Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 19:07

General

  • Target

    7a32d6a8c4950641d56fec8aea708250_JaffaCakes118.html

  • Size

    3KB

  • MD5

    7a32d6a8c4950641d56fec8aea708250

  • SHA1

    e394601dd2b7914481011df44bd4758f5d24cbc5

  • SHA256

    40b9bca9c816a1342cd6b0035a09f3b33677686b56c3f22c587a305ec4fbe3cd

  • SHA512

    7629264e702313bcb41c03db136cf8af2b4374eec218f8dc8e87b4f8b0aca60fb7a521926684e5a0f6e966b15f95f9052e34ed69d5e877bbf27e5c068835cf30

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a32d6a8c4950641d56fec8aea708250_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2640

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d5242caa0ee4a9438b7cb49cca9ae3a1

          SHA1

          2c287af46a8b93da4e8436c10b5797884a8ccc0b

          SHA256

          9569ce065943bfe57b0cf32d03754b49e20c29d5269c328643933b165c011ddf

          SHA512

          236fff6e9e7c95bc7f88ced7a3f155199a287f1f15d8844d0fbbfa7ca9b188a9d9cdf95275e8a1c6b45f4451eb86fe6d594bab8aa131ec5dd21c1b8218517eec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f66a16bdea93898e491c57d040030a1b

          SHA1

          616435e02fca2ca51850a2e2bbd8c05f6b51eb2e

          SHA256

          e797c90f7211eba22d29b1d26ec5bcfced3660b695d805bbb210bbc4329afb75

          SHA512

          b707d91ec8ccde7d8e5dae40b2d882c7136e92d751ae742db77b97be8a907b47eb2abbcafb845cdf4d3388967acf4401bba78f56f22bf70005d36db5960188b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2e053ad20843c5e4458845729672d75c

          SHA1

          7f0e522282d6c6f3b86e68ef96f645544cac5e2b

          SHA256

          13c6a3a81e22e92760b342bb65505378a709ed55a22423c82d5166b072849521

          SHA512

          5e8a0b36c00e08e332617d3ba2c756f17cbae13bfb7d2205513f41c24a99132a71470274aae088c82635d73a75868baf13d55e8291dfc04f1ce55dcbcc5c4e62

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f05a29279f3007f0208ac47b315ff0b8

          SHA1

          fb0cb5f9af24c5a065ee6b1d7ae9e1c1bed26895

          SHA256

          a49e0fe062685c1be11a4e5ee24e2f927d05dace5acb0029d92308e740150954

          SHA512

          ce7ffdfa91af024a75dbee0c0aaf58363dcc838c38f47aad112e08bdec595852b926e85819b4fbbee5916bb2fa0b47072cfa850ae5ec430a43ab20539b43c653

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e0e9b04a2acce4f64b81934d50df8d43

          SHA1

          75b0a3a68f920d2cfa4d335aa7ef4c74342c21fe

          SHA256

          780c8e5a577e10b8a074b7f417166545a2a4a526d1c0f1676050301ccaf093c5

          SHA512

          4206cd888478163ffcbb23fee5e763b5280baf8a1a42d86ae7e7d979d2f4626a9f1c532d13852bdb34d1c4748ac6e9417403714bc32ef04be68f1e89dfcc910c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          12203f6bfb1d40cf753459ab7e3cb59c

          SHA1

          5610adcd1e0d03ad7794447acda65915ce5b7042

          SHA256

          0d05f0f14f77fdb6d633fa4a606c38311265f4f43924148280c3207ec1261e10

          SHA512

          266d089c160a0f19e2e07c2bf8d1964a599098cd343dbcca7126607857fe20e1e6418e0166c27fe8a988f6d36649c5bf1d370af932ea1231b76af95c4dccc002

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          57ce5ef445d29e72e722a28533b9da16

          SHA1

          a4d89cd98ce7be2abd45be75650837f55e3489e2

          SHA256

          ca2ac43b41f0e886bc3eb5dbe74d476000845d719b288d9ab63a3057abc82541

          SHA512

          da4f699d438cc3d55d05d761c989b5dccdebd78718660789b0418e11781048119fec7d48e5de4a2f70ee667d1a09a85adcd5f18cd505e62cbd57bc49cc1a03df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          858f5153120b1f0872c9bcc868e6cd69

          SHA1

          2930254e36e93bf224064cc9ffe67061bfbd01ef

          SHA256

          3a3cf1f53c14b77320aa65b352b3ac43792795b82a9da746a666d6ce92fa8e9a

          SHA512

          acbbade4dfef8ae63a093fba7d077e3e5ceec0dd10eb1abdd7d5bf4a7fd4201d676a414ce030cd09a2b1ec397b1caa4d0f2e9c9852378ff9fec8de828a4e5a3b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          790cfdacd7fe4fbe492eff174579014b

          SHA1

          c56f61c631de4e6de339bf7bf2507519510f293a

          SHA256

          41e3d3268ca7775084b8f95606a2bf49768e04bb7be3fa032e11331d5f7259b3

          SHA512

          c3b808d4918785eb9bf5757e2b625971a450a378fbf05c733de56e30e3d81a793b1bbceddfc04286eb398e0412f2b9230d0698327bbdc83e0b8c0d952538865f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          59a4d004a60e9dabb7d8df239678030f

          SHA1

          5bf037b83ba801eff5a5605b2f9d777d919d4d9d

          SHA256

          9f0e02aa58095067092d995a690a0214e99a75edcb36a69c87e54d061b3311c0

          SHA512

          a2ed5e0d4516be2e353f36bae57f643cbb57b5ae6ed0c6f667ad0e6fad978a0ddbb7a2f0112deb8154809b2dd28ebc28c37445c18daccc93fa960eb8dc6f694a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3eb284b757214065a6be9bd88e6db8d2

          SHA1

          5dbba51d8ad43faf21df48c2428b8e43865e9889

          SHA256

          721d7f979a9d5a5e8ebd0228dae4883daab5d23d2520dd1f71800d424da3fc5b

          SHA512

          d6a65aaee4fe3b796bcf3bd3fa669ae20d6ecb0ed4d2e98086a6eab2f82270ccc249d8e2ac07d06af884c3bc5cecff9f63d395db318017cb90daf8f0c87da96e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ecd26885484766ba40868466f2c444a5

          SHA1

          548dfe6fe66eb121b4aec726df6f3ba8dbff9d7f

          SHA256

          5dc21bd7d2f66618c55490de56495c258d3f5332a33870e0344cd5ab62b93db5

          SHA512

          ee012c3d343c410d119ad704a0cd9f32678e67b27df82fdfac03de97839b3f36e9684adccef321631db935926cc8393fdc625d8d099f4b60016f0618f23f6747

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e80ca0600e8f2385cf1a48ad41b111de

          SHA1

          274aa6eef10376d2ddafe7dd2f105ca16e4bc761

          SHA256

          4c1e5c31cbf23158d67b67a75cb72e4549e03b79aa8aa1e5823758f2e329e528

          SHA512

          d240919770b6fbe019e0a513173729cf4cc7b4efaa79eabf110027f773fb340d32e0039a887900f65b0c70afdfeb138ff8bff7ae6b1a09a7a05934ca0949d872

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ba62e96d405051660ae12defa8c9f9d

          SHA1

          842b9651c5f239fe563a019f5bb1dca8201a0ee3

          SHA256

          8c7331584c6567b266194f760d7abfdc9ba3c3204fad7204e45a1eda4dee1148

          SHA512

          792ac879c41a728d4594d47e903aaaed21bdf44b70cd81411edbf56b73516fdc7475d65728b37d847d56c2463081692e1a9bf27c071b5434118b7af66cd1943e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a15064dee7ba1b5974a0cbe2175213fd

          SHA1

          bcbcc33f6188bf0fe6e1f169aa2d18108d25dc01

          SHA256

          7854a9acfe2b1ecf591a0d02b02e574b6cbe2afabbff56c525fa2f26e9a222ba

          SHA512

          17921e20daab201bf995139d68e77af1e7b16b6c055bba1bdc54faf82a9447e2fc1c2771be84b60eb315431068ed0aceb73d6bf7737ecde8fdb9125f794b2604

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          860ae78e9cc1465c0862b60db74e1917

          SHA1

          6fe4682f454c50651ddb53e5875fc9dd82157fa7

          SHA256

          8f953e6b6751ccf8072ee2421a1f54f00a5551bf82412371bff80496774adfa7

          SHA512

          129cb5404e8bfe31ff35435c71ab79c69a6072ba199118149f8ce8597d01cc57982aaf4772c47e225ae3b5029ccaa5dea3cdb0d64b9c76b6f04f34f360c16ad3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b7acf94debd3b78dba40fcff2c682f02

          SHA1

          edfb7c8fd84ecdefb15adfd1a973d3583a19e1d1

          SHA256

          d44950de9aa4cc1a4f34cb30cb2139e51ab2ab788d26f3a6b3da82c078db6bb5

          SHA512

          6eca0148665c8bfd557a27ce2005ff39749bcf59598304ae5ea40135d5f49b41591631c5855f940d16dd03cccb18b003078bbb0c422e99561f9fcfb9c5ab9bfa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          38cb119a241ad97c3bdcd07840d64cfc

          SHA1

          0fc6204266f79737321f34647c010f40fcead095

          SHA256

          2993e3a989515beda0262c349e3dd2a9975664acaf3f6ac565cc115f3df94950

          SHA512

          ee91703dc3d539cfb3c2db0123e9fbd02f901068887967b17b49d7c233352c7f0c352d5d9727eb9715883392932aaca7facf86b3f3ecc2ecde0022e4626d6c01

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1c427f171915eb20de89e394e3edb660

          SHA1

          0375e07fa54c650862d43a0cf354d27018ce774a

          SHA256

          3b459dff6f0a80d68308e578d642623d83cb32ab6d16ed0f1cb66864766fa0f0

          SHA512

          0d6d94ca9e0a49eb61344f7f774a59f608f6c3db73ce5142f138c056da99a5f081c56c015c6519bc50e8907b0f882c49f52745bff9429c8d64abf9f62686d418

        • C:\Users\Admin\AppData\Local\Temp\Cab26E5.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar27D6.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a