Analysis

  • max time kernel
    136s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 00:16

General

  • Target

    8fee0fef6a099e3a0e9a0f7973fbfed0_JaffaCakes118.html

  • Size

    4KB

  • MD5

    8fee0fef6a099e3a0e9a0f7973fbfed0

  • SHA1

    7ed94f4946f439d209bc554c6a0f3ab786d0d91c

  • SHA256

    bd3a64abf732e813b65e6cba3da228da80577782f959d057b6e051d36b9457b3

  • SHA512

    9e8f36102a47ee08a8ba9a23bfb839567d0135b83c72b3df38a6a4415768c3a93c58472741fd926da93819df30df3eda8fd785a930f85583a1a77e320e63365c

  • SSDEEP

    96:ziEfCmV4MSEPBDvV0n47ej/hgOKiljTR1QnyneEhlkkf2:ziidV4GD8/h/KiZ7Qn/EYkf2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8fee0fef6a099e3a0e9a0f7973fbfed0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2884

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6bd1b1442b18d618c3b2506cb9f60f50

          SHA1

          1076333ed54d8edc415d9b06e08990f3031b03dc

          SHA256

          f492be0ceadffc0d2e9a855ebe13d95d8731e60e2fbc1d39185fea12086bcf6a

          SHA512

          049bea4d981dd391d474e1aa4e3a6ec8adc83e3129ed53307788fad02148285474dbaf3b44da882228eb956876d4149957da3bf37f1c3893725aea4ba8d93daf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d5a6b272a118cf7cf9fce3b9f4acd03e

          SHA1

          b2cb0999ca87717a1e7ce654cd91e3a0f442a5e5

          SHA256

          06a77ac48ac000c51e21ab094dfbc0d7f7973f7d55a49975b609c6871eb7724e

          SHA512

          14daf1488e3722cc1b84628afd5de7826da77082cd22739381b0dfd2c9fd3d76bbef80fa74dbf7215a81f953fcd36e00cc06b1a4d107465d4618804bb55b78f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1298898fbce5502ded912b1810b3a271

          SHA1

          6b3709b7a3ad174150f769a4eb22ead3c5722cdb

          SHA256

          dac343bb368521a35a600702dfa982ca12b32f24e53d96e77049e4eb8bf89252

          SHA512

          ee373048830a5d8217f9d2512698c96b8d523b728cd7ecee82831ebfbbd7e224541ef73950d7ccabe82c6fc6086e35adf5cf7d1f7c327731b9d9beb1a61dc9f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7d3843ed69c104aa76e1fdcdc06957be

          SHA1

          28f64c415f530182b307a24733bb3df14be29f3f

          SHA256

          8270bc51e3b89be708cbaed517db3f408419fca6a30256052e7209245e023e86

          SHA512

          e22c5b6a354142f78cf031973f398765ac73cac2a11eb9f6a42089d679045af2381156073965b04fa7132835612147df24380b6ab1f4876a4e195de245e43c3b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          760761bb0d03bbaef940190fefb563dd

          SHA1

          96894ccfdf1b4dd89c426f7f0d72c5a85c50de24

          SHA256

          928137a31e461e988995bbce7d25d82dc7160418c49be023638001d46f3660d3

          SHA512

          9f982a2c7b883d724974bda94ee6baa39c1280bc8edd199244bb08f4014001b0861f6e5972a2138c7a047b8ad4a4a7126b610eedbf89e554050fa82996c69826

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0a473eabc64468f649401d7a5eb80f98

          SHA1

          9f0649d54dfae0c489e90878f91bdf5d6c8c10ad

          SHA256

          f237cdd6e42ea08c0023d12bc33f99e9ecd67b6496af0e744bea2de6e1c1cc47

          SHA512

          f657d15277d7ebaffa7e8a0c4ee67287d02aa6e56dc911a4d58b697707286a1a518de69dcdd77237d660c0597c7381ecba3f4d9b83611fcc469fff161cea87b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8a8fc10de22ea005b84ceeb2a242db35

          SHA1

          c2975370ba62fe4c114fb15f57e7aa0d768972d6

          SHA256

          144932dda0b2cabbb83a00705356bb3ae43a3fd5ad01afe6535bd6850e2fd819

          SHA512

          6f8e19f626b11b68355aa5755594dfccbccf809428ee9e887e43dcd2deebb90265b2763e11fe032186f545b4a15b19fd8deb7a57c6cb5c665d59ceb5fcb80304

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          df31eb22cdd715c7473d651e401d66c1

          SHA1

          6a5e1178ca7d9954a3976afdab0000e6fb587fa6

          SHA256

          18dd75410fb21de82c573a7d925afcd046fd0d20f55999583deb235ac8265d03

          SHA512

          2316659f40b99d880dc04c50cd5c704fcb28644e4e0b380cacd287168043ff22451f66d5c7b83640d9439ecd89102524cb086ada573b46ede9c29dce02ca1de1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          692638f639c95463f0d91b8672d50de1

          SHA1

          3c3c74e9ad252591a78e7e3bc6da7101aad9701e

          SHA256

          101a8db66342446379a937658a76f2e054e0f0148964b41fbe3318f8e9c31b40

          SHA512

          f5139e1abf8deed42fd14ee5441f8a4923b7db46453a7958a5eeca14ef18d5334fe8a79e658bacce0ccd9ff28bbe9f9bef114bdadef165ac694ae66f8f7bc036

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a44577e4c4db03230835822edf8f6bf7

          SHA1

          d70d7453f5ed7bdf3c3f1c5456de201be446fb3f

          SHA256

          46aa0aeb5485d869bef88354c0d8c08fee24b58349c322047a5e1206d9c82870

          SHA512

          d836bc288acec51c9f5b7de45491619a33abe202bbf79da6044f32c99240694543e4eafda90f08aa70f7d00a80439c8f2d0fe460c501cf16c723241d0e8e63e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          52f25b59a8b0ca220470946009cfe676

          SHA1

          2fa231639b50bf188f6a54234be96d90b82f6efa

          SHA256

          899d0bdbfa7c36ff0755cb65fdd7d4f30ce2629001c0caa46eba4cd03e262fb6

          SHA512

          5a3a677c06dc843bb0c59f26098bbc54289f2f5fe4d57bbff715a96f4cd4dd0a1190e6051725f8f548e6da59a694e7d19d78f0f164813f927fce4a48e27141b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5ad490021e30e67fb81b4a824823e2c0

          SHA1

          4f3dfa0640ef2acd9e5529a76e5fefe49d352248

          SHA256

          dba14c876af7671fddb8d585de494b4869794d095722b91b25e1ff087071575d

          SHA512

          25fb9d3babd90f79b4803dd5f73ac0cb39f378ad809d091a70fc67897a9912f1be583fa258639fad5c6dcb16da795eed4e0f0e7871a1a86414f447e498dea772

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          05aeaa07d07bb60db766e160a46dfa97

          SHA1

          d50fcf0ad57b82f7a4b38eacff1bcb92f55d916b

          SHA256

          e5962269cfdaf8708e4c0e8f79e3f2e065063a38b5b3945c2a95375693b330a9

          SHA512

          acdbf644de4dad822a7b4a7a6c457166e8fc10d45e52bd7e498c5d3a8b87bf17fe9d67c9fed81f6f3e6b29815ec0352339bf824f787e642cb5429596dbc5c560

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5f2b6e1d72749b26e75a4f74cb4e2fc6

          SHA1

          4e7bd16d4a5843cacf86e11cff3f64c671cea081

          SHA256

          21856235a57ea04e84dfb474e241a263299dce1264869492c51e2dd320331928

          SHA512

          b7600efbed95b4438fd76be0fab0cb342ef777ad4dfd6debdc7abebecb6b155a5d5cc1c68df8fae91dfd68ef6d97b61934ecd8a4dc26adf9bf554e5d7cda1f7a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d93a50706ddd1d79f002228922ad5bf

          SHA1

          2ae9af666a550a537b57c0f993380f75e4c1f0a4

          SHA256

          fa4c364505475bb91b44f5dce413e1501ee23cb9f6758fb5841bc6a05e5e1569

          SHA512

          286b17a4865440c96a316ffcc7dcf3498600bb53fc8a70a1b5a48728eb5384d3fbe029723dfa448007814217d60c2e8fd4f03c31426c22ccdeddf2e01c239a3a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          faa77ca364c19e1486f172abdd02c63f

          SHA1

          11474feb2e1ad88e0b276a189a822e37e721dcdd

          SHA256

          c2795300809735670f8aed33e0cf932ba9612075a6a191bd1e509f56f52fbdcc

          SHA512

          eaec7e8f0f961987ebf2e217c2b76419d1c67b723bb1ca983154a538ca775d26218c9c4ae0ac8dd865e608b80534a946bb1fa905325ddd285a98005278c2017c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b3b14c88d0ff343e9adfe81d525b0da6

          SHA1

          537a71366528ae29f353de4f53c47b0d9693e1e1

          SHA256

          80e7f4ac8698089c3f5e2d30e9297bdbba54b519f8b55d20c479effcff74eb2d

          SHA512

          027766b551dcaea9bbdac3de8269c5f559ffe47dd958503913426b5993de975805053f65725bae1a767c159d2560c9a4b72eb388ce090f085ccec2601d877641

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5263fc3b846f51ca68fd7c0e7aa0055e

          SHA1

          3e310067b4e959a8d608ab7d4ce45eec5c536620

          SHA256

          146bdf57bcc7f938b122a5433e14ac86a006197b70bdc50d179a87fb02edf9e6

          SHA512

          fcc98a26d6e737f6ef95cca9cc8903bec21d3e66eb93ab44310157d75ad467f42b4258181df141e6dd5a169fbd49c45dcadb05d271dfce3bb0c0bb76a2de0436

        • C:\Users\Admin\AppData\Local\Temp\CabB0BA.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\CabB1E6.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarB21A.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b