Analysis

  • max time kernel
    140s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 08:25

General

  • Target

    7c4fc3361adec376beb79ffdd14b0bbe_JaffaCakes118.html

  • Size

    139KB

  • MD5

    7c4fc3361adec376beb79ffdd14b0bbe

  • SHA1

    92c14c7b549ec516d9e0bcda974c64e678e0bc3c

  • SHA256

    756a2ee37481537210662d29857ccfd848549b2a5236f35c9801f66b6124328e

  • SHA512

    78c0c69892e89ef0e3fed8523eed6aee1aac28e33b9f83a3652157f718c529bd50a239bbf979763ea9294d9445d77eec7c0b99272b80bbb52bfe6898d614e16a

  • SSDEEP

    1536:Spdlal1SHyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:SpHHyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c4fc3361adec376beb79ffdd14b0bbe_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2444
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2444 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2872

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8141487b14166543a80ab742121891f9

          SHA1

          e177ea191a8ad4747c534a4d86c9a83821b44673

          SHA256

          f759e3762314c5504269e2f72d0e414ab58e902d4732904ed19a8fbe3e55020c

          SHA512

          9ab33742a4aaedc34e29f0be39e6212ceccb603c98cd9a8ebf30d4e2e1f1be7fd5ad455c967d8fab5bcd827ca70fa742fa501f485dfd39a6a402532cf2c79269

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b02ceb378759edb14fd3b554cbf7df01

          SHA1

          2b3004fdf13f7c45bd3ba40544823d3c7e25d3c4

          SHA256

          33b1ac28d68a4861c2c5e222f709ce203eaa1124519c9eb404f1570b1f92133f

          SHA512

          405ff35a7f9af043810952eefa0152de92ca0cdc9cca76fbc5d4cdba240602d3ef588343c7b488571ba81b203c0ad714e12288a3e1f9f52f811a7b4b41adf83f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          dcb38ec736adf081e68d5bff9923b080

          SHA1

          3458fd1e290f01eee043f20de9128f7c81a8f651

          SHA256

          5f460dc64e6ba51b3a9247c0630141c2eeb8d7dccf1dcfa31b48513e1081f716

          SHA512

          036327419bf61500c9547e43d19c2a55a7110485476c0d8f99fff42673fce628074fb27c31460e3ef7d6ac82fe23538281b2452571a34819d21ca7b31b11eaf8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb9498b304bb47d9305f7427db70d5ac

          SHA1

          a3a701eaf3679b6b0a18c27ccc433115e3efdea1

          SHA256

          5e319e22ab35ef34b61c05598e951774c558c62405ad695b24963901c66e3df6

          SHA512

          f5c9f82b3e4501395de2c32a26c1b9707f80ffb99d8e9cb0c9f1f8053bb37af3c9a785b3a0d82f3aeb4aa1302b10fc16c5b8a5225449f7b98310975979874ea5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9697fca60ccdc7a53e970ce96f1c9fe1

          SHA1

          2e5a0218daaa5fcfc179539eea10fe04142cc763

          SHA256

          e796b13fc9ca6047d9d34261634b32858b4056a84f3c24d523c7a8699e5b1b85

          SHA512

          d992f0bc1a266478c0b5a3a6b3ddd987177f7d9b078f32fa170d038771334fdd203ffa50db45893c1a123458876e65ea83ad7f11c1f3c063de8da2019d970b00

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          df490688cc134a8cc4757822cb14b9b2

          SHA1

          1253029be598cb857785918a4a9f95a9727eba52

          SHA256

          b81480da340e73b6e2d780b1a26e08bc587a163d4d6e2ad0b939072a281a6d3b

          SHA512

          1ae59291a49944f4ec5e633730c69c4869281833c3a8c96d8bf3a486f39afcb067933b645a656bb73439215b3c342caafeb4e4c96bafcface37ffa43b42b9f5d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8fa14b404f2b710814519b373bd4a7c9

          SHA1

          2a30038a755e1acfb37c9afc7830e2db027307c2

          SHA256

          8f245fd883e68f3d3976f17248bde992c1189369db7897d69858981456ebc959

          SHA512

          fe9c461631714513fb5fe578cd7a122cace374613206048a2ece6c2c4e8c2ba9710e64fdd115ec527cd68af8237335772e7eb7545cfa1e68f5ebf345a0e55bad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d35b28470841ba6e9cee30c1054a9c0

          SHA1

          c9aa5f3d8107011427fd0937e8e20c4166943d18

          SHA256

          ececa1f5f5778e7c9b4165ba45ec98e420ad82dcfb58ef8cddc59ada7c571c69

          SHA512

          4628a58ae3af65e1a1fb72594d4709f5c3c8899abdefb681d8a4a03cb3a071f83afdea536d632f9d8046441d8b12d0ce227ee9179a9743f2663610e26093ce12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ecd173d45e22ff574b7e1634c3ccb4f2

          SHA1

          885b8dde79dd2604357829e07a4d2f6296779c65

          SHA256

          e4a69464c0d373bcd7cc90309b72f9970644d4427533761ed6a472515d25b889

          SHA512

          e5a74f23b90aeeac34447e67d7de3feff9bd6cf59bf2a41770f772be31e1913167b081f2287ef4c8d3f3397ba0f73edc60618047943dbc1be6559eef27ebb4da

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8dffd745ba8f1ddcaaca6de783e895a8

          SHA1

          ae06fdfd7438e0d91fbdf46db00d3ce1e25c3abb

          SHA256

          74af1e4788d78b4fb8a87316ac3e382bc0bbaf6401eece19381e2d5b5f257c32

          SHA512

          bf2aad8d0ed69ff7000883669e42f2b543427b048dda11c29089d5677c4c42e55641ff4f405aa951510bc4403a688b33a57c86bb6f4d00fc16ef9778f52f569d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          37eb9f0e03bd3a31986fd97c9d7485e9

          SHA1

          a7ea077b086fb3e97383bd35d9c4ceb1963aba16

          SHA256

          791bf83fa73b08552f30a6c7a83a6b4a6947603aa9d3e275cb26a8df4a074d90

          SHA512

          7245d6a6c443a9e49273d8f005c70b75c493169b8f774c6ab4fd39021e3fc159d51ff2293b6c047cc3df6b156a992b83ee332f85f60146ac5eb0fac16784a886

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b71e0517afe1bdcb658ee3309173feb0

          SHA1

          2808e686bf81dd2d048a186d1ff7f8ad29d849ca

          SHA256

          37d955fdcb349153538a4ca980e5b2b2fbbff54e9207316a5a2ef854c410c08b

          SHA512

          a9f0c3720dcdaaa3abe93eccd6e2f43ef0dcd4934fcd153bee1a005b39ebb4ff1335211b285aaf0bc366ccddebf286dd4af710ff9b076798b9f9bbdfdbf2789d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          832563986608a0855b1dd0580cd5144d

          SHA1

          6b47e8d29edb3ff3b8e930e322a1d5e1db9eaf60

          SHA256

          4a1c70f22340efe7712537cb6422960728f17a0252d70b767b2c8297f38022fb

          SHA512

          ab7d8468a5ac65354090141ed22cc2e61eabf49c184d78fcdf44ef19491ff06b646ac9c5aac598fbfb9319341f42645ed0e780f8e72d2d2e3af5ef2c1b032d8a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f10ea82a65b47dd6ac1852e43ecf4594

          SHA1

          1e19b0125b874d2efd327ec21b74f80e9aa7e806

          SHA256

          16b391c31e101ad4dfaf18d2b838f94b3db5e23880d2794015238925ab1792b5

          SHA512

          e4a31c9f6ae5391ca6eb937aac0936e71a6c8fcc8405b0bcaed610713d76eb99a1b7d349d0d1ae027c0e340ac812ab0b28c71197b91b1fc38d74449523222d32

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2ad9b3dedbe9364c5bad0623ae99b8f2

          SHA1

          eec8a372bae4ba30f032bab7410a3bb401cd297e

          SHA256

          69ca207876529f30b4e75c77180478de010878a33700628054f97137fb771d35

          SHA512

          55610540882f5adf087e904ba5f5542e00fea4b9ef7541dc8d19a55280ef31f1630d4fef92f8145024322d356ea4b1390129dad163eb2d64429c8f8e63cdcc8a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e4a4a528310465ed96b61bdab718ec8b

          SHA1

          dc35ebec77068406f0f81309637497f3a0ed689d

          SHA256

          e2591af67f7c18907ff53c1e384cdb66d3670ccd55f7b9b23bdb29a06a2cd3c8

          SHA512

          fd486d5e2cc0e5bb6d53689080070bbe2d960b17b4ed5208aae5cd52a88c66baba2bae2f10878bc62751fedd1e2d660ad98eaf9153abf5e168eb921c8539bded

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1d370479abdf5627878b42fa70da3eec

          SHA1

          c6962d0e42591b4eb9d8f9bb2dc383386f1ba513

          SHA256

          851ccbcd7e62cfa0880abc9fadbd7e13d8994c80f3a87b296a9aecc43a2ee3e0

          SHA512

          1059acf709b7b1e260ef5624998d0601835471340956788a4fa64364f8de57905dcb3f8429b0b36e22491cb8af7b81a9d6a9d375657596ebfdfe46a27054e670

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d1dda47c81332bf4a3534d7e90c38d14

          SHA1

          d52d3026c7b48da6ccde6797ec2a99f5a38cc7a4

          SHA256

          dc635158370d3327f38a008e8dc21985952cf5bba9a730638b01d9e5055da2af

          SHA512

          5283f385433f28a558f88ee3b0bc6a6ac7dbcee1d13f738f8314b2a3d654ecd07c60186be51cbe8f16b042f140005f9d0dbb1b17fe3c0fd0d68b8f7ca68eb9c9

        • C:\Users\Admin\AppData\Local\Temp\CabCA0.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\TarCF1.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a