Analysis

  • max time kernel
    137s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-05-2024 00:39

General

  • Target

    7ef4fb161363b75a0894f6ed31de8cbd_JaffaCakes118.html

  • Size

    214KB

  • MD5

    7ef4fb161363b75a0894f6ed31de8cbd

  • SHA1

    6bf43b9f63f34352f71989f79caadb0d788de862

  • SHA256

    d31201ad76f4c780627307598d1418e83f0b5ace42eb4a88355b9e3cfe7fd3b8

  • SHA512

    11833271e57c23674d14a0bce31fceabe410fcb5ef14df45bac5f1d85784694bcc80e17af6889a91f9cc117f37aa7fa19dca06e651cfe06c1b6518b49d228719

  • SSDEEP

    3072:orhB9CyHxX7Be7iAvtLPbAwuBNKifXTJX:wz9VxLY7iAVLTBQJlX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7ef4fb161363b75a0894f6ed31de8cbd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    487c492f87aea73e72653680da837b40

    SHA1

    ea5af942b8403a12a98acf64d65ace5e7e2d6df6

    SHA256

    8456ab8ba3a49a5a824f40216e1a01fc99ec349a43ab5b666ab8d520324bc9b6

    SHA512

    124b3c6251947425dc8644f959edb84e60bada6b34a4a90e25f15a9d5a2b4aab95d2228bd0bce1b0554d7a4be01ae3047ae62ffcb651fba8fa8430fd499561a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f97bcd8539c8093aa9bdbe254f3b2cc

    SHA1

    cf1218d5c6f33a0da7f924f26943a47568e0980b

    SHA256

    1a15b35179e660262104a1652f4dd19056e65fc02f72adf01d75541e66079398

    SHA512

    2a0a848d881bf30333a5e400a1d30db0f77c5cd5b60d6c45a3d8f26ce1bd129af64045618ea141e02c4fd0479376b8137cc2ec74594e56ffa5839fcd73c679a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5f3ec9be41e22a21f223eafbd1b2cd6

    SHA1

    aad604f70353ad8859bcb8734dd378be9242cba5

    SHA256

    888883d6fd65809f521fe446c9f40ef78c33b923608e66f0fa579a48d28ff59e

    SHA512

    f5c583bcbf44bb6ad071f0a7f96755cfa9d6b52af8da72483b7cd2db6485abb3719167eaad43dc30c05d547b98ebcc2874dd1fdb33e793e59b76ba15805e8a46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1916ca82ee8a909575679957b0e506e7

    SHA1

    655b3d56c8d40000ae3d04c1f0030f6525ad3a54

    SHA256

    e7ae10a6162e30782b9a931bd64f179b82e699240449de551d540771d52c3f5d

    SHA512

    5f6b9353e034ba27ad51e6d33a33c75ddc2b76270ba701c01c701d9f6eefd8950acbd538b1870c5686fd74e0ef2c37f9d645b940451c5b1508a6b0cb565babe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37abb6634397c04b6afe92facb8768a7

    SHA1

    adc4cee5a92f6cdd2369a28a63ecc1b23da86cf6

    SHA256

    77c8a2a9582126e776067c25671846968f465574f4457048c92d8fdae29c8122

    SHA512

    e3da467ae7a323f66c4e8a7128a32e22db54cef6257f6c597578ff65a270856d8c5e2f6854ac31d99464cf01f883ee56c66bb4203825eabb12caa669d5cfdbdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e876a5e3887f2922f3c35ec9d5262313

    SHA1

    ed311269eb8853fb871048375b1dcf847ce9b677

    SHA256

    3f2831224f29bb88bde5177a21ceb07266c173b25a6432293ad4ed790bd379ae

    SHA512

    64b5a0ee7569eb9a9156c31479dae35d41b3b2a389cbaa6d8a72260a0f6e978917769169fe0f0d226efcf323381471d13f5470d7c26d12576bff0b47a51ad3dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9eb343d2f03fe9cccd52b92cead3ca13

    SHA1

    37a5234146cc988500a260e8c51ae4f9607f1f54

    SHA256

    4469049a1b110632e8cae18c1eb01d90f578321165a71898997159e2c1792559

    SHA512

    71f9f1c7a6cb404f0b5ddc56da9bf11cba7d3fc1576ab2e7e0ab88579ae607802eb219fe7d502e39a5e6d9b7fc0d4c664adde96cb47cd1694b3a01989f1b0120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a75f5460b6f60cb22db6341de0412a5

    SHA1

    9141761f424015f21ec5ec143dfdf95438e251be

    SHA256

    4d0dc81cae2e06a663aaa790befc9768807e03089905fabff8c6cd1f7dcb2e96

    SHA512

    572a58d1c7d3a1574ffea98ee484a889708da28678efae1f5200b4dd45f29303198c6b76237d17cb5dc1df65f3617a486ff84411efb65d43ccb4525cffd2eb56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b27734593e6f97710a3abab90f49d970

    SHA1

    22fa95e38586002338dd6fa309f41344ddfb7b8f

    SHA256

    2a6801263e3a309e9abdb4a8f333ee2134776405044133fa978bcb67418b745e

    SHA512

    4d50a7fd2b9b61232b13697416f474a5cd6f17185c243de2523d89347010b073e8d83dd98e72bbdbcf56ea91897b69959e9ad0c65c9bb476473f0bad54285bf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf128b9c95573ec926bcdd4b73470073

    SHA1

    8c290be38faf452cdc21ae8a83409e40d531f7f7

    SHA256

    e1f1b3d43618eb6c4558a6ea4f72fd401eb97f3bfa5571a70a2b8ed4a57b027f

    SHA512

    9abd1e297baa79d26c3335a0d6806629a4203f276cceeb9f6b16b4fbbc11ba17ea337a9624697b4f6754c9cb7bc51af4e62b9581b6809e8a8a2e60649a9bfed6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0acd94ff2a07bbcf7b154bea391063fc

    SHA1

    609dc23f2531fe7d5158a452c0e7299b5ccd05b0

    SHA256

    1981ef2c3ed4b8f5e7c8954bd6cc46806839816f5f9792c5af2a38ad53239ec7

    SHA512

    8490f8f279bb047279359e17299b74ed6993a502f4109c3d3499369ba3515ccd5dfd5869a98c19f6ab9a83fecdbd50489c1a0592bde03311b14511c6c7e454e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3110c3637e6588634abb9dac20f3eedc

    SHA1

    cacd6b44afebf28687a617546fb6e299bc38fcc1

    SHA256

    df0f114d7a930312f519433e72fdcad092c3af068db0f7a23d827def93767d50

    SHA512

    0ca82738a6eb6183702fd3d596b2e683d7c3e16e066e35e915086196737916689e69c54388cbfff0513f2838d4a033671c4df9f8a6905bd82a9431efe36dc53f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1549ddb4b2fb00d4dcb4438c6846d74

    SHA1

    a6b932a95404ce0bd42672615e406b9f816e1d31

    SHA256

    8482e2102465873256232c0b39037d50f05aa09b2363f212bc37028911e392cd

    SHA512

    dcb71482aaa0b7f5641ff3d5a91f43e419adec37fcb043b0017be734fe4abd8a09469367e5132b75be7d08c11d7e418be1786607b45b9585c523b6caeb6e6f91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a70a376c9eba5df72faa4245eadb0f36

    SHA1

    7d90fc4fdabbbc8ea798a0451bf1f0cb479b5d0c

    SHA256

    b0b1e84d564da15d122b2685b5a1e46436d8348dba78b2644be652fb23ad7fdd

    SHA512

    7072bb69206ed80dc1c8edf248552276ace65e75e86206eb68eee33fc851777b9fbd5d5d1a180b370194f097367c831939fb2091d9966609d86e0948f717dec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20a6a5771a16dd71366292ab5a2f673c

    SHA1

    9298847b7dc06917ff088a8f295d1a0281bb5424

    SHA256

    e3dee32cd99108b1db0f34625735b1035aac4d1e662693910b0d2078263e3f77

    SHA512

    d98687e2e8ab929f7451bba515e460d79c53ce10c22a0ff617e5efc779b34bffcaaff89647d344bfc8e2a46b796edf049109f1a844286d25c32a007984dbd997

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34669acc99b03f481022da716a066a2c

    SHA1

    e57228b4c642d5faaefcbac6ce8d8c8ad9998f36

    SHA256

    92261a68fbd23d76fe37bfc3dc984010f45ce8e560e6e8d75de8867af2e1bc29

    SHA512

    77738921ca12a0bf5c73332c217b07f6e92d58804e5ab27a31045a227357c2a3c43d6a5529b42e612914e25bd6293eb3efc666e3bb07053c936d321a94ada515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d90694d4b6094a4f9b4bb39feb8f1835

    SHA1

    40cec40f5cf56ecbd3d6d5c205fe92baa0384ee3

    SHA256

    ae2fa722f4da8a9baf5cd564b4341e6ffc89c82f9321ce7e0acd2c58814eaec1

    SHA512

    2c772854d62b5ec2a9a9fbe7ccd7de14a190da3f633f0dfbf73cea3a2fc8f269155d469f8ac3278c39b8d14c9a4a38d8e95f7500e8bb3aebe7d469617bc33026

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    595e90bf42fa1e21728798e3d1d520a9

    SHA1

    92dd849d05557e6aa71e1bb2c08f16bfab73756e

    SHA256

    0cc870bf5f6672eef8848290b0a39c1a1a996e1613b7d623ff9ebb5f3ee24522

    SHA512

    73c7b5ef54337602d92738c1f9e2a938d185453f383efeb2569bf40836fd2ca722c6dfa4f78133aff08b6d555062e16a17798c5a94978e368bd41460888ac02a

  • C:\Users\Admin\AppData\Local\Temp\Cab8BED.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab8CB9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8CED.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b