582db20bb72d78917e16d9c814a2dcb7c

    SHA512

    b2eb570f6b880128f5b17eb85ba8aa9a9b974acda5417f282f8dc77d3eb42c5aa83c70e185a6192972f9303ebfbfc6731e67aaf545afb903173b7f9236e2be6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    542372ab5898b3b1a8bf185465ac1f12

    SHA1

    f00c76bc09b55e7e575c62ed9967da0787b42fde

    SHA256

    8d871bc03dd49fd4ed3b5800ae0187cee172bcb3f08b18f8919c115a8d36cbe8

    SHA512

    d5eb0aeece26f8483f5cf265039d481ee010b508fbbb91b709e4ea282db612a7057e780ce6f1eea85316de5bf8aba1cfa17a8e08c5675d5c5c2522ed3a98e326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bec37899e32c7c6a9c7ce0191c0c5d54

    SHA1

    e7ce3abc43189ee2e3f4defc8e1eb7d67f379593

    SHA256

    afec57867edc9470a80ed7573ff805b02114b017dd329269452747ea3ac1d761

    SHA512

    021decada4541fd06cfd7bfda6ccb548183223cacbe5d4ed6a52581c4b66fcf3252331963c241daa4a03cbefa07c9cb3751f43745037baada94002260746b30a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dedcd35c92716dd66316271b4571a9a

    SHA1

    e5579d342013766ecad6579bcefe0cb4a6b96e9d

    SHA256

    6725132e9fb0c39b9693f764c955fbb58a7ca6ab072619bd03574f73f053e0e9

    SHA512

    cb382cc77d03dd83ce2812d83d9b610bb7e0725fa01b48d7bb2cd5c1d5f8a89117911798030c51cfef41aeb5e66a6310337da756c56ffbb8cf6ff1c45d5fb6fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f994fc76e47ceb828c78353680de7de

    SHA1

    8a3ef20ec9dd42dc6926be915c1486fe6d8da084

    SHA256

    a560965c00b07a346c6f4d994c89603a43a0bef5313143245918ced47eda1f74

    SHA512

    67df49f8d7deb8618759e0c409164b14a9b1ec5da7385b9d8c22252d93e3bf64b805496dc667f218e5188f39fdf38283a9c69d2186758b77255a34dda22d145f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2063c455b3aed7597f52d93045c57b51

    SHA1

    9233b80f974bbf1e58575de03a7ff4fa6beb17b0

    SHA256

    f5963cad3aba05d5b2a96afcd75d383a589eeaea376b65cf2a32a51ab79347a3

    SHA512

    05f731c4df5874dd10699c2c5229ed5b2c392a45e01de228440d00f0802b31be5825c94366ed34db243d9e48766fe7447a727c7aaf0ed00464be87feebdbbf72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41cf252018557144b2b5b04e9a54d8b6

    SHA1

    3a0da5b3154f02089236baca6bc5ed33a3b59ebd

    SHA256

    c7e515a04f724fa571bf9037ff12245c55d4c05bd7b49ad0857c21bb6a402a95

    SHA512

    ce4e4a0dda29daa8f4282f4e323d8d4f67675a06fec629de903b98fa0f97dd2a7c5760d96e40517279006886974227ebd389b8b432d7ac925fad23e322dc8e25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28bee34d7b0fb0f4fbcc74126c6d9741

    SHA1

    e779664e82ebf8db28d14f077c93fbb3462266c6

    SHA256

    9784ae91e38efb8b10dd2d73797dd7adc7e94d52125a576ff4571901886e92e5

    SHA512

    a78754a560ab1b33409f2ebfae23b3eb0d91139ae2fc671242e61ad060c69af57ab7b42e3208c24a63ab5492e1c70a4064ab4f2f6191c966c35c46091e404849

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72dc9803bec9c34b69369b8bc3dd5615

    SHA1

    dc9bca213302883b9f679bef420a52eeb4b68e7e

    SHA256

    8b0d10439f2df09bbf0ae413d24ce3a8b92eced1c43110e58fd3c8417c3e39dd

    SHA512

    84caae1402a32cfc7b606590ee29da64fb71d1277be3eb2b974ba7196bc8b06ac4cd35b43cdfb945f41ae7601d42f84b3f7daec3766c908e82bec311573fdd8a

  • C:\Users\Admin\AppData\Local\Temp\Cab31DC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar32CE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a