Analysis

  • max time kernel
    122s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 06:54

General

  • Target

    7c14645209cfce6b3ee822fb50a951b5_JaffaCakes118.html

  • Size

    4KB

  • MD5

    7c14645209cfce6b3ee822fb50a951b5

  • SHA1

    ee0bedc18284d96f3e79cc819d9635c6583f6bec

  • SHA256

    603effade3c272f1c888d33ea2af2929d9bf920697a8b07e800ba3dbb5a39122

  • SHA512

    bfa523b251dbe629be570cca7c1692047f9b33df743fbcaaa6eda1751949cd35cfc46a1de9988d1c08529862ce1b180655fd25d03d7a2940f0d2b8ea4606acd2

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8otk+7wd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pD7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c14645209cfce6b3ee822fb50a951b5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2480 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2968

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a4ca5dc02bdc24d205047f9244909d35

          SHA1

          49247675ca6cd2a3e34a438c4e24cad6f2cadd40

          SHA256

          84916c587a4f0e5e65bcad0467fef3655cfb48d32e2e4b191ff072ae54f34d14

          SHA512

          00a8eb4885a413bc3124d74b173036efabdc7eec7c85d0f498f6a41618baaca3c1dfa3698569ac4e40046f36e33ce0d2b7ce33400c92706830a7121d592efdd6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          37f40d35783aa57b01b6c775cb86703d

          SHA1

          02ed126b3a8f4a4ee4418159cf02a3cdf164388a

          SHA256

          0b8c20ff294a84766d674369fa851eb85fc870b5aa30a5bf1ca7fa4559d09a3c

          SHA512

          d59fcc29775f34cea4a672c8fc53e1673c8c2c15892126ae2a32000f174f10ff3ba8ef8e2346760a51885e48170d4b6bfc9b107c1eab6fc1ba4f5c63db398fc2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1e5eb3d0d943a8bb25fe4b2fcf3797b

          SHA1

          088e12af965bc55bec4dde77e6e987a295492efe

          SHA256

          d848134a3085bf75868b505940c45c5447569c1e4ae3353669372db0a4a230d6

          SHA512

          75146828497f938fef4fade4682b55cca17fb4d5b33921b7ab43a4de498dca1fc0750c8874d6a8ab3cb2762f60522bd11ff3daee6ffcdc17b77faf96a6fdf2e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          53783297e26d188d0e5bcbfce00dfc22

          SHA1

          c18b95abd7dd7d7d51bc1aa214bb21eb3e187db3

          SHA256

          625c528de0bdcb4cc42e42594f210a793974a6721aad721b59abf2407d9789fb

          SHA512

          a5a38f5ab981025e9f0dc814cb5e14dc8c051ce0a1e9efbecba262dc4e5b71f62c1f7882154b3e39f9464eef7dcf90e7a9e73ac9eca8bb9558141d614e182ba5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          202f3f4612949f77044b393e7499c7ba

          SHA1

          f18bc92861dddb4437969a52a40a8fbb6e838a82

          SHA256

          b56765d78dacafe48028c200b6a7ca2da36edd4cf31c66a0c4f0d372116a3ee3

          SHA512

          f74c7e40e3553a6efdc0ca664fdb4b2cf05ac18a3757741ea3d169dcab7b6b890d14cf6d3d38d8fa54a7bc1e5de22af3ed90efb99cab9f2a0af23852c28b4f3b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec9a5706d0981963054059be31afef21

          SHA1

          d5af7509939fc410b26417188ad926f71b57ca86

          SHA256

          a9cc6c1ffc492288b74cdf50102b4c780be7415fcb6c6cace5d3f0b8c79f8a29

          SHA512

          13257fe1158d4b40556a83ba3e64e760e0ceca98507b3906ec4e77fb599af89f7c16933a4d81653371c04c780dc378cf0416fb27f4af482655d7910e0f4ec233

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9bb1f97bb36d6866324a20accb2acada

          SHA1

          2e05a7ebcc53cb16999a4a1340fec9d31956efcf

          SHA256

          dfe764a47e1f63fb56cba13eebc0f3cb815072ed526442a545a63419a72c4389

          SHA512

          9321f404188bf7ac1cf50270cfce200c210cd52a7340a9213e72fe7730a0ca5dcf6355cfe9625c7444e2fc3dc4522bc8465d379d67edee889bfe6f8232020ab4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3628b3743b0473764e61d078ddfb4068

          SHA1

          c59f112549e1df13bd87a792406c3fc913be6bcb

          SHA256

          a4d28d14d30a7c16a0e3a3df2f964afc6fdb5c5efbca199069263c1db1be5d79

          SHA512

          df9bedc9e3f6d4cad836cdd8666a029fa3534668866e4d573f7d071c1ef0f05ee6caf5e2f3d0e829b91172caf340ef1c22d8335ea93ad16229cc4c71fbece754

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          556957664c6ec8b95b08d592e6b3e25d

          SHA1

          3a55eb5fcd9488417b43ee995e03669a5db862e5

          SHA256

          be6722a2534c6ae860b8a8f8fa3c221cf1207e0c727511fcfdff116dc1ccdeda

          SHA512

          d8db39f1af153ca155ef6f9e1efa578e97b543d69c425dcc03bc3043e3ac1254d8a61af15ad5fb5dceafc50e5af08b74a8aec98ffa2e3970e4ddca361b28a4b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c7349e19fdc2aca05e9bd27073496151

          SHA1

          fd9dc6ad3e13f9cb4316da356d7429b5a188dcb7

          SHA256

          9d7d3f2059515b634906ef7e1ff90ec4e66192a1b611a87db4df26c15b8227e8

          SHA512

          786b5e43913268173e073f4359d067e3ff73a4de8baea334128a986e3a4879b665d17d6047573e6b1fb573361151e5e790cc389db3bac194082117dfdccebbf4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          546fef271033cd3ffa8e9c0280061c7b

          SHA1

          9bb3466fff3d7ed3dbf9edd20d3b393916f16960

          SHA256

          325df627ffc5eeb6961c5e353818383177d76ebc17b06e772db1feec982af699

          SHA512

          754a468ece473e708fc533b3b3204d37ef28af7522386845fbd82c1e1ae4c9744f0396781fa7b436acddf5ae1559a740cfb85638bec5f2fafa3ca2050cfc640e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a17d996f70970f4b885a6c051b10e1c2

          SHA1

          7b41ecbe2dcdf190bc38b070dc418667ce53f2e4

          SHA256

          4dfbad2e338bca2e6fe3b3898e86a1d2937d43f871641f771854a771e6a1cf2f

          SHA512

          8a8f83b099ac59b7de7176933e73b25cc56f08606edd70cb8b407463d386cfbaa2769a9cf2fd5e87d3ba6a4fde801eb7107ad846c0a3414fb4b2ed47aa4dc6a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4d553a3c81577f5a593fbd3d0e310f3a

          SHA1

          9f1f137a35a91350de504305f97a30746fa95fa4

          SHA256

          00353542d2f8e58069dd432e8d2ad31f016ece6a6ae5f0f1bd06f12c7c47a97a

          SHA512

          f3ec45b12da18165678f730c2b69c9161c2ca8f2ecd6511048304f275c3f504c1815599230dc4007dcc2b08e8b8c4935a69e61951ef78be805858027d38a78ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          daab708f15f35d994e1d9c4497d25072

          SHA1

          5fe3748349336f05ff340a1afaf640dd18371b7e

          SHA256

          54a06bcffc44ea8ff7c357f61ec9a5c40231dbc591ad1a507e6cf54d099c153c

          SHA512

          af9d2f656b214d3ca116e4d4f7b8f6fb811095edbe00c2e2145dd032f93723fdab3028104832d0b5b2d60b58cbdef9a8bbc78f7dec7ad6cf197106ffd102a566

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a70df23bbe3f3efdf67d3cf960d30331

          SHA1

          512ba668d1de8e45fd04e812399e99edfc18bf69

          SHA256

          8eb024c403928cc26a3231d6002a305badd1a9c8ee4e1a1a72ff8b703a4ccab0

          SHA512

          9680699b42d6507ee2e24ae0b719824edf020925b5f75264f44bd873cc1ac2a63ed311f89d78623f4d66d1b815f0d33454978fedf320a4c8bb954b28f90e9b75

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          17d0d08e22bac2bd6555e80a5bcdaeb4

          SHA1

          efd876fc641790d773d3a152d93bc5ca1c756f20

          SHA256

          428bb9aab373db748bf973bf17347a1fc570d6585de479512b63f5ba84bf6ce6

          SHA512

          de248764c5be418d32d579b8ae1a4a257262578687ed593669d1f7ae63692cc574573086d46af33181c4c2b2f93d829b6b42c1327dea5628acba2a06025a6664

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c3ad5f57c6fd44a8cabf8880692f065a

          SHA1

          738003a0375555b95dbeebfbe9b066ac945fa56a

          SHA256

          f1f21461717deddb9e7957222b60cbdff4d28005c0bd1b93892aed2fc0044a1e

          SHA512

          0a7e537ac193bb4f37ec0d46863992cb3ac4125ae2b9daeb479a97a9c42106931464a9ad3a5bf5d10d2a09367e0fae69ba703883c57bd63f801d90328ae0a1d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bfc8f0438044c162cb2a2285855aceb8

          SHA1

          71c0f7bd1d523e272b51de7a1242ee483ab857ed

          SHA256

          ac163e9389d3fd1688889dee4909b6a850ac621c6677ba7aca68d9c7aa89135f

          SHA512

          4e0735ace5e172f587ced3ad7d6b2f87deaad391debcb6a945c7dcead07ffd7b301ddef44c8e102d5b8a23f783004c9cf656b1aaccc26fdb143677b05f9f3334

        • C:\Users\Admin\AppData\Local\Temp\Cab2742.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2824.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a