Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 03:16

General

  • Target

    85d50bb78bef5c7e1cba236b0cb57677_JaffaCakes118.html

  • Size

    4KB

  • MD5

    85d50bb78bef5c7e1cba236b0cb57677

  • SHA1

    e8438a06465e3cc0ce6407a24868f1842279651e

  • SHA256

    5d35b6363c584208fbe334f0efde492858f57729bcb69469757918a336b182a7

  • SHA512

    e321f328ba4adf05c0c214ef701b8bb0799805c46c494059fc4cbfca1e5b580f27d9f1867f39b9bd1d0d18354c050d3ccc8526118f887601dfc69ba666c3c3f5

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8om2FS+d:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\85d50bb78bef5c7e1cba236b0cb57677_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07e1e1bb07fae0334d98e4cc0432a384

    SHA1

    fe86e7be99cd790b0adaf71e219704705c5cad21

    SHA256

    0ba138b13044be393fe4c9b4cdfd7c4b82e8c35e0fefece65370d4a6af7ead07

    SHA512

    0e4bc26edb135bc89473b02c06ef2f44d019004b2f49d2c6ae72c231f88c784be97a891ce124b2ef5d9bdb4366dc03cde2f8c67e4d128957cf15bfe7c56ce938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    872ab6167835d66f588988e28c972a61

    SHA1

    0b5faecd7cb263fed2b0937e5a0d08ced8cc3414

    SHA256

    0841a4ce36669f2804e92a39f81ac19fdce2fadc63dd03e21a129ce882ac7582

    SHA512

    87c6c5396d3aee50d201845fd64c8fff02773ce0c7037489ba2452353574606d075888677144d647ab95a110ac7d68b6d87bd3c25b0de5f25c8fb5b5fbcdac73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab17be3df42651f19cdb4e22197c2314

    SHA1

    e84dfaae9935109be19f032a7cedb61c840812e1

    SHA256

    a908e4558ce9c4cc9ca740270c35b506106522c9bdc354cd1f43266f931801b2

    SHA512

    a4a7b5682ffa9f4027aa00c05a923b5cd28c6c8b2e2ee2acf7ddd54b014eb5633494a7c57248fedca5d2cfe9edd03fbd5ce44082db9839eaa78b2c12e927bead

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf3b05fa332fea1189fc8bf8aab4f825

    SHA1

    6dfd212a6094b7b6f82ee93ddeee2a5205f31477

    SHA256

    4099744d6eb178c3648ad0bbfdc8fdc6c9dd97259228e2540e02338b1efa339f

    SHA512

    c597ba8ef6f97e149851a8f3e6ec85eacb0dba56646ad30f9a0c416ee96e51789c8a3db34b715170f1f24048d720dee808a16b75629f80088b430c5538056f39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae518a624f64adb62698a9fb0ec1af5e

    SHA1

    73542a43b4824f3834966bc34d551f2e47b6518b

    SHA256

    a8d0c38d738fca64ebf05a6097323a0cb9f2520982996766c0ced2afd7ce8e5e

    SHA512

    f5a8e280bd1981d887bb786340afc033c332d9cea28137270e3a61c81884856b8ecfff3c22f3e050ab469369e5efe137fe3c447876febb8fc31c3ba9af11937d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b11a38c1b782cb7ea51f4b716c0ac438

    SHA1

    f76ee5dd9c43cece5882dc19b7a207805eeeb8b2

    SHA256

    cf2562e492294897bb1ed4fadcce5eb0b49d0f1f38462b58fc24f33243568f7a

    SHA512

    a12c7b66eb03ee746310be4289b0b118d09e275fa84ea4558249d66d6696db491503a4cf4510cd4c3871cf84f5afbe04353c4b5f4f1d41b2635f7a634fefbad6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1746b6171f5d9d8c9fc7abcb8680006

    SHA1

    53adfa6ad2cfd2a8c36c36572ca68aa452a0badb

    SHA256

    1db3e012804129d81388821cd52b7d389fe4219072bc16029d03d884304cf02f

    SHA512

    18c03df9bc304c9a3a5c52274df2c13f2265e0d513bdc724e8726f1d87fa4b48cea82c909e20b7f69fb3d73344aa99420b4618783e1eeaf459e49c7488dd4bfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72ebbad2525de7ac93a42b4bd8295201

    SHA1

    c5fb3e2fc25a7c6883feb6f55731d4d21dc2ec06

    SHA256

    1ac243c416bda287e39f93e34f6ae53daa2d268dc82d32f0eff247417a271da0

    SHA512

    80102938f768da40f8807700150722efeb0b78f779733600e166f7766d26aa28f8fcfe6c461331827ee921ed321825bc9653175032cddfda27fd5b033502e02d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b500f538c01d08d56b7057808df44b49

    SHA1

    453356a33c0a2606393e082004a32497f36b5de2

    SHA256

    5fc3b7e37b26d3f979d3b248da40cdbdca6b125a38675f4e4538b6cf618672e8

    SHA512

    bf8dad3e2966d38de4ba7ba1d55bca2cf2bc5d7f8e16673b5e4aa31b52617411da104eaf3ee6d3736509e441b62d2411f86bea7f584606eb5aef4d2639c82ed4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b995fca258268e31e64453683e52f8e

    SHA1

    608c4a8a5a31d0e749ace114cee9a9bffe59075c

    SHA256

    17ecbb06aab887ab03566d1a0322daac900fb0a809501cb7883831563e2e94e6

    SHA512

    aa8808e2e85f3f8d655f11821c8cd2f87bb7e8e177f2148e6a2871aa8dcb8736fa723e510e8ff877f2cfb2990d930440c432c3928dbd3a40a9f82a7b9591a25c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12b741f2a000e74f10646f7ccedff562

    SHA1

    b88708a0822d2d832ffaf0e0918cb0dca2332f37

    SHA256

    258551f6e23610e5fd9acecd48a0668c4c140692a274ac75c1c95805aeea07a6

    SHA512

    23abdb6dc6e8a3bc248ddba814ae6803893c7f81a69fca826c7dcbdd1b73c05bb251f432ad05d7f2d98f2a1df52b514af312e9bef145c2b2e671d5cb0f43bdff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75ed36837150cc132e0b3b06d9b35968

    SHA1

    dd80693428956e7cec8b1670b486fd5bd55ffeda

    SHA256

    ae0d304b5d4a7dfeb6da3988d09ba1630de5db3dd717421377b2353ff88ee6f8

    SHA512

    3a4c42dde9fc7ce14777224163e2c9c8d8c6d832dce05f24a6f43a71798337938ad0be132b3e3c8b3fe6d30fc5a91e8b8f85f320e7ba3a6bf34084f022a92e9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c84e30b9cd85f9efde4659863664f2b

    SHA1

    e1e0209283f3f18d7945a2c0475094263aa2fb5a

    SHA256

    3fc20ef8496bd7d47a56df71c655e77709cf4271e473745d722fe4b35ed618af

    SHA512

    5829b38f6764f865af3174f7db676ab4e3414da8d5342b1cd996f5e7a992b74bacb8af5e03ef1f63fd5d535ef0342edf7e8b29137687e5f363d9f98fecb2c553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    026902867a40f0dfff27867ceb21ffc9

    SHA1

    2f43a748934e40d1467eccb13390138a8373808f

    SHA256

    e686b1017542d75f5b7dd89ee5b91baf14ab7149c8c3d75d39eb37b8e9756450

    SHA512

    46237401fe82a6330e00a7b20ef7fa760d76233d624e316c1a96fc3fb4ec3966a0787a7631eeb8a22d9a3a5dfab319357ba1c0d112df0d8a2e53750f6b29c664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6031f3d31f4ef6304b5ade3c5eb1de0f

    SHA1

    37c8c6699abfd06ed4048cfa7c12541d8c54e57b

    SHA256

    1ce5d7e8b555c1dc6bcff3e026442093b9e118666f063a7d5ef225ac2a14759a

    SHA512

    ef0ae2f611ad1a62327762ab8bbe17161b50733a8c375fdbcb7e1df6064d78f5589471d61705f051c60b62a31410ba2d2e2bdd1412f38cba62b67d1a31339e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd4f4ca4a823a81c76ad30862155b743

    SHA1

    e17995e7a34d7d32c69eb1fe0a410533e88b1f45

    SHA256

    fd06eb1caa8fcde8243ee72d1ac56cdabbefefefc1a839b2368624fc9ae379b4

    SHA512

    3d78199f9fb31cfda135c7c9ab08f789f22a02a72b868159fd88983db352ffd554a3caf7f8f0492369f5de7adc84f950ca51caf00b9c5a21377fed98512d57be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a754f4052a6f932ac857964812a83d57

    SHA1

    1dc1fe3624e1295a167b00e6760171834812e30d

    SHA256

    b490ffc83d987a22dfcc8bbead0aa7397e7278b340262ff2782d0a7ae60782e5

    SHA512

    98b9812a1a391f69e31977e97b9bb990fa303d65095da5319ffe80eab5adb368e135cbac02f59581ea3b8d95ce582cd154357b0d939d87ee257f2766f29b94cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7e06e7049a8cdd33fa4cf06487e8e21

    SHA1

    14875ede73da35266f0c408023e7cc48cdfcf0a8

    SHA256

    108fb1066750aecd7b30a0a44dd9e6efa6abbc7abcded0c4fdf8095e5ab31f8d

    SHA512

    c6aa7013c35da3d28da24b383e442505ecd68293ae97ecc06559e8ad2c7042dfdacb3af797cfd8d0f04584d3c11d09d0d9cb57186677816e84b2e10285cd68cc

  • C:\Users\Admin\AppData\Local\Temp\Cab17A9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar188A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b