Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 14:06

General

  • Target

    874340bcd209d6278fa09c9324c3c791_JaffaCakes118.html

  • Size

    3KB

  • MD5

    874340bcd209d6278fa09c9324c3c791

  • SHA1

    514331adfa789338a76f91663633a59a76d87c41

  • SHA256

    b37d2e0cfcfca4d4408dfa8ac646228bdbb2d689c77c804a00f1fac6137c0842

  • SHA512

    6a2cb780812a782434b83885ea2e8897ac64b3149b60bbbba16c48a635700f546b6953587e1aa49978d102a7499f9f2de829c12cadf458cb9e926857d6380279

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\874340bcd209d6278fa09c9324c3c791_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          011cef728f247d854a0b5ba074fbf888

          SHA1

          13e98c64f085c356bf6fb97e5dbe9f3fd277f5bb

          SHA256

          9d6c035e6a728abd44e395ce8e3910862fd38af63739693408362b9501947158

          SHA512

          938d139d33f08afdaba57c0a86b9357bb9bb33189da041217c084d21d2a8a2d97647bb5fcad95573d1a19ede3b9f6b60a327b65e77a172a3db886015f81845c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c731d65be2ef193a18e0220cb98d45a2

          SHA1

          f2115bf0890cde49f9fec2807392559e59ecccb9

          SHA256

          dc4524d176c96a6a937628f60d4daba1f11a6d7d30e145cf1f96385cb1fdfc0f

          SHA512

          2a0ec437016110a93d54404be19d1fb63e50ec5fa87666a3fd946084bb72c516584526400cfead40b02610a46f738facfc8487df68e0b6237c9c2c6a0c0cc304

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ea369640b2cdf87cc626c8ce957c1775

          SHA1

          1cf7e5e0cf01f9e03f7b026caa41b79ad9bbc848

          SHA256

          efc01150a6bf8351de5327940614fefddf62ac52615d4da172e99f21b7df7644

          SHA512

          b15502f0709f64a9ed0ad985e7520c0ebd371e5c9036d7327ff0c49a92afc652f630df8ba4ecd946066ae26d6d3e56836f7ab4402415826cac4a7a45ec4e7423

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8069a3f4d250765306397bbb05411879

          SHA1

          8d0377ed7477669ae9257084c107794f1025bb7a

          SHA256

          43add8e4f0bfa2478725aaad2078d35d25d8a29586671cb999f847a61f1828bd

          SHA512

          ea8cb34547b2ad746cade0008307471ee13e987126b9d80f8be29c60597bb9c0d74d9718d4f09ff7595ecdb45715353fde24f6c3c9eed1db26a07bd951e1e2ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6acdb0d31415c7550c33d98ef0cd0bb4

          SHA1

          89afcc13f761632e45acf632d7bfa9615584e840

          SHA256

          af678b62be50093771bfb987f0dbabebb095ac557978b76745a684a64c81abdd

          SHA512

          49c4c6ed94cb498bac2964ebd62d37366294933f543651060037bc2e9038c227e9a5799e7fc34982645cfc013cebe6678eb795922c6ac85ced6d1b1e1733242d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fa713661e4bac1ec4868754a52a55ffe

          SHA1

          c2ec6fb1fd8fe8e4683042f85fa9a6c6260c8bf4

          SHA256

          2c96e70aa6d635f35866a87ca51472cc9f1d6a183328905e95f951ff3f0cb185

          SHA512

          3039acd482aba966c2ed4d89c0f33f4290b4ff3e1af341a37b8c0b81d1dd6e5090aaa631f86a4731f65a3b6323c52af3faa72e04fea07e3723f32072180d82c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          73d154467ff3570959e277d596fe3019

          SHA1

          e1ffc0cead331984d3162820cae94f8b18cd5c87

          SHA256

          6a717c04a70caf8eaa5a43e336d0dfcf84620e0ac1aa10a9fdd97c1da96517d8

          SHA512

          04f96dee41ed72456afc4205578b0e534cd3163fb47d0adb3e6293dd46106b99676778f8ff791f9652b09897a273c6379915352167cbdac121cfcee56b9b6569

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          afe96b7de73bdf9fe564fe5e05743304

          SHA1

          3ad5ffb3d31faa575e80084e3e89161ebe290159

          SHA256

          6c459ce0889a262b0896798bee9b23a3f43ab98698e69381d74c7cc8fac65cfe

          SHA512

          7310aea77eb8a6f212f0ded5c70a06eef6c2eabf553707f56f13354e47457c7c3f6730dd3052aa72ed7c689f57fba473149161d812ff1fd009f416367caf724b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6e683bfd51e4fc65ad46199ba883a567

          SHA1

          4975f7c3ca2a756fb0fd0aeca9c1441678975d7a

          SHA256

          151c4cd3864f37838f4829871bc3a4a434db5fb82fb1dd9d97c970ee43064b10

          SHA512

          8404c5db2ded608138f603b5df22013c832be518bfa918e913bc77379e27000fa0fec46f0c7f4b7203c2ea72089ce5a0a9526db1c1110734e03f01875b1f9f36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bfb4f51ea2193a54056d8af46e09a3e8

          SHA1

          f3d4120103c25b54bd7a05ae9281ac048f73cace

          SHA256

          2151dd95906059b65cb884abc97654ee12ca21f661de2a8f1c49edcdde48381c

          SHA512

          e17aa35c58fd69104e70220442be39778ee52648483725733745351bcd9efea62a5d6cdcc20b11dfa91fa457303e65c6d7232257f34eda8c50444d0eae73e4bf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e5a312bec557cf78605abde51b3a4ae7

          SHA1

          850ea3948a717c7856ab1de545ccc4b726447077

          SHA256

          aedc3bb25c1f6598ee59c1fe95167e849b13a17e72030a00d24e6c8a121419ab

          SHA512

          e4d3105ec878ffce4b6bbe7f2dc7e085c1337b71749cd9342017853dcddc7925fdc11706f9ea3747f6a5b6286cb596e533b4e509beca78d71ca4e2e07bcef0cc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e9a0592aac1815ddacf4a67097850580

          SHA1

          7b9efd33a153ff582f7d4111fe6212670a26478f

          SHA256

          2aa3ae56e9d9e8e1babc29b339a5fb45c0922f322782996752493b0db1ab3e06

          SHA512

          eaa12318c1792f881cec3f411fc0488c912ad1f7219b1b12fc6291e18675b644c640a78833c0673587a2e94ffa13f34d20a717356db3de155b7a7b917b66b39c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b15bb19e5fe55625644f0373c86d75b2

          SHA1

          23b80fc567f943aa88cd0b388d61011a055e254b

          SHA256

          0e126a391194accde96a14cad679a429ecd9f6265c29b6078703601d87536e9f

          SHA512

          7bc85bf6c78517c7e1f662889363b4b8ecc61539bb989df9e8a325426a5fc58977b1f5ab4c918018b05348eb489799e8a773bd8867bbc1794ac478d840bc71be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          98199978ff6495ff9a8d7ef8a967369e

          SHA1

          98bc8c155cf40ef395448bfbed253f1b6e87e26a

          SHA256

          f34753e33464e915390431dffeccd17713c80e04b31584f3ccc0b407682db7db

          SHA512

          228dd66c2626a79eaeaba3ce1b2664e0eba23f156f1f68ff3a3fd7d968b75a28dc2b907504eca58da70a37c446db6b233544d79961104530fc6c6ddee7b05c1d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8d2cd5d5a414babeb6001bc145059985

          SHA1

          0f2140bd3fcc3a80fa940a070ae63ad082ab07d7

          SHA256

          54f43ceafc3a0ece95d0593311c0d0206cf7cd2498cea52fbc08e089ab335a9f

          SHA512

          a2b28818490eab716008d306d463c607f0995c97957a26132848fd7446061b5c0d7eb4fcae9991aca5e58dc45fd535649baf1a99ad49b80b9bf9278971019318

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          67b070333f4253fc61926f3e85e6ab53

          SHA1

          e09b07a46db7d46bf50ac342c50cd33bfba65177

          SHA256

          756d5d3ce551c8951e41248bde5e2fbbe2f69ecd6423b08f69b177a900e60f3e

          SHA512

          7a282d23c203bb8b643fe4a6f6a851d400ff86917570b8701859e7eb11c6b1ed114a8b09c48d8ea6908d86be52368f5ed176923109027c031b4cb384663ef4f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6393b1e54da31a3bf3d3fb220c895342

          SHA1

          245b07b39c5059652e26d8a44f51eea1023361c8

          SHA256

          2f81891127304048b97f6ec6a37703063bf3ecfd939b16110c124c57a4ba4418

          SHA512

          158460e3cd04e6ea151b2f6499c4245357dd745eeaafe4979f271166858f03b36d906fdbce829b0780972bd13a8c9886c3d868ef66bf535f8e0278804b1f1776

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9976dc6c1b7e224efaa587696a6c3633

          SHA1

          af9fe2657e8f066ac85846b3070062888f39c0e0

          SHA256

          9f27a8e4d24fed9cf3d11573325292f9aca7341829efc0201988f4f334c78dc2

          SHA512

          2e7334290f2c92c8ec4681a6059a0ac9a8ce2a85587a02636363739ccad736872e6f6e5220bc4182650f42a05f3af8960f41dd4761465889825f1edad3bf3951

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          14d1896b284bbd4b250d5486f8c9937d

          SHA1

          88a9c7a1eca935162e666e6ccbe63fd6107afc70

          SHA256

          941afaea0868fec846512487cc6e5e53fecf28b71d959fc1e124d49c18c86fa5

          SHA512

          e1b71833409e532a0e56db82d924af2d5fa29a4dd0fbd5825f7c7fe560da7d00322e45b4bbbc9a8a6e32377c3568854019f98f849b6e812d5d88f3405b362dd9

        • C:\Users\Admin\AppData\Local\Temp\CabA8EE.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarABB4.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b