Analysis

  • max time kernel
    141s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 00:12

General

  • Target

    7b09f3237b46d3f9b0f65ce80707d741_JaffaCakes118.html

  • Size

    138KB

  • MD5

    7b09f3237b46d3f9b0f65ce80707d741

  • SHA1

    28b04609fc215025a4b69e147124a062133218d3

  • SHA256

    10ba95be498d45fbef2b29ccf5c55bb6bc2b04589ad7e9c3a16f613467f742d9

  • SHA512

    d861d098e011a298976884489c388672ab4f460117055396570695dd9bd7b310fbe506372259a3c767df5b28f8de50175599fbbde1727cad08da2d731b88da33

  • SSDEEP

    1536:SEnpCfNHlYuNyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SEwNDNyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7b09f3237b46d3f9b0f65ce80707d741_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:840
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:840 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73acacef04a545b6b10e8337a418e8bd

    SHA1

    dde1357fd8469b979ef97ef144003b29adbc317c

    SHA256

    0c1965a4cacc70820f77e6bc1411a07f1b6348cb9023f0b86adbde4440f83d48

    SHA512

    a9a92d4fcce6a0281944033006d1cac19e0bf5c5254a0850361513838b9b9d2d714defa0189d8a5f1b5da30cbc1167be96a9e3f7751b4e2b9d31e38e18cf4080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    940ac7effdd2315f76f754d9eec9973d

    SHA1

    4d4a9bc31c00961809b6e4b76be33469bc79a5ef

    SHA256

    13e888efaada5801ddb2b914353f86c14f83ef9049e119a8f3a6d952d25c9cfa

    SHA512

    6bfce4501c0b4141972228b647aeb84ed427d7985a1b7f7fdf15449e23fb0064854142d5087e8c4dcd3ff3e375e57b631500ce04d2babac3580d918fe912b261

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d420763926ee9e3b37a5c99007d341b6

    SHA1

    a38333d2344dd1aac8c0c17b92afb34ad721e402

    SHA256

    0c15ba14355fb869a94fafbb1fcb46bb5021c18babed5a8a8431c70471b4bfb8

    SHA512

    3b8a3566b176d5828fad54dc75982dddad7a45634f0b374cdfd5ed88bff19af7351b087903f494b00dc13e2a6c80e84cf38bf5cf21b95e146aa8d77394365612

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f627831145a4f7da9d1541c2cb7227f

    SHA1

    990df4e912276181f7ff593d84da0f46495580e1

    SHA256

    aa0057c360149eb836c0e1fe9045b4041d90d21bc59a3facca9cb0f7d96296b9

    SHA512

    835bb3bfaad05dd38f553e5e4c66a518da0d6f565d534823e37162a24f3155f08365ba8be75b3f2926b2ef420d1964bdcf05239c7f3810a3243fc6aeac301b1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd61b10f37fdf696ddfea7cbd0f63828

    SHA1

    46588b7a6f14e6db218e9d26c015fc0a897cbda6

    SHA256

    b146a740f6bb09d00b2921f7bc95430296f7949f2af353d13fd57ed202295dc1

    SHA512

    727990784e9587e873ffcca30504bab181aa4a5c2e72c6e21acd38d3046c2ef20f9cddd95e89564e2ab57ea2e4c03443f41937ef48801d70e5b6695f55406b9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23709c339c87648d35c305c1cd311824

    SHA1

    df78b8c51104d4258f2242604751a65a11806232

    SHA256

    264382c0cb7b3562124ae03f559a1053d0b5f7e15013237243b13c67c9341856

    SHA512

    aadc0559352606ae588582638539bacd0e91f1bfa44eee57efd682e25165fcafa20fee0764901787895e326746ddde212c30fe193c161298cd33e187f90a2bfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e5ef13a4de885c42971011570a2946d

    SHA1

    433c447523a82eb4ec0c0918be467f3c7e177a4a

    SHA256

    968dcbbe2ab5c4e879f058b66ced9a50cbd3354839a6abd019d0bb3839f14b64

    SHA512

    8ee721dbdfd6e972d1d1e2672604236025b3be6b112a491e24bfb26203079efd11e26cf38e9fb542677144fd039771f43c6b61d6a68dccb88e0ad633fce37e62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    233630c9ff53fbd15f7b69c11ab2c8cd

    SHA1

    d57dcd2d2228e17452f757db023bb2d7b018b81b

    SHA256

    b4f1e4800afb6b4b0d70b8e82b0dd31405f655a4e85555c5b0156dc20e480a38

    SHA512

    80114e9404d4ce158fed67fb3efeba9f4864fd73e7827befd3c3532f682effe263a3e58dfe3ae30f9f39c072c213d5a0ebd806e687cf073599625885a0554500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edb2bb9447fd8991b031b28ecfe5e12f

    SHA1

    7949899f0e35671de5b8c474e2ca6504d52de1ad

    SHA256

    1a5ecca27018f8fda07c12f60bc89147f3dfe030395fb0e27a5b5346e5e52982

    SHA512

    ecb470e962bcdab2169776408a06dda680790577bdeba8ed1c0f478fcd5b2122c0e8950f5116fe6f59ebf7b3b5fe059159ab6e6e22bd56bc430beb7e9b357f77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81b806bc7c5b66653895da523ada4b31

    SHA1

    af740eca4f1808fddc096a7454d32c76e950dbd7

    SHA256

    f1b200c9183a97884ac326a211ca6435bb7ccfca518f7686c14a75a8c2fabee1

    SHA512

    fef6b8e3e6efdfdb57428fbdd8988b81167b11827f29d410de28ada0b89c044e7576000300d7b149de842c3c0949f2af8396e6cf1ac0080cc9c71987823ecdd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9796ff5a509a25e06feb8db4b993264

    SHA1

    a8dbeca9fec59307370b0341d08537203a55ca9a

    SHA256

    9fb3ee28cebf5ee009389c5542207ab6c4c194c8da1cff9839a1ded773c1ab36

    SHA512

    5e381822f3864f6ea002577d9fdee916c13a02daed8e540faa4ec5fa65274bf202f0ad58788155d9da6d4b12d1c60e509a7d62941257319e2150949566084d2c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a6703d477d73b603ea3bfe67eb5518a

    SHA1

    ae6c2bf44501f254c726507cfee6eeee5ed9b755

    SHA256

    a1057cc132ad2cbc94f1a3065b4eccd10f00d48b8b4600fc49215d4140bbd5c7

    SHA512

    45bb3b6d230ba0ce2b2264baa1ff3b33c6750f63df2f6c46ca4bfb27ef464ada6442926f2243029d9dd5d35ef75a05736fb7b46edc5089bccc5a4dc2972930d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22c2c05b929138c3358cc827f1439a6b

    SHA1

    a6c801da678d881980b6e5fddb0f1a23d9ab4c5c

    SHA256

    0471d3ad942ce71489cf36dc92b12630e38ba2b895b10f57c961af657d9620a9

    SHA512

    6b1d85d81399aa4efa698c0d4724e57f94b895b41408b8a50751a0c528d6df960094f2890cefa2f892db431bd8ecf6ec0c6a7a1d8bf58cecb225a7f10aff6350

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7ba35ef9ae5b112f4ad098a0142765b

    SHA1

    d2af2add8fa7cecec793569b31d438213513ab58

    SHA256

    730f6f5f24556872f4e7d7e4f8ef9372a886106bdfdb0cb4eac29e61cd3d1133

    SHA512

    9bd5bcf23ffe98c7d439e76e9edd8544d997808b9eb6e373acff6b9aac7367fec8de8dc6b3b70b6a5e45b6563ac573060ef93b3f0c8414ac6cb37e404857bb81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4122fe6e14815b200b3c195f964aec4c

    SHA1

    295f7bf0d019797ccf6fb7f9460b2f1ab74f0a3f

    SHA256

    f7878c4076734c6c122320e7d2b1403adc957e021e7d9f748f02dd94c8b8f22f

    SHA512

    93da60de70170e6983355f104af31787aea3e3566fc34591137d6970282854cee4e52e20e1b0e897260d84f36651f057a2426ce7edcdc05816c3a8af76d926b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33c634cfb7313d38282d3c1b2de4f992

    SHA1

    fb0f581112ae9b7aa3bb29ae2189f8b04cb691c3

    SHA256

    891590272781ba0c4e16ceaac148217560d7408b81720331554f3ff1e629cf9b

    SHA512

    dc584bbf48ca91dac7aed53b61a4fe433bf5df8733763bdbc988a67e4ab5f3d188e74e670a814a2cd780d9ed60e68bbbd48ce8a0a83e69d67b95c9206eeac55a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3de89912e666de0ef471f0e06b93af25

    SHA1

    ec4ae00c735c8a27cf6a8ea4f56f10e7ae435904

    SHA256

    b3e5492ade8c5888ce80862bedbf3175eb0f492fc57567eac1597e8e333b19e4

    SHA512

    6d86884ecbfb4eee517ed730e831df654241c41aa1ef5e6a640137c8faf4caec2d25feff60f3ca4755d742e55f45b5ccf8626eaa24f35eb609eb23e2061d65d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    752119d295740e55be82be470c98ce41

    SHA1

    fae5cd0cf1ee6c20dae56fe829e1083de09d9fbc

    SHA256

    fe13d460c240be9b64a5e7eb6ddd742b87a055256bbbd4b71d3ca4e981680724

    SHA512

    321dd15d7b920e4b0c66cc8062a0869a4ab2db5e626ec14c7806516dc65e5369ca888b8c35faa42e709d358221003ac1bfe7c69c137b7acbdb943cbba57242f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbfdfa730a1f2a71ea9899c9ab0a94e0

    SHA1

    e46e6fbc750a7623c55c5bd33aafab853dae6de4

    SHA256

    3ec2d50fa2c28f3c52f79d2f81232879637eb78433ce378402cb45c00f7a302a

    SHA512

    149739a399f1033b532869b730f2ff75be7ea08b31aaa20277c0f82dd7fb721da9b59a1fddcb34347a625f691b0a13c4c2ad01b454202d54b2c26d8d00a8c42e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2cdef7ef350d6129f1e38b7551ac843

    SHA1

    6a8cb88122c3e043d9e9557c2625ea7cab9c7861

    SHA256

    0f1968a219bf3687ffb717e7e8416518534b517f3802859c28f1701418892594

    SHA512

    72341a1592b67c1d331075a8563b32fc59d1ef84c83eddb91875f32fbf36edde1931726474cc574cd3e960a7e21b190a3443ce0af9434668070b18e651f3e7d1

  • C:\Users\Admin\AppData\Local\Temp\Tar129E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a